$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3eb80061-d999-4560-9395-9a007e8e03f9.roa File: 3eb80061-d999-4560-9395-9a007e8e03f9.roa (raw, json) Hash identifier: Im6EXR3N3F6BswQtWdzO7gn1f+4Hfvn/2gBTwRH5dxo= Subject key identifier: A8:52:19:8D:61:A2:97:E0:82:0B:D5:71:20:FA:33:56:49:DF:15:44 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 010471E8011B1C2770D01BCED67D8620F811C428 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3eb80061-d999-4560-9395-9a007e8e03f9.roa Signing time: Fri 13 Feb 2026 15:00:15 +0000 ROA not before: Fri 13 Feb 2026 15:00:15 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:f030::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:04:71:e8:01:1b:1c:27:70:d0:1b:ce:d6:7d:86:20:f8:11:c4:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Feb 13 15:00:15 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=5ebd876fda3950346c6a648ea3a731d7092fa1d2201bb0028761db2032e173d2, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e0:ab:23:bc:13:c3:cf:5f:1c:23:ff:1a:5a: 3b:cc:d3:e1:70:da:52:7d:a1:79:e4:e4:11:82:8a: d5:c4:9b:5a:0e:b0:74:c2:e9:82:b0:fc:3d:40:05: f1:fa:ed:f3:2c:f6:9c:bf:d8:58:eb:eb:ce:18:02: 4c:92:7d:cf:59:ff:ab:15:28:ae:d5:d6:9d:9f:04: a2:8b:e9:02:42:e5:37:6a:a3:ce:a0:74:6e:80:3d: 4f:3d:54:03:c1:e5:84:c9:6f:c6:56:82:d3:e2:fd: 8e:3b:26:af:86:09:e3:44:9a:4c:f4:73:02:ff:f1: 27:af:e7:95:01:67:a4:b7:83:81:25:47:f6:e7:a8: 5c:67:79:38:8b:dd:22:f0:33:9f:56:8f:9b:f0:8e: 2d:d1:a9:80:ef:33:78:54:70:03:d1:35:1e:3b:78: 4d:4e:23:03:61:ca:67:5b:9b:d4:f7:2b:d0:41:89: ea:1d:d7:1d:80:39:2a:9d:9e:b3:3b:2c:41:79:78: 97:d2:1a:b8:7f:9f:bb:48:a1:08:95:9c:1c:f9:76: 42:11:d4:0c:9e:ee:63:87:9c:89:73:b8:e6:08:1e: 63:70:ab:c7:e8:06:ac:ec:d8:ad:a1:b9:b4:a7:ea: a7:94:18:74:89:7f:8b:d7:96:d4:e1:09:e7:3f:78: 3a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:52:19:8D:61:A2:97:E0:82:0B:D5:71:20:FA:33:56:49:DF:15:44 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3eb80061-d999-4560-9395-9a007e8e03f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f030::/44 Signature Algorithm: sha256WithRSAEncryption 9e:08:0a:52:2c:77:dc:15:4a:e5:b5:e1:9f:3b:87:0d:d6:58: 3e:83:64:f1:52:42:9c:46:11:fb:55:0c:87:ca:c2:ff:d3:0e: 4b:cc:1d:c0:0f:66:40:86:0e:e5:43:24:dd:6c:56:18:ee:fe: 86:46:69:06:5c:3a:a3:f7:00:95:e9:8a:02:31:42:db:c9:b0: fa:2e:94:f7:2d:43:84:ec:57:99:df:fa:66:fc:d1:3d:fe:6b: 42:87:18:6c:d2:2f:35:53:c7:59:26:f5:77:f3:73:98:d2:bc: 42:87:17:2c:51:9a:ba:ea:aa:47:9a:d7:1e:bd:aa:cf:69:a6: e8:e3:75:d3:e8:4b:93:1a:77:4a:4e:0d:77:0c:f3:60:1c:81: 8b:8a:34:00:72:e3:71:7c:42:30:00:a3:a8:fd:57:f9:5c:e5: 01:ee:08:73:81:59:ba:3e:4d:97:3f:f7:8a:0e:0f:b8:84:7c: ad:cf:1b:38:dc:e3:df:12:ff:86:ba:75:03:e3:f4:e9:cf:45: 14:46:7a:11:03:d1:b6:45:05:6e:7c:17:a0:6c:70:b7:93:e3: f6:2c:d6:08:e6:7f:2e:bd:dd:9a:f5:83:67:da:db:d1:52:03: 2e:7b:fb:63:b2:95:d9:27:1e:54:c7:4f:60:1f:1f:66:43:e1: 8f:75:2d:05 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUAQRx6AEbHCdw0BvO1n2GIPgRxCgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMjEzMTUwMDE1WhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZWJkODc2ZmRhMzk1MDM0NmM2YTY0OGVhM2E3MzFkNzA5 MmZhMWQyMjAxYmIwMDI4NzYxZGIyMDMyZTE3M2QyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDC4KsjvBPDz18cI/8aWjvM0+Fw2lJ9oXnk5BGCitXEm1oO sHTC6YKw/D1ABfH67fMs9py/2Fjr684YAkySfc9Z/6sVKK7V1p2fBKKL6QJC5Tdq o86gdG6APU89VAPB5YTJb8ZWgtPi/Y47Jq+GCeNEmkz0cwL/8Sev55UBZ6S3g4El R/bnqFxneTiL3SLwM59Wj5vwji3RqYDvM3hUcAPRNR47eE1OIwNhymdbm9T3K9BB ieod1x2AOSqdnrM7LEF5eJfSGrh/n7tIoQiVnBz5dkIR1Aye7mOHnIlzuOYIHmNw q8foBqzs2K2hubSn6qeUGHSJf4vXltThCec/eDrZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUqFIZjWGil+CCC9VxIPozVknfFUQwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzNlYjgwMDYxLWQ5OTktNDU2MC05Mzk1LTlhMDA3ZThlMDNmOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPD78DAwDQYJKoZIhvcNAQELBQADggEBAJ4IClIsd9wVSuW14Z87hw3W WD6DZPFSQpxGEftVDIfKwv/TDkvMHcAPZkCGDuVDJN1sVhju/oZGaQZcOqP3AJXp igIxQtvJsPoulPctQ4TsV5nf+mb80T3+a0KHGGzSLzVTx1km9Xfzc5jSvEKHFyxR mrrqqkea1x69qs9ppujjddPoS5Mad0pODXcM82AcgYuKNABy43F8QjAAo6j9V/lc 5QHuCHOBWbo+TZc/94oOD7iEfK3PGzjc498S/4a6dQPj9OnPRRRGehED0bZFBW58 F6BscLeT4/Ys1gjmfy693Zr1g2fa29FSAy57+2OyldknHlTHT2AfH2ZD4Y91LQU= -----END CERTIFICATE-----Generated at Mon Mar 2 02:49:50 2026 by rpki-client