$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/43bd03e8-db2f-4930-9069-f2ba3c7a9b81.roa File: 43bd03e8-db2f-4930-9069-f2ba3c7a9b81.roa (raw, json) Hash identifier: XtM7Aija/u8FWVvqra0C1ja5vbkWxpDzIybj6oBwtN4= Subject key identifier: 12:AF:8F:75:F8:43:0F:BE:10:50:88:14:FB:22:15:82:32:77:49:9B Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 57E6FB158C953BFF531C72D771F6112FC2DD1907 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/43bd03e8-db2f-4930-9069-f2ba3c7a9b81.roa Signing time: Fri 13 Feb 2026 15:10:59 +0000 ROA not before: Fri 13 Feb 2026 15:10:59 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6111::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:e6:fb:15:8c:95:3b:ff:53:1c:72:d7:71:f6:11:2f:c2:dd:19:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Feb 13 15:10:59 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=daab03c3f176a0f2bf5f966cfbe49b529974d7038d7e3e285257ab4be153075a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2b:cd:3b:cf:51:6d:df:29:cf:af:11:b3:b4: 48:76:57:fa:e0:8a:cb:42:eb:66:14:9e:4b:14:69: d3:42:fe:cf:97:47:ac:3c:e7:f4:33:0c:b8:97:07: 88:04:48:72:27:8e:b1:8e:44:35:73:a7:69:53:8e: 27:d5:fa:11:46:e0:bf:29:35:a9:70:1d:eb:5f:e1: 3c:87:5e:5b:5b:5e:73:b8:5b:47:46:15:1f:4b:9b: 92:c7:07:c1:f4:28:80:8c:7b:b1:83:d9:8b:a8:6d: fc:59:53:47:da:44:d7:dd:d7:af:fb:bd:e6:68:06: a9:c2:50:cb:9e:c6:f3:58:2e:b4:bf:2a:27:d0:bb: 35:9a:07:f8:ab:e9:7a:a6:c0:cb:74:7d:3b:32:90: a9:cb:da:e0:a9:ca:f5:40:b2:bf:b1:90:05:ab:20: 17:cb:3a:ba:b6:60:1c:1f:8d:96:2a:95:80:70:69: 86:06:62:4d:a7:b5:8b:8d:f3:5f:d7:7a:7e:88:2c: f7:8e:09:46:8e:2f:70:e1:c5:7d:f0:f9:10:84:8a: 5f:70:f3:8f:c6:5e:b8:c1:30:c6:ee:58:94:ab:21: 05:81:55:34:40:cd:c9:1b:0a:43:16:bd:81:93:82: bf:b7:97:52:e0:48:a3:71:69:25:6b:c4:05:a1:da: 4c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:AF:8F:75:F8:43:0F:BE:10:50:88:14:FB:22:15:82:32:77:49:9B X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/43bd03e8-db2f-4930-9069-f2ba3c7a9b81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6111::/48 Signature Algorithm: sha256WithRSAEncryption 18:86:70:ea:90:1f:79:98:87:cd:65:7f:fa:47:63:40:4e:8a: d0:d1:a7:02:b6:1e:11:5f:b4:f3:4c:d3:50:f8:bb:b6:b7:28: 64:d4:f1:59:19:0e:3d:83:a6:e9:9a:ce:cd:02:16:b5:b6:49: 4a:af:56:0e:ea:23:35:cf:79:03:e1:f0:50:26:c2:56:13:95: 1d:c4:bd:dc:7d:e4:7c:81:d5:1a:77:26:57:2b:7e:f5:4e:64: f1:a5:46:5a:4d:e0:9a:26:d2:e4:b3:26:68:cd:6a:00:76:a9: fc:ce:f7:39:16:b0:ba:05:89:df:ed:22:03:a4:56:34:88:36: 2a:4d:e1:6c:c0:1c:81:89:0e:47:22:64:61:b6:3c:a5:2e:9f: f8:ad:38:98:d0:33:fe:aa:1a:67:a2:f9:8e:48:d2:ce:d5:f9: e4:61:4f:6d:0e:d4:ae:08:2c:3f:8a:45:1b:66:34:72:15:f2: ae:1c:15:d0:19:3b:a5:c7:cb:07:7d:03:08:e6:f6:28:e3:14: 6e:a3:4f:7c:ba:31:df:9d:7b:ee:52:d7:9e:12:82:58:44:aa: 44:8a:28:35:f0:9b:a3:de:dd:b4:28:45:cc:2f:a0:ef:c4:9a: a6:36:86:de:87:67:11:f0:12:ed:c2:84:e4:46:e9:8e:3c:44: 50:39:11:d6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUV+b7FYyVO/9THHLXcfYRL8LdGQcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMjEzMTUxMDU5WhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkYWFiMDNjM2YxNzZhMGYyYmY1Zjk2NmNmYmU0OWI1Mjk5 NzRkNzAzOGQ3ZTNlMjg1MjU3YWI0YmUxNTMwNzVhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwK807z1Ft3ynPrxGztEh2V/rgistC62YUnksUadNC/s+X R6w85/QzDLiXB4gESHInjrGORDVzp2lTjifV+hFG4L8pNalwHetf4TyHXltbXnO4 W0dGFR9Lm5LHB8H0KICMe7GD2YuobfxZU0faRNfd16/7veZoBqnCUMuexvNYLrS/ KifQuzWaB/ir6XqmwMt0fTsykKnL2uCpyvVAsr+xkAWrIBfLOrq2YBwfjZYqlYBw aYYGYk2ntYuN81/Xen6ILPeOCUaOL3DhxX3w+RCEil9w84/GXrjBMMbuWJSrIQWB VTRAzckbCkMWvYGTgr+3l1LgSKNxaSVrxAWh2ky9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUEq+PdfhDD74QUIgU+yIVgjJ3SZswHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzQzYmQwM2U4LWRiMmYtNDkzMC05MDY5LWYyYmEzYzdhOWI4MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYREwDQYJKoZIhvcNAQELBQADggEBABiGcOqQH3mYh81lf/pHY0BO itDRpwK2HhFftPNM01D4u7a3KGTU8VkZDj2Dpumazs0CFrW2SUqvVg7qIzXPeQPh 8FAmwlYTlR3Evdx95HyB1Rp3JlcrfvVOZPGlRlpN4Jom0uSzJmjNagB2qfzO9zkW sLoFid/tIgOkVjSINipN4WzAHIGJDkciZGG2PKUun/itOJjQM/6qGmei+Y5I0s7V +eRhT20O1K4ILD+KRRtmNHIV8q4cFdAZO6XHywd9Awjm9ijjFG6jT3y6Md+de+5S 154SglhEqkSKKDXwm6Pe3bQoRcwvoO/EmqY2ht6HZxHwEu3ChORG6Y48RFA5EdY= -----END CERTIFICATE-----Generated at Sun Mar 1 22:11:27 2026 by rpki-client