$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/460ed500-f45c-40ef-9062-2ca31b8c1dec.roa File: 460ed500-f45c-40ef-9062-2ca31b8c1dec.roa (raw, json) Hash identifier: wWaNzGHZg7/oTTuhJEbBS7hXNDnZV+NrLnRL4uB0iKw= Subject key identifier: 04:5C:AD:6F:EB:99:2C:02:80:92:A8:7B:B3:08:2C:39:0E:08:D3:57 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 29077E158966F43932F159616E23B131ADC39F69 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/460ed500-f45c-40ef-9062-2ca31b8c1dec.roa Signing time: Tue 24 Feb 2026 00:30:09 +0000 ROA not before: Tue 24 Feb 2026 00:30:09 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:b0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:07:7e:15:89:66:f4:39:32:f1:59:61:6e:23:b1:31:ad:c3:9f:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Feb 24 00:30:09 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=ae4ea50ce54729b7ffbcab8d8b4759b60c0cc571272e7b9a424c5a4059cca70e, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:86:98:61:a8:30:e2:5f:99:91:67:60:ec:f7: 78:8d:40:96:8d:86:48:89:e2:f0:4d:70:59:4c:b4: 47:18:77:1b:eb:51:a6:76:3f:95:fe:bd:08:da:56: 9f:05:e1:13:62:b6:b7:c0:2a:ff:f2:b3:a5:1b:2d: 61:d8:fe:ce:1c:1d:d3:e9:d6:a3:3f:40:5b:da:0a: 37:68:c9:91:b7:82:33:30:59:df:b7:e6:63:c0:c0: 21:94:d5:86:a4:48:88:21:02:ab:4b:16:56:9f:e7: 90:cd:58:cc:99:43:9b:5f:4b:5d:1f:6f:20:95:84: f8:c3:f8:aa:4e:7c:c2:72:5f:e3:15:22:69:37:96: f9:63:2e:fc:0a:c3:b3:ea:41:6f:ed:76:3b:aa:bf: 3c:59:30:54:76:91:c3:27:bf:c3:ff:7e:f8:8a:93: 7e:00:00:b5:57:a6:f8:48:8d:ce:22:f6:e7:06:e7: 3a:1e:f0:55:79:fe:19:09:9d:74:db:8b:5a:b7:b2: 3c:fc:ed:a2:68:6f:22:f1:47:97:71:d2:f2:01:d8: c9:5b:8e:10:28:7c:28:32:8d:37:61:27:09:64:ed: 5a:06:09:c5:39:c3:90:79:e5:3d:29:bc:43:f7:9d: 0c:e5:69:af:93:b2:8c:6b:5a:dd:c7:27:b4:a9:c2: 35:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:5C:AD:6F:EB:99:2C:02:80:92:A8:7B:B3:08:2C:39:0E:08:D3:57 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/460ed500-f45c-40ef-9062-2ca31b8c1dec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:b0::/44 Signature Algorithm: sha256WithRSAEncryption 1a:06:a3:99:c3:f9:d4:f1:a5:5b:fb:d1:88:cc:06:b8:c9:60: e7:36:b7:42:d0:b9:6f:bb:56:d9:4e:33:96:9a:c8:60:6d:fa: e7:ba:9d:b5:d6:ba:91:61:a4:35:9a:93:e7:97:ac:fa:58:0a: 0a:76:4c:44:81:24:bd:27:52:f9:2b:cd:3b:48:46:bf:f0:db: 07:e1:e1:3e:f1:c2:93:9e:aa:05:74:12:02:94:92:ef:5b:af: 5e:58:86:f4:f9:b1:8e:eb:91:f2:6c:65:83:b7:dd:83:99:ea: 2a:79:2e:98:42:8a:68:9d:1e:34:e1:a8:87:4f:06:83:87:0c: 4b:d7:7d:90:60:6e:30:fa:7e:f1:cf:8d:09:0a:b2:ae:b2:a3: a8:28:2a:70:2c:97:c6:23:43:f6:d9:a1:5f:3a:9e:69:77:4d: ec:3e:54:02:a0:ac:16:fe:b5:64:54:8b:0a:11:b9:37:e3:c6: dd:63:40:a4:26:cb:20:7a:e1:55:a9:77:dc:c3:85:1b:5b:d1: aa:05:74:34:65:96:47:51:e8:98:6e:6b:0a:95:a6:af:52:32: c4:83:58:a0:ad:95:7f:31:3f:3b:4d:17:a0:ee:56:9f:34:03: aa:fe:5d:43:52:28:f2:11:3d:98:a1:e9:cd:1c:69:ea:78:ca: 25:11:27:4f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKQd+FYlm9Dky8VlhbiOxMa3Dn2kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMjI0MDAzMDA5WhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZTRlYTUwY2U1NDcyOWI3ZmZiY2FiOGQ4YjQ3NTliNjBj MGNjNTcxMjcyZTdiOWE0MjRjNWE0MDU5Y2NhNzBlMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLhphhqDDiX5mRZ2Ds93iNQJaNhkiJ4vBNcFlMtEcYdxvr UaZ2P5X+vQjaVp8F4RNitrfAKv/ys6UbLWHY/s4cHdPp1qM/QFvaCjdoyZG3gjMw Wd+35mPAwCGU1YakSIghAqtLFlaf55DNWMyZQ5tfS10fbyCVhPjD+KpOfMJyX+MV Imk3lvljLvwKw7PqQW/tdjuqvzxZMFR2kcMnv8P/fviKk34AALVXpvhIjc4i9ucG 5zoe8FV5/hkJnXTbi1q3sjz87aJobyLxR5dx0vIB2MlbjhAofCgyjTdhJwlk7VoG CcU5w5B55T0pvEP3nQzlaa+TsoxrWt3HJ7SpwjV9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUBFytb+uZLAKAkqh7swgsOQ4I01cwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzQ2MGVkNTAwLWY0NWMtNDBlZi05MDYyLTJjYTMxYjhjMWRlYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwALAwDQYJKoZIhvcNAQELBQADggEBABoGo5nD+dTxpVv70YjMBrjJ YOc2t0LQuW+7VtlOM5aayGBt+ue6nbXWupFhpDWak+eXrPpYCgp2TESBJL0nUvkr zTtIRr/w2wfh4T7xwpOeqgV0EgKUku9br15YhvT5sY7rkfJsZYO33YOZ6ip5LphC imidHjThqIdPBoOHDEvXfZBgbjD6fvHPjQkKsq6yo6goKnAsl8YjQ/bZoV86nml3 Tew+VAKgrBb+tWRUiwoRuTfjxt1jQKQmyyB64VWpd9zDhRtb0aoFdDRllkdR6Jhu awqVpq9SMsSDWKCtlX8xPztNF6DuVp80A6r+XUNSKPIRPZih6c0caep4yiURJ08= -----END CERTIFICATE-----Generated at Sun Mar 1 22:19:42 2026 by rpki-client