$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4a8623c4-10a0-46b6-a5f5-c94e84c56867.roa File: 4a8623c4-10a0-46b6-a5f5-c94e84c56867.roa (raw, json) Hash identifier: 8/P2C3ObsEuGDfgE/Aw+z4HIE9foaikNleknGkP/Nsg= Subject key identifier: BE:EC:12:0F:EE:32:DE:83:B2:42:35:3C:4A:DD:93:80:62:36:65:60 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 1303435A9EF975CED8D4F8AFFDB2ED6215CD7384 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4a8623c4-10a0-46b6-a5f5-c94e84c56867.roa Signing time: Sat 28 Feb 2026 05:10:40 +0000 ROA not before: Sat 28 Feb 2026 05:10:40 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:03:43:5a:9e:f9:75:ce:d8:d4:f8:af:fd:b2:ed:62:15:cd:73:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Feb 28 05:10:40 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=b5912fcd3048aee4efa44506041225eb4da7440aad0a835d04eda1c77fd3e947, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a5:0a:68:51:4b:db:6e:f4:8c:42:3a:6a:54: f2:22:d9:de:27:4b:6f:1a:b4:6c:3e:ee:85:58:1c: 13:3e:c5:5e:a8:d4:e9:e1:7e:b0:b2:c7:52:9a:da: f4:a9:5d:17:c9:5e:f0:6a:a6:a3:d2:7a:df:1a:31: d7:b4:0a:98:70:d3:a1:62:fa:c8:c6:bf:9f:17:71: 4e:c0:e7:71:5f:5c:3b:4c:8b:2f:ea:43:69:02:44: 20:3a:3e:e5:ed:2d:21:49:d9:49:57:c4:fa:58:aa: ee:e9:1d:cc:1e:d2:04:0e:90:4d:13:7e:73:d6:9a: 8b:dd:05:12:bb:5d:99:9f:78:f3:a7:b2:74:00:ce: f3:9b:cd:1d:fa:53:94:ce:a1:68:66:b9:06:34:53: eb:93:15:de:3f:98:19:55:ee:f0:72:06:11:e0:57: 57:28:f7:5e:de:40:75:d7:e1:f1:22:fd:fa:35:f0: b8:d1:96:3d:9b:44:1a:9e:89:e1:60:70:d7:b2:47: 9f:33:58:2d:1a:1d:10:4a:38:5b:7f:e9:60:ad:54: 32:c7:9f:bf:92:35:d3:f3:57:6c:c9:93:1b:eb:01: 24:f2:e6:f3:af:a2:ba:01:92:c3:bb:70:ec:f6:bb: 6b:40:15:6c:cd:c8:49:4b:da:22:b8:3b:08:61:2b: ed:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:EC:12:0F:EE:32:DE:83:B2:42:35:3C:4A:DD:93:80:62:36:65:60 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4a8623c4-10a0-46b6-a5f5-c94e84c56867.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:a0::/48 Signature Algorithm: sha256WithRSAEncryption a6:7e:17:a9:c3:ad:85:77:bb:7f:02:59:25:5b:d5:66:b0:fa: fd:e2:66:b2:d1:d0:41:82:2d:f4:ae:d2:e9:07:3e:6a:26:a1: 1f:fa:04:9f:47:f7:53:7b:a0:f9:d3:53:f0:f5:15:36:6e:58: 75:e4:f7:e4:9f:f0:bd:ed:a6:3a:d2:58:cf:62:fe:72:07:51: 08:a9:70:f3:0f:39:59:20:a4:c6:73:47:5e:9e:c5:48:52:37: ac:ae:3d:9b:90:49:85:a5:8a:42:5f:b5:8d:db:9d:7b:8d:e3: ba:d9:f0:28:cf:ae:b1:ed:24:f1:34:5e:ea:46:d8:af:84:b5: d6:f7:68:0c:92:79:44:5e:ff:1e:65:14:01:92:7a:aa:00:10: fc:6c:04:0a:35:55:0d:1f:53:7c:ef:90:2c:99:6d:b3:f5:cc: 77:9c:45:37:6e:af:61:e5:c2:fc:d6:63:ff:29:c3:43:32:f1: 83:ef:76:99:95:8d:9d:a5:35:79:f5:f0:e8:bc:01:12:94:4c: ea:c4:f8:8b:de:04:53:62:20:98:97:b5:b2:6d:7f:32:d3:15: 64:02:92:36:cd:b7:6e:88:d6:fb:9e:68:0c:ea:21:8f:46:d8: cb:9d:07:6c:0e:d1:e8:37:ac:1f:4c:e8:0f:4a:3e:0f:37:37: 4e:16:13:a8 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEwNDWp75dc7Y1Piv/bLtYhXNc4QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMjI4MDUxMDQwWhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNTkxMmZjZDMwNDhhZWU0ZWZhNDQ1MDYwNDEyMjVlYjRk YTc0NDBhYWQwYTgzNWQwNGVkYTFjNzdmZDNlOTQ3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDopQpoUUvbbvSMQjpqVPIi2d4nS28atGw+7oVYHBM+xV6o 1OnhfrCyx1Ka2vSpXRfJXvBqpqPSet8aMde0Cphw06Fi+sjGv58XcU7A53FfXDtM iy/qQ2kCRCA6PuXtLSFJ2UlXxPpYqu7pHcwe0gQOkE0TfnPWmovdBRK7XZmfePOn snQAzvObzR36U5TOoWhmuQY0U+uTFd4/mBlV7vByBhHgV1co917eQHXX4fEi/fo1 8LjRlj2bRBqeieFgcNeyR58zWC0aHRBKOFt/6WCtVDLHn7+SNdPzV2zJkxvrASTy 5vOvoroBksO7cOz2u2tAFWzNyElL2iK4OwhhK+3fAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUvuwSD+4y3oOyQjU8St2TgGI2ZWAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzRhODYyM2M0LTEwYTAtNDZiNi1hNWY1LWM5NGU4NGM1Njg2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwAKAwDQYJKoZIhvcNAQELBQADggEBAKZ+F6nDrYV3u38CWSVb1Waw +v3iZrLR0EGCLfSu0ukHPmomoR/6BJ9H91N7oPnTU/D1FTZuWHXk9+Sf8L3tpjrS WM9i/nIHUQipcPMPOVkgpMZzR16exUhSN6yuPZuQSYWlikJftY3bnXuN47rZ8CjP rrHtJPE0XupG2K+Etdb3aAySeURe/x5lFAGSeqoAEPxsBAo1VQ0fU3zvkCyZbbP1 zHecRTdur2HlwvzWY/8pw0My8YPvdpmVjZ2lNXn18Oi8ARKUTOrE+IveBFNiIJiX tbJtfzLTFWQCkjbNt26I1vueaAzqIY9G2MudB2wO0eg3rB9M6A9KPg83N04WE6g= -----END CERTIFICATE-----Generated at Mon Mar 2 00:05:40 2026 by rpki-client