$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4c062590-8f7f-4f01-9123-64634a17a4cd.roa File: 4c062590-8f7f-4f01-9123-64634a17a4cd.roa (raw, json) Hash identifier: 7fxZyyCX8ri1crKYBwf96euZOenRZFiIroOai5jrB2U= Subject key identifier: CC:6E:BD:B4:0F:51:0D:C6:E6:3B:4A:C6:6D:D0:6E:1A:5D:71:F2:43 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 374C535347D719377AA66B6CC438B64EDE37AEB4 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4c062590-8f7f-4f01-9123-64634a17a4cd.roa Signing time: Sat 28 Feb 2026 04:50:08 +0000 ROA not before: Sat 28 Feb 2026 04:50:08 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:e900::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:4c:53:53:47:d7:19:37:7a:a6:6b:6c:c4:38:b6:4e:de:37:ae:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Feb 28 04:50:08 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=3da3532cb6b51f3f920d8e654ce9ac52a5e1a0632d1d2e5e4ce8c575dff7edc6, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b4:50:20:0c:85:49:05:20:73:c6:1e:1d:02: f1:66:fb:6d:50:aa:00:1b:4d:e7:84:73:35:b7:c2: f5:0c:50:c0:33:2f:29:a6:36:3b:d3:7d:04:5d:0f: 2e:3b:64:28:3c:76:68:15:a8:37:53:4a:6c:68:2d: 99:35:91:79:ef:01:18:36:fc:79:80:b0:19:f3:58: a8:3a:59:c0:6d:d9:96:92:1d:9c:b3:ca:7c:ae:04: 6c:44:03:3e:e6:8a:f9:ac:dc:cd:c5:ec:6a:09:00: c3:ec:d6:05:4b:df:af:f0:39:19:cb:74:c3:1d:fd: 06:df:0c:29:51:cf:c7:e7:85:2f:36:93:0f:fd:53: 34:80:6d:03:d7:ff:1a:9d:46:6c:9f:20:9d:73:59: df:a3:76:cf:c1:df:15:88:06:15:25:56:93:14:f9: 20:40:e4:58:3b:ff:2f:1e:f3:47:45:9a:d7:e5:5a: 56:af:f1:17:80:b9:fd:30:70:77:49:8e:67:7a:3b: 53:f6:9d:1e:9f:13:15:00:4f:78:bf:3c:a5:de:f8: 5a:72:c3:34:5d:91:fd:a2:78:d4:5f:22:24:1e:a9: b6:ae:e2:50:0d:d6:55:07:61:7a:4a:ec:8e:67:05: 20:87:4b:f4:d6:ad:54:c3:95:f8:ee:ab:46:90:5e: d6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:6E:BD:B4:0F:51:0D:C6:E6:3B:4A:C6:6D:D0:6E:1A:5D:71:F2:43 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4c062590-8f7f-4f01-9123-64634a17a4cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e900::/40 Signature Algorithm: sha256WithRSAEncryption a4:ad:58:e6:69:a9:3f:e6:62:d2:66:42:d5:f4:2b:a7:38:a0: c3:9a:21:53:cb:ea:18:3e:40:d3:9c:5e:3f:c2:57:37:0c:7f: ea:db:03:38:a2:94:6d:14:d2:3a:21:ae:51:f5:60:2a:f7:9a: f2:fd:53:e1:97:81:f0:0c:bc:6f:40:84:b4:81:14:67:c6:50: c0:a5:7b:39:15:e8:2b:4a:64:dc:ff:dc:d6:db:c1:7a:14:64: db:12:02:b2:f8:8d:e0:67:32:04:50:b0:b2:fa:12:42:0e:1f: 8f:b2:0a:8e:97:ea:1e:32:3d:ae:7f:f5:6e:00:08:c2:50:16: 55:db:1a:9b:58:a6:f3:9f:40:6a:9c:2e:21:d8:93:bb:ae:f5: 36:7f:06:9a:12:60:81:97:b0:bd:99:e7:8d:b0:cf:f6:1e:87: 51:df:54:f3:fc:71:74:6f:f1:10:ec:5d:54:50:7b:99:53:0a: cb:3d:3c:55:b7:3a:74:cd:a7:d3:81:02:57:db:5b:5f:6a:b0: 08:5e:b4:85:32:64:7f:fc:4e:de:ca:11:51:be:a8:e8:a3:cd: 01:6e:1f:19:27:73:ad:53:0b:7a:fc:24:44:5f:bd:69:e1:4d: 63:d3:b8:8f:dc:a2:61:3f:a4:47:ad:e0:2d:cf:b7:be:db:90: fb:a1:62:70 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUN0xTU0fXGTd6pmtsxDi2Tt43rrQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMjI4MDQ1MDA4WhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AzZGEzNTMyY2I2YjUxZjNmOTIwZDhlNjU0Y2U5YWM1MmE1 ZTFhMDYzMmQxZDJlNWU0Y2U4YzU3NWRmZjdlZGM2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6tFAgDIVJBSBzxh4dAvFm+21QqgAbTeeEczW3wvUMUMAz LymmNjvTfQRdDy47ZCg8dmgVqDdTSmxoLZk1kXnvARg2/HmAsBnzWKg6WcBt2ZaS HZyzynyuBGxEAz7mivms3M3F7GoJAMPs1gVL36/wORnLdMMd/QbfDClRz8fnhS82 kw/9UzSAbQPX/xqdRmyfIJ1zWd+jds/B3xWIBhUlVpMU+SBA5Fg7/y8e80dFmtfl Wlav8ReAuf0wcHdJjmd6O1P2nR6fExUAT3i/PKXe+FpywzRdkf2ieNRfIiQeqbau 4lAN1lUHYXpK7I5nBSCHS/TWrVTDlfjuq0aQXtaHAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUzG69tA9RDcbmO0rGbdBuGl1x8kMwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzRjMDYyNTkwLThmN2YtNGYwMS05MTIzLTY0NjM0YTE3YTRjZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD76TANBgkqhkiG9w0BAQsFAAOCAQEApK1Y5mmpP+Zi0mZC1fQrpzig w5ohU8vqGD5A05xeP8JXNwx/6tsDOKKUbRTSOiGuUfVgKvea8v1T4ZeB8Ay8b0CE tIEUZ8ZQwKV7ORXoK0pk3P/c1tvBehRk2xICsviN4GcyBFCwsvoSQg4fj7IKjpfq HjI9rn/1bgAIwlAWVdsam1im859AapwuIdiTu671Nn8GmhJggZewvZnnjbDP9h6H Ud9U8/xxdG/xEOxdVFB7mVMKyz08Vbc6dM2n04ECV9tbX2qwCF60hTJkf/xO3soR Ub6o6KPNAW4fGSdzrVMLevwkRF+9aeFNY9O4j9yiYT+kR63gLc+3vtuQ+6FicA== -----END CERTIFICATE-----Generated at Sun Mar 1 22:11:37 2026 by rpki-client