$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5ae357e1-ef95-4f5f-a6c3-8ad4f4fa3014.roa File: 5ae357e1-ef95-4f5f-a6c3-8ad4f4fa3014.roa (raw, json) Hash identifier: 84/4tOF3IF4vSwREPLlf+ftVvoViwHtlN8iR7JTcpIc= Subject key identifier: 89:20:B0:2D:76:31:37:8C:EC:E2:9C:E6:3F:43:28:B9:28:50:40:8B Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2D779649E85952464D8593F0862C6C0CB2AE7641 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5ae357e1-ef95-4f5f-a6c3-8ad4f4fa3014.roa Signing time: Sat 28 Feb 2026 04:50:35 +0000 ROA not before: Sat 28 Feb 2026 04:50:35 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:551a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:77:96:49:e8:59:52:46:4d:85:93:f0:86:2c:6c:0c:b2:ae:76:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Feb 28 04:50:35 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=499bb784671c87295e42456b6ae39ef332edcf2a5d5ca2c34a2efc3e349110ac, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:79:1c:7a:c8:75:f4:b6:a3:e2:16:6a:0c:76: 0c:52:42:11:a2:6d:e1:b4:fd:db:18:44:eb:fa:b2: cd:6d:fe:d6:4d:24:55:9c:a1:75:6f:5f:a0:3e:dd: 4e:88:35:6a:c7:bb:9e:38:20:2f:84:a6:81:16:d7: 14:cc:bc:3a:64:54:5f:59:80:46:57:1a:f7:d8:29: 4f:66:fe:6b:55:25:e3:12:36:77:1d:9c:2d:9a:33: 27:5c:96:33:b6:4d:f3:20:36:c8:4a:8f:36:69:15: 40:b3:39:93:45:4f:65:6e:1a:93:ac:c8:df:81:2d: 3d:02:ea:42:3b:2d:b5:27:d4:8f:02:fe:3f:eb:8b: 29:44:50:54:6e:e1:37:d8:ad:30:17:9f:54:f9:ab: a3:ec:60:cf:ff:73:f7:52:c6:23:79:3b:92:3a:1e: c0:aa:6d:36:b8:25:c1:dd:4e:1f:c0:57:f0:4f:ea: 8a:8c:aa:0c:10:dc:02:b6:12:f3:38:41:cc:59:a7: f9:7e:c2:99:cb:a3:f7:aa:9a:7a:d1:4f:19:62:e6: 4f:bc:06:a5:7f:b3:5d:f7:ad:0d:3e:5c:87:cd:49: 72:23:f8:6a:1b:8f:7c:d3:ca:22:d2:3e:2d:7d:d2: 27:68:d7:3d:92:a3:e2:02:04:b1:0d:4e:41:80:1d: d1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:20:B0:2D:76:31:37:8C:EC:E2:9C:E6:3F:43:28:B9:28:50:40:8B X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5ae357e1-ef95-4f5f-a6c3-8ad4f4fa3014.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:551a::/48 Signature Algorithm: sha256WithRSAEncryption 96:3a:9a:70:a2:a2:31:e6:df:c6:20:bf:f7:81:e0:02:ab:e0: c1:99:6c:9b:c3:06:51:39:ea:ec:f7:bb:47:c2:3d:89:22:a9: 5d:b2:54:d9:de:f4:0d:52:a4:0e:d0:5d:49:16:2d:ad:82:37: 37:91:84:0c:69:d3:4c:32:1e:47:30:3c:76:05:00:0c:2c:2c: e9:34:07:d9:db:a4:c1:1e:70:57:f0:90:5d:cc:bb:24:5a:6b: 78:ba:6f:a8:54:db:97:41:d5:ac:b4:0a:35:a4:bd:77:71:82: ed:c4:b1:04:1d:72:20:02:dd:83:2c:b9:61:5c:ef:58:7f:61: fd:54:d8:2e:57:eb:1f:f7:b6:9f:be:2e:31:d3:39:35:bf:f0: 69:9a:78:2b:4e:3d:4d:80:e4:72:dc:2e:4e:b8:10:7b:92:d5: c7:7c:41:9c:e8:ad:17:22:30:12:3e:4b:9c:de:94:4c:12:78: d2:4f:55:05:9a:e2:ab:99:21:48:c4:09:eb:ea:54:27:25:6d: 46:b8:fb:10:f9:1e:d9:e3:ec:45:0f:95:9f:2b:c0:4b:16:05: 13:24:53:61:32:81:b3:a7:53:d1:18:c6:b1:dc:34:e3:a3:b2: eb:d0:fd:ae:22:0f:b5:f7:5c:c2:7e:a0:cf:24:32:5b:11:97: b7:fa:4c:83 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIULXeWSehZUkZNhZPwhixsDLKudkEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMjI4MDQ1MDM1WhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A0OTliYjc4NDY3MWM4NzI5NWU0MjQ1NmI2YWUzOWVmMzMy ZWRjZjJhNWQ1Y2EyYzM0YTJlZmMzZTM0OTExMGFjMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCaeRx6yHX0tqPiFmoMdgxSQhGibeG0/dsYROv6ss1t/tZN JFWcoXVvX6A+3U6INWrHu544IC+EpoEW1xTMvDpkVF9ZgEZXGvfYKU9m/mtVJeMS NncdnC2aMydcljO2TfMgNshKjzZpFUCzOZNFT2VuGpOsyN+BLT0C6kI7LbUn1I8C /j/riylEUFRu4TfYrTAXn1T5q6PsYM//c/dSxiN5O5I6HsCqbTa4JcHdTh/AV/BP 6oqMqgwQ3AK2EvM4QcxZp/l+wpnLo/eqmnrRTxli5k+8BqV/s133rQ0+XIfNSXIj +Gobj3zTyiLSPi190ido1z2So+ICBLENTkGAHdFhAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUiSCwLXYxN4zs4pzmP0MouShQQIswHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzVhZTM1N2UxLWVmOTUtNGY1Zi1hNmMzLThhZDRmNGZhMzAxNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwVRowDQYJKoZIhvcNAQELBQADggEBAJY6mnCiojHm38Ygv/eB4AKr 4MGZbJvDBlE56uz3u0fCPYkiqV2yVNne9A1SpA7QXUkWLa2CNzeRhAxp00wyHkcw PHYFAAwsLOk0B9nbpMEecFfwkF3MuyRaa3i6b6hU25dB1ay0CjWkvXdxgu3EsQQd ciAC3YMsuWFc71h/Yf1U2C5X6x/3tp++LjHTOTW/8GmaeCtOPU2A5HLcLk64EHuS 1cd8QZzorRciMBI+S5zelEwSeNJPVQWa4quZIUjECevqVCclbUa4+xD5Htnj7EUP lZ8rwEsWBRMkU2EygbOnU9EYxrHcNOOjsuvQ/a4iD7X3XMJ+oM8kMlsRl7f6TIM= -----END CERTIFICATE-----Generated at Sun Mar 1 22:03:37 2026 by rpki-client