$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/660f5154-1b49-462f-808c-68d8e6db8edc.roa File: 660f5154-1b49-462f-808c-68d8e6db8edc.roa (raw, json) Hash identifier: TcEjYqquD5ZCPI/5OUbYBtEGlxIKl50XXlTWLTcF3h0= Subject key identifier: 38:E6:8A:37:8D:A2:CD:2D:B3:C8:28:49:F5:AE:3D:FD:3B:E4:D5:AB Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 68BBDDCF7A24B9ABA7A632E5A579757EB2B6E08E Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/660f5154-1b49-462f-808c-68d8e6db8edc.roa Signing time: Fri 13 Feb 2026 15:00:38 +0000 ROA not before: Fri 13 Feb 2026 15:00:38 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:bb:dd:cf:7a:24:b9:ab:a7:a6:32:e5:a5:79:75:7e:b2:b6:e0:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Feb 13 15:00:38 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=9d2967a6d64bf640d1203d0c3c40e84305fdfa8720af0611ebe0640885c647ae, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ee:4f:f3:51:ad:64:ac:9f:6d:9f:1f:79:55: 06:06:2a:a8:d2:c2:58:bc:b9:6c:81:d4:b8:9e:b6: 42:b5:74:ff:30:7a:6b:d8:aa:5e:e3:a7:8e:e7:97: 8b:18:7f:b2:88:3b:9b:db:e6:b4:a8:16:9a:f5:8c: c3:78:8a:d4:75:dd:3b:51:fd:44:55:9d:39:a9:36: 5a:ed:cb:7e:89:0f:45:ea:42:e9:8d:fc:a5:86:e1: 1c:2c:ed:81:e0:f4:4a:99:1d:7c:c2:4c:31:70:e6: 07:af:11:d7:7e:f4:ed:4a:3f:09:03:ab:03:23:7c: 3f:52:25:34:48:d7:6a:0c:52:2f:16:08:e5:6d:bd: c5:dc:e2:0c:6a:be:7f:22:0f:27:75:42:2f:4f:3e: 02:d4:72:4e:ab:61:44:40:fb:9f:ff:e5:45:11:76: 1f:64:cd:50:ee:46:98:9c:b1:e0:48:b1:6c:42:c9: 08:2b:90:57:7a:ad:e6:44:53:72:a2:43:3a:5b:34: 85:aa:a8:56:54:54:c0:0b:c5:95:3d:61:65:4a:36: e3:fe:22:ff:12:37:b2:a5:7d:a5:cf:7e:11:14:63: 9b:93:81:4e:ff:42:f7:29:b5:34:0b:bd:55:29:5e: a1:0a:03:a7:a2:bc:66:ac:5b:ac:89:f5:69:84:0f: 85:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E6:8A:37:8D:A2:CD:2D:B3:C8:28:49:F5:AE:3D:FD:3B:E4:D5:AB X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/660f5154-1b49-462f-808c-68d8e6db8edc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6120::/48 Signature Algorithm: sha256WithRSAEncryption 86:3b:ef:74:64:39:05:bb:a1:14:4c:5e:f9:1b:18:73:d6:0f: 7b:e5:30:27:d3:c4:5e:ab:01:d2:d4:0b:03:40:4c:ea:e5:d8: 3c:95:f7:cb:6c:fd:0c:46:97:61:bf:e6:74:89:c2:09:fa:34: bd:14:ae:a8:fa:96:5d:c6:5a:f9:a1:76:a2:4c:83:ff:d9:04: 81:d4:a2:2a:29:02:01:bf:bd:f1:7a:a8:1b:e9:f7:ea:6e:db: ae:2d:70:f0:31:2e:d4:4d:04:36:4c:e8:59:8c:9f:bb:a4:8c: fe:61:68:65:7b:7e:7e:90:71:3d:0c:66:c3:0e:93:b0:0a:1a: cb:70:24:83:c1:b4:d1:b8:28:20:ee:a7:36:54:5f:cf:4e:ff: 66:fc:cb:a1:78:21:25:5a:0d:81:52:40:9a:d4:a3:7e:b9:45: 18:83:41:11:2d:6b:7e:d6:e4:e1:66:27:0d:df:18:7e:5d:91: ed:9f:77:cd:34:a6:40:cf:02:98:23:27:c3:03:01:b8:a9:c1: f2:22:87:ad:5a:98:7f:6d:53:3f:32:92:0a:9d:76:47:86:ae: ac:1b:b5:12:4e:f7:f7:75:84:87:f1:8f:0f:84:ea:1e:62:45: dc:fa:c6:aa:3d:e3:a8:6a:25:a3:7a:d5:13:9c:4c:1a:31:9b: b5:75:1e:43 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUaLvdz3okuaunpjLlpXl1frK24I4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMjEzMTUwMDM4WhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZDI5NjdhNmQ2NGJmNjQwZDEyMDNkMGMzYzQwZTg0MzA1 ZmRmYTg3MjBhZjA2MTFlYmUwNjQwODg1YzY0N2FlMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCs7k/zUa1krJ9tnx95VQYGKqjSwli8uWyB1LietkK1dP8w emvYql7jp47nl4sYf7KIO5vb5rSoFpr1jMN4itR13TtR/URVnTmpNlrty36JD0Xq QumN/KWG4Rws7YHg9EqZHXzCTDFw5gevEdd+9O1KPwkDqwMjfD9SJTRI12oMUi8W COVtvcXc4gxqvn8iDyd1Qi9PPgLUck6rYURA+5//5UURdh9kzVDuRpicseBIsWxC yQgrkFd6reZEU3KiQzpbNIWqqFZUVMALxZU9YWVKNuP+Iv8SN7KlfaXPfhEUY5uT gU7/QvcptTQLvVUpXqEKA6eivGasW6yJ9WmED4UrAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUOOaKN42izS2zyChJ9a49/Tvk1aswHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzY2MGY1MTU0LTFiNDktNDYyZi04MDhjLTY4ZDhlNmRiOGVkYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYSAwDQYJKoZIhvcNAQELBQADggEBAIY773RkOQW7oRRMXvkbGHPW D3vlMCfTxF6rAdLUCwNATOrl2DyV98ts/QxGl2G/5nSJwgn6NL0Urqj6ll3GWvmh dqJMg//ZBIHUoiopAgG/vfF6qBvp9+pu264tcPAxLtRNBDZM6FmMn7ukjP5haGV7 fn6QcT0MZsMOk7AKGstwJIPBtNG4KCDupzZUX89O/2b8y6F4ISVaDYFSQJrUo365 RRiDQREta37W5OFmJw3fGH5dke2fd800pkDPApgjJ8MDAbipwfIih61amH9tUz8y kgqddkeGrqwbtRJO9/d1hIfxjw+E6h5iRdz6xqo946hqJaN61ROcTBoxm7V1HkM= -----END CERTIFICATE-----Generated at Sun Mar 1 22:09:54 2026 by rpki-client