$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6ac404eb-6a32-4ac1-b9d5-391986a6379c.roa File: 6ac404eb-6a32-4ac1-b9d5-391986a6379c.roa (raw, json) Hash identifier: RyYa1qoDb0N5eJnrFWTVc4+OigbciC3AvyyNoArXdCs= Subject key identifier: 17:40:AB:C1:10:75:B8:17:58:67:19:11:9D:2C:5A:06:AD:EC:FE:7C Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2C17A69B2E82FAF231D03F9EA4D21C6DF3C8DE5F Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6ac404eb-6a32-4ac1-b9d5-391986a6379c.roa Signing time: Sat 07 Feb 2026 00:10:16 +0000 ROA not before: Sat 07 Feb 2026 00:10:16 +0000 ROA not after: Fri 08 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f1:8b01::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:17:a6:9b:2e:82:fa:f2:31:d0:3f:9e:a4:d2:1c:6d:f3:c8:de:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Feb 7 00:10:16 2026 GMT Not After : May 8 23:59:59 2026 GMT Subject: serialNumber=8961ff32db213e273a85a8cad1389819e77f3be9bf7d6bbd86b2360ffbbaf3b1, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:20:3d:36:f6:dc:52:41:de:a5:f2:4c:76:ac: e2:78:9c:01:11:cb:48:f0:4f:fd:5d:34:1f:94:96: ed:49:63:7f:04:69:56:88:39:4d:18:56:fb:be:a1: f9:ff:98:8c:3e:3a:74:ad:ba:e2:33:cc:84:1b:c0: 98:13:48:38:59:ef:f2:66:8f:d7:83:9f:8f:7d:9f: 2d:bf:c8:a4:64:b0:f9:02:a4:63:f8:cf:86:50:a3: 79:43:bf:e2:a8:fc:a9:62:f1:e5:5e:36:12:c5:d4: aa:89:c2:d7:4b:2a:ff:2e:b7:be:bc:4b:ed:3d:c5: ea:38:bc:b0:9b:f1:6c:31:40:c2:ae:51:e3:e6:48: 15:2b:6c:c3:ca:2a:4a:e9:ec:e5:3b:22:e9:78:cf: b6:9a:63:db:76:a0:44:2e:c9:a5:44:87:1d:07:97: fa:be:f8:37:c7:3d:bd:cd:4b:04:d1:25:b1:cb:9b: 59:c2:6f:da:39:6a:ca:91:95:e1:b2:48:7d:8f:a0: af:12:77:f8:b3:ac:d2:d2:42:45:64:cf:8b:15:4f: 79:38:c8:81:b9:af:68:fa:01:8d:20:83:0c:15:12: 72:49:e7:13:c0:5f:c6:22:19:39:20:c8:d5:08:18: 4f:f4:52:b3:88:be:46:3b:16:be:7a:ee:76:c6:20: 52:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:40:AB:C1:10:75:B8:17:58:67:19:11:9D:2C:5A:06:AD:EC:FE:7C X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6ac404eb-6a32-4ac1-b9d5-391986a6379c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:8b01::/48 Signature Algorithm: sha256WithRSAEncryption 15:07:a1:73:88:e5:82:28:98:36:32:6e:8f:39:4a:28:68:c9: f3:4f:18:02:c6:3b:42:d8:6c:f7:7f:ab:aa:80:0c:37:fb:f0: 2a:52:b7:29:28:38:fa:a5:b0:92:c4:37:9f:8d:5a:a0:e2:b4: af:e8:fd:3d:b6:0d:66:db:f0:b0:9d:c0:d3:b0:99:0b:35:31: ce:d2:ec:c3:bb:77:0b:1e:1f:01:9a:b6:21:16:3f:37:a4:9e: 8e:ec:8b:af:55:7d:12:93:a9:d6:c3:f5:1a:ab:fa:46:37:8c: 9e:9c:40:4f:ae:c9:34:9f:67:6d:48:fe:48:4a:54:f9:66:6c: 04:ee:05:8c:4c:12:e3:9b:d5:b1:fa:1b:cf:ef:1a:b5:9c:cf: 74:a5:e6:d9:fb:2a:51:6d:f8:db:0d:2a:d0:5d:93:45:e3:0e: f5:23:e0:05:17:72:26:7d:02:9c:96:0c:2c:1b:4c:65:b3:af: bb:57:12:73:76:c4:ce:0f:1f:1c:41:8f:16:6f:cb:b8:d7:ac: 47:ba:f4:65:1f:9f:11:1f:02:7c:82:10:46:2b:95:56:40:f5: 74:98:26:09:ec:a6:af:fb:fb:cd:cc:f7:fb:ed:61:a1:5c:70: dc:30:5f:54:cf:a2:c1:8d:a3:d0:70:0b:e7:bd:cf:e9:ba:0b: 01:ca:c5:5d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIULBemmy6C+vIx0D+epNIcbfPI3l8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMjA3MDAxMDE2WhcNMjYwNTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A4OTYxZmYzMmRiMjEzZTI3M2E4NWE4Y2FkMTM4OTgxOWU3 N2YzYmU5YmY3ZDZiYmQ4NmIyMzYwZmZiYmFmM2IxMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDqID029txSQd6l8kx2rOJ4nAERy0jwT/1dNB+Ulu1JY38E aVaIOU0YVvu+ofn/mIw+OnStuuIzzIQbwJgTSDhZ7/Jmj9eDn499ny2/yKRksPkC pGP4z4ZQo3lDv+Ko/Kli8eVeNhLF1KqJwtdLKv8ut768S+09xeo4vLCb8WwxQMKu UePmSBUrbMPKKkrp7OU7Iul4z7aaY9t2oEQuyaVEhx0Hl/q++DfHPb3NSwTRJbHL m1nCb9o5asqRleGySH2PoK8Sd/izrNLSQkVkz4sVT3k4yIG5r2j6AY0ggwwVEnJJ 5xPAX8YiGTkgyNUIGE/0UrOIvkY7Fr567nbGIFKBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUF0CrwRB1uBdYZxkRnSxaBq3s/nwwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzZhYzQwNGViLTZhMzItNGFjMS1iOWQ1LTM5MTk4NmE2Mzc5Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDxiwEwDQYJKoZIhvcNAQELBQADggEBABUHoXOI5YIomDYybo85Siho yfNPGALGO0LYbPd/q6qADDf78CpStykoOPqlsJLEN5+NWqDitK/o/T22DWbb8LCd wNOwmQs1Mc7S7MO7dwseHwGatiEWPzekno7si69VfRKTqdbD9Rqr+kY3jJ6cQE+u yTSfZ21I/khKVPlmbATuBYxMEuOb1bH6G8/vGrWcz3Sl5tn7KlFt+NsNKtBdk0Xj DvUj4AUXciZ9ApyWDCwbTGWzr7tXEnN2xM4PHxxBjxZvy7jXrEe69GUfnxEfAnyC EEYrlVZA9XSYJgnspq/7+83M9/vtYaFccNwwX1TPosGNo9BwC+e9z+m6CwHKxV0= -----END CERTIFICATE-----Generated at Mon Mar 2 05:31:12 2026 by rpki-client