$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6dda3bf3-022d-4ca1-ab68-eb73ef36558c.roa File: 6dda3bf3-022d-4ca1-ab68-eb73ef36558c.roa (raw, json) Hash identifier: OW0dPKq3TZCgSe5oggDmAQ8S9p2teD+AMhQRyugpdmA= Subject key identifier: 69:CE:99:80:C6:23:A4:3A:AD:0D:E1:88:9C:74:E2:F7:2A:E6:F1:CD Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 60854DB2794B4ECC66EA4A7A16272CC180AB2590 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6dda3bf3-022d-4ca1-ab68-eb73ef36558c.roa Signing time: Sun 01 Mar 2026 01:00:07 +0000 ROA not before: Sun 01 Mar 2026 01:00:07 +0000 ROA not after: Sat 30 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:f105::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:85:4d:b2:79:4b:4e:cc:66:ea:4a:7a:16:27:2c:c1:80:ab:25:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Mar 1 01:00:07 2026 GMT Not After : May 30 23:59:59 2026 GMT Subject: serialNumber=4fe6fd55b38afab9a70427840d4808df1e472bafa6ff3478731db885c0610efc, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:97:c6:27:ea:6b:12:c7:6a:83:71:5d:38:e7: f5:1d:c6:9d:52:75:b3:36:94:30:f4:c0:60:a1:be: fd:05:42:a9:30:df:91:da:29:97:39:94:7a:29:81: e3:7e:bd:cd:4c:f7:1c:26:13:f7:73:ee:20:8f:65: e3:bf:c1:ce:de:a7:8c:ed:69:18:3c:b6:81:dd:4d: 6b:c3:84:ee:09:87:8f:be:59:8c:a3:20:f8:1e:64: b5:1c:31:99:f5:ca:21:85:48:b2:1f:4d:62:6e:be: f7:06:0d:ab:a9:46:65:50:47:5d:20:41:40:90:b2: 37:bc:7e:22:67:9a:73:1d:8f:e5:e6:96:40:9b:d8: 8c:05:40:25:9b:c4:92:8e:c1:69:c7:5c:eb:d1:3a: 64:1f:9c:ac:b0:97:ac:95:75:c5:9f:dd:58:70:ed: 7e:a5:f8:e2:1b:bd:c3:9a:8e:a7:f1:4c:76:0f:c5: ac:f6:0a:ca:6e:1d:cd:7d:e8:fa:9f:12:94:b1:4e: 89:17:73:e1:45:a6:a8:8b:5e:d5:2b:cc:bc:93:93: 33:4b:6f:bf:54:b8:b2:a0:c0:f6:95:39:04:5f:28: 98:42:ac:60:59:b6:ab:10:d1:bb:41:a9:e3:29:6e: ad:0e:6f:21:66:3c:d5:ea:41:39:50:2e:6d:f5:81: 9e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:CE:99:80:C6:23:A4:3A:AD:0D:E1:88:9C:74:E2:F7:2A:E6:F1:CD X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6dda3bf3-022d-4ca1-ab68-eb73ef36558c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f105::/48 Signature Algorithm: sha256WithRSAEncryption 8a:bc:40:07:36:13:e2:ca:6b:7d:a5:b2:50:8f:b2:6e:c7:ef: c9:e7:87:4f:e4:2d:ec:6c:ed:8e:48:37:88:40:55:31:a4:b9: da:9c:4a:b4:c7:3a:2e:c6:c5:19:9a:2d:32:cb:58:42:26:ff: d8:02:9d:77:92:84:e5:3b:cc:39:b7:31:e7:df:9b:0a:42:de: 6b:9b:ec:cb:8e:49:18:8e:d0:54:1e:4f:9c:90:6a:df:c0:83: 62:87:5e:75:60:3a:34:68:a7:21:49:4c:d0:c8:b8:6d:63:9c: 4b:81:79:6c:b7:b3:8c:6e:d1:db:9f:a6:4c:4c:d3:58:7e:1c: 03:e5:de:d9:d5:92:3c:95:41:9d:7d:ab:5c:67:3d:c6:fb:cf: 41:b1:f6:e1:f5:4b:85:76:76:7b:be:4f:bb:23:28:67:1b:ca: c7:91:04:6c:1a:7b:fa:88:39:e6:da:b2:92:45:3b:27:bd:f7: 8b:fd:27:dd:d2:c5:c0:d5:c1:62:7e:f7:e4:82:e8:00:09:38: 53:4d:50:f0:31:f4:ce:68:97:41:0e:22:21:5d:cc:ba:eb:6f: 1b:37:67:2a:8f:03:a1:b4:84:8e:8c:be:20:b4:77:aa:a6:b4: 48:c4:62:47:df:38:8e:94:8f:d7:23:8b:c6:b2:3b:d2:8f:84: c9:a9:16:39 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUYIVNsnlLTsxm6kp6FicswYCrJZAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMzAxMDEwMDA3WhcNMjYwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZmU2ZmQ1NWIzOGFmYWI5YTcwNDI3ODQwZDQ4MDhkZjFl NDcyYmFmYTZmZjM0Nzg3MzFkYjg4NWMwNjEwZWZjMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCul8Yn6msSx2qDcV045/Udxp1SdbM2lDD0wGChvv0FQqkw 35HaKZc5lHopgeN+vc1M9xwmE/dz7iCPZeO/wc7ep4ztaRg8toHdTWvDhO4Jh4++ WYyjIPgeZLUcMZn1yiGFSLIfTWJuvvcGDaupRmVQR10gQUCQsje8fiJnmnMdj+Xm lkCb2IwFQCWbxJKOwWnHXOvROmQfnKywl6yVdcWf3Vhw7X6l+OIbvcOajqfxTHYP xaz2CspuHc196PqfEpSxTokXc+FFpqiLXtUrzLyTkzNLb79UuLKgwPaVOQRfKJhC rGBZtqsQ0btBqeMpbq0ObyFmPNXqQTlQLm31gZ63AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUac6ZgMYjpDqtDeGInHTi9yrm8c0wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzZkZGEzYmYzLTAyMmQtNGNhMS1hYjY4LWViNzNlZjM2NTU4Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QUwDQYJKoZIhvcNAQELBQADggEBAIq8QAc2E+LKa32lslCPsm7H 78nnh0/kLexs7Y5IN4hAVTGkudqcSrTHOi7GxRmaLTLLWEIm/9gCnXeShOU7zDm3 MeffmwpC3mub7MuOSRiO0FQeT5yQat/Ag2KHXnVgOjRopyFJTNDIuG1jnEuBeWy3 s4xu0dufpkxM01h+HAPl3tnVkjyVQZ19q1xnPcb7z0Gx9uH1S4V2dnu+T7sjKGcb yseRBGwae/qIOebaspJFOye994v9J93SxcDVwWJ+9+SC6AAJOFNNUPAx9M5ol0EO IiFdzLrrbxs3ZyqPA6G0hI6MviC0d6qmtEjEYkffOI6Uj9cji8ayO9KPhMmpFjk= -----END CERTIFICATE-----Generated at Sun Mar 1 22:04:08 2026 by rpki-client