$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/71593b3e-c097-4475-95c0-8a064df47fc0.roa File: 71593b3e-c097-4475-95c0-8a064df47fc0.roa (raw, json) Hash identifier: WevTHGfVtxqruPzvNWu2lPLbO5hEaouEV7ld2240uX0= Subject key identifier: 50:2C:9D:6E:11:FE:3F:6C:11:EF:43:D2:62:E8:89:ED:52:57:77:D1 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 126FE606869B769484C82C9207E57E3F86758BBE Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/71593b3e-c097-4475-95c0-8a064df47fc0.roa Signing time: Fri 13 Feb 2026 15:00:41 +0000 ROA not before: Fri 13 Feb 2026 15:00:41 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6110::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:6f:e6:06:86:9b:76:94:84:c8:2c:92:07:e5:7e:3f:86:75:8b:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Feb 13 15:00:41 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=e4eb9ca9302b5cf71fec3ed7e8bd38e37611cd8c7a058bf6a6e43d83a84e77e7, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:28:54:14:68:ea:69:a1:8f:03:6e:e6:60:ab: bc:a6:ba:fa:89:05:d1:fd:fa:90:9e:58:93:b7:79: f6:91:a6:1c:ab:61:90:91:1c:f5:ee:31:6e:83:19: a0:f1:b0:e1:c1:bf:09:2b:69:0e:3f:84:18:60:de: e4:b1:35:19:c7:40:5a:97:31:4c:ec:2e:07:51:ad: 17:c8:01:5f:08:a8:6a:16:74:e7:eb:19:1b:87:2b: b8:a2:b6:b0:96:1e:59:16:9c:ce:ab:a2:75:6f:bb: f2:f3:f0:8a:58:75:25:d0:70:f8:aa:e5:aa:ab:75: 75:0a:9e:40:4e:6c:e3:e2:35:80:1c:a7:67:fa:49: 31:c6:77:a3:eb:21:4f:a9:3b:5d:92:f5:d8:f8:0d: e3:86:39:7c:d1:7d:c5:3a:c3:e8:1b:6d:9e:dd:7f: 41:b8:3d:0f:f0:c0:ce:fb:db:a7:80:9a:8d:11:82: 96:51:e2:fc:c1:f5:75:ff:fb:9f:65:5e:60:5a:b9: 2e:88:b8:bb:7d:b2:13:ea:87:79:e1:5a:39:b7:e2: 05:15:26:79:7a:4c:4e:98:45:ab:24:32:4d:e2:4d: e9:55:c1:5e:f4:eb:78:46:02:5b:b5:4e:64:31:93: 71:11:4f:e5:09:f8:74:df:d4:9e:c1:f7:07:9e:9a: ad:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:2C:9D:6E:11:FE:3F:6C:11:EF:43:D2:62:E8:89:ED:52:57:77:D1 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/71593b3e-c097-4475-95c0-8a064df47fc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6110::/48 Signature Algorithm: sha256WithRSAEncryption 40:87:e4:98:be:c5:7e:f1:c5:24:39:7a:37:e8:46:92:fd:b1: 62:dd:f9:89:20:5f:5a:84:d1:1d:99:4f:d4:02:82:93:37:30: bb:9e:ee:6c:a9:7d:05:9f:9d:c2:b3:f9:21:c9:b7:31:d8:e7: 66:dc:0c:ae:f1:60:9b:e9:a8:f1:eb:c4:e8:f2:02:0c:96:62: 80:f2:52:bd:50:1c:27:0a:5f:33:e8:ec:f3:36:8b:a0:cb:1b: 7a:8f:81:f2:e9:99:43:30:cd:c3:f1:e2:08:c0:d0:a2:77:68: de:85:e0:7c:45:5a:31:63:10:b9:40:00:1b:66:0d:18:a4:61: cd:a8:da:b7:72:47:1f:69:21:38:a2:0b:d5:bf:60:32:ee:7c: 60:6b:3a:73:52:f0:db:16:40:cb:ae:30:f2:b5:85:0f:3a:ea: 1d:39:d1:64:61:fe:79:f2:9b:cd:a1:10:0c:e5:93:5a:6f:1a: 6e:03:75:c2:84:4b:b4:04:16:ac:5b:98:ab:9c:ba:d1:bc:28: 21:d7:39:3f:a9:44:ff:05:9d:bb:00:fe:6c:d4:3b:13:c4:16: d5:e5:26:81:c9:39:a7:74:b2:18:90:be:0f:3b:14:50:35:85: bc:55:a5:ef:41:4d:d2:e2:20:19:c7:ae:ee:10:da:cf:63:04: e7:a0:56:a9 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEm/mBoabdpSEyCySB+V+P4Z1i74wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMjEzMTUwMDQxWhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNGViOWNhOTMwMmI1Y2Y3MWZlYzNlZDdlOGJkMzhlMzc2 MTFjZDhjN2EwNThiZjZhNmU0M2Q4M2E4NGU3N2U3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqKFQUaOppoY8DbuZgq7ymuvqJBdH9+pCeWJO3efaRphyr YZCRHPXuMW6DGaDxsOHBvwkraQ4/hBhg3uSxNRnHQFqXMUzsLgdRrRfIAV8IqGoW dOfrGRuHK7iitrCWHlkWnM6ronVvu/Lz8IpYdSXQcPiq5aqrdXUKnkBObOPiNYAc p2f6STHGd6PrIU+pO12S9dj4DeOGOXzRfcU6w+gbbZ7df0G4PQ/wwM7726eAmo0R gpZR4vzB9XX/+59lXmBauS6IuLt9shPqh3nhWjm34gUVJnl6TE6YRaskMk3iTelV wV7063hGAlu1TmQxk3ERT+UJ+HTf1J7B9weemq0tAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUUCydbhH+P2wR70PSYuiJ7VJXd9EwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzcxNTkzYjNlLWMwOTctNDQ3NS05NWMwLThhMDY0ZGY0N2ZjMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYRAwDQYJKoZIhvcNAQELBQADggEBAECH5Ji+xX7xxSQ5ejfoRpL9 sWLd+YkgX1qE0R2ZT9QCgpM3MLue7mypfQWfncKz+SHJtzHY52bcDK7xYJvpqPHr xOjyAgyWYoDyUr1QHCcKXzPo7PM2i6DLG3qPgfLpmUMwzcPx4gjA0KJ3aN6F4HxF WjFjELlAABtmDRikYc2o2rdyRx9pITiiC9W/YDLufGBrOnNS8NsWQMuuMPK1hQ86 6h050WRh/nnym82hEAzlk1pvGm4DdcKES7QEFqxbmKucutG8KCHXOT+pRP8FnbsA /mzUOxPEFtXlJoHJOad0shiQvg87FFA1hbxVpe9BTdLiIBnHru4Q2s9jBOegVqk= -----END CERTIFICATE-----Generated at Mon Mar 2 04:29:12 2026 by rpki-client