$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/720f42c5-101d-41af-abc8-bd64d6f08fe0.roa File: 720f42c5-101d-41af-abc8-bd64d6f08fe0.roa (raw, json) Hash identifier: ARrrElkFMkW21/tjj+2dYoiaAlrPAY9Alk0YN/twZkw= Subject key identifier: BE:06:A6:00:CD:04:BF:13:0B:7F:14:CD:FC:A6:44:29:49:3C:9F:20 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 049F5D30B3FDDA2A2763824AF48A61120DEC0F37 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/720f42c5-101d-41af-abc8-bd64d6f08fe0.roa Signing time: Fri 20 Feb 2026 01:30:16 +0000 ROA not before: Fri 20 Feb 2026 01:30:16 +0000 ROA not after: Thu 21 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f2:7011::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:9f:5d:30:b3:fd:da:2a:27:63:82:4a:f4:8a:61:12:0d:ec:0f:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Feb 20 01:30:16 2026 GMT Not After : May 21 23:59:59 2026 GMT Subject: serialNumber=3bc72c65c36383a9509f434bb3d5ca78d7bd2a2c9c1afbc86d2083497f3b46d0, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:47:5a:15:10:ac:40:7e:db:7c:91:f7:89:f7: 15:94:5a:8d:01:45:6b:b5:9d:4a:46:3b:a6:86:4f: 82:5a:02:dc:95:83:2c:f1:e5:97:6b:2c:6c:ee:ac: 4a:96:05:55:ad:d2:b5:c5:2f:74:6e:fd:3e:cb:2b: ba:15:4b:1e:ad:68:3f:cc:f8:20:fe:a5:7b:d0:3a: ef:6b:6c:43:bf:59:6c:24:72:14:d7:01:05:64:25: 9a:a7:4f:9b:d8:23:b1:68:c5:01:ea:51:19:96:02: f0:0a:74:d8:d9:79:83:4c:7d:d4:11:c9:86:ef:7b: e4:ad:50:dd:a8:e1:f7:09:34:f2:62:68:db:a7:c4: d3:bc:fd:7c:38:6a:fb:c0:1a:73:17:44:a4:3f:aa: e7:62:81:d0:45:df:25:52:8c:5c:52:8b:bf:5d:68: f6:b9:fd:c8:40:89:fa:9e:38:89:96:b6:d9:f5:50: 32:19:a7:c2:86:13:44:20:3c:7d:df:b7:2f:74:47: f1:80:1f:3b:ab:89:44:ca:8d:d8:f8:2d:15:4c:cf: a0:cf:b9:b0:52:07:ad:56:cf:5d:89:38:18:0e:e6: ba:d6:49:6c:c9:4e:d1:e1:c6:c8:8f:15:eb:6a:3f: 11:b7:8b:f2:53:f2:27:cd:56:66:b2:1f:bb:37:61: 25:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:06:A6:00:CD:04:BF:13:0B:7F:14:CD:FC:A6:44:29:49:3C:9F:20 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/720f42c5-101d-41af-abc8-bd64d6f08fe0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7011::/48 Signature Algorithm: sha256WithRSAEncryption 97:2b:12:c8:da:d4:b9:63:05:a9:65:36:d5:56:2b:95:ef:a7: 5b:cf:aa:6b:e5:f7:34:26:ba:67:f1:d9:7c:10:28:6d:96:c8: 05:77:71:fd:b1:0a:eb:82:46:a0:b8:a8:47:26:7d:17:eb:34: 6d:d8:1e:4f:0b:37:70:1e:14:19:2e:ab:28:01:ad:6a:62:3e: b3:46:48:56:c2:6a:a0:ab:f7:9e:94:af:a4:03:ea:c1:4e:c5: 78:49:6e:e0:2d:88:bc:77:77:d0:48:cd:c0:dc:8d:f2:ad:63: 72:df:e0:21:79:da:32:e0:e8:19:9b:28:f7:3d:e6:58:bb:df: 62:e5:a4:69:cc:75:c2:93:d1:f5:6d:78:9f:45:f5:9c:69:39: 2d:4c:6c:fb:2f:7f:18:4e:9c:f8:e8:a8:e8:97:3b:31:a2:3f: fd:7e:a2:b2:3b:19:9f:52:3a:17:4f:be:ec:ad:ae:6b:da:bf: a8:09:2b:78:ea:71:39:d0:88:79:2b:a5:ac:ee:fe:32:99:a1: 6f:dd:7e:0c:a3:89:fa:e6:4b:60:fa:9f:5b:28:9e:ec:70:59: b0:d4:31:c3:86:8f:09:49:46:1a:8c:59:13:e0:ad:f9:9e:d9: 0b:2c:52:7a:47:b9:ba:78:af:bf:22:18:43:93:41:ff:da:b9: 72:13:98:e8 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBJ9dMLP92ionY4JK9IphEg3sDzcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMjIwMDEzMDE2WhcNMjYwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AzYmM3MmM2NWMzNjM4M2E5NTA5ZjQzNGJiM2Q1Y2E3OGQ3 YmQyYTJjOWMxYWZiYzg2ZDIwODM0OTdmM2I0NmQwMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQR1oVEKxAftt8kfeJ9xWUWo0BRWu1nUpGO6aGT4JaAtyV gyzx5ZdrLGzurEqWBVWt0rXFL3Ru/T7LK7oVSx6taD/M+CD+pXvQOu9rbEO/WWwk chTXAQVkJZqnT5vYI7FoxQHqURmWAvAKdNjZeYNMfdQRyYbve+StUN2o4fcJNPJi aNunxNO8/Xw4avvAGnMXRKQ/qudigdBF3yVSjFxSi79daPa5/chAifqeOImWttn1 UDIZp8KGE0QgPH3fty90R/GAHzuriUTKjdj4LRVMz6DPubBSB61Wz12JOBgO5rrW SWzJTtHhxsiPFetqPxG3i/JT8ifNVmayH7s3YSVTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUvgamAM0EvxMLfxTN/KZEKUk8nyAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzcyMGY0MmM1LTEwMWQtNDFhZi1hYmM4LWJkNjRkNmYwOGZlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDycBEwDQYJKoZIhvcNAQELBQADggEBAJcrEsja1LljBallNtVWK5Xv p1vPqmvl9zQmumfx2XwQKG2WyAV3cf2xCuuCRqC4qEcmfRfrNG3YHk8LN3AeFBku qygBrWpiPrNGSFbCaqCr956Ur6QD6sFOxXhJbuAtiLx3d9BIzcDcjfKtY3Lf4CF5 2jLg6BmbKPc95li732LlpGnMdcKT0fVteJ9F9ZxpOS1MbPsvfxhOnPjoqOiXOzGi P/1+orI7GZ9SOhdPvuytrmvav6gJK3jqcTnQiHkrpazu/jKZoW/dfgyjifrmS2D6 n1sonuxwWbDUMcOGjwlJRhqMWRPgrfme2QssUnpHubp4r78iGEOTQf/auXITmOg= -----END CERTIFICATE-----Generated at Sun Mar 1 21:56:14 2026 by rpki-client