$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/74ecd40c-8365-49b4-a27b-066578cec1cc.roa File: 74ecd40c-8365-49b4-a27b-066578cec1cc.roa (raw, json) Hash identifier: 7jd13fEA/DiF3cKC3JzPVSoWSsAzHm+sY40BbbiA6II= Subject key identifier: B8:62:E8:47:F8:4F:0C:A1:47:07:AD:1D:78:DB:D8:17:4B:D2:C4:15 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 320B2DBADC179B1040CBD225EF09705BE9F908B2 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/74ecd40c-8365-49b4-a27b-066578cec1cc.roa Signing time: Sun 01 Mar 2026 00:50:27 +0000 ROA not before: Sun 01 Mar 2026 00:50:27 +0000 ROA not after: Sat 30 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:f10c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:0b:2d:ba:dc:17:9b:10:40:cb:d2:25:ef:09:70:5b:e9:f9:08:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Mar 1 00:50:27 2026 GMT Not After : May 30 23:59:59 2026 GMT Subject: serialNumber=07ad0f348b8221c6166799d63e3e3e2227893a18b72c88828b326a4c09bca59f, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:89:ff:1d:aa:a1:22:db:c8:7a:da:07:7f:c8: 86:eb:4d:f0:53:c1:af:9c:ea:cd:c3:71:cc:91:45: 08:8e:1f:2d:1f:ba:9c:fc:4e:59:3b:23:a0:0e:2c: a8:90:19:e0:b8:83:3c:f5:31:64:a1:5b:39:ff:f6: dd:2c:40:09:8f:8c:3b:e0:65:c3:a8:5f:e8:b1:2b: af:5c:09:aa:10:80:25:0b:88:88:23:5c:0e:c1:5f: 97:93:9c:d2:a7:cc:d4:3e:89:3a:62:fa:cd:78:86: 96:06:7e:fa:f3:08:34:52:bd:28:0a:44:b0:42:37: 8e:49:b6:57:a7:7b:b2:d4:21:71:68:39:91:50:23: c8:12:11:63:8a:6c:e9:50:bc:90:01:4a:1c:30:d2: ad:c4:4c:99:ee:99:11:f7:df:80:16:b2:fa:5c:20: 83:a9:97:dc:db:35:07:31:50:ad:d1:21:22:a0:be: 0b:03:84:ba:77:b0:de:be:4b:b4:b5:f2:28:d5:e3: 60:d3:e9:82:49:e6:d8:ef:0e:5d:00:57:ad:34:1e: 26:de:a2:be:a4:af:7f:65:ef:c3:f1:d5:ce:82:b5: d3:9f:28:63:4f:8d:c0:27:08:2f:db:6e:c4:52:d7: 90:1f:ed:1c:5c:c0:5b:5f:b6:fd:12:64:a5:4e:86: 5a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:62:E8:47:F8:4F:0C:A1:47:07:AD:1D:78:DB:D8:17:4B:D2:C4:15 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/74ecd40c-8365-49b4-a27b-066578cec1cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f10c::/48 Signature Algorithm: sha256WithRSAEncryption 71:9c:4c:f0:8d:5b:85:c2:75:5e:6f:39:0d:c5:28:f8:e3:5c: 71:21:37:c5:cf:f6:fa:c0:27:62:b9:51:b3:07:26:20:02:1d: 57:5c:db:ea:c1:13:6c:31:6e:ad:b5:01:1f:41:74:e9:0f:a0: 6a:bf:db:1b:21:f5:12:25:5c:3e:8a:34:56:86:45:81:64:7d: 72:48:c9:17:7a:d3:a0:bc:d2:8c:ec:cd:63:f5:9b:13:f4:29: b1:c1:b9:ea:30:8d:ad:97:b4:0c:66:84:07:de:2e:e6:60:a8: 22:19:93:c1:c3:65:2c:7e:9b:43:68:7d:e9:05:8e:f7:45:b4: 4d:a9:0a:a8:2b:b4:61:c4:89:98:d0:c7:7d:42:b4:3b:30:67: bf:30:a4:f1:7e:35:73:6e:64:8c:d6:82:74:70:f5:1f:78:5f: 19:99:91:98:6a:35:f2:fc:1c:73:a6:d4:b7:b0:14:7d:43:85: be:3b:70:5a:3f:d0:ec:e6:d4:3f:d6:57:7c:29:00:27:98:65: f4:5f:84:83:48:76:2a:9b:25:2b:b3:2e:61:94:87:81:ef:96: c5:13:75:0b:87:78:bc:50:79:9d:3c:90:80:2f:ea:87:2f:b7: a6:37:8c:95:20:d6:42:9d:01:ff:ab:8f:50:05:ee:63:1c:8a: ea:7f:17:1f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMgstutwXmxBAy9Il7wlwW+n5CLIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMzAxMDA1MDI3WhcNMjYwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwN2FkMGYzNDhiODIyMWM2MTY2Nzk5ZDYzZTNlM2UyMjI3 ODkzYTE4YjcyYzg4ODI4YjMyNmE0YzA5YmNhNTlmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCTif8dqqEi28h62gd/yIbrTfBTwa+c6s3DccyRRQiOHy0f upz8Tlk7I6AOLKiQGeC4gzz1MWShWzn/9t0sQAmPjDvgZcOoX+ixK69cCaoQgCUL iIgjXA7BX5eTnNKnzNQ+iTpi+s14hpYGfvrzCDRSvSgKRLBCN45Jtlene7LUIXFo OZFQI8gSEWOKbOlQvJABShww0q3ETJnumRH334AWsvpcIIOpl9zbNQcxUK3RISKg vgsDhLp3sN6+S7S18ijV42DT6YJJ5tjvDl0AV600Hibeor6kr39l78Px1c6CtdOf KGNPjcAnCC/bbsRS15Af7RxcwFtftv0SZKVOhlpVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUuGLoR/hPDKFHB60deNvYF0vSxBUwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzc0ZWNkNDBjLTgzNjUtNDliNC1hMjdiLTA2NjU3OGNlYzFjYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QwwDQYJKoZIhvcNAQELBQADggEBAHGcTPCNW4XCdV5vOQ3FKPjj XHEhN8XP9vrAJ2K5UbMHJiACHVdc2+rBE2wxbq21AR9BdOkPoGq/2xsh9RIlXD6K NFaGRYFkfXJIyRd606C80ozszWP1mxP0KbHBueowja2XtAxmhAfeLuZgqCIZk8HD ZSx+m0NofekFjvdFtE2pCqgrtGHEiZjQx31CtDswZ78wpPF+NXNuZIzWgnRw9R94 XxmZkZhqNfL8HHOm1LewFH1Dhb47cFo/0Ozm1D/WV3wpACeYZfRfhINIdiqbJSuz LmGUh4HvlsUTdQuHeLxQeZ08kIAv6ocvt6Y3jJUg1kKdAf+rj1AF7mMciup/Fx8= -----END CERTIFICATE-----Generated at Sun Mar 1 22:18:10 2026 by rpki-client