$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7dddd7bf-5dfc-4a20-9b8d-dffc023c9850.roa File: 7dddd7bf-5dfc-4a20-9b8d-dffc023c9850.roa (raw, json) Hash identifier: vwbyUjHbzOZ9aRH6N0PeAdtW6HkZCn68rINlpIPQzaY= Subject key identifier: DC:80:E0:CA:CF:4B:A4:0E:4E:E0:DC:9F:FF:2A:E1:77:81:40:AF:A1 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 304DF01DF2537CEC771FE9E87CB288F880842FF4 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7dddd7bf-5dfc-4a20-9b8d-dffc023c9850.roa Signing time: Tue 17 Feb 2026 00:30:15 +0000 ROA not before: Tue 17 Feb 2026 00:30:15 +0000 ROA not after: Mon 18 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:f010::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:4d:f0:1d:f2:53:7c:ec:77:1f:e9:e8:7c:b2:88:f8:80:84:2f:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Feb 17 00:30:15 2026 GMT Not After : May 18 23:59:59 2026 GMT Subject: serialNumber=de654729a81f21dcfbc30ae905c12bcbd03f33efe069e41f7bac5f392153fe1b, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cc:5f:fe:04:12:ce:a9:68:4a:56:82:37:4e: e3:23:42:c9:2f:64:42:87:53:bc:4b:5d:e4:32:c8: c8:07:ea:00:0a:9f:3f:70:1f:d6:00:ef:66:df:08: 2c:dc:5b:46:b2:b7:0a:ad:27:ed:9f:04:c7:46:20: c4:09:6d:d8:ad:77:5a:d6:b1:50:1e:87:cf:c5:43: 4b:dc:0d:14:fb:5e:3e:38:a0:ca:90:4c:ca:0e:38: be:f1:4e:23:0e:0a:a4:d9:1f:3c:0a:89:9a:f4:8b: 37:6d:f8:4e:47:47:46:51:6b:49:b1:41:fb:3c:b6: 05:5c:e9:b3:dd:7b:4a:4f:97:e9:70:18:af:50:44: 3b:6e:96:88:6a:db:94:dc:e7:36:91:2d:4c:31:9c: bb:2b:a0:4f:64:14:03:6b:7e:e3:74:13:fb:93:16: 6b:83:90:88:cf:6a:c0:9b:d4:39:71:2d:33:02:d0: 01:4c:b0:97:b0:5c:de:ac:e6:5e:d2:e9:55:1b:ad: a9:bb:43:56:8f:05:0c:e5:aa:c5:11:e6:ef:fd:0c: b1:d7:c8:b8:0a:e6:52:68:0d:be:f3:4a:9d:bf:21: 63:91:c3:2b:69:67:e0:94:f1:98:2f:f4:2a:12:a4: 90:5d:63:ce:e8:01:95:2b:28:6a:34:37:5f:9d:06: f9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:80:E0:CA:CF:4B:A4:0E:4E:E0:DC:9F:FF:2A:E1:77:81:40:AF:A1 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7dddd7bf-5dfc-4a20-9b8d-dffc023c9850.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f010::/44 Signature Algorithm: sha256WithRSAEncryption 7e:e9:14:82:07:31:f0:13:07:75:43:e2:33:cd:91:53:cd:28: b7:71:86:a6:02:55:07:e6:9a:14:11:49:af:8a:c4:bd:16:c3: 20:5a:c0:48:88:10:0c:d7:e7:01:78:88:98:74:c5:10:1b:32: ce:0d:28:ee:d2:2a:7e:70:30:a9:0a:ae:c2:90:3b:13:33:9c: f6:32:ff:bb:88:21:30:c1:05:94:22:d2:ab:7a:9e:d9:0e:4f: aa:e4:08:64:6d:9e:a5:7d:bd:a2:f8:79:ea:9e:4f:0e:5f:9f: 9c:44:40:ce:8a:48:68:8d:7d:36:c4:5e:43:d2:39:fa:c4:14: d4:1b:58:1e:68:e7:6d:21:db:d2:df:54:35:48:f4:83:0e:5e: 6c:8c:93:51:02:d2:b8:fd:73:b6:ce:1b:f5:c2:41:3e:24:da: f0:53:20:9e:7c:e2:df:be:02:49:4d:b3:ed:4a:34:79:04:c1: 05:b5:54:42:f4:90:c0:c3:d8:de:6e:42:a1:dd:c4:2d:99:ea: 31:94:1b:82:59:03:85:b0:3b:13:67:0b:07:a2:04:45:32:5a: 0e:42:ba:d1:d0:fc:73:2e:a2:c5:86:46:9b:12:21:c2:45:14: ec:a3:3d:84:29:4f:6a:23:9f:7b:f1:2c:5a:ac:3e:d8:e0:04: 30:d6:30:1f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUME3wHfJTfOx3H+nofLKI+ICEL/QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMjE3MDAzMDE1WhcNMjYwNTE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZTY1NDcyOWE4MWYyMWRjZmJjMzBhZTkwNWMxMmJjYmQw M2YzM2VmZTA2OWU0MWY3YmFjNWYzOTIxNTNmZTFiMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1zF/+BBLOqWhKVoI3TuMjQskvZEKHU7xLXeQyyMgH6gAK nz9wH9YA72bfCCzcW0aytwqtJ+2fBMdGIMQJbditd1rWsVAeh8/FQ0vcDRT7Xj44 oMqQTMoOOL7xTiMOCqTZHzwKiZr0izdt+E5HR0ZRa0mxQfs8tgVc6bPde0pPl+lw GK9QRDtulohq25Tc5zaRLUwxnLsroE9kFANrfuN0E/uTFmuDkIjPasCb1DlxLTMC 0AFMsJewXN6s5l7S6VUbram7Q1aPBQzlqsUR5u/9DLHXyLgK5lJoDb7zSp2/IWOR wytpZ+CU8Zgv9CoSpJBdY87oAZUrKGo0N1+dBvlJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU3IDgys9LpA5O4Nyf/yrhd4FAr6EwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzdkZGRkN2JmLTVkZmMtNGEyMC05YjhkLWRmZmMwMjNjOTg1MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPD78BAwDQYJKoZIhvcNAQELBQADggEBAH7pFIIHMfATB3VD4jPNkVPN KLdxhqYCVQfmmhQRSa+KxL0WwyBawEiIEAzX5wF4iJh0xRAbMs4NKO7SKn5wMKkK rsKQOxMznPYy/7uIITDBBZQi0qt6ntkOT6rkCGRtnqV9vaL4eeqeTw5fn5xEQM6K SGiNfTbEXkPSOfrEFNQbWB5o520h29LfVDVI9IMOXmyMk1EC0rj9c7bOG/XCQT4k 2vBTIJ584t++AklNs+1KNHkEwQW1VEL0kMDD2N5uQqHdxC2Z6jGUG4JZA4WwOxNn CweiBEUyWg5CutHQ/HMuosWGRpsSIcJFFOyjPYQpT2ojn3vxLFqsPtjgBDDWMB8= -----END CERTIFICATE-----Generated at Sun Mar 1 23:47:39 2026 by rpki-client