$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/83f507f9-6df5-4947-842f-b89f2709cc4a.roa File: 83f507f9-6df5-4947-842f-b89f2709cc4a.roa (raw, json) Hash identifier: +mxz7mu4nAXNIRQXDz2rUCkQpBu4VPsXoZoSt3Yy+qw= Subject key identifier: 99:0F:4B:1E:55:B8:F6:91:F3:14:70:6E:AF:FB:87:F6:68:B8:B3:75 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 030C9BA34D1900CB683010A5D41163B4E082693B Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/83f507f9-6df5-4947-842f-b89f2709cc4a.roa Signing time: Sat 28 Feb 2026 04:50:07 +0000 ROA not before: Sat 28 Feb 2026 04:50:07 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:ef00::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:0c:9b:a3:4d:19:00:cb:68:30:10:a5:d4:11:63:b4:e0:82:69:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Feb 28 04:50:07 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=e3b55ad4fe3450232e19e827f654e6e137da8ae968bc9ed51b5e1a6a3816c8de, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bb:46:d6:e2:da:bb:8c:dd:35:50:8a:57:3c: fc:09:e4:e2:d8:46:fa:00:37:0d:42:f5:b4:d1:15: f1:74:93:49:c1:c1:30:21:20:b2:5c:79:26:60:37: 84:85:8c:3d:40:ba:6c:a6:ce:16:d2:28:c9:2b:63: fb:27:f5:e9:ac:c1:a5:bc:ff:84:ae:d5:71:41:11: 05:1e:e4:16:bf:16:ca:e0:96:40:06:d0:87:56:7e: 8a:42:81:fd:d2:b6:72:fa:97:c6:5a:7e:1e:6f:12: 9d:c9:23:c0:23:69:84:db:c9:fd:09:55:c3:8f:c4: d9:5d:6a:d0:49:b9:3c:c7:39:29:bf:8a:b1:95:8e: f6:db:7d:63:a6:24:54:c6:3f:f3:f8:92:10:1b:12: d0:ab:19:25:19:bc:4b:fa:45:0f:aa:34:a6:fa:b9: 8e:38:63:c4:ad:3e:ac:b7:f2:f4:9c:a9:70:e7:8c: c6:70:84:6b:cc:7a:5f:64:60:5a:7f:8b:62:83:c9: 1a:78:33:84:1b:7f:4d:67:af:0c:a6:28:38:82:1c: f8:e3:6c:9d:04:8c:20:ed:d7:33:d7:7f:4f:8f:7a: ac:e5:d4:01:61:68:38:ad:74:72:bb:99:8f:52:4e: 72:94:16:66:5d:05:be:5d:f8:63:fa:21:a0:72:09: a1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:0F:4B:1E:55:B8:F6:91:F3:14:70:6E:AF:FB:87:F6:68:B8:B3:75 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/83f507f9-6df5-4947-842f-b89f2709cc4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:ef00::/42 Signature Algorithm: sha256WithRSAEncryption 66:a7:d9:21:e0:e5:5e:77:af:33:6d:8f:65:45:e6:5e:d3:7c: e5:3b:2f:c9:e2:d8:08:7f:9d:d1:42:99:a0:6d:72:fb:3e:62: 70:f9:5a:59:39:ad:9c:6d:6d:4c:6f:15:4a:bf:2b:9c:d9:1a: cd:ca:6a:63:ec:a6:5b:b4:21:f4:8e:07:75:ba:8e:e8:c7:bb: 5f:bd:c4:e6:bc:06:ef:3b:09:69:3a:ee:14:a3:4d:4b:03:d1: 73:89:91:b0:35:78:b9:67:3f:e0:bc:78:21:eb:05:dc:91:9e: 44:40:6e:8a:c7:d8:f4:57:3b:99:3c:ed:49:f0:f9:59:12:60: 87:50:89:7f:6e:dc:aa:26:12:93:88:5a:89:62:04:69:65:06: 65:5e:71:e5:59:1b:f9:7f:c7:60:3f:5f:e0:60:74:1f:0c:fb: 97:2b:44:f1:0b:65:ae:91:ce:28:fb:9b:85:cc:88:af:80:d8: ae:05:36:2d:bb:d6:8e:d2:4e:e8:49:ac:81:c7:66:4a:56:0f: 25:c2:2a:e4:b9:e2:79:43:47:49:57:3a:cb:85:dd:78:9e:8a: c2:c9:26:04:cd:c5:7f:d5:f1:49:d7:ce:b5:93:6e:b3:0a:03: 69:a3:d4:4b:c4:dd:d6:cc:33:5c:ed:6b:c4:91:3e:e3:b8:66: bd:7e:72:88 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUAwybo00ZAMtoMBCl1BFjtOCCaTswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMjI4MDQ1MDA3WhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlM2I1NWFkNGZlMzQ1MDIzMmUxOWU4MjdmNjU0ZTZlMTM3 ZGE4YWU5NjhiYzllZDUxYjVlMWE2YTM4MTZjOGRlMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvu0bW4tq7jN01UIpXPPwJ5OLYRvoANw1C9bTRFfF0k0nB wTAhILJceSZgN4SFjD1AumymzhbSKMkrY/sn9emswaW8/4Su1XFBEQUe5Ba/Fsrg lkAG0IdWfopCgf3StnL6l8Zafh5vEp3JI8AjaYTbyf0JVcOPxNldatBJuTzHOSm/ irGVjvbbfWOmJFTGP/P4khAbEtCrGSUZvEv6RQ+qNKb6uY44Y8StPqy38vScqXDn jMZwhGvMel9kYFp/i2KDyRp4M4Qbf01nrwymKDiCHPjjbJ0EjCDt1zPXf0+Peqzl 1AFhaDitdHK7mY9STnKUFmZdBb5d+GP6IaByCaEHAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUmQ9LHlW49pHzFHBur/uH9mi4s3UwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzgzZjUwN2Y5LTZkZjUtNDk0Ny04NDJmLWI4OWYyNzA5Y2M0YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD77wAwDQYJKoZIhvcNAQELBQADggEBAGan2SHg5V53rzNtj2VF5l7T fOU7L8ni2Ah/ndFCmaBtcvs+YnD5Wlk5rZxtbUxvFUq/K5zZGs3KamPsplu0IfSO B3W6jujHu1+9xOa8Bu87CWk67hSjTUsD0XOJkbA1eLlnP+C8eCHrBdyRnkRAborH 2PRXO5k87Unw+VkSYIdQiX9u3KomEpOIWoliBGllBmVeceVZG/l/x2A/X+BgdB8M +5crRPELZa6Rzij7m4XMiK+A2K4FNi271o7STuhJrIHHZkpWDyXCKuS54nlDR0lX OsuF3XieisLJJgTNxX/V8UnXzrWTbrMKA2mj1EvE3dbMM1zta8SRPuO4Zr1+cog= -----END CERTIFICATE-----Generated at Sun Mar 1 22:12:17 2026 by rpki-client