$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8472ecf5-5d3d-4e46-b699-e29644b42fa4.roa File: 8472ecf5-5d3d-4e46-b699-e29644b42fa4.roa (raw, json) Hash identifier: r2PI+X0kS2cdEYB0+aChQwJuIjDzIlDpYQQi2hJOimE= Subject key identifier: 36:E6:F8:6B:C4:DD:7D:B3:2B:A8:92:42:82:C5:BD:5E:F6:C9:83:D9 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 1693434938D9095C0AE879803488FABFB2A82A82 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8472ecf5-5d3d-4e46-b699-e29644b42fa4.roa Signing time: Sat 28 Feb 2026 05:00:46 +0000 ROA not before: Sat 28 Feb 2026 05:00:46 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:93:43:49:38:d9:09:5c:0a:e8:79:80:34:88:fa:bf:b2:a8:2a:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Feb 28 05:00:46 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=8bb5da2bf01a99a82abf791f2b0fc13e9a66d7b3c56d7e73a60932d075205194, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ee:0f:c7:c3:0e:16:e3:d0:77:12:26:a6:e0: 33:81:bd:01:a6:1c:a8:74:d3:53:9d:8f:6f:ac:71: 49:b7:e9:59:fa:e3:1c:e8:34:93:37:40:77:46:60: e2:79:f0:4e:15:e0:e1:8b:16:44:c0:b9:a3:7a:6e: 06:ad:51:04:21:cf:8a:4a:18:81:3f:cc:bc:c0:93: cd:88:e9:bf:e3:37:60:81:26:8e:c3:9f:61:ea:ff: 84:5e:16:0a:60:5f:20:9a:2f:4a:a9:28:87:b7:8d: 86:77:61:cc:39:40:90:bc:34:e6:ee:4c:6f:de:ce: 67:76:50:79:cd:7b:8a:52:aa:03:f0:c0:1b:70:3f: 51:b1:92:05:a6:d4:c0:20:8b:4e:c6:d3:df:9c:7f: 5b:9a:0a:81:94:b2:da:49:ed:45:22:ea:1f:fe:e6: a2:7a:3f:8a:fd:97:fb:41:a7:8c:60:9f:c6:4b:b5: 96:d9:80:9a:5d:e1:4e:70:89:9f:37:3d:0e:a2:c0: 8c:bb:01:6d:c8:a8:45:47:8e:93:7e:fd:d4:5b:49: b8:87:bf:cf:9a:0f:70:85:57:b4:fd:dc:68:9a:b6: 95:04:bd:3a:cf:1c:7f:0f:c0:ff:f2:63:c1:ca:6e: 6c:d7:c5:6d:4a:d1:85:69:7b:1a:66:d7:ff:7b:61: 71:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:E6:F8:6B:C4:DD:7D:B3:2B:A8:92:42:82:C5:BD:5E:F6:C9:83:D9 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8472ecf5-5d3d-4e46-b699-e29644b42fa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6::/48 Signature Algorithm: sha256WithRSAEncryption 80:aa:f1:44:48:b4:b4:8a:b3:80:02:0b:02:e6:9e:5b:4a:93: b0:96:01:9f:08:7c:15:e1:4a:41:53:02:d3:9b:13:74:68:96: b0:3a:ce:15:92:23:f7:34:7f:ee:42:aa:2e:53:41:c3:fe:22: 43:e3:07:28:9e:c0:10:46:ba:5d:93:13:bc:76:28:a3:d3:9f: c0:0a:77:78:ca:00:3c:0d:9f:80:42:7f:f7:18:04:27:83:f1: a7:72:c7:6e:9f:d0:da:6a:89:0f:e4:08:9b:8f:09:14:59:4c: 53:30:53:d4:bc:97:57:98:9a:43:7b:ca:2f:60:c9:f2:16:f9: e2:c9:b6:6e:59:49:93:2d:1c:46:52:21:fb:f1:46:7c:d7:29: 7d:9a:c3:34:ad:12:34:7e:c7:b3:aa:2c:30:22:b2:9b:e4:eb: fe:7c:82:22:4e:1f:fc:31:1a:0e:07:cf:de:89:7a:29:93:b5: e2:45:b3:13:4a:a6:33:2d:61:e5:94:78:c2:ed:35:84:2c:e6: f2:67:a3:3a:34:c0:64:fb:50:e1:7b:d8:c5:59:c4:62:94:61: b7:6a:09:b9:9c:91:1c:ee:a6:1d:44:31:9a:a6:78:72:e7:5b: 4f:25:5d:ff:26:fa:ff:e3:1c:f1:b9:f8:2d:78:08:12:f4:5a: 4f:6f:be:31 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUFpNDSTjZCVwK6HmANIj6v7KoKoIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMjI4MDUwMDQ2WhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A4YmI1ZGEyYmYwMWE5OWE4MmFiZjc5MWYyYjBmYzEzZTlh NjZkN2IzYzU2ZDdlNzNhNjA5MzJkMDc1MjA1MTk0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDA7g/Hww4W49B3Eiam4DOBvQGmHKh001Odj2+scUm36Vn6 4xzoNJM3QHdGYOJ58E4V4OGLFkTAuaN6bgatUQQhz4pKGIE/zLzAk82I6b/jN2CB Jo7Dn2Hq/4ReFgpgXyCaL0qpKIe3jYZ3Ycw5QJC8NObuTG/ezmd2UHnNe4pSqgPw wBtwP1GxkgWm1MAgi07G09+cf1uaCoGUstpJ7UUi6h/+5qJ6P4r9l/tBp4xgn8ZL tZbZgJpd4U5wiZ83PQ6iwIy7AW3IqEVHjpN+/dRbSbiHv8+aD3CFV7T93GiatpUE vTrPHH8PwP/yY8HKbmzXxW1K0YVpexpm1/97YXGBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUNub4a8TdfbMrqJJCgsW9XvbJg9kwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzg0NzJlY2Y1LTVkM2QtNGU0Ni1iNjk5LWUyOTY0NGI0MmZhNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwAAYwDQYJKoZIhvcNAQELBQADggEBAICq8URItLSKs4ACCwLmnltK k7CWAZ8IfBXhSkFTAtObE3RolrA6zhWSI/c0f+5Cqi5TQcP+IkPjByiewBBGul2T E7x2KKPTn8AKd3jKADwNn4BCf/cYBCeD8adyx26f0NpqiQ/kCJuPCRRZTFMwU9S8 l1eYmkN7yi9gyfIW+eLJtm5ZSZMtHEZSIfvxRnzXKX2awzStEjR+x7OqLDAispvk 6/58giJOH/wxGg4Hz96JeimTteJFsxNKpjMtYeWUeMLtNYQs5vJnozo0wGT7UOF7 2MVZxGKUYbdqCbmckRzuph1EMZqmeHLnW08lXf8m+v/jHPG5+C14CBL0Wk9vvjE= -----END CERTIFICATE-----Generated at Sun Mar 1 23:37:08 2026 by rpki-client