$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/87bafb0d-7cec-4331-8a09-4a4d56abf7d1.roa File: 87bafb0d-7cec-4331-8a09-4a4d56abf7d1.roa (raw, json) Hash identifier: CN6Gjx9ao0+Yf/57uJeoL06cg046CP63+Vf4rMEWfbU= Subject key identifier: E9:62:8F:43:EE:C8:0C:42:0E:81:F6:E9:DF:71:74:AB:46:84:28:41 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 3727BF7C909760E9FC87ECE656AE3F1DF3B2DB85 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/87bafb0d-7cec-4331-8a09-4a4d56abf7d1.roa Signing time: Sat 28 Feb 2026 05:00:08 +0000 ROA not before: Sat 28 Feb 2026 05:00:08 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:e500::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:27:bf:7c:90:97:60:e9:fc:87:ec:e6:56:ae:3f:1d:f3:b2:db:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Feb 28 05:00:08 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=c7d1dc56245ad825bb2f90f7c1a33d947e5a9f750bce415984e51720e514b45f, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a1:90:aa:72:fe:3d:f9:33:5a:76:88:71:2f: c4:c0:e6:5e:77:a2:2d:8e:5c:f5:01:c1:11:04:e5: 18:64:7c:cc:33:f0:90:63:1f:87:45:2d:8d:7f:33: e2:21:10:ab:ce:12:09:99:53:86:a1:f6:cb:42:30: 3b:87:76:c2:99:46:5d:f9:6f:71:a7:e1:ec:58:38: 0f:58:b7:e3:be:7b:47:6b:32:b2:53:51:b3:21:9b: 5b:cb:80:16:72:4c:9d:98:10:b4:6e:0e:8b:06:78: 3d:1e:e0:f6:4a:43:28:42:ce:45:21:e4:46:3f:c2: 63:ae:47:29:60:b8:72:d2:a4:79:bc:e0:32:e8:fe: 26:b5:e1:68:b0:c0:4d:71:d4:1d:d3:6b:61:6f:37: 3c:c0:e1:75:3b:3f:a7:b3:16:2b:4d:7d:10:87:42: a9:d1:f9:03:93:97:80:25:c3:2e:08:1a:53:d1:63: 09:16:be:4e:43:a6:2c:cb:f0:50:18:4d:48:22:09: 47:1a:d4:d1:c0:37:f0:8d:10:7e:6f:15:5d:d4:60: 07:8a:62:a5:63:cd:36:a9:fa:c9:63:50:05:ce:2c: b2:bc:59:66:4f:4f:c0:6f:2f:48:0d:e1:ff:5b:c7: 97:a6:90:09:5f:27:c5:8b:93:d2:f1:24:c6:08:51: 5d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:62:8F:43:EE:C8:0C:42:0E:81:F6:E9:DF:71:74:AB:46:84:28:41 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/87bafb0d-7cec-4331-8a09-4a4d56abf7d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e500::/42 Signature Algorithm: sha256WithRSAEncryption 30:53:32:aa:2c:cc:b5:d8:79:bb:c1:48:d1:62:b9:50:8f:19: 17:c6:97:c7:37:be:fa:49:97:d1:49:1c:b0:59:da:52:ba:63: 3c:1a:39:50:17:f4:1f:16:e4:e6:63:b3:ef:57:98:76:c5:94: 02:85:ee:89:a7:97:bc:8d:3d:05:77:14:14:f4:6a:74:f3:17: b2:12:2d:4b:40:1a:58:b0:ef:ea:a2:c7:7e:c2:ad:8a:59:86: 2b:10:23:57:f1:09:b6:27:5d:1e:e2:5a:6a:c7:bf:dc:5e:47: 1c:77:c1:50:6a:58:de:f7:5a:5c:b9:c6:0e:2c:f2:6d:d5:73: d6:3b:28:d9:e9:2f:73:3f:39:6c:d7:ae:31:46:79:76:ea:c1: ba:b4:f2:c1:00:c8:14:4b:00:52:50:0c:0f:82:29:b5:36:93: 09:59:20:b5:6b:0e:1e:41:3f:5a:e0:1d:d8:43:39:38:e9:31: b6:2e:f4:4c:dc:f0:9d:b8:c4:8c:1d:84:2c:55:f2:67:f6:e5: 15:80:76:ec:a9:b7:d4:b6:71:ed:83:43:5b:f9:d9:76:6f:8d: 5d:b5:fe:7b:f1:2b:73:96:c6:43:d8:a7:b5:e8:0e:83:12:ae: 2a:ec:e2:4c:71:bf:44:d9:a0:18:33:08:19:84:bd:3c:6d:1d: dc:10:86:0c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUNye/fJCXYOn8h+zmVq4/HfOy24UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMjI4MDUwMDA4WhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BjN2QxZGM1NjI0NWFkODI1YmIyZjkwZjdjMWEzM2Q5NDdl NWE5Zjc1MGJjZTQxNTk4NGU1MTcyMGU1MTRiNDVmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgoZCqcv49+TNadohxL8TA5l53oi2OXPUBwREE5RhkfMwz 8JBjH4dFLY1/M+IhEKvOEgmZU4ah9stCMDuHdsKZRl35b3Gn4exYOA9Yt+O+e0dr MrJTUbMhm1vLgBZyTJ2YELRuDosGeD0e4PZKQyhCzkUh5EY/wmOuRylguHLSpHm8 4DLo/ia14WiwwE1x1B3Ta2FvNzzA4XU7P6ezFitNfRCHQqnR+QOTl4Alwy4IGlPR YwkWvk5DpizL8FAYTUgiCUca1NHAN/CNEH5vFV3UYAeKYqVjzTap+sljUAXOLLK8 WWZPT8BvL0gN4f9bx5emkAlfJ8WLk9LxJMYIUV21AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU6WKPQ+7IDEIOgfbp33F0q0aEKEEwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzg3YmFmYjBkLTdjZWMtNDMzMS04YTA5LTRhNGQ1NmFiZjdkMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD75QAwDQYJKoZIhvcNAQELBQADggEBADBTMqoszLXYebvBSNFiuVCP GRfGl8c3vvpJl9FJHLBZ2lK6YzwaOVAX9B8W5OZjs+9XmHbFlAKF7omnl7yNPQV3 FBT0anTzF7ISLUtAGliw7+qix37CrYpZhisQI1fxCbYnXR7iWmrHv9xeRxx3wVBq WN73Wly5xg4s8m3Vc9Y7KNnpL3M/OWzXrjFGeXbqwbq08sEAyBRLAFJQDA+CKbU2 kwlZILVrDh5BP1rgHdhDOTjpMbYu9Ezc8J24xIwdhCxV8mf25RWAduypt9S2ce2D Q1v52XZvjV21/nvxK3OWxkPYp7XoDoMSrirs4kxxv0TZoBgzCBmEvTxtHdwQhgw= -----END CERTIFICATE-----Generated at Sun Mar 1 21:54:32 2026 by rpki-client