$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/88a5dee6-8e6a-4e36-826a-c664471dad1e.roa File: 88a5dee6-8e6a-4e36-826a-c664471dad1e.roa (raw, json) Hash identifier: g/rQ2C2e7IMMhtczRmcPWcftK1pnvyqFiqc9cjfmR+I= Subject key identifier: F6:8B:9A:36:86:1F:98:5D:7F:82:0C:FF:5B:77:14:F0:EB:20:0A:93 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 031FB368EFF55693E43C8C665800318594CB9440 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/88a5dee6-8e6a-4e36-826a-c664471dad1e.roa Signing time: Sun 01 Mar 2026 00:50:25 +0000 ROA not before: Sun 01 Mar 2026 00:50:25 +0000 ROA not after: Sat 30 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:1f:b3:68:ef:f5:56:93:e4:3c:8c:66:58:00:31:85:94:cb:94:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Mar 1 00:50:25 2026 GMT Not After : May 30 23:59:59 2026 GMT Subject: serialNumber=cf0105a52f5996dc151d58ca35efa3c17c81da9f3b96272a88400dd81d889f46, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:bb:bd:6a:3c:89:6d:41:f8:8e:7b:cf:fc:bd: e9:83:40:4f:d5:6b:72:89:3f:c0:6f:fb:1b:85:26: 07:85:58:24:7f:55:a4:05:c1:9c:d5:a3:fc:13:42: eb:17:d8:f5:aa:c5:2b:37:b7:5f:7c:e7:01:f0:90: d4:30:c1:68:e0:6e:50:78:1e:32:c0:84:b8:b9:d4: df:91:6c:44:6a:75:97:da:81:91:61:bd:89:6b:f3: 3b:d0:cd:bd:2f:37:63:76:75:12:31:74:47:04:29: 30:5e:ba:84:c9:b5:60:f0:dd:ed:eb:55:a5:72:46: 62:3f:fb:e6:d5:53:58:b8:dd:ba:a8:fb:63:d9:22: 89:2c:dd:c1:05:13:02:ad:33:f8:64:c6:b1:75:d8: c0:25:1b:31:e0:20:1f:8f:a4:07:3b:83:d5:8f:6f: f6:9b:18:0e:3d:36:5d:16:28:26:d7:55:e4:21:07: 25:39:dc:1f:d4:62:cf:36:4e:02:6a:5e:02:28:52: 2f:de:7d:32:57:70:cd:e9:dc:f9:81:06:7d:1f:6b: 3e:a6:2c:f7:f7:cc:16:06:72:01:a2:df:fd:cc:f0: 99:d7:cd:dd:d2:85:b3:65:a6:e6:c9:b4:bb:db:04: 0d:ba:72:41:df:a7:4f:05:b4:b1:f0:ef:0f:d2:df: 66:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:8B:9A:36:86:1F:98:5D:7F:82:0C:FF:5B:77:14:F0:EB:20:0A:93 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/88a5dee6-8e6a-4e36-826a-c664471dad1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:c000::/40 Signature Algorithm: sha256WithRSAEncryption 3c:66:9e:57:64:85:52:1a:e3:f6:47:16:aa:2f:3d:f6:42:25: 7c:4d:7c:a1:15:f7:22:96:58:fa:81:4a:e4:cb:3d:8c:78:3c: 6a:58:04:9b:d5:25:f6:32:2a:2b:9e:f5:26:02:2d:13:e8:74: c7:d2:ec:3f:b3:3e:57:96:8e:df:41:62:66:20:20:77:e9:f3: f0:9b:90:e7:da:89:4c:ae:37:59:39:c6:39:13:af:3c:d6:1e: ef:78:bd:77:99:fc:42:de:8a:8c:22:32:b6:16:13:0c:96:37: c3:df:2f:2f:a3:84:e7:c8:26:f8:62:0e:c3:07:25:58:ad:9f: d6:78:a2:75:09:16:26:9f:5c:e8:b6:67:65:27:55:c7:f9:c9: 0e:f0:dd:00:9e:20:35:dc:17:9e:c6:9d:b1:d2:43:e3:42:92: dd:59:a8:96:bb:48:b2:13:a7:24:49:84:c5:5a:ac:4e:a3:d6: 55:87:9c:dc:9a:ee:1f:48:65:32:54:95:2b:18:72:42:37:db: 8e:c5:db:c1:d5:5d:7c:08:30:1d:73:ff:65:0d:5a:e7:fd:10: 1e:76:c2:8f:ee:23:36:24:5a:7e:1c:0c:b9:c7:d9:91:4e:63: 27:00:f4:ae:fe:46:12:6e:0f:30:f5:2f:d5:ac:55:07:db:aa: 09:b6:85:61 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUAx+zaO/1VpPkPIxmWAAxhZTLlEAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMzAxMDA1MDI1WhcNMjYwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjZjAxMDVhNTJmNTk5NmRjMTUxZDU4Y2EzNWVmYTNjMTdj ODFkYTlmM2I5NjI3MmE4ODQwMGRkODFkODg5ZjQ2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDnu71qPIltQfiOe8/8vemDQE/Va3KJP8Bv+xuFJgeFWCR/ VaQFwZzVo/wTQusX2PWqxSs3t1985wHwkNQwwWjgblB4HjLAhLi51N+RbERqdZfa gZFhvYlr8zvQzb0vN2N2dRIxdEcEKTBeuoTJtWDw3e3rVaVyRmI/++bVU1i43bqo +2PZIoks3cEFEwKtM/hkxrF12MAlGzHgIB+PpAc7g9WPb/abGA49Nl0WKCbXVeQh ByU53B/UYs82TgJqXgIoUi/efTJXcM3p3PmBBn0faz6mLPf3zBYGcgGi3/3M8JnX zd3ShbNlpubJtLvbBA26ckHfp08FtLHw7w/S32bjAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU9ouaNoYfmF1/ggz/W3cU8OsgCpMwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzg4YTVkZWU2LThlNmEtNGUzNi04MjZhLWM2NjQ0NzFkYWQxZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDwwDANBgkqhkiG9w0BAQsFAAOCAQEAPGaeV2SFUhrj9kcWqi899kIl fE18oRX3IpZY+oFK5Ms9jHg8algEm9Ul9jIqK571JgItE+h0x9LsP7M+V5aO30Fi ZiAgd+nz8JuQ59qJTK43WTnGOROvPNYe73i9d5n8Qt6KjCIythYTDJY3w98vL6OE 58gm+GIOwwclWK2f1niidQkWJp9c6LZnZSdVx/nJDvDdAJ4gNdwXnsadsdJD40KS 3VmolrtIshOnJEmExVqsTqPWVYec3JruH0hlMlSVKxhyQjfbjsXbwdVdfAgwHXP/ ZQ1a5/0QHnbCj+4jNiRafhwMucfZkU5jJwD0rv5GEm4PMPUv1axVB9uqCbaFYQ== -----END CERTIFICATE-----Generated at Sun Mar 1 22:01:50 2026 by rpki-client