$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8dfc4066-fbb3-4c80-b6d3-9ea1f4719c81.roa File: 8dfc4066-fbb3-4c80-b6d3-9ea1f4719c81.roa (raw, json) Hash identifier: RIZHnZJnlQ67M2oRHXoVHcH3empZFQ/+H0iVSAQh6Ec= Subject key identifier: 80:5A:A7:6C:A2:4C:51:54:15:DD:82:B8:D5:D6:8C:6E:FD:50:95:67 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 0F8F3D9BB6ED5CFA7E91B83D52F1D7EBF571A991 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8dfc4066-fbb3-4c80-b6d3-9ea1f4719c81.roa Signing time: Tue 17 Feb 2026 00:30:13 +0000 ROA not before: Tue 17 Feb 2026 00:30:13 +0000 ROA not after: Mon 18 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:8f:3d:9b:b6:ed:5c:fa:7e:91:b8:3d:52:f1:d7:eb:f5:71:a9:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Feb 17 00:30:13 2026 GMT Not After : May 18 23:59:59 2026 GMT Subject: serialNumber=32d52316c05d5896f2e1f788727094752831dfd13d600a055f1b40abc85779f7, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:67:45:4d:b8:d8:18:0e:bd:61:ef:4e:72:60: 0b:87:7f:84:cf:5a:ce:10:ff:05:df:7e:00:cf:37: 78:4f:a5:22:d6:25:13:d7:c7:d6:93:e9:f5:f1:3c: 60:65:ff:19:73:32:d8:74:2b:04:cd:53:db:84:ba: 99:af:8c:73:cc:f8:b1:9f:37:a0:41:02:28:90:d7: 85:88:91:94:70:ee:1a:db:e6:0b:03:ec:28:de:9b: 49:71:73:5d:71:34:0e:5a:a7:55:76:c0:1d:80:5d: ef:94:2f:de:c2:67:71:94:d5:1b:a7:a6:1d:fe:6a: f0:46:99:96:67:49:91:6a:6d:00:bf:1e:4d:3a:92: c4:6e:86:c9:e0:3c:f5:75:2a:2b:ba:01:1e:b6:78: 75:35:4d:2c:a0:52:86:69:62:da:61:5d:e4:5d:e1: 89:db:26:8c:80:03:35:39:00:21:47:97:1a:ec:88: c3:16:a1:4b:4a:4c:00:da:fc:5a:39:35:33:92:1e: d6:b3:d5:d8:e8:60:f2:ed:f5:3f:5f:6b:fd:a8:6f: 2f:e0:b8:8b:c2:89:d3:6f:ed:23:49:e7:b3:76:fb: 28:83:01:75:12:e7:cc:de:90:68:51:ef:c5:c9:43: 2e:18:a4:89:91:0a:4a:3c:7a:8c:93:fd:80:b5:41: 13:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:5A:A7:6C:A2:4C:51:54:15:DD:82:B8:D5:D6:8C:6E:FD:50:95:67 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8dfc4066-fbb3-4c80-b6d3-9ea1f4719c81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6122::/48 Signature Algorithm: sha256WithRSAEncryption 38:69:9b:05:75:fc:d2:74:d0:fb:5d:81:d2:04:d2:5b:85:c3: 89:3f:4a:ee:bb:1b:70:cf:5a:b8:be:9e:09:79:be:e0:0b:df: a7:10:c8:2d:39:ba:39:8c:d3:5c:85:3e:43:94:3f:4e:89:49: 1e:86:90:cf:47:2e:39:35:65:71:b5:6d:e4:65:db:cd:2e:38: f5:f5:cd:0b:eb:2c:d5:1c:c6:e4:b2:69:4f:94:1e:2b:77:d9: e2:c4:1e:1c:41:db:aa:57:3c:29:9d:22:52:98:cf:22:d6:5e: bf:95:a3:d2:3e:aa:ac:a0:79:dd:c3:f3:e2:97:18:02:a6:77: ab:71:0f:2e:65:b6:89:62:b7:2e:70:57:ec:66:ba:62:54:17: 62:52:11:63:ff:77:59:56:da:50:e0:8d:af:79:78:ca:1b:5d: 2b:ef:d6:12:42:5b:43:59:64:09:e5:28:cb:b2:23:0e:b7:1b: de:f8:93:ff:1a:1c:ae:fc:cb:68:73:6e:09:9b:87:dc:69:14: 4e:77:87:64:cd:0b:b2:bf:e8:80:95:dd:a1:33:61:78:27:58: 13:65:d7:2d:be:32:fd:3c:14:86:05:db:7e:a9:7f:58:4d:c4: fb:43:bc:b0:4c:4b:a8:89:5f:24:ac:bf:1e:87:a5:12:16:4d: a4:c9:82:8d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUD489m7btXPp+kbg9UvHX6/VxqZEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMjE3MDAzMDEzWhcNMjYwNTE4MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMmQ1MjMxNmMwNWQ1ODk2ZjJlMWY3ODg3MjcwOTQ3NTI4 MzFkZmQxM2Q2MDBhMDU1ZjFiNDBhYmM4NTc3OWY3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDoZ0VNuNgYDr1h705yYAuHf4TPWs4Q/wXffgDPN3hPpSLW JRPXx9aT6fXxPGBl/xlzMth0KwTNU9uEupmvjHPM+LGfN6BBAiiQ14WIkZRw7hrb 5gsD7Cjem0lxc11xNA5ap1V2wB2AXe+UL97CZ3GU1Runph3+avBGmZZnSZFqbQC/ Hk06ksRuhsngPPV1Kiu6AR62eHU1TSygUoZpYtphXeRd4YnbJoyAAzU5ACFHlxrs iMMWoUtKTADa/Fo5NTOSHtaz1djoYPLt9T9fa/2oby/guIvCidNv7SNJ57N2+yiD AXUS58zekGhR78XJQy4YpImRCko8eoyT/YC1QROzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUgFqnbKJMUVQV3YK41daMbv1QlWcwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzhkZmM0MDY2LWZiYjMtNGM4MC1iNmQzLTllYTFmNDcxOWM4MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYSIwDQYJKoZIhvcNAQELBQADggEBADhpmwV1/NJ00PtdgdIE0luF w4k/Su67G3DPWri+ngl5vuAL36cQyC05ujmM01yFPkOUP06JSR6GkM9HLjk1ZXG1 beRl280uOPX1zQvrLNUcxuSyaU+UHit32eLEHhxB26pXPCmdIlKYzyLWXr+Vo9I+ qqyged3D8+KXGAKmd6txDy5ltolity5wV+xmumJUF2JSEWP/d1lW2lDgja95eMob XSvv1hJCW0NZZAnlKMuyIw63G974k/8aHK78y2hzbgmbh9xpFE53h2TNC7K/6ICV 3aEzYXgnWBNl1y2+Mv08FIYF236pf1hNxPtDvLBMS6iJXySsvx6HpRIWTaTJgo0= -----END CERTIFICATE-----Generated at Sun Mar 1 22:19:20 2026 by rpki-client