$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/942359be-660a-411d-a2eb-7723143d6fd3.roa File: 942359be-660a-411d-a2eb-7723143d6fd3.roa (raw, json) Hash identifier: CPb0muUWS1+cGHHLeD0igCrX4NtZa2nsGHyze6E5c1Y= Subject key identifier: FF:2F:DA:45:D2:E8:DD:DF:BF:9C:46:67:D0:98:C8:65:1A:B5:9E:B5 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2DE32743DA24DF720A2B60421F8C84A58E54806E Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/942359be-660a-411d-a2eb-7723143d6fd3.roa Signing time: Fri 13 Feb 2026 15:10:57 +0000 ROA not before: Fri 13 Feb 2026 15:10:57 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:611e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:e3:27:43:da:24:df:72:0a:2b:60:42:1f:8c:84:a5:8e:54:80:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Feb 13 15:10:57 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=4eae961f9ac175b6a71a781e317b66a966c092ffbbda6d16c8cd6f7368e65cb7, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5c:af:55:88:a3:ae:6e:11:f3:8d:7a:c3:f3: a4:d6:e4:2e:94:c2:e2:b3:a7:9c:ab:5e:54:4f:c3: b9:d6:f8:2e:95:17:05:61:84:e4:01:98:a7:c1:a0: 8d:2d:9d:06:12:01:6b:cb:7a:58:d7:af:82:29:c6: 26:e4:78:3e:17:c0:35:10:79:76:db:82:d0:f7:92: 11:ed:9d:67:8b:1f:19:26:e1:90:d9:56:df:bd:10: 57:71:49:51:36:8c:4b:97:5e:36:ab:ab:7e:39:ae: 34:68:2f:b1:47:1a:10:78:fb:26:bc:15:8c:5d:db: fd:40:ce:d4:7e:27:92:cd:9c:aa:94:92:10:e6:d4: 96:07:bc:1a:1e:de:65:41:30:38:a8:85:68:64:e9: 5c:1c:e8:5c:36:14:23:dc:fa:e2:79:87:3c:94:05: ae:8f:34:04:7e:02:6a:3d:7d:21:b8:20:fa:f3:38: 5f:9c:a4:bd:71:43:1e:2a:6d:e0:31:50:91:49:57: 6e:4e:43:1c:77:2c:cc:d6:bc:be:02:3b:cb:cb:01: dc:04:8a:84:7a:5d:a6:5f:74:bf:fd:44:31:f9:d8: 74:6a:c3:2c:0b:ad:d0:25:cb:49:27:7f:a0:a4:82: fb:3b:39:e6:6c:25:74:04:d1:12:f6:0a:5b:7a:ee: 39:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:2F:DA:45:D2:E8:DD:DF:BF:9C:46:67:D0:98:C8:65:1A:B5:9E:B5 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/942359be-660a-411d-a2eb-7723143d6fd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:611e::/48 Signature Algorithm: sha256WithRSAEncryption 81:c7:79:4b:4f:87:af:54:80:9e:16:b8:e8:c5:1d:ff:cf:7e: 69:89:fe:60:0e:58:e7:5b:41:14:19:3d:3a:c1:e6:b6:98:90: 5f:cf:bf:ff:37:51:e9:9b:0b:6f:5c:01:d4:a0:c8:09:c3:90: e5:aa:f0:a7:b9:b8:09:17:28:62:fe:73:69:a1:35:56:52:32: c1:2c:4d:77:ec:61:be:d2:8c:89:d4:e9:20:33:b7:7c:ab:2e: a2:41:b5:20:92:8d:e8:db:49:cc:db:50:70:c5:0a:b3:f2:12: 7b:59:8d:97:bb:71:7d:47:e9:b6:72:92:f8:48:a5:59:d1:af: 61:7c:c6:ed:62:3d:48:18:8d:6e:84:c6:43:7e:6e:e4:69:5d: 17:f3:bb:0f:19:e0:9f:1d:90:e2:c2:a6:cb:43:d7:8b:e9:d6: a7:08:d7:e1:86:e0:e1:5e:cc:f9:51:6a:2f:4e:6f:29:73:d4: 21:cd:3c:7b:ef:26:1d:d9:41:82:51:3e:97:f7:7d:da:32:de: 3c:af:53:1b:ea:94:37:92:42:e5:26:4f:6f:18:4b:96:60:77: 38:58:3e:16:03:ed:de:e2:5f:80:cd:42:cb:82:af:62:13:68: 2b:b0:48:58:48:ac:35:25:b2:2e:2c:5b:f6:3a:2f:e0:6a:b1: 8e:84:1c:f9 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIULeMnQ9ok33IKK2BCH4yEpY5UgG4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMjEzMTUxMDU3WhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZWFlOTYxZjlhYzE3NWI2YTcxYTc4MWUzMTdiNjZhOTY2 YzA5MmZmYmJkYTZkMTZjOGNkNmY3MzY4ZTY1Y2I3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLXK9ViKOubhHzjXrD86TW5C6UwuKzp5yrXlRPw7nW+C6V FwVhhOQBmKfBoI0tnQYSAWvLeljXr4IpxibkeD4XwDUQeXbbgtD3khHtnWeLHxkm 4ZDZVt+9EFdxSVE2jEuXXjarq345rjRoL7FHGhB4+ya8FYxd2/1AztR+J5LNnKqU khDm1JYHvBoe3mVBMDiohWhk6Vwc6Fw2FCPc+uJ5hzyUBa6PNAR+Amo9fSG4IPrz OF+cpL1xQx4qbeAxUJFJV25OQxx3LMzWvL4CO8vLAdwEioR6XaZfdL/9RDH52HRq wywLrdAly0knf6Ckgvs7OeZsJXQE0RL2Clt67jl1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU/y/aRdLo3d+/nEZn0JjIZRq1nrUwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzk0MjM1OWJlLTY2MGEtNDExZC1hMmViLTc3MjMxNDNkNmZkMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYR4wDQYJKoZIhvcNAQELBQADggEBAIHHeUtPh69UgJ4WuOjFHf/P fmmJ/mAOWOdbQRQZPTrB5raYkF/Pv/83UembC29cAdSgyAnDkOWq8Ke5uAkXKGL+ c2mhNVZSMsEsTXfsYb7SjInU6SAzt3yrLqJBtSCSjejbSczbUHDFCrPyEntZjZe7 cX1H6bZykvhIpVnRr2F8xu1iPUgYjW6ExkN+buRpXRfzuw8Z4J8dkOLCpstD14vp 1qcI1+GG4OFezPlRai9Obylz1CHNPHvvJh3ZQYJRPpf3fdoy3jyvUxvqlDeSQuUm T28YS5ZgdzhYPhYD7d7iX4DNQsuCr2ITaCuwSFhIrDUlsi4sW/Y6L+BqsY6EHPk= -----END CERTIFICATE-----Generated at Sun Mar 1 23:53:35 2026 by rpki-client