$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9dcfab8d-23d5-4ce2-bcc7-d85ec1e40912.roa File: 9dcfab8d-23d5-4ce2-bcc7-d85ec1e40912.roa (raw, json) Hash identifier: 1AKxCoTWYG4+srzW16aiwfHQGPTI/0uCwjT8jiT2rgU= Subject key identifier: 99:75:D4:D4:69:71:96:A8:05:49:9F:82:E2:74:C2:44:EE:E7:9E:CB Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 37A8C157C392E1DD609AECC37765D7936ECD0F98 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9dcfab8d-23d5-4ce2-bcc7-d85ec1e40912.roa Signing time: Fri 20 Feb 2026 01:30:17 +0000 ROA not before: Fri 20 Feb 2026 01:30:17 +0000 ROA not after: Thu 21 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f2:7011::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:a8:c1:57:c3:92:e1:dd:60:9a:ec:c3:77:65:d7:93:6e:cd:0f:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Feb 20 01:30:17 2026 GMT Not After : May 21 23:59:59 2026 GMT Subject: serialNumber=ba8962327374ace8e5d22c5e077dc83d265cf366ba05110c5117852f1d2eb2cc, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d5:ff:bf:0d:78:a3:f0:5e:8f:59:dd:b2:9b: 4b:89:2e:ad:9c:ed:f8:d7:99:b0:6b:c0:67:65:9f: ee:09:d1:50:af:44:00:99:db:4e:42:a6:80:0d:ec: d7:18:ad:42:6b:61:45:9a:06:85:09:c2:ac:e2:c5: 92:8f:30:5e:00:8e:3f:0f:e8:7d:4b:6f:73:1e:78: 15:32:b8:8a:57:93:57:4d:4d:2e:3b:d3:d2:9b:a2: a6:ef:48:35:70:3e:f1:c0:77:ac:ba:83:2a:3f:cc: 6c:92:7c:7e:4b:94:2a:89:a1:1d:a7:c8:e2:d4:7a: e0:fe:5c:62:65:9b:30:99:6f:b9:92:2a:af:2b:0a: 7f:8c:c4:a4:d9:a4:7c:49:f4:27:2c:3a:b0:3e:75: f9:80:41:6b:47:12:cb:8e:78:0b:0f:24:fd:44:e5: 99:bc:c7:35:2a:a5:0d:33:e0:df:75:ba:2c:74:8a: f8:70:51:a5:b4:99:78:03:c8:5b:06:b1:75:4d:b4: b7:f4:f6:88:c3:cf:a7:5f:04:a9:e7:cd:c2:dc:a5: db:fc:78:43:49:30:0e:a3:e2:cf:f1:7f:5e:25:b7: 5c:34:db:92:9f:a5:50:a2:b7:e0:13:3f:e0:ed:08: 6f:52:b9:df:86:ce:7d:14:c0:0e:a2:d7:66:95:85: 9d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:75:D4:D4:69:71:96:A8:05:49:9F:82:E2:74:C2:44:EE:E7:9E:CB X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9dcfab8d-23d5-4ce2-bcc7-d85ec1e40912.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7011::/48 Signature Algorithm: sha256WithRSAEncryption 21:67:d7:cd:95:35:89:56:6d:3b:b6:a0:b7:68:36:f2:a0:41: aa:23:95:e2:7e:6c:a1:6c:2b:d6:8d:a3:19:26:8b:52:46:bd: 98:78:ed:c4:f4:a1:81:66:e7:bb:69:e5:fd:81:83:0b:69:3e: e8:af:7b:46:e1:91:da:3c:df:5e:ca:5a:2e:63:10:48:48:6a: 2a:ad:1f:02:16:58:e5:5e:ca:12:3a:43:c6:43:fb:e6:31:dd: 62:ae:51:53:f4:43:73:e5:d5:b2:4a:f5:bc:f2:5c:50:3a:eb: c9:cd:88:fb:6b:b9:1c:b2:e9:82:a0:28:de:84:56:75:88:fb: 41:0a:c9:e3:8b:c4:9c:25:89:96:25:95:b2:9a:2e:a0:26:bd: d6:8b:8f:14:10:df:47:34:6d:b9:31:ca:b1:03:12:c9:d2:8c: 16:16:c7:35:03:90:db:54:7f:0e:dd:56:71:8d:4e:cf:7b:2d: 7f:bd:46:fc:cc:1c:00:91:10:4b:67:e3:92:c4:2d:0e:e8:60: 15:42:7f:eb:19:8d:58:4f:76:82:3e:15:a0:af:d2:7e:a3:92: 83:54:7f:8f:a6:79:a4:60:8c:51:d2:ab:68:58:8e:f0:48:83: 86:fa:71:13:df:03:87:db:05:41:d6:32:c2:61:56:c0:c1:ff: c5:f6:6a:63 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUN6jBV8OS4d1gmuzDd2XXk27ND5gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMjIwMDEzMDE3WhcNMjYwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiYTg5NjIzMjczNzRhY2U4ZTVkMjJjNWUwNzdkYzgzZDI2 NWNmMzY2YmEwNTExMGM1MTE3ODUyZjFkMmViMmNjMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCz1f+/DXij8F6PWd2ym0uJLq2c7fjXmbBrwGdln+4J0VCv RACZ205CpoAN7NcYrUJrYUWaBoUJwqzixZKPMF4Ajj8P6H1Lb3MeeBUyuIpXk1dN TS4709KboqbvSDVwPvHAd6y6gyo/zGySfH5LlCqJoR2nyOLUeuD+XGJlmzCZb7mS Kq8rCn+MxKTZpHxJ9CcsOrA+dfmAQWtHEsuOeAsPJP1E5Zm8xzUqpQ0z4N91uix0 ivhwUaW0mXgDyFsGsXVNtLf09ojDz6dfBKnnzcLcpdv8eENJMA6j4s/xf14lt1w0 25KfpVCit+ATP+DtCG9Sud+Gzn0UwA6i12aVhZ1fAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUmXXU1GlxlqgFSZ+C4nTCRO7nnsswHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzlkY2ZhYjhkLTIzZDUtNGNlMi1iY2M3LWQ4NWVjMWU0MDkxMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDycBEwDQYJKoZIhvcNAQELBQADggEBACFn182VNYlWbTu2oLdoNvKg QaojleJ+bKFsK9aNoxkmi1JGvZh47cT0oYFm57tp5f2BgwtpPuive0bhkdo8317K Wi5jEEhIaiqtHwIWWOVeyhI6Q8ZD++Yx3WKuUVP0Q3Pl1bJK9bzyXFA668nNiPtr uRyy6YKgKN6EVnWI+0EKyeOLxJwliZYllbKaLqAmvdaLjxQQ30c0bbkxyrEDEsnS jBYWxzUDkNtUfw7dVnGNTs97LX+9RvzMHACREEtn45LELQ7oYBVCf+sZjVhPdoI+ FaCv0n6jkoNUf4+meaRgjFHSq2hYjvBIg4b6cRPfA4fbBUHWMsJhVsDB/8X2amM= -----END CERTIFICATE-----Generated at Sun Mar 1 21:54:08 2026 by rpki-client