$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a05fd272-e896-4327-ba78-a6cbca5483ef.roa File: a05fd272-e896-4327-ba78-a6cbca5483ef.roa (raw, json) Hash identifier: 9oPtl0wBaocXPNn18wwzcFsAKJfUNmaYjMMDxAV4i7M= Subject key identifier: C5:A9:34:8E:04:4B:EB:A2:AE:F2:B4:5B:B1:D7:18:00:8D:0D:D3:B6 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 047143DF7766B086BA4A7E2DF3B9AC1C38BBE93B Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a05fd272-e896-4327-ba78-a6cbca5483ef.roa Signing time: Sun 01 Mar 2026 00:50:24 +0000 ROA not before: Sun 01 Mar 2026 00:50:24 +0000 ROA not after: Sat 30 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:f109::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:71:43:df:77:66:b0:86:ba:4a:7e:2d:f3:b9:ac:1c:38:bb:e9:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Mar 1 00:50:24 2026 GMT Not After : May 30 23:59:59 2026 GMT Subject: serialNumber=6feda2f05cd13155727bc40e1a30ffb6ed03db321639082e701b060e69501ebe, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5a:f5:a1:84:40:9c:19:83:62:a7:08:ac:54: f2:c7:0a:e9:cf:b0:81:b4:a5:a5:81:c1:74:0c:88: 32:b0:62:7e:35:25:e4:ad:9e:d3:11:41:d1:20:ad: 6b:37:97:cb:0c:9f:06:ca:59:ec:02:6b:b1:bd:2a: f5:a2:6e:28:1e:7d:da:26:e4:14:23:dd:f3:07:a0: fb:6a:ad:f2:fe:98:ed:9f:66:3f:c9:fa:e7:52:33: cd:fb:f3:58:6d:6b:1d:5e:f8:9b:38:09:34:ae:b5: c4:35:9d:0a:d9:43:06:32:45:c8:be:eb:03:35:26: 68:8e:dd:de:14:f5:df:24:ad:7b:46:60:b5:35:2f: 79:26:a9:fd:b8:d9:cb:91:7e:d9:d9:78:bf:6a:26: 4c:94:ad:0b:40:d7:55:3d:1d:39:bf:aa:c6:7f:15: f2:54:30:b2:93:0b:10:e8:cf:2e:47:13:27:56:59: 76:85:85:c8:a5:f6:ee:dd:93:77:e0:dd:0e:10:e0: 7e:0c:8e:b1:d6:0f:d1:58:6f:fa:41:01:14:2d:6a: 9d:79:45:f4:e8:8a:9a:98:bb:72:68:f9:3c:35:76: 96:92:a4:2f:c9:2b:41:c2:2b:b5:66:b7:ac:b5:bc: 6a:ff:60:25:3a:b0:e8:25:cc:ec:67:a7:1e:45:2d: 69:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A9:34:8E:04:4B:EB:A2:AE:F2:B4:5B:B1:D7:18:00:8D:0D:D3:B6 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a05fd272-e896-4327-ba78-a6cbca5483ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f109::/48 Signature Algorithm: sha256WithRSAEncryption 99:61:d0:ad:7c:35:68:8a:a6:f0:4d:35:10:69:3b:87:ae:63: e0:5f:44:4f:37:a9:fb:a5:6c:a7:b3:e3:67:fe:bc:2b:5a:06: ad:f3:a1:3c:2c:ad:03:cf:be:2a:19:ea:d5:cc:f0:bc:7f:3c: 59:a2:83:51:e5:b5:e6:a2:ca:ec:ec:2c:1a:56:48:11:59:4c: a1:e0:45:fd:0a:34:e6:75:c5:e4:02:9c:d0:95:04:3a:b3:69: 96:10:2a:8b:46:8d:41:eb:c4:51:2b:bb:da:e7:fa:08:89:f9: 56:3c:95:a2:0d:23:02:00:68:f0:b3:7a:0b:e2:de:1b:4b:ce: a4:ba:e0:48:3d:0e:b9:a4:ff:85:8b:3c:f8:de:a9:6c:cb:27: cd:9c:dc:ef:e1:8b:1e:eb:08:02:91:eb:80:40:8b:c7:64:28: 76:5a:48:e8:b3:fb:a9:73:a8:31:92:8f:86:3c:eb:88:a8:e7: af:c4:a6:58:0a:0a:9c:c5:97:86:71:01:21:7c:24:ed:16:6f: 20:fc:3b:ef:d5:62:6d:9a:55:5d:d0:69:18:8e:bb:0b:2f:e5: a4:b6:28:10:6d:c3:ed:a2:1f:99:94:e8:c4:31:38:2d:de:30: 68:18:e0:a1:75:0e:09:b4:e0:54:dd:29:11:ef:d8:cb:0a:e3: b9:eb:90:e4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBHFD33dmsIa6Sn4t87msHDi76TswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMzAxMDA1MDI0WhcNMjYwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZmVkYTJmMDVjZDEzMTU1NzI3YmM0MGUxYTMwZmZiNmVk MDNkYjMyMTYzOTA4MmU3MDFiMDYwZTY5NTAxZWJlMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUWvWhhECcGYNipwisVPLHCunPsIG0paWBwXQMiDKwYn41 JeStntMRQdEgrWs3l8sMnwbKWewCa7G9KvWibigefdom5BQj3fMHoPtqrfL+mO2f Zj/J+udSM83781htax1e+Js4CTSutcQ1nQrZQwYyRci+6wM1JmiO3d4U9d8krXtG YLU1L3kmqf242cuRftnZeL9qJkyUrQtA11U9HTm/qsZ/FfJUMLKTCxDozy5HEydW WXaFhcil9u7dk3fg3Q4Q4H4MjrHWD9FYb/pBARQtap15RfToipqYu3Jo+Tw1dpaS pC/JK0HCK7Vmt6y1vGr/YCU6sOglzOxnpx5FLWm7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUxak0jgRL66Ku8rRbsdcYAI0N07YwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2EwNWZkMjcyLWU4OTYtNDMyNy1iYTc4LWE2Y2JjYTU0ODNlZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QkwDQYJKoZIhvcNAQELBQADggEBAJlh0K18NWiKpvBNNRBpO4eu Y+BfRE83qfulbKez42f+vCtaBq3zoTwsrQPPvioZ6tXM8Lx/PFmig1Hlteaiyuzs LBpWSBFZTKHgRf0KNOZ1xeQCnNCVBDqzaZYQKotGjUHrxFEru9rn+giJ+VY8laIN IwIAaPCzegvi3htLzqS64Eg9Drmk/4WLPPjeqWzLJ82c3O/hix7rCAKR64BAi8dk KHZaSOiz+6lzqDGSj4Y864io56/EplgKCpzFl4ZxASF8JO0WbyD8O+/VYm2aVV3Q aRiOuwsv5aS2KBBtw+2iH5mU6MQxOC3eMGgY4KF1Dgm04FTdKRHv2MsK47nrkOQ= -----END CERTIFICATE-----Generated at Sun Mar 1 21:56:36 2026 by rpki-client