$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a3e10b40-ca3b-4631-9c39-e3dee6a31d8e.roa File: a3e10b40-ca3b-4631-9c39-e3dee6a31d8e.roa (raw, json) Hash identifier: AN/ZLTmBfbk89zMuB5YFe42o1dJ833GOm+CMSV2K61k= Subject key identifier: 18:58:3F:91:84:EF:4C:91:B2:9D:CF:32:ED:BD:CF:6E:57:92:93:D3 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7FDD5B33E0D2FEFC0134731D31876198EEF54493 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a3e10b40-ca3b-4631-9c39-e3dee6a31d8e.roa Signing time: Sun 01 Mar 2026 01:00:08 +0000 ROA not before: Sun 01 Mar 2026 01:00:08 +0000 ROA not after: Sat 30 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:f10b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:dd:5b:33:e0:d2:fe:fc:01:34:73:1d:31:87:61:98:ee:f5:44:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Mar 1 01:00:08 2026 GMT Not After : May 30 23:59:59 2026 GMT Subject: serialNumber=861b856c1ae40582ddedfe962bdedebbd18e84cbc3dec77f4938d4a70b0ec88a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:84:1b:a5:b9:01:d5:cb:c4:59:3e:09:38:c0: b6:d5:f5:00:56:71:28:e1:66:02:ab:ad:b9:2c:b2: 16:26:8e:fd:a1:2a:a3:9c:1e:16:cd:c6:75:37:64: cd:01:fd:b5:e9:f6:cd:90:0e:6d:29:d3:4b:0f:17: e8:ca:91:37:55:26:e9:a6:c9:2c:5c:8c:af:23:1a: 94:5c:04:a4:84:3f:f6:e4:d9:29:19:6e:fb:68:22: 11:26:fe:59:54:5f:ee:00:b0:98:b4:e2:79:65:2d: 5e:e7:b7:45:b5:c5:ac:23:38:e5:be:88:3b:34:29: 04:9d:dd:db:6c:56:99:0a:21:b4:36:12:30:a7:a6: 99:a9:fc:89:04:40:6a:df:fe:56:c0:81:2f:0f:e2: 11:39:4e:83:a6:f2:03:a9:e2:b6:ee:4c:7c:6b:2e: 58:25:7a:ef:26:02:ba:e9:1c:af:af:00:6e:b9:35: 8d:a0:e4:ec:19:37:ee:36:67:27:ac:08:39:78:c0: fd:6c:f4:6b:94:23:09:90:a8:af:21:84:64:cd:7e: f5:60:ba:1b:26:eb:6e:51:16:c0:3e:29:a6:9e:a1: 38:f1:98:0b:b3:de:44:fb:3d:67:60:cd:e4:b5:66: 39:b7:30:b3:75:06:db:9c:2c:e4:69:5e:ff:76:ff: e3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:58:3F:91:84:EF:4C:91:B2:9D:CF:32:ED:BD:CF:6E:57:92:93:D3 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a3e10b40-ca3b-4631-9c39-e3dee6a31d8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f10b::/48 Signature Algorithm: sha256WithRSAEncryption 5e:c9:9c:87:6e:9d:b5:6e:ef:59:86:26:1b:68:07:82:fe:4b: 07:1f:69:fe:e9:36:99:83:c9:07:b6:44:0a:9e:60:3b:6d:81: 17:d7:be:a0:27:fe:8d:53:d5:1d:48:d7:62:c8:aa:32:b2:67: a6:ce:42:44:ea:de:63:a8:a3:bf:a6:b1:79:0b:01:e3:c0:02: af:a8:7a:14:d1:06:df:08:f4:ce:e7:7b:df:74:d9:2e:f5:a8: d0:ed:b0:25:dc:94:6c:76:57:d0:72:40:25:86:53:cf:0d:56: df:f6:31:11:ab:23:a6:3c:3e:45:e5:e3:f2:3a:32:1a:f8:b9: 62:91:e2:8b:c5:ac:f4:42:77:b4:52:97:58:a1:6e:fa:39:cc: 94:5c:46:1a:da:24:09:32:c5:d1:70:75:96:78:5e:aa:69:6e: 53:ac:61:69:0d:fe:ea:c6:82:30:c7:44:d9:35:d8:6b:7b:31: c6:08:5d:36:e7:53:ea:0d:ef:7a:dd:c5:75:13:a7:e7:09:a9: 25:28:8b:5b:14:da:de:36:71:b3:f8:45:20:8d:8b:3d:a9:87: 53:2e:96:f5:4f:c9:d8:1c:bd:bc:c9:6d:5c:6c:ae:21:52:3e: eb:c5:7b:d8:62:2d:ad:f4:6a:19:1f:50:d5:e7:b3:18:3f:aa: 65:91:07:a5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUf91bM+DS/vwBNHMdMYdhmO71RJMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMzAxMDEwMDA4WhcNMjYwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NjFiODU2YzFhZTQwNTgyZGRlZGZlOTYyYmRlZGViYmQx OGU4NGNiYzNkZWM3N2Y0OTM4ZDRhNzBiMGVjODhhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdhBuluQHVy8RZPgk4wLbV9QBWcSjhZgKrrbksshYmjv2h KqOcHhbNxnU3ZM0B/bXp9s2QDm0p00sPF+jKkTdVJummySxcjK8jGpRcBKSEP/bk 2SkZbvtoIhEm/llUX+4AsJi04nllLV7nt0W1xawjOOW+iDs0KQSd3dtsVpkKIbQ2 EjCnppmp/IkEQGrf/lbAgS8P4hE5ToOm8gOp4rbuTHxrLlgleu8mArrpHK+vAG65 NY2g5OwZN+42ZyesCDl4wP1s9GuUIwmQqK8hhGTNfvVguhsm625RFsA+KaaeoTjx mAuz3kT7PWdgzeS1Zjm3MLN1BtucLORpXv92/+N5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUGFg/kYTvTJGync8y7b3PbleSk9MwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2EzZTEwYjQwLWNhM2ItNDYzMS05YzM5LWUzZGVlNmEzMWQ4ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QswDQYJKoZIhvcNAQELBQADggEBAF7JnIdunbVu71mGJhtoB4L+ Swcfaf7pNpmDyQe2RAqeYDttgRfXvqAn/o1T1R1I12LIqjKyZ6bOQkTq3mOoo7+m sXkLAePAAq+oehTRBt8I9M7ne9902S71qNDtsCXclGx2V9ByQCWGU88NVt/2MRGr I6Y8PkXl4/I6Mhr4uWKR4ovFrPRCd7RSl1ihbvo5zJRcRhraJAkyxdFwdZZ4Xqpp blOsYWkN/urGgjDHRNk12Gt7McYIXTbnU+oN73rdxXUTp+cJqSUoi1sU2t42cbP4 RSCNiz2ph1MulvVPydgcvbzJbVxsriFSPuvFe9hiLa30ahkfUNXnsxg/qmWRB6U= -----END CERTIFICATE-----Generated at Sun Mar 1 21:51:57 2026 by rpki-client