$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a490dedf-dd95-4a09-9745-c4164e6d73ae.roa File: a490dedf-dd95-4a09-9745-c4164e6d73ae.roa (raw, json) Hash identifier: zsptk3JJBe33eu/rSiKMJBlXQD2L4cmzCWwOfYOOaDk= Subject key identifier: 34:D3:01:F2:12:C3:DD:81:9F:1C:7C:82:E4:43:D0:56:D0:E6:C6:65 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 32A3FAC0B0DDFD1474580A8351A3C3B3571E5523 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a490dedf-dd95-4a09-9745-c4164e6d73ae.roa Signing time: Sun 01 Mar 2026 00:50:19 +0000 ROA not before: Sun 01 Mar 2026 00:50:19 +0000 ROA not after: Sat 30 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:f101::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:a3:fa:c0:b0:dd:fd:14:74:58:0a:83:51:a3:c3:b3:57:1e:55:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Mar 1 00:50:19 2026 GMT Not After : May 30 23:59:59 2026 GMT Subject: serialNumber=ac90c2c11554a6b91a5a1d0cd0b93da9333533b9ae983718b09cb14c5396832c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f4:60:7b:4a:cc:45:84:19:ce:fe:08:05:57: 5a:5a:5a:23:a5:29:2a:4f:75:9e:2d:0d:81:ed:3f: c4:22:81:e9:66:fd:e2:ad:b4:d1:52:0d:53:42:87: e4:c8:45:2f:1b:82:d8:5b:be:38:27:56:85:6b:2a: 3b:c9:c4:36:bd:d6:93:1e:4a:e0:b4:5d:17:2e:f7: 06:ab:5e:2d:a8:1b:ad:55:9d:37:3a:86:c5:cf:f5: 3c:1f:44:24:16:ce:4e:46:27:a2:2b:37:24:b9:90: ed:d8:f3:68:13:80:41:4d:cc:ab:cd:87:f0:4f:6d: d1:2e:d7:b9:b2:25:97:a4:89:e2:a1:16:83:b6:55: dc:a1:02:e5:f8:ae:8a:e4:1e:c0:74:24:52:2c:8a: 23:f1:fe:70:cd:be:f9:b5:8a:ba:9c:74:f8:97:2a: 50:96:e2:0e:8d:2c:05:8f:0e:ad:80:3a:22:67:e8: e8:67:05:39:7e:54:2d:3e:5a:da:10:c5:19:da:7f: 42:4b:d0:d6:97:72:65:b4:27:95:28:20:60:30:05: a3:60:da:38:76:37:8a:bc:91:9c:a0:30:8a:76:a0: 05:0b:f1:dc:ce:19:1d:a8:cf:0a:8f:f8:0b:ce:4e: 23:72:4e:32:55:cf:4a:60:b0:95:a0:3f:80:29:a5: 50:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D3:01:F2:12:C3:DD:81:9F:1C:7C:82:E4:43:D0:56:D0:E6:C6:65 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a490dedf-dd95-4a09-9745-c4164e6d73ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f101::/48 Signature Algorithm: sha256WithRSAEncryption 71:16:e7:ad:d9:3c:43:49:83:c1:c3:3d:4f:0b:03:a7:5c:af: 5c:91:48:7c:c4:d2:3c:aa:84:eb:42:83:6b:11:1c:06:ff:90: 57:79:14:04:0d:3b:6b:ed:8f:91:a5:94:67:c4:40:2c:85:f5: 2c:76:23:8c:ee:c7:c8:46:50:23:a7:ea:19:ae:a5:2e:83:f8: d2:8d:df:4a:fc:db:cb:be:3c:b6:7e:14:4d:1b:e8:a7:3b:d0: 64:a3:74:c2:fa:32:9b:14:06:28:f5:cc:c7:bd:00:93:a5:f7: 32:d0:64:94:39:c6:bd:56:f6:2e:2b:20:b6:21:65:55:ba:29: 86:d8:c9:6a:be:69:a9:77:7b:c6:57:b7:4e:51:59:62:1e:d4: d3:ba:d5:e3:8b:cd:33:a2:b9:56:91:f7:57:ce:08:3a:5b:7e: 98:b5:8f:27:b9:c9:cd:49:a7:b7:92:ca:5e:11:61:64:52:32: 95:75:7b:c3:f4:7f:c1:60:6d:d2:6d:ee:97:2f:32:d7:90:fe: 2a:8e:6c:ff:a4:04:70:7d:d9:0a:a8:43:13:48:69:43:86:8b: c0:58:44:0e:13:b8:0c:28:ac:4a:5b:ef:35:15:d5:4a:62:91: f6:87:0a:7d:c3:5c:c2:a7:d9:c5:2f:75:34:11:b8:6d:fd:94: 7d:ad:d5:30 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMqP6wLDd/RR0WAqDUaPDs1ceVSMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMzAxMDA1MDE5WhcNMjYwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhYzkwYzJjMTE1NTRhNmI5MWE1YTFkMGNkMGI5M2RhOTMz MzUzM2I5YWU5ODM3MThiMDljYjE0YzUzOTY4MzJjMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDK9GB7SsxFhBnO/ggFV1paWiOlKSpPdZ4tDYHtP8Qigelm /eKttNFSDVNCh+TIRS8bgthbvjgnVoVrKjvJxDa91pMeSuC0XRcu9warXi2oG61V nTc6hsXP9TwfRCQWzk5GJ6IrNyS5kO3Y82gTgEFNzKvNh/BPbdEu17myJZekieKh FoO2VdyhAuX4rorkHsB0JFIsiiPx/nDNvvm1irqcdPiXKlCW4g6NLAWPDq2AOiJn 6OhnBTl+VC0+WtoQxRnaf0JL0NaXcmW0J5UoIGAwBaNg2jh2N4q8kZygMIp2oAUL 8dzOGR2ozwqP+AvOTiNyTjJVz0pgsJWgP4AppVDjAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUNNMB8hLD3YGfHHyC5EPQVtDmxmUwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2E0OTBkZWRmLWRkOTUtNGEwOS05NzQ1LWM0MTY0ZTZkNzNhZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QEwDQYJKoZIhvcNAQELBQADggEBAHEW563ZPENJg8HDPU8LA6dc r1yRSHzE0jyqhOtCg2sRHAb/kFd5FAQNO2vtj5GllGfEQCyF9Sx2I4zux8hGUCOn 6hmupS6D+NKN30r828u+PLZ+FE0b6Kc70GSjdML6MpsUBij1zMe9AJOl9zLQZJQ5 xr1W9i4rILYhZVW6KYbYyWq+aal3e8ZXt05RWWIe1NO61eOLzTOiuVaR91fOCDpb fpi1jye5yc1Jp7eSyl4RYWRSMpV1e8P0f8FgbdJt7pcvMteQ/iqObP+kBHB92Qqo QxNIaUOGi8BYRA4TuAworEpb7zUV1UpikfaHCn3DXMKn2cUvdTQRuG39lH2t1TA= -----END CERTIFICATE-----Generated at Mon Mar 2 04:28:49 2026 by rpki-client