$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a7be9120-e9b3-488c-b7e4-818fad18a69e.roa File: a7be9120-e9b3-488c-b7e4-818fad18a69e.roa (raw, json) Hash identifier: KeT/IkO0+n7jaOQ4fN/RraeuU++nxt79OsSy6/k8DYU= Subject key identifier: 3C:5B:8F:D7:A8:72:C7:BE:CD:FC:24:B0:34:49:EA:B2:57:A5:77:85 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 31FA35CEF6C52AC3226ADF990351F5C07BB708A4 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a7be9120-e9b3-488c-b7e4-818fad18a69e.roa Signing time: Tue 10 Feb 2026 00:00:13 +0000 ROA not before: Tue 10 Feb 2026 00:00:13 +0000 ROA not after: Mon 11 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f2:7100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:fa:35:ce:f6:c5:2a:c3:22:6a:df:99:03:51:f5:c0:7b:b7:08:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Feb 10 00:00:13 2026 GMT Not After : May 11 23:59:59 2026 GMT Subject: serialNumber=0dc56a269c3327f2c57222b11f5aea70d4780d382e733a42cdb105305f867796, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:83:45:46:41:9c:37:61:ee:e2:60:09:e0:e0: 04:30:a8:a8:a4:8d:06:4d:fa:f8:fe:45:72:d9:93: bc:92:78:03:a9:71:80:d5:60:c9:37:e6:4d:24:e8: 72:a0:fc:c9:1f:38:62:2c:d4:16:98:99:46:fe:26: 86:39:b6:d7:1d:8a:a6:2b:17:e5:f3:cf:55:c2:7f: 60:cf:db:f8:95:3e:18:af:ee:c6:13:bd:f4:fe:85: 9c:ed:9e:1d:d0:e4:ac:25:c3:3d:03:27:80:9e:2a: 70:7c:1b:19:42:2b:73:f3:2a:cc:f1:a0:d0:95:e0: 73:85:da:29:0d:26:49:57:6d:6d:b2:5d:e4:7e:80: 20:16:ba:ab:03:86:dd:f6:2d:ae:62:05:28:c3:29: 6c:db:87:e2:a4:d4:57:7c:cf:84:73:65:5a:12:e3: 54:f3:e4:27:03:a0:13:cc:45:f5:4b:11:cc:01:bc: 8a:a1:f6:66:79:a6:41:e6:cc:ab:c4:1c:01:f9:6b: 4a:c5:ba:bd:f3:3e:29:2d:39:40:00:cf:67:b0:26: 24:bb:f4:11:43:be:bf:c1:fa:26:69:d7:02:41:d0: a6:93:ab:fe:70:7a:5d:72:10:93:20:72:16:61:0b: a6:83:6c:41:ad:8f:f5:bf:b0:f8:4f:a0:b8:b7:46: bd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:5B:8F:D7:A8:72:C7:BE:CD:FC:24:B0:34:49:EA:B2:57:A5:77:85 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a7be9120-e9b3-488c-b7e4-818fad18a69e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7100::/40 Signature Algorithm: sha256WithRSAEncryption 60:f8:e8:9c:45:ab:57:84:e5:f3:3f:b6:52:12:51:8d:6d:e1: 44:ee:88:4d:ed:7e:cb:9f:c5:35:78:94:59:03:9c:69:78:13: 50:92:6e:87:1d:ad:be:ab:f5:94:c6:4d:bc:33:05:6b:4e:e8: 4f:91:20:a3:06:71:19:9c:28:8f:20:53:4b:a2:1a:4b:ba:8a: 8f:41:84:25:18:d3:8e:b2:f1:81:92:f3:94:99:de:31:1e:02: 3c:1f:c1:aa:4e:19:39:57:23:8f:b9:83:1f:91:ee:e9:60:70: 07:e0:10:5e:f2:87:e2:71:c4:05:f6:d7:b1:60:cf:1c:48:3a: af:f7:c7:e2:7e:63:ab:b5:1a:4b:46:5c:bb:0c:6f:0b:50:63: a3:ea:a0:31:a5:39:24:cd:f5:86:3b:e7:d9:bf:fa:4d:37:e7: ea:a4:3c:54:d5:8c:50:62:60:3d:71:1f:a7:2d:8c:8c:39:06: f7:c3:f8:8a:e5:96:f1:b7:af:fe:12:2b:f0:e6:25:54:b8:09: 80:5f:bd:dc:9d:a3:37:f7:00:ac:05:cb:d3:90:7e:ab:55:81: aa:e3:95:62:bf:79:6e:92:de:10:a2:66:de:f6:4c:c2:29:61: 5a:05:8d:2a:70:d9:3b:cd:97:fe:0c:25:54:96:0d:b8:f2:2f: 0d:f7:8e:5f -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUMfo1zvbFKsMiat+ZA1H1wHu3CKQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMjEwMDAwMDEzWhcNMjYwNTExMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZGM1NmEyNjljMzMyN2YyYzU3MjIyYjExZjVhZWE3MGQ0 NzgwZDM4MmU3MzNhNDJjZGIxMDUzMDVmODY3Nzk2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4g0VGQZw3Ye7iYAng4AQwqKikjQZN+vj+RXLZk7ySeAOp cYDVYMk35k0k6HKg/MkfOGIs1BaYmUb+JoY5ttcdiqYrF+Xzz1XCf2DP2/iVPhiv 7sYTvfT+hZztnh3Q5Kwlwz0DJ4CeKnB8GxlCK3PzKszxoNCV4HOF2ikNJklXbW2y XeR+gCAWuqsDht32La5iBSjDKWzbh+Kk1Fd8z4RzZVoS41Tz5CcDoBPMRfVLEcwB vIqh9mZ5pkHmzKvEHAH5a0rFur3zPiktOUAAz2ewJiS79BFDvr/B+iZp1wJB0KaT q/5wel1yEJMgchZhC6aDbEGtj/W/sPhPoLi3Rr0lAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUPFuP16hyx77N/CSwNEnqsleld4UwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2E3YmU5MTIwLWU5YjMtNDg4Yy1iN2U0LTgxOGZhZDE4YTY5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDycTANBgkqhkiG9w0BAQsFAAOCAQEAYPjonEWrV4Tl8z+2UhJRjW3h RO6ITe1+y5/FNXiUWQOcaXgTUJJuhx2tvqv1lMZNvDMFa07oT5EgowZxGZwojyBT S6IaS7qKj0GEJRjTjrLxgZLzlJneMR4CPB/Bqk4ZOVcjj7mDH5Hu6WBwB+AQXvKH 4nHEBfbXsWDPHEg6r/fH4n5jq7UaS0ZcuwxvC1Bjo+qgMaU5JM31hjvn2b/6TTfn 6qQ8VNWMUGJgPXEfpy2MjDkG98P4iuWW8bev/hIr8OYlVLgJgF+93J2jN/cArAXL 05B+q1WBquOVYr95bpLeEKJm3vZMwilhWgWNKnDZO82X/gwlVJYNuPIvDfeOXw== -----END CERTIFICATE-----Generated at Sun Mar 1 21:56:59 2026 by rpki-client