$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/aad24a2e-f61b-42b4-9509-9e06a136eb0b.roa File: aad24a2e-f61b-42b4-9509-9e06a136eb0b.roa (raw, json) Hash identifier: qCG5dC4JQS10IfZZhwgOrrsAs72mb2vE9XrldpTJolU= Subject key identifier: DC:CA:25:B8:B6:1B:23:09:EE:32:F0:95:71:6C:E6:67:87:52:CB:E4 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2988B1515AEEC236CDF5A0F55CAA4A09231917E6 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/aad24a2e-f61b-42b4-9509-9e06a136eb0b.roa Signing time: Fri 13 Feb 2026 15:10:45 +0000 ROA not before: Fri 13 Feb 2026 15:10:45 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:5502::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:88:b1:51:5a:ee:c2:36:cd:f5:a0:f5:5c:aa:4a:09:23:19:17:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Feb 13 15:10:45 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=fa2f0b9182f2b0e36c823e369cb4a1246ea31b31c52bad9dfb21456ef38fb62a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e5:b6:8f:86:4a:91:07:de:24:35:c0:6b:f7: 22:82:13:44:2e:4a:17:4d:8d:c3:6f:4b:66:fc:52: a3:f6:ce:5f:db:14:85:0a:bf:f9:72:52:fd:e7:f8: aa:71:78:64:9e:72:9c:19:f1:74:c7:25:50:b8:10: aa:e2:33:f3:ee:3d:99:3f:03:ff:2e:f8:11:f1:3f: 7c:a1:dc:d0:e3:a9:2c:4e:a6:c2:f4:e8:1b:ec:b9: 44:c8:e5:ae:2a:27:72:d8:24:08:08:62:cf:00:dd: 51:b1:c5:a9:1f:a5:1b:3b:3c:31:87:89:96:14:8d: 5d:b9:d7:0c:2e:37:ca:95:ba:8e:e3:e2:30:88:88: db:98:c0:48:7c:f9:90:50:00:57:9c:a6:04:02:a7: d3:98:33:0f:57:44:80:c7:63:89:5e:8e:af:92:7e: a1:eb:70:00:ac:e7:12:e4:69:47:35:57:46:98:a7: fe:46:de:ae:a6:ae:fb:61:f9:b9:e6:f9:62:b4:cf: ae:20:5e:7c:b7:a5:23:cb:ca:67:2a:8a:fb:ab:37: 5c:f8:57:76:4a:8e:40:7e:e3:8c:48:b2:72:56:5f: 4e:59:41:f2:19:1f:76:e1:ab:18:d4:77:b4:08:01: ef:7e:0f:62:6c:3f:42:cd:49:62:f0:ab:54:c9:97: 20:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:CA:25:B8:B6:1B:23:09:EE:32:F0:95:71:6C:E6:67:87:52:CB:E4 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/aad24a2e-f61b-42b4-9509-9e06a136eb0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:5502::/48 Signature Algorithm: sha256WithRSAEncryption 4c:bf:7f:b3:f8:98:32:ef:df:48:72:70:00:58:ba:4a:d5:c3: 81:3e:b5:3f:d3:fa:79:c0:48:81:7d:f3:48:7f:28:c3:37:84: 8c:a2:d5:3f:26:1b:13:15:d1:cd:f2:10:76:38:71:e4:ec:92: 6a:10:2c:38:b1:a5:90:21:96:1f:1a:b3:d7:bb:0c:0a:28:af: bc:a1:9a:c1:f2:08:51:b9:d1:c1:81:98:94:a2:32:5e:c2:c2: 3e:3c:22:a9:a0:52:1c:c6:b7:3e:2e:1b:57:50:f6:9d:87:a2: eb:ce:a1:72:bf:fa:68:61:71:36:4c:a7:9a:ca:3e:7f:af:f6: 52:dd:e7:cf:18:98:6c:64:98:42:2a:f9:af:b9:64:9f:00:f8: 18:23:33:02:d8:30:5b:6f:6a:a4:4b:8e:39:8c:fc:42:b1:e8: f6:77:43:c0:96:23:7f:99:4e:8a:d1:dd:79:4c:91:6f:61:3f: 8a:b3:3c:67:73:b7:f1:3c:1f:b6:d2:76:21:76:9d:e9:13:74: 99:ec:96:93:70:d4:43:54:7b:f6:93:55:12:8c:cd:fb:9f:4d: bb:05:1c:71:ab:b6:bf:24:11:0b:90:0c:44:d9:4b:d0:a5:d4: 5f:1b:f7:8c:96:7f:31:ba:95:89:2a:ae:78:e4:08:dd:c5:e5: 98:aa:cc:20 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKYixUVruwjbN9aD1XKpKCSMZF+YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMjEzMTUxMDQ1WhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYTJmMGI5MTgyZjJiMGUzNmM4MjNlMzY5Y2I0YTEyNDZl YTMxYjMxYzUyYmFkOWRmYjIxNDU2ZWYzOGZiNjJhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDB5baPhkqRB94kNcBr9yKCE0QuShdNjcNvS2b8UqP2zl/b FIUKv/lyUv3n+KpxeGSecpwZ8XTHJVC4EKriM/PuPZk/A/8u+BHxP3yh3NDjqSxO psL06BvsuUTI5a4qJ3LYJAgIYs8A3VGxxakfpRs7PDGHiZYUjV251wwuN8qVuo7j 4jCIiNuYwEh8+ZBQAFecpgQCp9OYMw9XRIDHY4lejq+SfqHrcACs5xLkaUc1V0aY p/5G3q6mrvth+bnm+WK0z64gXny3pSPLymcqivurN1z4V3ZKjkB+44xIsnJWX05Z QfIZH3bhqxjUd7QIAe9+D2JsP0LNSWLwq1TJlyAzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU3MoluLYbIwnuMvCVcWzmZ4dSy+QwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2FhZDI0YTJlLWY2MWItNDJiNC05NTA5LTllMDZhMTM2ZWIwYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwVQIwDQYJKoZIhvcNAQELBQADggEBAEy/f7P4mDLv30hycABYukrV w4E+tT/T+nnASIF980h/KMM3hIyi1T8mGxMV0c3yEHY4ceTskmoQLDixpZAhlh8a s9e7DAoor7yhmsHyCFG50cGBmJSiMl7Cwj48IqmgUhzGtz4uG1dQ9p2HouvOoXK/ +mhhcTZMp5rKPn+v9lLd588YmGxkmEIq+a+5ZJ8A+BgjMwLYMFtvaqRLjjmM/EKx 6PZ3Q8CWI3+ZTorR3XlMkW9hP4qzPGdzt/E8H7bSdiF2nekTdJnslpNw1ENUe/aT VRKMzfufTbsFHHGrtr8kEQuQDETZS9Cl1F8b94yWfzG6lYkqrnjkCN3F5ZiqzCA= -----END CERTIFICATE-----Generated at Sun Mar 1 22:14:13 2026 by rpki-client