$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ab7f6e22-1b78-4330-bfdd-974eea4f73df.roa File: ab7f6e22-1b78-4330-bfdd-974eea4f73df.roa (raw, json) Hash identifier: y2uW2WYf6aA3ECRZCVWgNa1VirTtOfE4nEyuo65dpjk= Subject key identifier: 2E:EA:04:0B:B5:85:37:60:73:D4:04:5C:C5:B0:D4:72:B1:D8:D5:18 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 6A1A9894FD3DC6246958EF4DF63F2A2B2D1500BF Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ab7f6e22-1b78-4330-bfdd-974eea4f73df.roa Signing time: Sun 01 Mar 2026 01:00:13 +0000 ROA not before: Sun 01 Mar 2026 01:00:13 +0000 ROA not after: Sat 30 May 2026 23:59:59 +0000 asID: 8987 IP address blocks: 2600:f0f0:6123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:1a:98:94:fd:3d:c6:24:69:58:ef:4d:f6:3f:2a:2b:2d:15:00:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Mar 1 01:00:13 2026 GMT Not After : May 30 23:59:59 2026 GMT Subject: serialNumber=724e11af99f79b519ff682b1e09df08c87362a6fc768bd547a4d30ee502c9271, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:87:c7:8f:b9:63:65:80:0f:c8:34:df:b3:1b: e7:c0:fd:e5:ba:9d:a8:17:92:4d:73:43:f1:d7:37: 00:8c:20:f2:43:ec:35:dc:2d:02:c9:22:4c:ce:02: a6:fb:3a:79:c2:f2:9d:39:e9:b7:2b:6a:de:31:87: 32:17:99:50:06:da:4a:85:7b:0c:9f:10:63:fb:4a: d1:e0:40:71:5a:43:25:0e:5d:b5:4e:00:7a:2c:41: d5:2b:32:02:3b:32:10:df:ed:6b:00:a8:9d:33:7d: 52:12:1e:0e:ee:43:5f:46:6a:ce:3a:c4:96:76:7b: 69:12:00:dc:06:d9:8e:fc:b3:a1:57:c6:da:f8:08: 5f:8c:4e:4b:d1:81:db:24:ad:48:bd:05:b1:30:14: 64:46:20:d2:cb:74:d8:c6:56:31:9b:6a:5b:9a:0e: f7:1e:76:bf:c2:fd:c9:9b:4c:25:40:bd:b1:08:30: 02:ee:50:26:3f:aa:ab:e2:47:c3:42:13:d8:ee:a0: 0b:4a:9e:67:40:e4:a4:19:d4:a1:1a:d9:91:0b:a4: 06:a3:42:18:85:80:c8:4c:dc:b0:65:a6:79:2a:64: d9:2d:2b:56:7e:7f:c3:b3:e7:47:c3:2a:dd:13:9a: fe:f3:da:fc:69:a4:33:c7:c4:90:06:a2:07:78:81: 95:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:EA:04:0B:B5:85:37:60:73:D4:04:5C:C5:B0:D4:72:B1:D8:D5:18 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ab7f6e22-1b78-4330-bfdd-974eea4f73df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6123::/48 Signature Algorithm: sha256WithRSAEncryption 48:d4:67:52:37:f0:59:a0:3a:ec:5a:47:ad:ad:52:d5:b1:69: 5c:2b:57:15:c1:32:06:42:65:ed:75:a4:8a:48:e7:33:2a:01: 89:62:c3:d6:f5:bd:b2:19:44:93:61:82:3c:60:00:a7:f4:cc: f2:03:d4:fd:26:ad:fa:a5:81:14:89:d3:a9:c5:b2:c4:60:59: 4d:ba:57:21:7e:69:19:8a:03:4f:34:8a:18:74:ff:b2:7e:dc: 75:bf:02:3d:3c:91:7d:d1:8f:27:c2:c3:89:b8:51:ba:c2:49: ff:89:48:e3:2e:07:87:4c:03:0f:1d:09:93:9f:0c:f1:fe:dd: 41:09:a5:a4:f1:76:31:80:dd:11:96:29:9e:07:02:e5:0a:6f: 11:01:2b:c0:18:dc:3c:00:7a:70:2d:17:c2:4a:51:a4:65:26: 85:e4:f7:b0:97:6b:92:dc:44:67:e6:49:9a:1e:ad:a2:0e:da: c7:f0:be:2e:a1:d4:87:88:11:30:c9:cb:5b:3b:e7:e1:5a:0d: 46:d0:da:cb:79:25:2b:0b:11:4d:d3:bc:1d:99:09:e2:76:5a: 68:37:3d:56:ef:fc:c6:31:7a:27:8e:22:b1:76:e3:5d:75:56: e5:7f:6c:97:b2:c6:82:f4:37:75:ff:19:9e:1f:1b:9c:13:12: 36:70:c2:9f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUahqYlP09xiRpWO9N9j8qKy0VAL8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMzAxMDEwMDEzWhcNMjYwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MjRlMTFhZjk5Zjc5YjUxOWZmNjgyYjFlMDlkZjA4Yzg3 MzYyYTZmYzc2OGJkNTQ3YTRkMzBlZTUwMmM5MjcxMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDwh8ePuWNlgA/INN+zG+fA/eW6nagXkk1zQ/HXNwCMIPJD 7DXcLQLJIkzOAqb7OnnC8p056bcrat4xhzIXmVAG2kqFewyfEGP7StHgQHFaQyUO XbVOAHosQdUrMgI7MhDf7WsAqJ0zfVISHg7uQ19Gas46xJZ2e2kSANwG2Y78s6FX xtr4CF+MTkvRgdskrUi9BbEwFGRGINLLdNjGVjGbaluaDvcedr/C/cmbTCVAvbEI MALuUCY/qqviR8NCE9juoAtKnmdA5KQZ1KEa2ZELpAajQhiFgMhM3LBlpnkqZNkt K1Z+f8Oz50fDKt0Tmv7z2vxppDPHxJAGogd4gZWtAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQULuoEC7WFN2Bz1ARcxbDUcrHY1RgwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2FiN2Y2ZTIyLTFiNzgtNDMzMC1iZmRkLTk3NGVlYTRmNzNkZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYSMwDQYJKoZIhvcNAQELBQADggEBAEjUZ1I38FmgOuxaR62tUtWx aVwrVxXBMgZCZe11pIpI5zMqAYliw9b1vbIZRJNhgjxgAKf0zPID1P0mrfqlgRSJ 06nFssRgWU26VyF+aRmKA080ihh0/7J+3HW/Aj08kX3RjyfCw4m4UbrCSf+JSOMu B4dMAw8dCZOfDPH+3UEJpaTxdjGA3RGWKZ4HAuUKbxEBK8AY3DwAenAtF8JKUaRl JoXk97CXa5LcRGfmSZoeraIO2sfwvi6h1IeIETDJy1s75+FaDUbQ2st5JSsLEU3T vB2ZCeJ2Wmg3PVbv/MYxeieOIrF24111VuV/bJeyxoL0N3X/GZ4fG5wTEjZwwp8= -----END CERTIFICATE-----Generated at Mon Mar 2 08:50:33 2026 by rpki-client