$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ac2a9611-2cea-40b0-bf97-738c3e8fa5fe.roa File: ac2a9611-2cea-40b0-bf97-738c3e8fa5fe.roa (raw, json) Hash identifier: Ujs8sm6QrOJHfyDwio8hLVEbJJaiFmU1aXPPpIJCdXQ= Subject key identifier: 2E:7E:9A:8C:BF:C2:76:71:B1:7B:D9:33:78:D5:B3:DF:E6:85:15:62 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 42036F39558538F2767039688C19AFFEDEA3F7AD Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ac2a9611-2cea-40b0-bf97-738c3e8fa5fe.roa Signing time: Sat 07 Feb 2026 00:10:13 +0000 ROA not before: Sat 07 Feb 2026 00:10:13 +0000 ROA not after: Fri 08 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fa::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:03:6f:39:55:85:38:f2:76:70:39:68:8c:19:af:fe:de:a3:f7:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Feb 7 00:10:13 2026 GMT Not After : May 8 23:59:59 2026 GMT Subject: serialNumber=cbfafeb580f96fd7198c71a2a57ca87666690557da77dd9502399d8bd6afe121, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:31:16:a5:42:bb:e5:0a:40:ea:f3:ba:ec:bc: 15:0d:e9:07:2e:10:fb:8a:93:26:dd:cc:0f:5b:a8: 3b:e8:89:8c:55:6a:ee:7f:1b:ea:b6:16:97:1a:ad: 2a:52:ce:15:c6:3b:ef:f4:c1:8b:f6:36:42:8b:ba: 34:6e:b1:7f:20:a8:9d:5a:83:6a:28:e7:4f:be:20: b9:ec:b3:30:2c:64:e0:2e:ab:0f:60:b1:0f:0b:83: fa:98:c0:fa:a2:21:c8:fa:4e:35:d6:43:12:5d:ff: 17:f2:2d:e5:a0:f7:a2:ba:7f:3e:ae:db:6c:ee:ca: c3:ba:25:11:97:e3:cd:cf:37:86:ce:9d:5d:a0:7a: c8:d0:76:d0:3a:56:b1:0a:e8:93:d2:87:20:b9:ec: a9:cb:11:dc:32:e2:ff:5b:e3:9b:05:f8:d9:10:df: d3:9b:96:a4:79:9b:6a:f3:4a:ca:ff:83:5a:93:50: 14:60:15:c3:e9:31:f0:f2:33:bd:ea:4b:12:13:96: 48:a0:bc:2a:3e:43:e0:1a:7b:bb:f7:53:cd:92:7a: 8a:2c:cf:9d:2e:30:d2:ce:41:81:ed:aa:2e:03:73: df:be:1c:3f:62:28:c0:1e:aa:97:14:da:ae:7c:a2: ea:33:7d:d8:55:06:c4:01:b2:57:21:07:e5:84:dd: 15:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:7E:9A:8C:BF:C2:76:71:B1:7B:D9:33:78:D5:B3:DF:E6:85:15:62 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ac2a9611-2cea-40b0-bf97-738c3e8fa5fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fa::/32 Signature Algorithm: sha256WithRSAEncryption 35:f6:d0:59:29:56:68:63:76:e9:8c:87:77:ee:3a:78:26:96: 5f:65:75:a3:38:24:85:ba:70:58:d2:db:12:05:e7:ac:22:cc: 6d:d8:11:f3:51:04:76:e0:65:53:9f:aa:59:0b:a9:d7:1a:5b: 83:a3:9c:f2:d4:e2:84:84:87:65:a1:c3:dd:98:f2:03:90:d8: 57:d4:01:e4:26:a1:c4:0a:86:c6:a8:ef:3d:db:9d:bc:bd:7d: 69:05:ed:4e:51:44:d0:ce:f1:f7:85:5c:d2:2d:ab:9d:2c:d2: ed:d5:47:cf:63:f7:26:ce:5b:c7:a2:2f:a0:e5:b2:a7:0e:a0: 32:b7:70:9a:3d:6c:f8:24:7e:df:8f:e3:de:66:86:75:a0:8c: e1:08:ef:02:9f:41:f2:cf:b4:b5:f1:2b:1c:b4:ff:ea:62:d8: 3d:25:fa:73:2b:2b:90:7c:a7:38:57:75:9c:74:d6:e1:0e:84: 72:e0:d7:72:e5:89:93:f0:f5:cb:d6:15:d2:a2:aa:7e:b1:ae: 34:28:78:83:bf:d9:e2:16:89:f9:80:c4:78:56:07:8e:08:b1: 16:41:3c:34:f7:05:00:4e:9c:c9:b2:3b:2b:53:93:d6:9b:59: 97:e0:25:39:c1:f4:9f:01:77:e8:26:af:09:ee:45:89:0c:e8: 11:48:3b:0b -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUQgNvOVWFOPJ2cDlojBmv/t6j960wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMjA3MDAxMDEzWhcNMjYwNTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BjYmZhZmViNTgwZjk2ZmQ3MTk4YzcxYTJhNTdjYTg3NjY2 NjkwNTU3ZGE3N2RkOTUwMjM5OWQ4YmQ2YWZlMTIxMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCSMRalQrvlCkDq87rsvBUN6QcuEPuKkybdzA9bqDvoiYxV au5/G+q2FpcarSpSzhXGO+/0wYv2NkKLujRusX8gqJ1ag2oo50++ILnsszAsZOAu qw9gsQ8Lg/qYwPqiIcj6TjXWQxJd/xfyLeWg96K6fz6u22zuysO6JRGX483PN4bO nV2gesjQdtA6VrEK6JPShyC57KnLEdwy4v9b45sF+NkQ39OblqR5m2rzSsr/g1qT UBRgFcPpMfDyM73qSxITlkigvCo+Q+Aae7v3U82Seoosz50uMNLOQYHtqi4Dc9++ HD9iKMAeqpcU2q58ouozfdhVBsQBslchB+WE3RXlAgMBAAGjggKyMIICrjAdBgNV HQ4EFgQULn6ajL/CdnGxe9kzeNWz3+aFFWIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2FjMmE5NjExLTJjZWEtNDBiMC1iZjk3LTczOGMzZThmYTVmZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAmAPD6MA0GCSqGSIb3DQEBCwUAA4IBAQA19tBZKVZoY3bpjId37jp4JpZf ZXWjOCSFunBY0tsSBeesIsxt2BHzUQR24GVTn6pZC6nXGluDo5zy1OKEhIdlocPd mPIDkNhX1AHkJqHECobGqO892528vX1pBe1OUUTQzvH3hVzSLaudLNLt1UfPY/cm zlvHoi+g5bKnDqAyt3CaPWz4JH7fj+PeZoZ1oIzhCO8Cn0Hyz7S18SsctP/qYtg9 JfpzKyuQfKc4V3WcdNbhDoRy4Ndy5YmT8PXL1hXSoqp+sa40KHiDv9niFon5gMR4 VgeOCLEWQTw09wUATpzJsjsrU5PWm1mX4CU5wfSfAXfoJq8J7kWJDOgRSDsL -----END CERTIFICATE-----Generated at Mon Mar 2 01:35:30 2026 by rpki-client