$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b6f8c745-8807-42bd-924e-8afc5f67cb0c.roa File: b6f8c745-8807-42bd-924e-8afc5f67cb0c.roa (raw, json) Hash identifier: e+GR8tgq1huIIoN06zbjH7TUQnVqXa71IR30SOM+ccU= Subject key identifier: 1C:B4:5E:7E:6B:0B:70:71:23:49:7C:87:08:2B:DF:2A:A0:02:C1:08 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 0FC9C4078DAB640A27474872081E168C184551AA Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b6f8c745-8807-42bd-924e-8afc5f67cb0c.roa Signing time: Sun 01 Mar 2026 01:00:35 +0000 ROA not before: Sun 01 Mar 2026 01:00:35 +0000 ROA not after: Sat 30 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:e00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:c9:c4:07:8d:ab:64:0a:27:47:48:72:08:1e:16:8c:18:45:51:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Mar 1 01:00:35 2026 GMT Not After : May 30 23:59:59 2026 GMT Subject: serialNumber=bbddc6c492320014cbead610fb79ac6a9eb85b76caa3b520c581eab724a6a8c0, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a5:4a:25:6b:e5:04:3c:27:21:09:37:96:5f: 3e:83:a6:51:49:94:ab:2b:f7:87:50:6a:05:d9:46: a8:1e:e2:fc:45:44:39:d6:c5:a0:04:9b:28:a4:ac: 8f:65:24:4f:ef:d1:78:0d:bb:55:a4:9f:fc:7e:5d: 19:c3:ef:7d:c1:47:2a:c9:20:2f:03:84:9a:93:34: e9:ab:a3:6b:e4:f0:80:a8:19:f9:b6:da:c4:bf:d1: 01:33:b6:72:b9:61:42:28:e6:af:49:76:89:c4:f5: 5a:71:20:00:af:77:35:b9:9c:67:d8:dc:29:88:8c: 4d:ce:27:9a:54:11:5a:4c:d6:3e:6b:6a:c3:27:6e: d4:0c:85:15:84:ef:74:20:60:77:ce:b6:0c:5f:5a: 01:ac:71:84:4c:0e:f5:82:92:c1:db:a3:eb:17:2f: e1:8e:56:e7:5f:69:e3:96:62:08:2b:56:45:24:ef: 23:65:5c:96:34:56:1f:e5:93:7f:f9:4c:83:90:c0: b4:7f:2d:8c:3a:a4:e1:89:3e:79:bd:04:01:54:3a: 8e:db:d6:a9:1c:92:0c:87:9d:f6:4e:bd:63:51:65: 79:c0:2d:ca:2e:75:07:fa:97:23:d5:7a:80:94:b7: fc:da:b5:77:73:a6:45:39:e1:a6:27:2d:d2:5d:72: 62:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B4:5E:7E:6B:0B:70:71:23:49:7C:87:08:2B:DF:2A:A0:02:C1:08 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b6f8c745-8807-42bd-924e-8afc5f67cb0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:e00::/40 Signature Algorithm: sha256WithRSAEncryption 4b:8d:98:d0:ee:46:a3:c1:cd:48:a0:3c:44:c7:7e:98:7c:ef: 26:97:f2:dd:dc:e9:95:e7:09:4e:60:cb:69:e6:ea:4f:1f:bc: 21:4c:53:3a:33:0a:e7:ec:b7:50:dc:a8:9c:24:f7:da:1c:7a: e5:ff:2a:43:48:49:ea:e0:f9:06:55:3c:99:67:76:33:53:24: 11:02:72:47:6a:ee:11:a4:02:43:58:1a:48:b3:31:e7:07:39: 17:63:91:d0:74:ee:21:42:14:01:78:b9:59:3f:a9:e6:f6:13: 9a:18:24:cc:09:fd:70:9e:f5:44:e0:ae:55:5c:d1:5a:fd:c1: 5a:12:4b:93:18:23:a8:8e:73:46:22:0a:b9:56:ee:9d:d1:39: 12:81:8c:b3:2e:ca:30:c3:08:3c:08:73:f6:49:a7:85:6c:c6: f1:1e:9f:e3:9b:b0:45:8f:7a:bc:76:27:5e:9d:4b:73:e8:b7: 09:ec:8a:45:57:d6:f4:25:d6:7a:46:41:e8:ee:67:78:60:9e: f6:70:6d:03:cf:f1:45:d6:0c:e6:c0:d1:e7:10:ee:31:ff:eb: 11:71:53:51:d9:ef:a0:90:0a:14:2a:84:de:03:74:40:83:f6: 7e:19:81:f9:99:48:e0:b3:65:45:92:af:5d:c1:f5:05:fc:84: 66:85:37:17 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUD8nEB42rZAonR0hyCB4WjBhFUaowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMzAxMDEwMDM1WhcNMjYwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiYmRkYzZjNDkyMzIwMDE0Y2JlYWQ2MTBmYjc5YWM2YTll Yjg1Yjc2Y2FhM2I1MjBjNTgxZWFiNzI0YTZhOGMwMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDApUola+UEPCchCTeWXz6DplFJlKsr94dQagXZRqge4vxF RDnWxaAEmyikrI9lJE/v0XgNu1Wkn/x+XRnD733BRyrJIC8DhJqTNOmro2vk8ICo Gfm22sS/0QEztnK5YUIo5q9JdonE9VpxIACvdzW5nGfY3CmIjE3OJ5pUEVpM1j5r asMnbtQMhRWE73QgYHfOtgxfWgGscYRMDvWCksHbo+sXL+GOVudfaeOWYggrVkUk 7yNlXJY0Vh/lk3/5TIOQwLR/LYw6pOGJPnm9BAFUOo7b1qkckgyHnfZOvWNRZXnA LcoudQf6lyPVeoCUt/zatXdzpkU54aYnLdJdcmJxAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUHLRefmsLcHEjSXyHCCvfKqACwQgwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2I2ZjhjNzQ1LTg4MDctNDJiZC05MjRlLThhZmM1ZjY3Y2IwYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDwDjANBgkqhkiG9w0BAQsFAAOCAQEAS42Y0O5Go8HNSKA8RMd+mHzv Jpfy3dzplecJTmDLaebqTx+8IUxTOjMK5+y3UNyonCT32hx65f8qQ0hJ6uD5BlU8 mWd2M1MkEQJyR2ruEaQCQ1gaSLMx5wc5F2OR0HTuIUIUAXi5WT+p5vYTmhgkzAn9 cJ71ROCuVVzRWv3BWhJLkxgjqI5zRiIKuVbundE5EoGMsy7KMMMIPAhz9kmnhWzG 8R6f45uwRY96vHYnXp1Lc+i3CeyKRVfW9CXWekZB6O5neGCe9nBtA8/xRdYM5sDR 5xDuMf/rEXFTUdnvoJAKFCqE3gN0QIP2fhmB+ZlI4LNlRZKvXcH1BfyEZoU3Fw== -----END CERTIFICATE-----Generated at Mon Mar 2 02:47:40 2026 by rpki-client