$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b90bcce5-377e-4df4-b77e-97a06ec916c4.roa File: b90bcce5-377e-4df4-b77e-97a06ec916c4.roa (raw, json) Hash identifier: GC6ZhgTczvhOcp9JcyAhnTPE82PkCEg67IKWGhIyDIs= Subject key identifier: 3B:8E:34:FF:CA:11:F9:95:D1:8D:41:2A:A8:BA:6B:94:61:81:C8:4A Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 718E5CE8DA0C1B1AC0565306BB271A54CE39C9F2 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b90bcce5-377e-4df4-b77e-97a06ec916c4.roa Signing time: Sat 28 Feb 2026 05:00:42 +0000 ROA not before: Sat 28 Feb 2026 05:00:42 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:30::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:8e:5c:e8:da:0c:1b:1a:c0:56:53:06:bb:27:1a:54:ce:39:c9:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Feb 28 05:00:42 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=f6662711ea00e5638f24b49d7d22bad8781585699ba947eb9497181a1f1d38b2, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ca:80:4e:2c:4e:f2:61:34:ff:0e:46:86:40: c0:d8:91:55:1e:50:20:19:4d:0e:25:ea:1d:5a:9b: 02:45:ab:d6:22:4d:47:4b:c9:a8:c8:0b:3f:3a:97: 69:48:61:dc:18:9e:ca:a3:8a:79:c7:e2:85:f4:d7: e5:c8:05:97:12:20:53:26:5d:44:c4:6c:27:13:67: 3b:9a:00:ae:58:48:6b:f9:23:28:77:41:cf:94:23: 16:b7:fb:b0:ed:3c:c8:3b:c7:db:a4:b6:e8:7e:0a: 86:70:df:c4:63:aa:5b:df:ae:83:40:3f:d6:dd:1f: 6a:f3:1d:98:56:ba:cd:32:44:c2:08:6f:99:f5:30: ee:c5:47:2f:51:c1:fa:d2:eb:b1:19:a1:51:5d:b0: 1f:61:a5:17:9f:78:f7:88:dd:aa:0a:f8:ba:97:5b: bf:1e:f2:59:15:34:20:2e:43:b8:08:6d:7c:5a:55: 5c:7f:15:4d:3d:53:da:e5:90:a7:35:c6:e3:10:66: 22:1d:1c:14:fc:02:db:82:b8:7b:df:a5:e7:b8:89: c7:08:c6:cb:61:64:2c:80:fd:7b:5a:b8:c5:0f:8f: 8d:2f:79:66:5f:8c:d0:4d:04:01:e1:c9:88:b0:57: 94:ec:4a:2e:3a:19:3c:d7:c9:ac:c7:8a:ae:aa:aa: bf:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:8E:34:FF:CA:11:F9:95:D1:8D:41:2A:A8:BA:6B:94:61:81:C8:4A X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b90bcce5-377e-4df4-b77e-97a06ec916c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:30::/44 Signature Algorithm: sha256WithRSAEncryption 9f:f1:03:f7:52:00:5b:33:13:d2:c8:1b:98:8d:f5:4d:c2:99: 62:77:f2:e7:9d:eb:a1:70:c6:c8:87:af:8c:5d:05:4a:76:9c: 0a:d4:df:83:31:16:ce:8a:4a:75:24:2e:cf:74:23:e1:6b:a3: 3f:f4:94:be:05:66:0f:c3:c4:c9:3b:11:df:b1:11:73:d5:07: 15:a7:ac:0d:a4:24:df:80:f4:1d:d6:74:fd:92:8c:a8:61:2e: 40:ae:b3:cd:70:81:7c:64:9c:fa:4d:91:dd:53:86:87:70:7a: 92:1d:bd:ea:a9:74:a5:55:74:01:9b:20:15:8f:87:9a:c8:78: 1b:02:08:61:50:d4:ff:da:22:4c:a2:46:26:72:56:46:1c:72: fc:0b:70:40:25:d9:9a:94:80:b6:fb:7b:8d:cc:11:06:0b:79: 7c:39:1e:47:f2:b2:5f:93:ff:1d:b5:3b:46:42:a8:e2:60:b8: 41:da:9e:71:b8:e8:48:7a:f5:28:69:97:66:ed:81:6c:68:e5: 18:ad:f6:e0:ed:93:36:9d:b0:97:f2:18:7d:df:40:fb:cf:43: 4f:9f:f6:c1:5d:43:2d:33:bc:08:4f:f4:be:d8:d9:31:9e:c1: 3f:03:c5:50:52:4b:68:f4:35:b3:f8:b4:19:e7:59:f9:ec:c1: cb:ea:3c:4c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcY5c6NoMGxrAVlMGuycaVM45yfIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMjI4MDUwMDQyWhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNjY2MjcxMWVhMDBlNTYzOGYyNGI0OWQ3ZDIyYmFkODc4 MTU4NTY5OWJhOTQ3ZWI5NDk3MTgxYTFmMWQzOGIyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpyoBOLE7yYTT/DkaGQMDYkVUeUCAZTQ4l6h1amwJFq9Yi TUdLyajICz86l2lIYdwYnsqjinnH4oX01+XIBZcSIFMmXUTEbCcTZzuaAK5YSGv5 Iyh3Qc+UIxa3+7DtPMg7x9uktuh+CoZw38RjqlvfroNAP9bdH2rzHZhWus0yRMII b5n1MO7FRy9RwfrS67EZoVFdsB9hpRefePeI3aoK+LqXW78e8lkVNCAuQ7gIbXxa VVx/FU09U9rlkKc1xuMQZiIdHBT8AtuCuHvfpee4iccIxsthZCyA/XtauMUPj40v eWZfjNBNBAHhyYiwV5TsSi46GTzXyazHiq6qqr9jAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUO440/8oR+ZXRjUEqqLprlGGByEowHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2I5MGJjY2U1LTM3N2UtNGRmNC1iNzdlLTk3YTA2ZWM5MTZjNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwADAwDQYJKoZIhvcNAQELBQADggEBAJ/xA/dSAFszE9LIG5iN9U3C mWJ38ued66FwxsiHr4xdBUp2nArU34MxFs6KSnUkLs90I+Froz/0lL4FZg/DxMk7 Ed+xEXPVBxWnrA2kJN+A9B3WdP2SjKhhLkCus81wgXxknPpNkd1ThodwepIdveqp dKVVdAGbIBWPh5rIeBsCCGFQ1P/aIkyiRiZyVkYccvwLcEAl2ZqUgLb7e43MEQYL eXw5Hkfysl+T/x21O0ZCqOJguEHannG46Eh69Shpl2btgWxo5Rit9uDtkzadsJfy GH3fQPvPQ0+f9sFdQy0zvAhP9L7Y2TGewT8DxVBSS2j0NbP4tBnnWfnswcvqPEw= -----END CERTIFICATE-----Generated at Sun Mar 1 22:02:06 2026 by rpki-client