$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ba699c1e-9e17-4134-9d1f-8ba97ffd9f3e.roa File: ba699c1e-9e17-4134-9d1f-8ba97ffd9f3e.roa (raw, json) Hash identifier: iwgYuauVF1sOwLovjJLPahWiFzaq0IUIpXGEEQH0tEM= Subject key identifier: 5D:15:D7:01:E6:43:C8:3E:C1:D8:82:BB:AD:68:38:9F:B0:CF:02:38 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 013CF5473F8BB643DCAE7D17AB4FDB5DD5C5DCDB Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ba699c1e-9e17-4134-9d1f-8ba97ffd9f3e.roa Signing time: Fri 13 Feb 2026 15:00:40 +0000 ROA not before: Fri 13 Feb 2026 15:00:40 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:611a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:3c:f5:47:3f:8b:b6:43:dc:ae:7d:17:ab:4f:db:5d:d5:c5:dc:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Feb 13 15:00:40 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=a855967438b9e20be113327e986b803cc92b6cf04bc705a91f4c102b50f3c2bd, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4a:e0:e7:bd:5f:55:8d:ba:13:35:33:28:fd: ef:36:ff:19:e9:ab:b8:c9:be:1a:25:5d:54:32:32: b9:c0:eb:e1:29:05:f6:e8:b7:15:82:96:97:9e:8e: f9:19:81:4e:59:8e:94:e2:56:3c:27:63:75:37:53: 0c:f9:80:3b:8a:bc:42:7d:c9:18:fd:5e:19:e6:28: 4c:76:df:5e:ea:02:28:64:eb:0e:20:1c:86:81:5b: d3:19:51:61:26:e3:bc:c5:b9:53:7b:d4:3a:6d:b0: f1:73:bd:e5:4e:e5:4a:64:c7:68:76:ab:9f:15:0d: 81:e0:1a:a2:13:10:fa:6f:eb:e2:d6:37:42:c0:4f: 3c:dd:b2:be:ff:50:ea:c0:77:5f:38:36:48:72:d8: 88:41:44:d4:ec:da:c8:c4:fe:50:88:3e:07:85:86: 8d:47:11:16:0c:99:3a:b6:4d:5d:cf:15:a9:f0:56: ef:ab:62:fc:59:04:32:2e:2e:ca:e1:ae:be:fe:b4: bf:87:43:dc:96:d7:d1:6f:bf:31:1a:ef:01:88:c1: 32:5e:0e:06:9c:a3:24:b4:8d:21:8f:8a:9d:45:e3: 55:d7:ff:f5:7a:89:5c:bc:36:f8:8d:cb:c1:15:ba: 45:f6:f4:78:fa:e2:63:48:15:56:40:b8:74:68:cb: 0a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:15:D7:01:E6:43:C8:3E:C1:D8:82:BB:AD:68:38:9F:B0:CF:02:38 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ba699c1e-9e17-4134-9d1f-8ba97ffd9f3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:611a::/48 Signature Algorithm: sha256WithRSAEncryption 20:a7:ac:1a:b0:ce:41:b8:a0:e1:d7:49:f1:8b:78:95:5d:11: 26:fb:bc:ea:97:4e:c6:32:f0:c5:53:d6:5e:10:0f:75:18:a0: eb:4f:6d:06:91:cb:fc:a3:93:95:4c:f8:e1:c5:22:36:70:a1: 22:e7:32:12:56:76:fd:5a:e7:ba:7a:1f:86:75:a3:9c:e1:3f: 32:7b:27:95:db:18:05:ef:49:0f:4b:ab:b7:82:44:19:f8:57: 4b:02:2d:3a:00:9d:0d:2c:28:3a:de:a8:34:1d:84:de:0c:49: 78:03:55:cd:f3:44:73:0d:5c:9e:e5:cf:06:ad:e5:f6:c6:2e: bb:3b:b1:78:18:ee:23:27:b7:9a:ac:a7:07:4c:5c:c8:c8:bb: 48:59:7e:49:65:11:de:93:fe:14:e4:96:ac:b4:76:b5:c5:4c: ac:a1:06:7f:25:8f:39:fa:02:dd:a1:6f:a9:e4:93:c5:c4:98: fa:39:3b:69:3f:e3:e9:01:b3:8a:a4:7c:7b:49:f7:67:1a:8b: dd:69:68:74:5f:ee:3f:93:87:82:89:bb:10:6f:f7:90:32:28: 81:27:9f:ac:3d:4e:11:bf:95:54:24:db:56:d8:7c:33:65:9d: 59:af:c3:a0:6f:56:fb:dc:9e:3f:8d:17:e2:77:c9:53:5b:10: 28:91:1d:a7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUATz1Rz+LtkPcrn0Xq0/bXdXF3NswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMjEzMTUwMDQwWhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhODU1OTY3NDM4YjllMjBiZTExMzMyN2U5ODZiODAzY2M5 MmI2Y2YwNGJjNzA1YTkxZjRjMTAyYjUwZjNjMmJkMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjSuDnvV9VjboTNTMo/e82/xnpq7jJvholXVQyMrnA6+Ep BfbotxWClpeejvkZgU5ZjpTiVjwnY3U3Uwz5gDuKvEJ9yRj9XhnmKEx2317qAihk 6w4gHIaBW9MZUWEm47zFuVN71DptsPFzveVO5Upkx2h2q58VDYHgGqITEPpv6+LW N0LATzzdsr7/UOrAd184Nkhy2IhBRNTs2sjE/lCIPgeFho1HERYMmTq2TV3PFanw Vu+rYvxZBDIuLsrhrr7+tL+HQ9yW19FvvzEa7wGIwTJeDgacoyS0jSGPip1F41XX //V6iVy8NviNy8EVukX29Hj64mNIFVZAuHRoywqBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUXRXXAeZDyD7B2IK7rWg4n7DPAjgwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2JhNjk5YzFlLTllMTctNDEzNC05ZDFmLThiYTk3ZmZkOWYzZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYRowDQYJKoZIhvcNAQELBQADggEBACCnrBqwzkG4oOHXSfGLeJVd ESb7vOqXTsYy8MVT1l4QD3UYoOtPbQaRy/yjk5VM+OHFIjZwoSLnMhJWdv1a57p6 H4Z1o5zhPzJ7J5XbGAXvSQ9Lq7eCRBn4V0sCLToAnQ0sKDreqDQdhN4MSXgDVc3z RHMNXJ7lzwat5fbGLrs7sXgY7iMnt5qspwdMXMjIu0hZfkllEd6T/hTklqy0drXF TKyhBn8ljzn6At2hb6nkk8XEmPo5O2k/4+kBs4qkfHtJ92cai91paHRf7j+Th4KJ uxBv95AyKIEnn6w9ThG/lVQk21bYfDNlnVmvw6BvVvvcnj+NF+J3yVNbECiRHac= -----END CERTIFICATE-----Generated at Sun Mar 1 21:58:42 2026 by rpki-client