$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bf3aefd7-144a-4210-8532-a7b6e0533dd6.roa File: bf3aefd7-144a-4210-8532-a7b6e0533dd6.roa (raw, json) Hash identifier: abHZZVu6CmV34ViDT8/RB9xNA57iIhVFtZHrGx7zTz0= Subject key identifier: D1:55:10:AB:DE:58:F4:28:A8:40:F3:D5:75:03:D0:88:52:9E:B2:A2 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 4E7D81CFA007658D24AEF96449E1635C9BDABE4C Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bf3aefd7-144a-4210-8532-a7b6e0533dd6.roa Signing time: Sat 28 Feb 2026 05:00:33 +0000 ROA not before: Sat 28 Feb 2026 05:00:33 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:e700::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:7d:81:cf:a0:07:65:8d:24:ae:f9:64:49:e1:63:5c:9b:da:be:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Feb 28 05:00:33 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=e6a3b5b67ab682959670d0ee4ea2931ac09bda1bc389c9558c3cef031269705d, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:49:f8:b0:be:56:ca:5c:96:18:fd:3a:68:ad: 60:cc:44:ad:f8:e2:5c:5f:11:49:80:f1:fb:1e:80: bf:f2:86:f2:e8:33:23:ee:72:58:92:c5:5f:32:c6: 4c:f9:7b:c6:3d:ff:45:bc:c7:e4:d1:8e:4a:24:6f: ee:86:d1:08:e4:33:96:92:d2:ae:0a:f4:7b:5a:c2: 10:a0:19:30:7f:bc:82:17:91:98:df:aa:2b:5c:4e: ef:07:6a:4b:49:f8:c0:5a:b9:23:19:5a:cf:d2:cd: 5a:3b:93:13:f2:64:1f:2b:4a:20:f4:3d:63:3f:eb: e8:1f:2c:81:28:9b:e9:6e:c9:1e:ff:84:2b:41:f6: 38:0a:3c:e3:a7:11:36:98:32:7f:dc:8e:92:2c:8d: 66:37:cd:e0:af:a7:4c:e0:87:00:44:52:12:19:df: 94:79:d0:13:2e:bb:1f:f3:fc:46:74:d8:7c:57:ad: 49:6a:95:12:a6:b1:7b:8b:64:ee:86:52:f1:f8:7f: 09:18:00:89:07:ff:f1:8f:fa:2f:f7:18:78:1c:10: ab:46:f8:83:f2:32:eb:d2:44:b5:77:ca:2f:0a:73: a2:d6:ff:79:da:0c:d9:9f:ac:5e:0d:64:d1:b1:36: 6d:9d:3f:77:81:25:5a:38:3a:96:66:b7:09:b1:c6: e2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:55:10:AB:DE:58:F4:28:A8:40:F3:D5:75:03:D0:88:52:9E:B2:A2 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bf3aefd7-144a-4210-8532-a7b6e0533dd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e700::/42 Signature Algorithm: sha256WithRSAEncryption 0e:fd:d3:d3:25:2f:1c:f3:9d:12:98:2c:68:b9:3a:f9:37:ae: d2:fa:ab:c7:93:de:b1:28:35:29:b5:44:b1:bd:9b:31:ac:7a: 58:c5:64:cb:9a:37:01:48:17:c0:3c:f7:00:5d:23:8a:92:f6: b2:82:11:1e:c1:b5:6d:53:05:9a:3c:ca:78:6c:ad:1b:aa:a1: df:6f:e6:28:48:bf:ea:4c:8b:fa:0b:cd:71:95:78:ad:77:00: f6:2a:76:8e:30:83:68:fa:ae:8d:d7:9e:30:35:33:42:4a:22: 72:37:44:bc:34:44:d8:15:1c:15:06:52:81:89:0c:55:0b:dc: a5:eb:4f:4d:a3:67:0e:31:a5:20:7c:5b:81:e1:0f:81:a4:37: 55:f6:97:f7:bc:bb:fe:c0:3e:6b:53:e3:50:25:ef:98:a6:0b: f9:b8:21:1e:9d:a1:fb:13:0d:27:39:ac:d8:52:a0:68:7d:ab: db:5f:8e:51:43:02:e1:32:58:c6:cc:71:f2:84:58:cf:e0:16: 2c:be:07:92:63:f6:a6:46:8e:5f:07:0f:29:bf:9a:0b:04:39: ed:a5:42:26:c4:e9:5a:de:6a:e4:15:8f:fe:f8:cd:35:48:d1: d4:e9:31:f7:a4:e3:c6:bb:81:d5:44:25:40:94:59:7f:55:aa: 85:36:42:7d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTn2Bz6AHZY0krvlkSeFjXJvavkwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMjI4MDUwMDMzWhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNmEzYjViNjdhYjY4Mjk1OTY3MGQwZWU0ZWEyOTMxYWMw OWJkYTFiYzM4OWM5NTU4YzNjZWYwMzEyNjk3MDVkMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDfSfiwvlbKXJYY/TporWDMRK344lxfEUmA8fsegL/yhvLo MyPucliSxV8yxkz5e8Y9/0W8x+TRjkokb+6G0QjkM5aS0q4K9HtawhCgGTB/vIIX kZjfqitcTu8HaktJ+MBauSMZWs/SzVo7kxPyZB8rSiD0PWM/6+gfLIEom+luyR7/ hCtB9jgKPOOnETaYMn/cjpIsjWY3zeCvp0zghwBEUhIZ35R50BMuux/z/EZ02HxX rUlqlRKmsXuLZO6GUvH4fwkYAIkH//GP+i/3GHgcEKtG+IPyMuvSRLV3yi8Kc6LW /3naDNmfrF4NZNGxNm2dP3eBJVo4OpZmtwmxxuLlAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU0VUQq95Y9CioQPPVdQPQiFKesqIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2JmM2FlZmQ3LTE0NGEtNDIxMC04NTMyLWE3YjZlMDUzM2RkNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD75wAwDQYJKoZIhvcNAQELBQADggEBAA7909MlLxzznRKYLGi5Ovk3 rtL6q8eT3rEoNSm1RLG9mzGseljFZMuaNwFIF8A89wBdI4qS9rKCER7BtW1TBZo8 ynhsrRuqod9v5ihIv+pMi/oLzXGVeK13APYqdo4wg2j6ro3XnjA1M0JKInI3RLw0 RNgVHBUGUoGJDFUL3KXrT02jZw4xpSB8W4HhD4GkN1X2l/e8u/7APmtT41Al75im C/m4IR6dofsTDSc5rNhSoGh9q9tfjlFDAuEyWMbMcfKEWM/gFiy+B5Jj9qZGjl8H Dym/mgsEOe2lQibE6VreauQVj/74zTVI0dTpMfek48a7gdVEJUCUWX9VqoU2Qn0= -----END CERTIFICATE-----Generated at Sun Mar 1 23:53:45 2026 by rpki-client