$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c0b0b880-e632-4ca7-8b61-0658e8846f8b.roa File: c0b0b880-e632-4ca7-8b61-0658e8846f8b.roa (raw, json) Hash identifier: aWyHLmgSFh4cAMJ9OkusJiil4kRscVQtNwCTaqtPf8A= Subject key identifier: 92:C5:ED:F6:53:7C:FD:4E:7D:1A:D1:95:B3:D7:D1:66:A5:80:AD:32 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 4C420F24FDA573B9EF2BBB2B6B2667045839B12E Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c0b0b880-e632-4ca7-8b61-0658e8846f8b.roa Signing time: Fri 13 Feb 2026 15:10:07 +0000 ROA not before: Fri 13 Feb 2026 15:10:07 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6109::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:42:0f:24:fd:a5:73:b9:ef:2b:bb:2b:6b:26:67:04:58:39:b1:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Feb 13 15:10:07 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=0ed963d3ecbb530228d7ed07c8a07f2cec312d8fbc1bbc9228bf94911bc32224, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2a:d0:5a:8c:f3:a1:a6:e1:5d:3d:40:44:f2: 1f:58:d9:28:d6:28:c8:aa:94:d0:7a:4d:7e:f0:82: 24:c2:60:fc:09:68:56:61:13:8d:95:0d:09:9e:3d: 71:8b:7a:af:53:40:7e:db:cc:bc:39:25:c1:92:55: ac:33:8d:c3:ff:e9:33:39:c7:04:53:25:ef:6e:ed: 80:b8:59:2f:df:db:54:7c:4a:a8:dc:cf:ff:fc:43: ed:99:0d:50:71:d1:ed:c3:d2:e1:44:f8:58:e7:09: a5:ed:18:3f:d1:31:25:30:0e:ec:7b:0b:a9:e8:d9: 18:2d:3b:6c:1c:76:db:c5:dd:14:89:fb:55:5c:19: b3:07:36:ac:8f:c2:05:8e:31:51:e2:4d:03:32:4b: 39:0b:e6:de:64:0c:56:68:c0:c5:fa:d6:55:1a:61: 4d:98:c9:3b:d7:b2:d4:57:e1:15:ab:32:cf:43:2d: 43:c0:68:7f:20:26:bb:57:56:63:bb:fb:1f:e1:d9: c4:96:8b:b2:17:a6:21:51:cd:02:3f:cd:14:1b:9c: 16:cd:46:8a:a8:bf:05:c4:cb:64:06:ab:a5:ae:b7: 9e:e6:71:c1:f9:90:fc:5b:c0:14:d8:d7:6a:a8:33: db:24:dd:37:5c:77:1c:76:f3:08:27:c5:2f:45:7b: 22:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:C5:ED:F6:53:7C:FD:4E:7D:1A:D1:95:B3:D7:D1:66:A5:80:AD:32 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c0b0b880-e632-4ca7-8b61-0658e8846f8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6109::/48 Signature Algorithm: sha256WithRSAEncryption a1:a0:bd:7f:23:99:4c:21:4a:8b:05:6e:b8:b3:9f:ff:62:fe: 63:47:b5:f3:3e:72:e6:ab:fb:e8:e9:ae:9e:68:75:3a:1c:d8: c5:d2:05:ef:7e:72:2d:c9:de:fc:ac:56:cd:af:af:07:05:73: 43:4c:58:0f:28:c7:e1:65:f1:3f:2a:14:e0:03:8e:d0:5b:80: 7f:9e:bd:f9:68:8d:bb:98:71:5b:27:c7:85:cc:ca:aa:6f:f2: 16:f2:0f:93:ec:1d:75:e6:ce:e0:66:49:49:40:a6:17:15:65: a2:c0:7a:1d:fd:d5:7b:46:96:83:53:23:63:ef:86:9e:94:91: 7f:4d:e7:24:23:f6:c8:a1:22:6a:e3:36:f2:42:c3:84:ff:32: 62:4c:11:f8:51:8c:b0:52:e5:fb:e6:9f:02:d5:27:40:7e:15: b7:b4:17:49:94:b8:f0:f6:00:ef:f8:67:a8:2f:7d:2a:fb:dd: be:99:1b:21:70:c5:55:7a:c9:9e:a5:56:94:22:24:a3:f5:e6: a2:a9:e8:36:0b:19:0a:e4:48:fc:cc:b2:b9:17:7b:5a:63:90: d2:c7:e4:5c:8a:9c:a9:b7:df:44:88:91:24:58:f4:88:b2:13: b1:03:fb:6d:5f:e7:23:33:fb:8d:44:75:f7:89:a9:6a:69:db: 31:7a:38:5f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTEIPJP2lc7nvK7srayZnBFg5sS4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMjEzMTUxMDA3WhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZWQ5NjNkM2VjYmI1MzAyMjhkN2VkMDdjOGEwN2YyY2Vj MzEyZDhmYmMxYmJjOTIyOGJmOTQ5MTFiYzMyMjI0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGKtBajPOhpuFdPUBE8h9Y2SjWKMiqlNB6TX7wgiTCYPwJ aFZhE42VDQmePXGLeq9TQH7bzLw5JcGSVawzjcP/6TM5xwRTJe9u7YC4WS/f21R8 Sqjcz//8Q+2ZDVBx0e3D0uFE+FjnCaXtGD/RMSUwDux7C6no2RgtO2wcdtvF3RSJ +1VcGbMHNqyPwgWOMVHiTQMySzkL5t5kDFZowMX61lUaYU2YyTvXstRX4RWrMs9D LUPAaH8gJrtXVmO7+x/h2cSWi7IXpiFRzQI/zRQbnBbNRoqovwXEy2QGq6Wut57m ccH5kPxbwBTY12qoM9sk3Tdcdxx28wgnxS9FeyKPAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUksXt9lN8/U59GtGVs9fRZqWArTIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2MwYjBiODgwLWU2MzItNGNhNy04YjYxLTA2NThlODg0NmY4Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQkwDQYJKoZIhvcNAQELBQADggEBAKGgvX8jmUwhSosFbrizn/9i /mNHtfM+cuar++jprp5odToc2MXSBe9+ci3J3vysVs2vrwcFc0NMWA8ox+Fl8T8q FOADjtBbgH+evflojbuYcVsnx4XMyqpv8hbyD5PsHXXmzuBmSUlAphcVZaLAeh39 1XtGloNTI2Pvhp6UkX9N5yQj9sihImrjNvJCw4T/MmJMEfhRjLBS5fvmnwLVJ0B+ Fbe0F0mUuPD2AO/4Z6gvfSr73b6ZGyFwxVV6yZ6lVpQiJKP15qKp6DYLGQrkSPzM srkXe1pjkNLH5FyKnKm330SIkSRY9IiyE7ED+21f5yMz+41EdfeJqWpp2zF6OF8= -----END CERTIFICATE-----Generated at Mon Mar 2 04:29:17 2026 by rpki-client