$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c7dfb6fc-ab51-45b7-aa1c-723b8c263e73.roa File: c7dfb6fc-ab51-45b7-aa1c-723b8c263e73.roa (raw, json) Hash identifier: hutTelX9hOqRSwOveFWOr3ju6G90WT7xmkexgQBW8WY= Subject key identifier: C2:BA:A0:75:2F:5D:EF:BC:7D:0F:69:BB:4E:E2:D4:B7:93:DC:6A:DC Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 48B84B20832831A4383280A397FE681AE507C6D0 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c7dfb6fc-ab51-45b7-aa1c-723b8c263e73.roa Signing time: Sun 01 Mar 2026 00:50:23 +0000 ROA not before: Sun 01 Mar 2026 00:50:23 +0000 ROA not after: Sat 30 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:f109::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:b8:4b:20:83:28:31:a4:38:32:80:a3:97:fe:68:1a:e5:07:c6:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Mar 1 00:50:23 2026 GMT Not After : May 30 23:59:59 2026 GMT Subject: serialNumber=9da2e8e1ce742268e1106faea9f2ac1ef600cdd5b41d77205258ac4dc3315830, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ea:fa:7b:d8:94:77:43:8e:50:aa:ed:2d:9c: 44:43:ad:5b:70:7d:c7:09:fc:ec:0b:bd:21:19:80: cd:07:ef:82:6b:05:3b:00:00:6f:36:8b:5b:88:4d: 0f:ed:53:b3:23:00:20:5f:61:02:88:64:88:30:e8: aa:c4:02:a2:60:69:9b:67:72:a8:f9:d5:90:fd:78: d2:7f:3e:75:e5:3b:a4:d5:03:17:db:b3:f9:50:a0: 3a:bf:4a:2a:d1:0f:49:ff:ce:de:f0:1b:bd:f7:74: 7b:5c:46:c1:58:81:cb:12:a1:6f:de:08:a6:d0:1e: 79:bd:73:a5:4b:36:aa:b1:33:13:9e:43:6f:47:2a: b9:90:b0:a7:f5:91:7c:ea:7b:50:b4:91:a8:2e:9e: 5d:38:91:74:56:1d:1e:29:80:f9:56:f4:05:51:22: 5b:36:8e:d7:4c:d5:d3:50:8c:73:c7:11:c8:2f:66: 9d:05:31:94:19:4a:ac:9f:fa:c9:c8:86:0f:2d:ef: 9b:b5:bc:aa:48:1d:b9:69:22:2d:7d:5f:3f:ee:9e: 0a:38:60:cd:96:0c:37:4e:4f:fb:cd:b3:66:19:16: a1:d8:31:d2:76:3c:48:9d:f1:d7:68:95:4e:4c:6b: fa:9c:95:97:1b:b8:d1:3c:9a:2f:c6:86:1f:b0:8b: f9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:BA:A0:75:2F:5D:EF:BC:7D:0F:69:BB:4E:E2:D4:B7:93:DC:6A:DC X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c7dfb6fc-ab51-45b7-aa1c-723b8c263e73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f109::/48 Signature Algorithm: sha256WithRSAEncryption 20:0a:d5:6d:a3:44:ea:b8:b8:99:56:93:0e:8a:90:19:f7:07: b1:6c:11:2c:f9:b9:bf:fc:e1:0a:57:c1:34:6e:6f:fd:ce:8d: 6d:a8:68:6e:4e:b9:c3:da:a5:d2:e6:e7:89:40:5c:e2:8b:c9: 12:2f:85:a1:48:40:3f:65:b1:ea:df:19:3c:9f:9d:1a:64:80: 93:8c:80:c1:e7:33:76:84:ea:0a:36:e4:b0:96:50:f3:fd:13: f7:62:4d:b0:cf:a9:73:79:4e:af:91:13:e7:19:91:4d:2e:af: ba:56:28:03:a7:79:aa:0d:2f:bc:1a:89:00:25:2f:ff:97:22: 68:ee:82:38:a8:77:93:5c:4b:63:51:97:b7:bc:5d:2c:36:14: a6:78:ff:f5:96:39:e7:e9:0d:cd:e3:32:ed:38:01:85:f6:e9: 51:f4:0d:b9:41:70:75:54:d8:7d:0d:88:62:07:1c:16:98:76: fe:20:74:1e:57:56:24:36:59:ad:7c:91:79:aa:af:42:5c:89: f1:7b:92:34:5b:c9:59:6d:92:d9:04:5d:db:e1:2e:ac:0e:57: db:ba:a8:d0:f7:d1:1b:b2:11:da:a4:ec:a5:ae:45:17:4e:fa: bb:07:91:05:9e:66:fe:5c:99:f8:74:d0:f5:04:9d:8a:88:83: 9a:ed:5e:18 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSLhLIIMoMaQ4MoCjl/5oGuUHxtAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMzAxMDA1MDIzWhcNMjYwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZGEyZThlMWNlNzQyMjY4ZTExMDZmYWVhOWYyYWMxZWY2 MDBjZGQ1YjQxZDc3MjA1MjU4YWM0ZGMzMzE1ODMwMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDG6vp72JR3Q45Qqu0tnERDrVtwfccJ/OwLvSEZgM0H74Jr BTsAAG82i1uITQ/tU7MjACBfYQKIZIgw6KrEAqJgaZtncqj51ZD9eNJ/PnXlO6TV Axfbs/lQoDq/SirRD0n/zt7wG733dHtcRsFYgcsSoW/eCKbQHnm9c6VLNqqxMxOe Q29HKrmQsKf1kXzqe1C0kagunl04kXRWHR4pgPlW9AVRIls2jtdM1dNQjHPHEcgv Zp0FMZQZSqyf+snIhg8t75u1vKpIHblpIi19Xz/ungo4YM2WDDdOT/vNs2YZFqHY MdJ2PEid8ddolU5Ma/qclZcbuNE8mi/Ghh+wi/nfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUwrqgdS9d77x9D2m7TuLUt5PcatwwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2M3ZGZiNmZjLWFiNTEtNDViNy1hYTFjLTcyM2I4YzI2M2U3My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QkwDQYJKoZIhvcNAQELBQADggEBACAK1W2jROq4uJlWkw6KkBn3 B7FsESz5ub/84QpXwTRub/3OjW2oaG5OucPapdLm54lAXOKLyRIvhaFIQD9lserf GTyfnRpkgJOMgMHnM3aE6go25LCWUPP9E/diTbDPqXN5Tq+RE+cZkU0ur7pWKAOn eaoNL7waiQAlL/+XImjugjiod5NcS2NRl7e8XSw2FKZ4//WWOefpDc3jMu04AYX2 6VH0DblBcHVU2H0NiGIHHBaYdv4gdB5XViQ2Wa18kXmqr0JcifF7kjRbyVltktkE XdvhLqwOV9u6qND30RuyEdqk7KWuRRdO+rsHkQWeZv5cmfh00PUEnYqIg5rtXhg= -----END CERTIFICATE-----Generated at Sun Mar 1 22:05:05 2026 by rpki-client