$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ca586b6c-c586-4283-8392-892b53790b90.roa File: ca586b6c-c586-4283-8392-892b53790b90.roa (raw, json) Hash identifier: 6vSx8JHwXUHppmAFK/wMl5aHcEckHuJgMiLw7YnAY04= Subject key identifier: 10:A0:D9:15:CC:F2:D6:6F:CD:1C:20:84:C1:C7:0A:46:B6:A4:E0:4A Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 040F4E0229A693C026C4AE356E309C17E956851A Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ca586b6c-c586-4283-8392-892b53790b90.roa Signing time: Fri 20 Feb 2026 01:30:11 +0000 ROA not before: Fri 20 Feb 2026 01:30:11 +0000 ROA not after: Thu 21 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f1::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:0f:4e:02:29:a6:93:c0:26:c4:ae:35:6e:30:9c:17:e9:56:85:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Feb 20 01:30:11 2026 GMT Not After : May 21 23:59:59 2026 GMT Subject: serialNumber=faeff442b7f91480b87738a60b65276d9a35d996b7708734246579211e7d8592, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ff:ab:99:9f:76:bf:eb:30:b2:d8:fe:1e:59: 9f:5f:95:b6:47:e0:ce:66:4c:20:40:54:25:fa:35: 82:5a:d5:98:28:0c:25:7d:10:30:78:60:29:3e:6b: 9b:7c:2b:8f:42:98:53:2a:c5:6a:2a:08:ba:3c:f7: 94:e0:1a:b6:e5:e0:ef:5a:98:8a:e6:7b:b8:33:05: 4c:45:8b:0a:ca:75:ac:9d:a1:b6:e6:29:47:3d:16: 43:ba:4a:8b:9b:8b:61:22:09:f1:9f:fc:be:7b:dd: bc:c0:4d:24:40:ef:b4:98:01:86:e8:38:c8:13:23: 6f:29:e8:76:e8:25:dc:1b:53:57:6b:91:de:19:6a: 98:90:b2:7f:2d:35:90:e5:1b:a9:15:9b:b0:fa:45: e4:d6:e8:e5:6d:ce:7a:a4:8c:92:73:02:8c:ae:d0: 2b:31:e8:40:fa:75:99:51:b9:bc:fe:25:17:d3:09: ad:54:cc:7c:7f:8e:b6:6a:3f:29:53:b6:86:c9:ee: e4:95:86:e5:ec:dd:d9:cf:5c:13:ba:a7:60:d2:78: 24:27:53:23:4b:08:7b:3c:fc:21:a2:7a:c1:44:53: bf:d2:8f:fc:03:77:df:60:71:27:43:51:92:47:26: c3:25:49:a1:26:24:ae:9d:a8:b9:40:64:42:15:40: 35:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A0:D9:15:CC:F2:D6:6F:CD:1C:20:84:C1:C7:0A:46:B6:A4:E0:4A X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ca586b6c-c586-4283-8392-892b53790b90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1::/44 Signature Algorithm: sha256WithRSAEncryption 4f:02:b8:e5:45:52:f7:d9:94:d2:30:5c:a7:99:ac:f5:bc:91: 4e:da:87:fe:7d:d4:21:88:3f:de:6c:9f:a0:ec:38:df:5e:34: 9e:b7:05:7f:e3:8c:01:26:37:fe:80:0e:51:8c:af:eb:73:20: e8:e6:c7:6d:0e:c7:51:db:71:23:48:c9:ec:e2:6a:5b:4c:40: 3f:03:a3:5d:04:47:6f:3b:fc:4d:61:9a:08:63:8a:d7:95:36: b2:16:56:11:30:7e:d4:a3:43:1d:4c:4f:de:4f:bc:2f:7c:03: a1:c6:80:91:73:05:20:ce:4b:4d:b2:fe:1a:ea:0c:13:1f:7b: 34:78:20:ac:80:7e:46:78:b5:8a:5b:54:e4:97:22:73:e3:4e: c8:ca:f8:c3:26:ad:50:cd:b1:f2:c1:53:bd:89:ac:fc:9a:bd: 91:b8:a1:7e:1f:ad:04:52:a2:47:4e:9a:93:d9:97:71:e4:86: e7:6e:a6:11:89:23:8e:52:0f:d4:2a:6d:9b:01:bb:0f:e3:f8: 35:fc:97:06:40:bd:9b:3c:b6:90:e9:dd:ae:ef:52:ad:8b:e6: 73:0d:38:f7:f4:60:17:0b:fb:e1:b5:f7:85:8b:34:7d:e4:6f: 52:52:74:38:c6:f4:77:a0:de:40:45:f4:56:d1:9e:a4:3e:90: 4c:46:28:36 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBA9OAimmk8AmxK41bjCcF+lWhRowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMjIwMDEzMDExWhcNMjYwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BmYWVmZjQ0MmI3ZjkxNDgwYjg3NzM4YTYwYjY1Mjc2ZDlh MzVkOTk2Yjc3MDg3MzQyNDY1NzkyMTFlN2Q4NTkyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1/6uZn3a/6zCy2P4eWZ9flbZH4M5mTCBAVCX6NYJa1Zgo DCV9EDB4YCk+a5t8K49CmFMqxWoqCLo895TgGrbl4O9amIrme7gzBUxFiwrKdayd obbmKUc9FkO6Soubi2EiCfGf/L573bzATSRA77SYAYboOMgTI28p6HboJdwbU1dr kd4ZapiQsn8tNZDlG6kVm7D6ReTW6OVtznqkjJJzAoyu0Csx6ED6dZlRubz+JRfT Ca1UzHx/jrZqPylTtobJ7uSVhuXs3dnPXBO6p2DSeCQnUyNLCHs8/CGiesFEU7/S j/wDd99gcSdDUZJHJsMlSaEmJK6dqLlAZEIVQDWJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUEKDZFczy1m/NHCCEwccKRrak4EowHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2NhNTg2YjZjLWM1ODYtNDI4My04MzkyLTg5MmI1Mzc5MGI5MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDxAAAwDQYJKoZIhvcNAQELBQADggEBAE8CuOVFUvfZlNIwXKeZrPW8 kU7ah/591CGIP95sn6DsON9eNJ63BX/jjAEmN/6ADlGMr+tzIOjmx20Ox1HbcSNI yezialtMQD8Do10ER287/E1hmghjiteVNrIWVhEwftSjQx1MT95PvC98A6HGgJFz BSDOS02y/hrqDBMfezR4IKyAfkZ4tYpbVOSXInPjTsjK+MMmrVDNsfLBU72JrPya vZG4oX4frQRSokdOmpPZl3HkhuduphGJI45SD9QqbZsBuw/j+DX8lwZAvZs8tpDp 3a7vUq2L5nMNOPf0YBcL++G194WLNH3kb1JSdDjG9Heg3kBF9FbRnqQ+kExGKDY= -----END CERTIFICATE-----Generated at Mon Mar 2 00:05:33 2026 by rpki-client