$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d196c9c9-eb40-4f2f-873c-1231e7438a0c.roa File: d196c9c9-eb40-4f2f-873c-1231e7438a0c.roa (raw, json) Hash identifier: 6kWK3elJKoQYrnfc53hMicq8Lr0wxAUp3W4sh0T2jqw= Subject key identifier: E6:0B:28:08:B0:39:03:D7:DC:92:84:86:FF:29:5C:B6:85:E8:23:F3 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 55556727641B6961464E32AFC0C81B650C641F85 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d196c9c9-eb40-4f2f-873c-1231e7438a0c.roa Signing time: Thu 26 Feb 2026 20:36:52 +0000 ROA not before: Thu 26 Feb 2026 20:36:52 +0000 ROA not after: Wed 27 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:5507::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:55:67:27:64:1b:69:61:46:4e:32:af:c0:c8:1b:65:0c:64:1f:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Feb 26 20:36:52 2026 GMT Not After : May 27 23:59:59 2026 GMT Subject: serialNumber=730ba5430c582bc11ef580658d2913a9edc677c2c3978c0f023cc01f43e8f6ce, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5b:cd:f7:2a:cd:c2:7f:3c:34:2f:fe:23:0a: 7e:73:d6:06:9e:81:34:1f:47:8d:0d:c1:49:59:f8: 6a:d1:35:4e:0f:16:2d:cb:fd:d1:10:6e:10:d3:df: 2d:d4:46:5e:a9:f5:63:27:a1:00:5e:a1:07:8a:09: 9e:3e:8d:d7:9e:22:39:6d:aa:00:08:1e:61:eb:fc: 21:96:f8:37:1a:fc:e1:a3:ec:ff:6e:c7:b7:cf:f8: ad:f7:b4:38:3b:a6:06:58:bd:3d:96:bd:ab:fd:f1: 81:73:e1:62:9d:8b:73:79:17:11:41:c5:bc:d7:14: f4:de:d5:53:5b:31:74:18:d2:80:1d:ab:06:c7:26: c4:0e:dd:bf:98:3a:ce:3a:5d:aa:09:84:22:66:58: 19:b4:1d:e5:0d:20:18:ab:a4:5a:0e:98:17:85:39: 3b:32:1d:2d:18:b6:99:f8:ea:63:9e:f6:df:26:07: 87:5b:b9:dd:77:d6:a6:20:75:a5:f5:6b:31:7f:f3: f6:d8:ff:3f:0e:e9:19:64:37:0e:67:a5:11:86:0b: 9e:a5:bc:28:76:ba:6a:b7:70:27:ce:b7:2d:ee:c5: 5c:ab:92:77:bb:11:e4:1e:4c:30:94:99:60:90:73: 96:f4:13:c8:da:76:66:e1:09:1d:5f:17:95:cc:d8: 2c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:0B:28:08:B0:39:03:D7:DC:92:84:86:FF:29:5C:B6:85:E8:23:F3 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d196c9c9-eb40-4f2f-873c-1231e7438a0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:5507::/48 Signature Algorithm: sha256WithRSAEncryption 04:a3:e3:cc:75:6c:a0:5c:e2:ce:a4:57:8a:bf:9a:c0:c2:89: 31:9a:4c:d4:7b:37:30:5e:94:8d:b0:05:a0:9a:7b:e8:a4:d1: 91:d6:ca:71:9c:5b:e8:3c:ce:54:2d:cc:b0:27:29:0b:02:fa: f9:0b:ad:0d:10:53:49:b4:14:41:22:d4:24:20:6b:9d:bc:80: 73:82:04:b2:26:63:fd:f7:4e:f6:6d:c1:62:78:b0:25:d1:f4: c6:58:30:4f:b6:6c:38:35:58:e5:63:3b:87:b0:3a:14:8b:95: cd:99:a6:04:8c:38:b8:ed:1e:c0:3f:3b:e7:49:bb:e6:ee:2b: c6:c1:47:7b:1e:c1:f0:e0:95:76:5c:59:f9:9b:00:ca:e3:e4: 6d:89:82:ff:37:90:26:92:8e:0f:a7:a0:cd:e7:cc:d2:bb:1e: 80:fd:69:2a:67:8b:3f:ca:4c:52:9e:18:4d:22:96:4e:c5:f1: 7e:da:1b:b3:b7:78:3c:01:b7:fd:56:13:9c:c3:9a:42:76:c5: 2e:94:d5:c8:c0:e8:57:77:a4:80:59:56:7b:e0:8a:7c:f1:6b: cc:1c:e1:88:51:db:90:97:07:12:38:16:fc:3e:bb:d8:ad:88: e7:db:2a:9b:91:44:e3:4b:0f:ae:61:09:90:7e:ea:2d:e1:3a: f6:de:1f:52 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUVVVnJ2QbaWFGTjKvwMgbZQxkH4UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMjI2MjAzNjUyWhcNMjYwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MzBiYTU0MzBjNTgyYmMxMWVmNTgwNjU4ZDI5MTNhOWVk YzY3N2MyYzM5NzhjMGYwMjNjYzAxZjQzZThmNmNlMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxW833Ks3Cfzw0L/4jCn5z1gaegTQfR40NwUlZ+GrRNU4P Fi3L/dEQbhDT3y3URl6p9WMnoQBeoQeKCZ4+jdeeIjltqgAIHmHr/CGW+Dca/OGj 7P9ux7fP+K33tDg7pgZYvT2Wvav98YFz4WKdi3N5FxFBxbzXFPTe1VNbMXQY0oAd qwbHJsQO3b+YOs46XaoJhCJmWBm0HeUNIBirpFoOmBeFOTsyHS0Ytpn46mOe9t8m B4dbud131qYgdaX1azF/8/bY/z8O6RlkNw5npRGGC56lvCh2umq3cCfOty3uxVyr kne7EeQeTDCUmWCQc5b0E8jadmbhCR1fF5XM2CwnAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU5gsoCLA5A9fckoSG/ylctoXoI/MwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2QxOTZjOWM5LWViNDAtNGYyZi04NzNjLTEyMzFlNzQzOGEwYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwVQcwDQYJKoZIhvcNAQELBQADggEBAASj48x1bKBc4s6kV4q/msDC iTGaTNR7NzBelI2wBaCae+ik0ZHWynGcW+g8zlQtzLAnKQsC+vkLrQ0QU0m0FEEi 1CQga528gHOCBLImY/33TvZtwWJ4sCXR9MZYME+2bDg1WOVjO4ewOhSLlc2ZpgSM OLjtHsA/O+dJu+buK8bBR3sewfDglXZcWfmbAMrj5G2Jgv83kCaSjg+noM3nzNK7 HoD9aSpniz/KTFKeGE0ilk7F8X7aG7O3eDwBt/1WE5zDmkJ2xS6U1cjA6Fd3pIBZ Vnvginzxa8wc4YhR25CXBxI4Fvw+u9itiOfbKpuRRONLD65hCZB+6i3hOvbeH1I= -----END CERTIFICATE-----Generated at Sun Mar 1 23:43:13 2026 by rpki-client