$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d8f01d78-6ac3-4c66-bbed-fa23871b5d84.roa File: d8f01d78-6ac3-4c66-bbed-fa23871b5d84.roa (raw, json) Hash identifier: QPD1/GQBxmnAZ+nxpaY6NWXkuK7qr8+yOjkv77v3m4A= Subject key identifier: 2C:A9:12:83:3E:97:4F:76:4B:78:49:1A:2F:13:29:91:1E:BF:02:6F Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 5B37F13C07CC37352D0FB27DE3B10FAF8A91908F Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d8f01d78-6ac3-4c66-bbed-fa23871b5d84.roa Signing time: Sun 01 Mar 2026 00:50:09 +0000 ROA not before: Sun 01 Mar 2026 00:50:09 +0000 ROA not after: Sat 30 May 2026 23:59:59 +0000 asID: 8987 IP address blocks: 2600:f0f0:6124::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:37:f1:3c:07:cc:37:35:2d:0f:b2:7d:e3:b1:0f:af:8a:91:90:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Mar 1 00:50:09 2026 GMT Not After : May 30 23:59:59 2026 GMT Subject: serialNumber=5542584f66b4153040b89884652d87d884520c206ebcfe2063856aa7823de412, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:53:6d:70:8d:8c:8a:a5:03:e3:b2:b3:8f:e9: 57:b7:ae:64:3a:37:55:6c:23:90:05:92:45:df:fa: e4:76:c8:61:18:82:7d:20:2a:c5:74:d7:d9:fa:50: ee:26:aa:96:79:86:1a:6f:90:75:54:4a:fe:3d:f4: 1d:96:26:5d:99:f0:86:79:3c:34:06:13:27:87:56: 86:e7:12:3e:89:d0:c2:25:fb:42:0b:f3:fc:e2:00: a2:49:5a:09:d1:e2:e2:86:45:90:17:12:66:b0:41: 1a:6c:b1:3f:00:3b:9b:0b:68:99:0a:1c:65:b0:60: 98:5b:f6:a2:93:35:49:a8:ea:aa:41:53:4d:a1:0c: 38:e8:d0:11:b1:4c:3b:95:e4:62:95:7b:ae:13:0c: 31:48:ce:a4:83:87:a7:3d:a2:fe:ab:0d:f1:57:ba: 62:5e:27:81:f9:56:02:61:c7:a3:f1:6e:f7:ba:21: d2:35:f7:e8:9e:36:c1:5f:3e:24:d1:81:fb:ce:a9: 4b:77:e8:bb:bc:59:9a:0e:cf:22:19:cf:dd:0d:ff: 9b:b3:7d:c1:ea:3a:79:50:eb:09:9c:8d:83:13:29: c7:62:22:b1:37:d0:85:e9:87:c2:c7:53:76:bb:a3: ff:ff:24:4d:18:0c:5c:31:01:4a:5c:77:ad:f0:1b: 20:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A9:12:83:3E:97:4F:76:4B:78:49:1A:2F:13:29:91:1E:BF:02:6F X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d8f01d78-6ac3-4c66-bbed-fa23871b5d84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6124::/48 Signature Algorithm: sha256WithRSAEncryption 51:8f:1e:ec:88:f9:71:0b:3a:ea:3a:55:d0:4b:93:13:d7:17: e8:cd:55:ee:24:13:23:7a:8f:1b:71:1c:7d:a0:0f:f2:9e:34: a7:bd:cc:39:4e:fa:94:d9:bb:9f:76:eb:29:06:74:f8:3c:50: e6:f3:53:24:7f:98:08:34:39:65:14:61:c9:e4:de:ef:82:0c: 2a:d8:1f:d2:ca:e2:10:16:83:76:6e:7c:0b:53:26:a8:c5:b5: 8e:63:4c:98:8a:c6:c9:b4:56:fd:eb:c7:0f:e7:6a:e8:56:2f: 23:c9:34:3f:bc:ec:3c:7d:74:bd:da:16:69:50:fe:a7:51:f0: 9a:f1:f4:56:b0:73:93:f3:42:4c:c0:80:97:8e:df:85:41:5d: 08:a2:9d:2b:43:06:33:a3:7d:22:44:f4:1c:95:ca:8f:8f:70: 39:97:17:46:5e:d1:15:26:ed:9d:0e:08:82:e9:f5:38:04:d2: 95:b2:b5:17:e5:ef:10:ef:e2:80:42:bc:e6:76:92:3b:68:37: 42:09:6d:ad:74:ea:ae:03:5e:a9:dc:ee:36:dc:da:b0:da:83: 93:2e:b2:9b:92:55:87:8e:27:7b:e2:72:b8:c0:88:03:62:86: e1:26:38:05:a2:d8:b6:65:e5:10:13:9b:e9:75:e7:fa:d1:cb: 5c:23:37:d5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWzfxPAfMNzUtD7J947EPr4qRkI8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMzAxMDA1MDA5WhcNMjYwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1NTQyNTg0ZjY2YjQxNTMwNDBiODk4ODQ2NTJkODdkODg0 NTIwYzIwNmViY2ZlMjA2Mzg1NmFhNzgyM2RlNDEyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIU21wjYyKpQPjsrOP6Ve3rmQ6N1VsI5AFkkXf+uR2yGEY gn0gKsV019n6UO4mqpZ5hhpvkHVUSv499B2WJl2Z8IZ5PDQGEyeHVobnEj6J0MIl +0IL8/ziAKJJWgnR4uKGRZAXEmawQRpssT8AO5sLaJkKHGWwYJhb9qKTNUmo6qpB U02hDDjo0BGxTDuV5GKVe64TDDFIzqSDh6c9ov6rDfFXumJeJ4H5VgJhx6Pxbve6 IdI19+ieNsFfPiTRgfvOqUt36Lu8WZoOzyIZz90N/5uzfcHqOnlQ6wmcjYMTKcdi IrE30IXph8LHU3a7o///JE0YDFwxAUpcd63wGyDdAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQULKkSgz6XT3ZLeEkaLxMpkR6/Am8wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2Q4ZjAxZDc4LTZhYzMtNGM2Ni1iYmVkLWZhMjM4NzFiNWQ4NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYSQwDQYJKoZIhvcNAQELBQADggEBAFGPHuyI+XELOuo6VdBLkxPX F+jNVe4kEyN6jxtxHH2gD/KeNKe9zDlO+pTZu5926ykGdPg8UObzUyR/mAg0OWUU Ycnk3u+CDCrYH9LK4hAWg3ZufAtTJqjFtY5jTJiKxsm0Vv3rxw/nauhWLyPJND+8 7Dx9dL3aFmlQ/qdR8Jrx9Fawc5PzQkzAgJeO34VBXQiinStDBjOjfSJE9ByVyo+P cDmXF0Ze0RUm7Z0OCILp9TgE0pWytRfl7xDv4oBCvOZ2kjtoN0IJba106q4DXqnc 7jbc2rDag5MuspuSVYeOJ3vicrjAiANihuEmOAWi2LZl5RATm+l15/rRy1wjN9U= -----END CERTIFICATE-----Generated at Mon Mar 2 04:29:17 2026 by rpki-client