$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/da785247-8a0c-4cca-ab5c-6c352637b4af.roa File: da785247-8a0c-4cca-ab5c-6c352637b4af.roa (raw, json) Hash identifier: CCcwVQrD3yKiy34RYmcCbObJ6y4xhHNOEhTJA5vUUfk= Subject key identifier: 70:5D:8D:74:E0:9D:42:EA:20:73:9A:CC:A4:70:25:0C:76:96:15:CD Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 43C44903BC6C8B63BC8CED618D48F6B861B61FCC Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/da785247-8a0c-4cca-ab5c-6c352637b4af.roa Signing time: Mon 23 Feb 2026 23:06:54 +0000 ROA not before: Mon 23 Feb 2026 23:06:54 +0000 ROA not after: Sun 24 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:5505::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:c4:49:03:bc:6c:8b:63:bc:8c:ed:61:8d:48:f6:b8:61:b6:1f:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Feb 23 23:06:54 2026 GMT Not After : May 24 23:59:59 2026 GMT Subject: serialNumber=45e49539f0a137461b097588792cb6cffe6968268d6d517d4ab85f9edaa33e99, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6c:29:95:7d:ea:03:5a:79:92:6f:c9:f4:d0: ee:80:1d:cd:ab:72:ff:40:5d:d0:b4:07:bb:f6:d6: 47:09:cd:77:01:0f:9a:bd:bb:66:5a:90:13:02:18: 45:cd:1c:09:f0:cf:aa:22:ee:02:17:e1:65:1c:21: f7:b9:53:99:a1:94:d9:ec:5c:bf:ce:47:ba:c8:17: b6:95:6b:86:8d:38:22:e0:66:91:0a:15:5d:d7:09: 8b:74:76:9e:3a:f9:52:c1:b3:ed:a2:90:35:49:16: ff:11:a5:0b:c9:ee:6c:31:20:9b:2d:99:a2:ae:f3: f3:d4:77:dc:9f:6d:ba:42:48:6f:3e:0e:30:8c:94: 0f:4e:ba:93:de:f2:79:9d:6d:db:4c:5e:56:c5:c8: e4:6b:cc:b1:0d:d8:6c:c0:82:4c:b8:a1:04:4b:5f: 19:22:31:8c:e9:17:fd:cd:4b:d4:43:14:6b:71:23: 4c:4e:25:bb:79:a1:32:ce:c3:5c:fb:97:03:3e:01: 75:a3:d1:57:c1:cc:d2:9a:8b:68:5c:2a:94:9b:1f: f9:c7:1a:1a:f4:18:fa:ee:37:8a:a5:42:33:08:5a: a0:b2:1b:59:90:3f:d5:4b:af:56:9b:da:18:55:16: e4:64:0e:f8:4f:5c:56:87:d6:ee:6c:c3:6e:ce:bf: d4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:5D:8D:74:E0:9D:42:EA:20:73:9A:CC:A4:70:25:0C:76:96:15:CD X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/da785247-8a0c-4cca-ab5c-6c352637b4af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:5505::/48 Signature Algorithm: sha256WithRSAEncryption 3a:f2:89:80:82:e9:21:1c:19:aa:f4:56:b6:65:3b:49:73:70: f7:b0:1c:9b:3e:6e:a5:67:5f:d3:39:03:08:20:f1:00:44:ed: 4c:3c:36:d7:ab:52:5f:f4:08:cf:7b:89:11:04:83:8d:08:e2: 6f:ad:82:ad:72:03:f3:d3:b2:44:63:e6:6c:8c:4d:da:2f:a1: 16:a5:b6:c5:1a:fd:7a:7b:9f:ea:97:4f:b9:aa:82:bd:b0:59: 87:5a:40:a0:07:30:c8:ee:84:34:42:f4:56:be:1b:fb:2e:df: 62:af:05:b7:0e:0c:26:ba:4b:be:06:54:e5:53:2b:2f:12:ea: 8f:a5:31:46:20:81:cb:fb:df:f0:00:ac:38:bb:56:10:cf:59: 18:5e:4c:54:64:46:81:58:5c:6a:14:e4:48:0e:76:d5:53:68: ef:97:04:f4:19:f4:38:7f:cd:75:13:e5:ab:09:a0:d7:32:51: dd:3a:1b:49:b8:05:0e:eb:aa:8c:e9:f9:61:3a:89:d8:a8:7b: 2f:3c:f9:a1:3f:a9:5e:3f:d8:57:b4:94:63:7a:88:ec:88:7a: ba:ab:49:ec:f0:a3:5f:31:ff:fd:8e:66:aa:c5:4c:c3:d6:91: cb:4c:a6:9d:6f:55:51:18:b5:b9:45:45:ee:a5:4e:2f:72:5c: 24:7c:8a:ef -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQ8RJA7xsi2O8jO1hjUj2uGG2H8wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMjIzMjMwNjU0WhcNMjYwNTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NWU0OTUzOWYwYTEzNzQ2MWIwOTc1ODg3OTJjYjZjZmZl Njk2ODI2OGQ2ZDUxN2Q0YWI4NWY5ZWRhYTMzZTk5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPbCmVfeoDWnmSb8n00O6AHc2rcv9AXdC0B7v21kcJzXcB D5q9u2ZakBMCGEXNHAnwz6oi7gIX4WUcIfe5U5mhlNnsXL/OR7rIF7aVa4aNOCLg ZpEKFV3XCYt0dp46+VLBs+2ikDVJFv8RpQvJ7mwxIJstmaKu8/PUd9yfbbpCSG8+ DjCMlA9OupPe8nmdbdtMXlbFyORrzLEN2GzAgky4oQRLXxkiMYzpF/3NS9RDFGtx I0xOJbt5oTLOw1z7lwM+AXWj0VfBzNKai2hcKpSbH/nHGhr0GPruN4qlQjMIWqCy G1mQP9VLr1ab2hhVFuRkDvhPXFaH1u5sw27Ov9RtAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUcF2NdOCdQuogc5rMpHAlDHaWFc0wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2RhNzg1MjQ3LThhMGMtNGNjYS1hYjVjLTZjMzUyNjM3YjRhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwVQUwDQYJKoZIhvcNAQELBQADggEBADryiYCC6SEcGar0VrZlO0lz cPewHJs+bqVnX9M5Awgg8QBE7Uw8NterUl/0CM97iREEg40I4m+tgq1yA/PTskRj 5myMTdovoRaltsUa/Xp7n+qXT7mqgr2wWYdaQKAHMMjuhDRC9Fa+G/su32KvBbcO DCa6S74GVOVTKy8S6o+lMUYggcv73/AArDi7VhDPWRheTFRkRoFYXGoU5EgOdtVT aO+XBPQZ9Dh/zXUT5asJoNcyUd06G0m4BQ7rqozp+WE6idioey88+aE/qV4/2Fe0 lGN6iOyIerqrSezwo18x//2OZqrFTMPWkctMpp1vVVEYtblFRe6lTi9yXCR8iu8= -----END CERTIFICATE-----Generated at Sun Mar 1 21:47:39 2026 by rpki-client