$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e3ce5aef-713b-4ae9-8036-ef4b6d178716.roa File: e3ce5aef-713b-4ae9-8036-ef4b6d178716.roa (raw, json) Hash identifier: n46BK0QiinVtQZDf9SUhGncFsAcrqYRgGVfgmPJj4uM= Subject key identifier: 34:E3:E5:05:DA:88:7A:21:E3:90:76:10:1C:16:43:69:60:12:58:91 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 54B82CE4774C040610FACE4D92A1524D305CF8C0 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e3ce5aef-713b-4ae9-8036-ef4b6d178716.roa Signing time: Tue 10 Feb 2026 00:00:12 +0000 ROA not before: Tue 10 Feb 2026 00:00:12 +0000 ROA not after: Mon 11 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f2:7100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:b8:2c:e4:77:4c:04:06:10:fa:ce:4d:92:a1:52:4d:30:5c:f8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Feb 10 00:00:12 2026 GMT Not After : May 11 23:59:59 2026 GMT Subject: serialNumber=ca52ef07a71fbf4d66c3c0862b665af9886e43c92354a8e3ce5d348e7fbe52d9, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7f:cb:9a:d7:9b:b2:75:0a:ee:ff:a4:1a:dc: 13:48:f5:a2:0d:4b:37:1b:21:18:70:d4:e5:20:3d: 1f:aa:d0:95:c9:05:24:21:b8:75:d5:0d:43:c7:c8: 8a:5e:ae:15:10:26:3c:b7:0e:b2:45:b2:aa:09:8c: fe:84:c6:0f:cc:2e:33:13:bb:99:04:1d:92:24:70: 37:35:16:2b:f4:9f:1f:ab:5f:d5:87:32:44:ad:c6: b9:8a:77:ef:b6:6e:28:ab:32:f9:10:ea:88:6b:16: f3:69:f5:98:de:4c:fd:f3:cb:56:2c:4a:54:d5:33: 35:95:93:4b:53:63:da:a4:75:7a:6a:d0:ae:7e:33: 3e:46:d3:34:04:72:ad:79:6a:eb:f6:01:f7:f3:7d: 78:7b:bb:6d:6e:19:fd:f4:ea:98:ff:03:d7:1f:fb: 70:34:69:28:b2:e2:b8:56:f7:1a:58:bb:07:b6:e4: 7e:91:32:f3:c5:1a:ea:ee:2a:2b:f8:75:36:8c:58: c7:ab:0e:df:24:eb:3c:6f:77:77:9a:96:01:e8:e1: f3:d7:91:0e:85:36:c4:7e:7c:46:59:a0:d1:5d:09: 00:41:c9:7a:00:4a:42:24:45:3f:b4:e4:ad:4f:dc: f8:28:cb:aa:40:fe:d1:ef:0d:f6:8a:30:39:da:b2: f4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:E3:E5:05:DA:88:7A:21:E3:90:76:10:1C:16:43:69:60:12:58:91 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e3ce5aef-713b-4ae9-8036-ef4b6d178716.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7100::/40 Signature Algorithm: sha256WithRSAEncryption 66:67:b6:dd:7e:2e:3d:84:a4:c7:54:ca:53:07:e8:a2:9a:cc: 67:a1:fe:87:32:5c:91:06:33:84:6d:20:96:c8:d5:14:8f:e2: 95:0e:73:d4:1c:b6:cd:ff:0e:c4:52:c5:80:c0:5c:69:3d:04: b2:97:78:2d:3c:79:a9:92:15:a8:88:78:8f:d5:6e:48:cc:60: a5:04:1e:19:d9:4c:d4:db:e9:c6:8f:c0:b5:ba:57:06:1c:76: 50:15:25:a7:00:53:09:65:14:1d:79:b3:07:cd:b3:e4:e9:48: 5e:f7:65:61:c7:46:f0:f6:b9:7e:df:f6:45:30:c7:77:dd:41: 58:0a:92:2c:a1:89:6e:66:e0:65:44:4f:a9:a9:ca:c9:85:17: 06:0b:29:53:96:9a:73:54:22:84:bb:ef:b1:38:60:74:fc:80: 68:41:70:b1:1f:56:7a:ab:a2:bf:c5:39:ae:8e:e9:68:d1:44: e2:b4:c5:90:59:65:9b:b2:9a:f5:1e:ce:d4:b9:68:3a:d1:c8: 59:38:f2:42:e6:73:c1:6d:ce:cb:eb:59:92:7c:9e:ca:8e:61: d8:e0:da:4b:33:76:d7:2f:c6:e6:c7:8a:29:9c:54:e5:25:68: c2:f2:06:63:b8:17:76:be:6f:7f:13:29:e8:17:de:16:2e:f7: ae:5e:77:a1 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUVLgs5HdMBAYQ+s5NkqFSTTBc+MAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMjEwMDAwMDEyWhcNMjYwNTExMjM1OTU5 WjB6MUkwRwYDVQQFE0BjYTUyZWYwN2E3MWZiZjRkNjZjM2MwODYyYjY2NWFmOTg4 NmU0M2M5MjM1NGE4ZTNjZTVkMzQ4ZTdmYmU1MmQ5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEf8ua15uydQru/6Qa3BNI9aINSzcbIRhw1OUgPR+q0JXJ BSQhuHXVDUPHyIperhUQJjy3DrJFsqoJjP6Exg/MLjMTu5kEHZIkcDc1Fiv0nx+r X9WHMkStxrmKd++2biirMvkQ6ohrFvNp9ZjeTP3zy1YsSlTVMzWVk0tTY9qkdXpq 0K5+Mz5G0zQEcq15auv2AffzfXh7u21uGf306pj/A9cf+3A0aSiy4rhW9xpYuwe2 5H6RMvPFGuruKiv4dTaMWMerDt8k6zxvd3ealgHo4fPXkQ6FNsR+fEZZoNFdCQBB yXoASkIkRT+05K1P3Pgoy6pA/tHvDfaKMDnasvRXAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUNOPlBdqIeiHjkHYQHBZDaWASWJEwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2UzY2U1YWVmLTcxM2ItNGFlOS04MDM2LWVmNGI2ZDE3ODcxNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDycTANBgkqhkiG9w0BAQsFAAOCAQEAZme23X4uPYSkx1TKUwfooprM Z6H+hzJckQYzhG0glsjVFI/ilQ5z1By2zf8OxFLFgMBcaT0Espd4LTx5qZIVqIh4 j9VuSMxgpQQeGdlM1Nvpxo/AtbpXBhx2UBUlpwBTCWUUHXmzB82z5OlIXvdlYcdG 8Pa5ft/2RTDHd91BWAqSLKGJbmbgZURPqanKyYUXBgspU5aac1QihLvvsThgdPyA aEFwsR9Wequiv8U5ro7paNFE4rTFkFllm7Ka9R7O1LloOtHIWTjyQuZzwW3Oy+tZ knyeyo5h2ODaSzN21y/G5seKKZxU5SVowvIGY7gXdr5vfxMp6BfeFi73rl53oQ== -----END CERTIFICATE-----Generated at Sun Mar 1 22:13:39 2026 by rpki-client