$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e9e9fa29-b290-4ea2-9c3a-b6b0e792e777.roa File: e9e9fa29-b290-4ea2-9c3a-b6b0e792e777.roa (raw, json) Hash identifier: 7ge9+WYHcGPeHlsOM3o3cc1+b1S+6Z+h8aBLBjX2DiI= Subject key identifier: 8B:C4:10:7E:62:E6:97:24:8F:66:26:47:CB:82:17:E3:D4:D2:A4:6E Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 4EEFD06E4EBF52FB72D156C007510B45B4841704 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e9e9fa29-b290-4ea2-9c3a-b6b0e792e777.roa Signing time: Sun 01 Mar 2026 00:50:08 +0000 ROA not before: Sun 01 Mar 2026 00:50:08 +0000 ROA not after: Sat 30 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:f106::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:ef:d0:6e:4e:bf:52:fb:72:d1:56:c0:07:51:0b:45:b4:84:17:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Mar 1 00:50:08 2026 GMT Not After : May 30 23:59:59 2026 GMT Subject: serialNumber=0113344e45a8ab48e9338bb7d8221bbae65d248f6e90f43e16ba40b50b0a02f4, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9b:a6:fd:cc:74:78:01:db:58:50:b4:4c:06: 38:50:53:c5:b4:ae:ba:15:14:48:e9:6e:1c:0e:27: d6:fa:37:c1:10:ae:62:13:5d:3c:f3:e2:46:7e:37: 14:6a:3e:2d:b3:78:99:8a:33:f9:09:d0:e8:79:54: 5d:e0:ee:7a:af:64:56:73:b4:9c:aa:b6:8b:23:f8: 24:85:29:b3:b2:b8:67:26:71:32:56:fc:c9:d0:4e: 62:bf:0e:f7:24:ff:51:b2:5c:f3:a8:cd:d1:d9:e3: b6:38:dc:6d:b4:1b:68:bc:1e:5b:65:c8:1f:13:0e: 2f:aa:4a:bd:76:92:77:fd:53:99:9a:96:46:0a:71: 7e:c6:08:0c:94:c5:6b:49:a7:fc:9f:17:83:84:58: 29:da:a3:a0:d9:d4:79:1c:b5:d3:c8:08:7b:27:ab: 2f:73:50:0d:00:d0:1b:31:da:4a:cb:84:99:59:8b: 60:8a:55:14:df:07:fc:95:16:b3:05:ea:2c:53:ca: ba:cb:12:d5:b3:6d:e0:c5:9e:14:e0:cd:ee:fd:7a: 04:b0:cc:da:aa:58:8f:7c:48:66:c0:78:a2:2e:44: 2b:bd:22:25:73:40:04:31:ed:fa:ff:19:8e:b5:86: de:4b:5e:aa:84:a3:47:8a:67:c1:19:73:5a:6f:2e: a1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C4:10:7E:62:E6:97:24:8F:66:26:47:CB:82:17:E3:D4:D2:A4:6E X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e9e9fa29-b290-4ea2-9c3a-b6b0e792e777.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f106::/48 Signature Algorithm: sha256WithRSAEncryption 62:3a:25:b2:44:fa:53:45:34:17:c9:67:2c:74:8a:a0:ed:82: 56:00:41:8b:ed:a5:0d:82:07:b4:6b:9a:c7:56:22:b9:00:6f: ab:20:fe:fe:d6:6b:9a:f7:b3:20:e0:1a:2c:c8:64:85:e8:70: f1:44:b3:d9:28:22:eb:95:d3:a3:94:de:ec:df:ab:60:16:53: d6:0a:2e:2d:42:d6:99:20:7a:75:23:78:93:8f:bb:29:b6:54: c3:f1:c1:6c:b6:b6:de:76:24:13:d5:4b:28:6f:0d:c1:f9:56: 62:54:97:18:6c:91:80:eb:0b:33:2a:5f:04:79:d3:2b:5a:d6: 39:70:11:a9:f3:09:0f:13:c2:54:76:41:c9:6f:4e:45:1f:8f: 3e:11:bd:00:6e:32:f6:ca:a8:1d:8c:bc:c0:ec:91:81:f2:cf: 20:95:8b:9c:e1:92:d9:03:b1:bb:d0:c2:49:6c:6f:9f:36:bb: d1:2c:94:24:f3:0a:0d:2e:85:58:fb:46:95:0a:de:ea:70:81: 0a:3d:9e:ab:c7:12:dd:cd:bd:b6:27:58:bf:6d:40:05:eb:c8: 29:f8:39:60:46:33:3e:a6:b6:51:d9:90:5e:a9:a7:84:db:f2: b5:a7:ff:50:9c:9b:bd:cd:a1:43:e4:ac:11:e2:55:68:b0:8c: 97:9d:4b:b6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTu/Qbk6/Uvty0VbAB1ELRbSEFwQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMzAxMDA1MDA4WhcNMjYwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMTEzMzQ0ZTQ1YThhYjQ4ZTkzMzhiYjdkODIyMWJiYWU2 NWQyNDhmNmU5MGY0M2UxNmJhNDBiNTBiMGEwMmY0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpm6b9zHR4AdtYULRMBjhQU8W0rroVFEjpbhwOJ9b6N8EQ rmITXTzz4kZ+NxRqPi2zeJmKM/kJ0Oh5VF3g7nqvZFZztJyqtosj+CSFKbOyuGcm cTJW/MnQTmK/Dvck/1GyXPOozdHZ47Y43G20G2i8HltlyB8TDi+qSr12knf9U5ma lkYKcX7GCAyUxWtJp/yfF4OEWCnao6DZ1HkctdPICHsnqy9zUA0A0Bsx2krLhJlZ i2CKVRTfB/yVFrMF6ixTyrrLEtWzbeDFnhTgze79egSwzNqqWI98SGbAeKIuRCu9 IiVzQAQx7fr/GY61ht5LXqqEo0eKZ8EZc1pvLqGhAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUi8QQfmLmlySPZiZHy4IX49TSpG4wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2U5ZTlmYTI5LWIyOTAtNGVhMi05YzNhLWI2YjBlNzkyZTc3Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QYwDQYJKoZIhvcNAQELBQADggEBAGI6JbJE+lNFNBfJZyx0iqDt glYAQYvtpQ2CB7RrmsdWIrkAb6sg/v7Wa5r3syDgGizIZIXocPFEs9koIuuV06OU 3uzfq2AWU9YKLi1C1pkgenUjeJOPuym2VMPxwWy2tt52JBPVSyhvDcH5VmJUlxhs kYDrCzMqXwR50yta1jlwEanzCQ8TwlR2QclvTkUfjz4RvQBuMvbKqB2MvMDskYHy zyCVi5zhktkDsbvQwklsb582u9EslCTzCg0uhVj7RpUK3upwgQo9nqvHEt3NvbYn WL9tQAXryCn4OWBGMz6mtlHZkF6pp4Tb8rWn/1Ccm73NoUPkrBHiVWiwjJedS7Y= -----END CERTIFICATE-----Generated at Sun Mar 1 21:56:34 2026 by rpki-client