$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f555d010-5e5e-4c02-8722-e69da1514f97.roa File: f555d010-5e5e-4c02-8722-e69da1514f97.roa (raw, json) Hash identifier: YGxz2vYf3qAdpKqle8L/I8iuJO4NU0RNszn+00xiF9k= Subject key identifier: 1C:52:42:9C:92:89:4E:58:69:C8:F1:71:C3:25:5B:44:5A:09:9F:0B Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 14407C0459F79A4CE356D7CCDC071CA6BAE389E3 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f555d010-5e5e-4c02-8722-e69da1514f97.roa Signing time: Sat 28 Feb 2026 04:50:33 +0000 ROA not before: Sat 28 Feb 2026 04:50:33 +0000 ROA not after: Fri 29 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:40:7c:04:59:f7:9a:4c:e3:56:d7:cc:dc:07:1c:a6:ba:e3:89:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Feb 28 04:50:33 2026 GMT Not After : May 29 23:59:59 2026 GMT Subject: serialNumber=c7df1f392066b28bdb1256642d66a26fae30f28a6c150c2f159cf250a31184fa, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1d:36:67:05:fc:01:ab:eb:8d:51:d0:0c:6e: 34:c5:bc:be:ba:e4:6d:17:aa:9b:d9:a5:52:3f:2f: a8:95:37:21:22:1a:88:07:ef:37:ba:be:be:d5:50: 6c:c5:ff:0a:3e:55:f0:76:ba:25:b4:32:26:75:3c: c3:75:8d:f4:9b:3f:f0:69:b2:81:27:b0:36:1f:f5: 51:27:0a:22:a9:7e:23:af:1d:58:81:57:a4:db:bf: 78:b8:65:40:53:c5:36:7e:69:3e:b0:2c:da:cb:a8: d3:77:4e:e2:60:44:95:9a:d5:69:9a:c5:e9:80:58: 1b:d2:f9:2d:3c:38:af:c7:1a:01:00:58:34:79:ba: 92:e7:8a:d0:9e:e1:0f:b5:2a:2c:19:d7:cd:51:92: d2:21:b8:56:f3:b2:6d:e1:ab:ef:5e:87:a4:02:6f: 5c:7e:8f:a6:db:06:e5:f3:11:3a:4a:42:4a:76:22: fc:a0:77:fb:a2:75:cd:8e:e0:df:7e:5e:a3:52:bd: 66:4e:71:9a:7e:51:f0:0b:45:c5:08:9a:24:bc:98: 06:e4:6d:7e:3d:15:6a:b5:fd:d7:39:62:f4:3a:fe: ae:0a:07:c1:49:ed:98:5e:e0:02:ba:e5:53:b8:92: 88:18:09:71:f1:8d:94:b2:f1:a5:63:54:15:b2:74: 07:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:52:42:9C:92:89:4E:58:69:C8:F1:71:C3:25:5B:44:5A:09:9F:0B X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f555d010-5e5e-4c02-8722-e69da1514f97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:8000::/34 Signature Algorithm: sha256WithRSAEncryption 52:61:43:3f:ac:65:61:7b:dc:01:c5:c3:c9:7c:32:c5:16:c6: aa:2b:cc:cb:93:b6:24:6e:c5:4f:c3:5f:3f:48:31:e6:63:24: 0b:c2:d8:a6:58:6a:98:bc:38:89:3f:2a:6d:8e:f7:e7:ae:b8: bb:ec:1d:30:1e:14:50:d1:50:3b:fe:7b:5a:e1:77:76:54:26: 12:f6:97:3b:37:40:ef:ec:4c:32:a2:eb:e5:d6:e0:29:5d:32: 33:45:00:b2:95:cf:4b:38:3e:bd:4f:42:c7:2e:1e:b3:ce:8b: 8c:ff:6a:7d:eb:18:01:25:8f:bb:94:82:49:e3:e1:69:d1:b6: 41:ab:14:a5:82:04:92:80:06:f9:8e:c1:25:3f:74:f6:0a:aa: c2:8b:80:11:38:dd:5b:1c:e6:2a:b7:d6:0d:c6:4b:c7:4f:15: 05:ed:a8:f5:c1:21:29:15:68:38:47:73:55:83:35:21:a6:3f: ad:53:9d:7e:65:54:83:e4:ce:64:f8:31:7e:ce:8f:da:47:46: 7d:8d:67:68:22:25:22:50:7b:9e:38:9b:bd:c8:fb:b2:b3:a3: d3:23:d5:cb:c2:34:dc:fa:46:6b:93:f8:14:3e:e7:07:0c:77: 4e:71:45:f8:cb:43:8f:5d:34:2e:25:5b:6b:ca:a4:2c:8f:db: 30:87:3f:5c -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUFEB8BFn3mkzjVtfM3AccprrjieMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMjI4MDQ1MDMzWhcNMjYwNTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BjN2RmMWYzOTIwNjZiMjhiZGIxMjU2NjQyZDY2YTI2ZmFl MzBmMjhhNmMxNTBjMmYxNTljZjI1MGEzMTE4NGZhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtHTZnBfwBq+uNUdAMbjTFvL665G0XqpvZpVI/L6iVNyEi GogH7ze6vr7VUGzF/wo+VfB2uiW0MiZ1PMN1jfSbP/BpsoEnsDYf9VEnCiKpfiOv HViBV6Tbv3i4ZUBTxTZ+aT6wLNrLqNN3TuJgRJWa1WmaxemAWBvS+S08OK/HGgEA WDR5upLnitCe4Q+1KiwZ181RktIhuFbzsm3hq+9eh6QCb1x+j6bbBuXzETpKQkp2 Ivygd/uidc2O4N9+XqNSvWZOcZp+UfALRcUImiS8mAbkbX49FWq1/dc5YvQ6/q4K B8FJ7Zhe4AK65VO4kogYCXHxjZSy8aVjVBWydAfDAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUHFJCnJKJTlhpyPFxwyVbRFoJnwswHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2Y1NTVkMDEwLTVlNWUtNGMwMi04NzIyLWU2OWRhMTUxNGY5Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgYmAPD7gDANBgkqhkiG9w0BAQsFAAOCAQEAUmFDP6xlYXvcAcXDyXwyxRbG qivMy5O2JG7FT8NfP0gx5mMkC8LYplhqmLw4iT8qbY735664u+wdMB4UUNFQO/57 WuF3dlQmEvaXOzdA7+xMMqLr5dbgKV0yM0UAspXPSzg+vU9Cxy4es86LjP9qfesY ASWPu5SCSePhadG2QasUpYIEkoAG+Y7BJT909gqqwouAETjdWxzmKrfWDcZLx08V Be2o9cEhKRVoOEdzVYM1IaY/rVOdfmVUg+TOZPgxfs6P2kdGfY1naCIlIlB7njib vcj7srOj0yPVy8I03PpGa5P4FD7nBwx3TnFF+MtDj100LiVba8qkLI/bMIc/XA== -----END CERTIFICATE-----Generated at Sun Mar 1 23:40:14 2026 by rpki-client