$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f8118e9e-4da8-4d2a-bf13-2faef4f132df.roa File: f8118e9e-4da8-4d2a-bf13-2faef4f132df.roa (raw, json) Hash identifier: XllIg7geEUuWuXgeqnu6IrHF7s/S3CAiaeUv91GEqZM= Subject key identifier: CF:A8:24:55:30:00:42:F2:C7:DB:D6:E1:39:25:B5:48:C2:2A:C7:A9 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 5673C32C4D7DF4B7E6CD46FE4CEF539536DA9EBD Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f8118e9e-4da8-4d2a-bf13-2faef4f132df.roa Signing time: Fri 13 Feb 2026 15:11:00 +0000 ROA not before: Fri 13 Feb 2026 15:11:00 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:610e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:73:c3:2c:4d:7d:f4:b7:e6:cd:46:fe:4c:ef:53:95:36:da:9e:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Feb 13 15:11:00 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=bb1e163826ba14cf423715e952174020959d5ab13bc55ef118266c10274ce3bc, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8c:09:8b:8a:6b:d0:e3:b2:53:92:99:70:49: 31:34:b7:a2:f8:ad:7e:b4:97:35:11:c2:f2:1a:ab: b0:33:19:70:45:dd:f9:6b:c4:f1:b6:cb:df:35:f0: 25:19:c5:1e:22:1d:0a:63:8b:24:76:12:14:0c:5d: 4a:60:e3:7d:68:5a:38:a8:8a:47:3a:45:2f:b1:ea: 1c:c1:05:10:f1:9a:70:a9:42:c7:a2:3d:1c:69:19: fd:2d:b9:95:fd:ba:a5:d6:ac:e6:aa:92:83:1f:31: da:24:31:02:0d:23:a5:6d:e7:25:67:a0:67:63:e9: 7b:85:a0:cc:a5:56:47:8b:ec:91:0b:82:e8:83:b3: f4:2f:fb:d6:9a:71:52:ff:ed:28:c5:4f:92:38:fa: f1:14:79:72:a5:c1:1e:dc:3c:6f:d4:98:f8:e5:ee: fd:40:53:19:ca:cf:56:be:a9:e8:f6:01:2a:c4:f7: 13:a4:96:04:f8:bc:1e:80:75:58:dd:27:6b:8a:4b: 7c:69:5a:54:64:fa:7a:29:38:4f:25:27:2e:a2:b0: 9d:80:4c:8c:da:db:68:c1:7b:b0:81:f1:7a:13:8c: 1a:34:df:0a:a2:85:f2:18:40:bc:ed:67:11:cc:a5: a9:df:c2:26:99:ea:d1:f2:08:c1:a0:87:d8:01:11: f4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A8:24:55:30:00:42:F2:C7:DB:D6:E1:39:25:B5:48:C2:2A:C7:A9 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f8118e9e-4da8-4d2a-bf13-2faef4f132df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:610e::/48 Signature Algorithm: sha256WithRSAEncryption 99:c2:e8:ef:af:90:bc:04:49:47:8f:ae:4f:79:d8:e2:07:77: bf:35:96:cb:87:3d:38:c4:fc:94:98:04:51:e8:7b:ae:07:f7: bd:98:5c:a2:37:45:93:f4:14:3f:0d:26:6a:a3:fb:c9:7c:fb: 21:a0:20:f8:6d:f0:6b:bb:2c:be:7a:3e:c9:55:67:86:b2:f2: e6:dd:80:66:1c:f5:0c:ce:0d:86:b8:cd:8f:c0:c3:e6:5d:a2: 47:27:3a:fe:21:10:82:fe:dd:08:7e:b1:6c:74:44:91:1b:bc: 25:d7:27:8e:e4:ea:62:32:e4:db:d8:be:cc:35:b4:4b:28:1d: 73:2b:dc:18:a6:85:3f:31:9d:ea:2c:8b:1b:eb:35:44:1c:ae: e8:8a:55:86:ab:d7:1d:f0:4b:51:87:83:df:a2:be:7f:77:7b: f2:9b:f7:bb:5a:03:2e:81:fc:4e:62:e1:da:d5:cf:ed:88:53: f1:f6:d3:d7:e2:9d:7f:dc:e6:66:34:59:75:ad:45:fa:d4:bf: 01:01:68:75:bf:62:53:77:d2:5f:bd:e6:7a:ff:4b:b0:ab:2f: 4d:39:36:ea:7c:6f:f8:57:ad:7b:b9:91:d7:62:57:76:e8:74: 22:2b:ec:e5:9c:40:3e:0e:1a:f3:05:20:64:f0:aa:1c:93:3b: df:fd:6c:19 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUVnPDLE199LfmzUb+TO9TlTbanr0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMjEzMTUxMTAwWhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYjFlMTYzODI2YmExNGNmNDIzNzE1ZTk1MjE3NDAyMDk1 OWQ1YWIxM2JjNTVlZjExODI2NmMxMDI3NGNlM2JjMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCijAmLimvQ47JTkplwSTE0t6L4rX60lzURwvIaq7AzGXBF 3flrxPG2y9818CUZxR4iHQpjiyR2EhQMXUpg431oWjioikc6RS+x6hzBBRDxmnCp QseiPRxpGf0tuZX9uqXWrOaqkoMfMdokMQINI6Vt5yVnoGdj6XuFoMylVkeL7JEL guiDs/Qv+9aacVL/7SjFT5I4+vEUeXKlwR7cPG/UmPjl7v1AUxnKz1a+qej2ASrE 9xOklgT4vB6AdVjdJ2uKS3xpWlRk+nopOE8lJy6isJ2ATIza22jBe7CB8XoTjBo0 3wqihfIYQLztZxHMpanfwiaZ6tHyCMGgh9gBEfQpAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUz6gkVTAAQvLH29bhOSW1SMIqx6kwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2Y4MTE4ZTllLTRkYTgtNGQyYS1iZjEzLTJmYWVmNGYxMzJkZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQ4wDQYJKoZIhvcNAQELBQADggEBAJnC6O+vkLwESUePrk952OIH d781lsuHPTjE/JSYBFHoe64H972YXKI3RZP0FD8NJmqj+8l8+yGgIPht8Gu7LL56 PslVZ4ay8ubdgGYc9QzODYa4zY/Aw+ZdokcnOv4hEIL+3Qh+sWx0RJEbvCXXJ47k 6mIy5NvYvsw1tEsoHXMr3BimhT8xneosixvrNUQcruiKVYar1x3wS1GHg9+ivn93 e/Kb97taAy6B/E5i4drVz+2IU/H209finX/c5mY0WXWtRfrUvwEBaHW/YlN30l+9 5nr/S7CrL005Nup8b/hXrXu5kddiV3bodCIr7OWcQD4OGvMFIGTwqhyTO9/9bBk= -----END CERTIFICATE-----Generated at Mon Mar 2 06:13:05 2026 by rpki-client