$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ffd7e745-5408-4105-a459-c277ba9e6931.roa File: ffd7e745-5408-4105-a459-c277ba9e6931.roa (raw, json) Hash identifier: CmbFwYCS6fTOJeXiqRjWY1lfYYqYDrw0/VBWvunUX1I= Subject key identifier: AA:ED:DD:D1:0D:7A:7D:3D:01:F5:23:F9:21:ED:7B:AC:4B:E3:72:54 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 0B65CCC878912464053FE044EC9533DAF3C39301 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ffd7e745-5408-4105-a459-c277ba9e6931.roa Signing time: Fri 13 Feb 2026 15:00:11 +0000 ROA not before: Fri 13 Feb 2026 15:00:11 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6119::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:65:cc:c8:78:91:24:64:05:3f:e0:44:ec:95:33:da:f3:c3:93:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Feb 13 15:00:11 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=d6bf7e22c180789f7855389a7e1ddde30f1d6ac2e51a1c0d752f8d12909da604, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:27:de:3b:0b:ef:14:14:8d:a7:67:5a:b7:ad: 4d:88:a8:87:ff:62:ba:50:e0:03:46:1a:ee:63:b9: c8:b9:e0:50:65:08:5a:7e:2e:91:88:8a:5e:9a:c8: af:af:7c:2d:ce:04:59:c4:13:f3:7d:35:c4:8d:4b: db:b4:e8:01:d5:4d:cd:35:fc:65:dd:93:b1:c2:ef: b0:bf:30:5e:32:72:af:01:b2:27:41:4a:b8:cb:d9: 2f:62:ab:a7:15:37:30:7b:6d:89:b2:9d:81:39:1e: 8f:44:04:08:f2:28:d7:cf:40:de:d6:01:2d:8a:f8: 40:21:ac:06:c3:9e:f7:e8:04:c7:03:ae:8c:ea:f5: 4d:32:8a:f2:2b:72:d9:55:f0:65:f3:92:5a:75:62: 70:f9:f4:6c:78:df:44:95:1d:80:94:56:eb:65:9d: db:e3:ee:99:14:83:70:bc:a4:78:0a:8a:53:2d:5f: 92:b2:80:3c:af:51:4e:17:d8:25:fe:e2:a4:53:a0: cb:08:21:17:6b:71:7f:b8:9e:a6:4f:f6:72:70:65: ca:c6:79:f7:db:3e:09:42:a1:6e:80:40:c5:e4:cb: 2d:0e:4f:3a:7b:18:f6:f1:44:ee:3e:f7:11:1b:8d: dc:ec:0c:12:59:05:85:b9:2e:3f:db:eb:f5:ad:31: bb:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:ED:DD:D1:0D:7A:7D:3D:01:F5:23:F9:21:ED:7B:AC:4B:E3:72:54 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ffd7e745-5408-4105-a459-c277ba9e6931.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6119::/48 Signature Algorithm: sha256WithRSAEncryption 07:f5:52:a2:8f:10:44:d5:1b:0f:df:2b:07:07:67:49:5c:23: bd:6e:e7:0b:c3:f1:47:3f:61:76:7e:90:d4:08:4b:6d:f4:e9: f1:7a:b4:27:5a:f9:8b:52:61:64:29:4b:03:31:4d:7b:32:f2: aa:9d:da:27:4d:81:e2:e2:c0:76:1b:0d:5e:52:77:ca:5c:64: 3b:29:28:e2:7b:21:cc:85:47:31:a4:12:74:dd:46:c2:b5:9f: ab:30:f3:84:7c:a4:a1:6a:41:f1:6e:ca:08:95:f9:20:eb:0e: 10:40:bd:78:05:17:33:0c:72:5c:09:fb:61:7f:a8:08:78:a0: 03:ae:a9:e4:7d:22:09:9a:6f:29:af:67:03:6d:8c:7d:0f:c3: ac:b9:0f:9b:3a:0e:f5:14:92:05:8c:a7:4d:53:bd:18:2a:7b: 14:b5:1a:d6:db:e5:49:e1:c5:bb:ab:5b:b7:04:f2:e1:51:31: 97:d3:67:6c:e4:c3:93:1c:91:3a:27:05:06:42:15:c2:ee:dd: c3:52:32:18:33:4b:b3:c1:41:8e:9e:45:06:23:9d:7d:3a:a8: 7b:25:3a:b8:a1:43:c9:4c:70:8f:90:16:a5:77:ed:38:d5:c2: d4:09:ca:12:70:e4:d7:63:0d:b2:04:2d:a1:c8:fe:52:96:ce: 2c:e4:50:b6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUC2XMyHiRJGQFP+BE7JUz2vPDkwEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMjEzMTUwMDExWhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNmJmN2UyMmMxODA3ODlmNzg1NTM4OWE3ZTFkZGRlMzBm MWQ2YWMyZTUxYTFjMGQ3NTJmOGQxMjkwOWRhNjA0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdJ947C+8UFI2nZ1q3rU2IqIf/YrpQ4ANGGu5juci54FBl CFp+LpGIil6ayK+vfC3OBFnEE/N9NcSNS9u06AHVTc01/GXdk7HC77C/MF4ycq8B sidBSrjL2S9iq6cVNzB7bYmynYE5Ho9EBAjyKNfPQN7WAS2K+EAhrAbDnvfoBMcD rozq9U0yivIrctlV8GXzklp1YnD59Gx430SVHYCUVutlndvj7pkUg3C8pHgKilMt X5KygDyvUU4X2CX+4qRToMsIIRdrcX+4nqZP9nJwZcrGeffbPglCoW6AQMXkyy0O Tzp7GPbxRO4+9xEbjdzsDBJZBYW5Lj/b6/WtMbu9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUqu3d0Q16fT0B9SP5Ie17rEvjclQwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2ZmZDdlNzQ1LTU0MDgtNDEwNS1hNDU5LWMyNzdiYTllNjkzMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYRkwDQYJKoZIhvcNAQELBQADggEBAAf1UqKPEETVGw/fKwcHZ0lc I71u5wvD8Uc/YXZ+kNQIS2306fF6tCda+YtSYWQpSwMxTXsy8qqd2idNgeLiwHYb DV5Sd8pcZDspKOJ7IcyFRzGkEnTdRsK1n6sw84R8pKFqQfFuygiV+SDrDhBAvXgF FzMMclwJ+2F/qAh4oAOuqeR9IgmabymvZwNtjH0Pw6y5D5s6DvUUkgWMp01TvRgq exS1Gtbb5UnhxburW7cE8uFRMZfTZ2zkw5MckTonBQZCFcLu3cNSMhgzS7PBQY6e RQYjnX06qHslOrihQ8lMcI+QFqV37TjVwtQJyhJw5NdjDbIELaHI/lKWzizkULY= -----END CERTIFICATE-----Generated at Sun Mar 1 22:14:07 2026 by rpki-client