$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0e462966-259e-41b9-ba8b-855fa8efdacb.roa File: 0e462966-259e-41b9-ba8b-855fa8efdacb.roa (raw, json) Hash identifier: 1FSSKTQGNwr89q9N3nxoOU0hN/JEsbCDiUXfTOuxazU= Subject key identifier: B5:35:92:AC:E5:21:81:F1:22:04:94:03:45:AD:3A:6F:57:C9:AB:F1 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 101535FAC2521184DD862C6329E907180B8B4524 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0e462966-259e-41b9-ba8b-855fa8efdacb.roa Signing time: Tue 03 Mar 2026 19:36:51 +0000 ROA not before: Tue 03 Mar 2026 19:36:51 +0000 ROA not after: Mon 01 Jun 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:601::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:15:35:fa:c2:52:11:84:dd:86:2c:63:29:e9:07:18:0b:8b:45:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Mar 3 19:36:51 2026 GMT Not After : Jun 1 23:59:59 2026 GMT Subject: serialNumber=302f6a01cfe93c31d28737102741ac4bb88c4b62b03c12a7186cea0b4617185a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ef:14:53:36:db:d5:0f:dc:ea:0e:18:42:07: 2f:8f:87:f6:04:d3:6b:6b:ba:ef:b7:ae:d3:e1:27: 49:7f:0e:3a:c5:78:31:f1:62:cf:b4:ce:2e:71:28: b7:4a:44:ae:d4:31:81:25:7a:92:4a:01:a6:d0:b7: 95:53:02:35:b0:e7:3b:e4:3f:af:ac:5d:6d:52:db: 56:e1:4e:9b:e3:fe:cc:5e:20:20:97:91:9b:fc:27: e2:83:50:fa:d8:d2:b1:20:53:f9:01:0d:e1:89:93: df:e5:c4:8a:33:a3:a8:16:75:3e:68:31:81:61:00: a9:bb:a5:ad:02:eb:7c:a3:46:8e:6f:d8:d5:09:b1: 80:7f:aa:a3:c7:64:9a:20:bc:ae:97:4c:fe:41:bf: a1:6b:48:c1:02:32:36:b1:c6:b5:e1:b8:dc:8f:12: 2b:c9:b4:a1:6d:c6:76:82:6e:c8:f7:fb:4f:ad:f1: 83:7d:b8:fa:8f:d4:4b:96:05:97:51:72:e4:68:4c: 67:33:ba:b4:01:e3:34:c8:ab:4b:82:09:8f:00:ef: 27:fb:4e:0c:2b:99:e7:17:ef:4b:85:8a:0e:7e:a4: e9:a6:55:69:29:d6:91:fe:c3:e9:3b:bb:63:61:88: a6:6c:03:65:fc:ef:28:df:3a:3e:3a:e9:7c:a1:55: 93:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:35:92:AC:E5:21:81:F1:22:04:94:03:45:AD:3A:6F:57:C9:AB:F1 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0e462966-259e-41b9-ba8b-855fa8efdacb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:601::/48 Signature Algorithm: sha256WithRSAEncryption 32:38:80:4b:46:f2:dc:3a:e7:28:cf:bb:b2:1b:23:86:1f:97: 76:1f:0e:59:ab:fb:7e:ca:e2:f3:66:f7:50:98:74:e5:a5:e9: 71:30:1d:b1:3d:bb:8b:06:b2:9c:dc:2b:f8:e0:c0:b4:b3:c4: 76:d3:6c:0f:8f:03:7f:a2:74:8c:75:df:08:54:16:92:56:92: d9:c0:66:31:98:1d:94:04:9a:d4:04:d8:ff:6d:d4:2a:a4:02: 94:74:6e:e9:1f:2e:34:6d:6e:8c:9a:2b:49:b8:31:89:40:77: 11:c3:65:4c:da:45:82:59:05:4e:f3:69:21:c0:6f:57:51:c2: dc:2e:a0:22:dc:61:de:34:17:73:63:3e:a7:f0:7c:9b:52:25: c7:8d:b7:59:35:27:db:0b:23:4c:dd:82:9a:56:a9:ce:97:9b: e6:a6:42:c7:cf:3b:ff:c2:8a:e0:5b:03:db:9f:e6:93:da:00: 87:70:8c:f3:38:f2:80:3d:f2:a9:e3:0c:bb:9e:3e:8d:73:ed: d4:8e:8a:8b:08:78:e5:ff:d8:af:b2:ce:ad:e1:5b:e7:5e:85: 4b:0a:20:0f:c1:17:f5:b8:d6:2a:bd:9c:91:f7:75:25:b3:57: f4:3d:0a:0f:c3:f7:cc:4f:ae:a0:c1:84:0e:b7:37:03:84:f7: 3f:a9:6d:50 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEBU1+sJSEYTdhixjKekHGAuLRSQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMzAzMTkzNjUxWhcNMjYwNjAxMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMDJmNmEwMWNmZTkzYzMxZDI4NzM3MTAyNzQxYWM0YmI4 OGM0YjYyYjAzYzEyYTcxODZjZWEwYjQ2MTcxODVhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCX7xRTNtvVD9zqDhhCBy+Ph/YE02truu+3rtPhJ0l/DjrF eDHxYs+0zi5xKLdKRK7UMYElepJKAabQt5VTAjWw5zvkP6+sXW1S21bhTpvj/sxe ICCXkZv8J+KDUPrY0rEgU/kBDeGJk9/lxIozo6gWdT5oMYFhAKm7pa0C63yjRo5v 2NUJsYB/qqPHZJogvK6XTP5Bv6FrSMECMjaxxrXhuNyPEivJtKFtxnaCbsj3+0+t 8YN9uPqP1EuWBZdRcuRoTGczurQB4zTIq0uCCY8A7yf7TgwrmecX70uFig5+pOmm VWkp1pH+w+k7u2NhiKZsA2X87yjfOj466XyhVZPJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUtTWSrOUhgfEiBJQDRa06b1fJq/EwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzBlNDYyOTY2LTI1OWUtNDFiOS1iYThiLTg1NWZhOGVmZGFjYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwBgEwDQYJKoZIhvcNAQELBQADggEBADI4gEtG8tw65yjPu7IbI4Yf l3YfDlmr+37K4vNm91CYdOWl6XEwHbE9u4sGspzcK/jgwLSzxHbTbA+PA3+idIx1 3whUFpJWktnAZjGYHZQEmtQE2P9t1CqkApR0bukfLjRtboyaK0m4MYlAdxHDZUza RYJZBU7zaSHAb1dRwtwuoCLcYd40F3NjPqfwfJtSJceNt1k1J9sLI0zdgppWqc6X m+amQsfPO//CiuBbA9uf5pPaAIdwjPM48oA98qnjDLuePo1z7dSOiosIeOX/2K+y zq3hW+dehUsKIA/BF/W41iq9nJH3dSWzV/Q9Cg/D98xPrqDBhA63NwOE9z+pbVA= -----END CERTIFICATE-----Generated at Wed Mar 11 10:32:55 2026 by rpki-client