$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/75c1ad27-f269-4ce6-80db-a3279c123941.roa File: 75c1ad27-f269-4ce6-80db-a3279c123941.roa (raw, json) Hash identifier: SMFTCH1dAxLfUV5KeDQ3cKnP0nAxTidx7mK87q/N6/U= Subject key identifier: 42:29:32:FB:F6:F4:57:E0:EE:80:4D:8E:56:05:C0:15:12:0B:6F:B9 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 3D09188719909DD4412D8BF8F35CA996774585EC Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/75c1ad27-f269-4ce6-80db-a3279c123941.roa Signing time: Fri 13 Feb 2026 15:00:08 +0000 ROA not before: Fri 13 Feb 2026 15:00:08 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:610d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Feb 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:09:18:87:19:90:9d:d4:41:2d:8b:f8:f3:5c:a9:96:77:45:85:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Feb 13 15:00:08 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=98ec526373257c938c1054f256e809015fa3e86af525128a6ff8cad738d7fe9f, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:09:06:5c:74:25:8d:04:5c:8d:c4:31:de:d1: 0a:ed:6f:a0:d7:a5:88:68:1e:44:dc:a5:a8:6c:b9: fa:b7:4f:99:91:1d:fc:70:62:d5:41:af:ae:32:47: 96:98:1f:c6:aa:9c:f8:38:4a:ff:6f:11:8b:46:e2: 7e:83:91:fe:86:55:96:a1:8c:c0:ea:e9:a5:41:ac: 41:e4:4d:20:c5:26:90:95:94:60:10:e3:de:a4:87: eb:5b:b8:14:55:ff:31:d4:03:2d:03:0f:7a:14:06: 02:10:cd:ec:70:a4:6e:e8:ec:dd:7a:21:ea:47:c8: e6:59:91:f1:1c:86:34:45:51:5b:aa:b8:73:01:b3: 89:8c:5b:02:a4:c8:a9:af:3b:e1:a2:2f:9f:00:f2: 38:93:38:02:80:a9:c3:3b:76:b5:bc:f6:f8:dd:f3: 55:76:02:4a:cf:d4:82:71:0b:21:a7:4a:63:82:91: d6:72:54:67:ab:e2:d8:7a:ae:1a:de:71:b4:d7:7b: 8f:42:c8:7d:cf:ec:40:7f:01:47:39:4b:f2:24:44: 4e:6d:13:ff:c1:01:92:4f:3e:a2:ac:3a:1f:97:be: 5e:e7:ea:d8:8c:88:36:6a:06:de:45:6b:c4:ee:51: 4c:d8:04:fc:d7:84:fd:cd:0e:a7:57:2e:f5:e1:7d: 7e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:29:32:FB:F6:F4:57:E0:EE:80:4D:8E:56:05:C0:15:12:0B:6F:B9 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/75c1ad27-f269-4ce6-80db-a3279c123941.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:610d::/48 Signature Algorithm: sha256WithRSAEncryption 2d:67:8b:ae:d0:6b:2f:fb:eb:c7:c5:1f:8a:dc:26:e9:68:cb: 38:bc:ed:e0:4f:64:25:02:28:1c:a4:5c:e3:a9:78:85:1b:95: 18:15:8e:9c:b0:0a:b2:db:5b:00:51:eb:86:f8:4c:1f:f5:b8: 87:38:48:0b:5c:27:8c:a9:e5:a0:4b:bf:af:8b:1e:f8:43:02: 3e:37:d3:d3:e9:52:a5:d3:18:5a:2a:3d:f0:d9:60:9d:cf:7c: f9:24:2a:f2:87:ca:25:89:e8:8d:e8:bc:d5:4b:8f:c5:f2:a5: ba:18:eb:84:a8:67:c6:1b:79:8c:52:68:5d:19:bc:a9:2e:64: 8e:51:06:3b:3c:80:21:08:e2:10:62:da:20:e9:fc:ca:2c:b0: b1:89:ca:e2:7a:dd:67:b5:64:82:0f:a8:95:9a:e9:8f:f1:aa: 19:db:a9:9c:b9:80:f3:8a:68:b7:2d:6a:25:e1:1e:63:db:ee: 5a:f3:bf:ca:03:a5:51:7d:92:11:3b:b8:09:ac:83:b1:76:88: e9:25:08:93:6e:63:d9:a2:70:e5:72:3e:85:eb:6b:f1:6d:da: b9:39:6e:f8:7f:e4:7a:ca:cd:5e:05:7b:6d:d6:a7:3f:bb:6a: a3:cd:97:ed:a4:e7:e7:3f:a2:60:f4:99:6a:44:27:bf:bc:66: 86:07:5d:d4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUPQkYhxmQndRBLYv481yplndFhewwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMjEzMTUwMDA4WhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A5OGVjNTI2MzczMjU3YzkzOGMxMDU0ZjI1NmU4MDkwMTVm YTNlODZhZjUyNTEyOGE2ZmY4Y2FkNzM4ZDdmZTlmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLCQZcdCWNBFyNxDHe0Qrtb6DXpYhoHkTcpahsufq3T5mR HfxwYtVBr64yR5aYH8aqnPg4Sv9vEYtG4n6Dkf6GVZahjMDq6aVBrEHkTSDFJpCV lGAQ496kh+tbuBRV/zHUAy0DD3oUBgIQzexwpG7o7N16IepHyOZZkfEchjRFUVuq uHMBs4mMWwKkyKmvO+GiL58A8jiTOAKAqcM7drW89vjd81V2AkrP1IJxCyGnSmOC kdZyVGer4th6rhrecbTXe49CyH3P7EB/AUc5S/IkRE5tE//BAZJPPqKsOh+Xvl7n 6tiMiDZqBt5Fa8TuUUzYBPzXhP3NDqdXLvXhfX4TAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUQiky+/b0V+DugE2OVgXAFRILb7kwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzc1YzFhZDI3LWYyNjktNGNlNi04MGRiLWEzMjc5YzEyMzk0MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQ0wDQYJKoZIhvcNAQELBQADggEBAC1ni67Qay/768fFH4rcJulo yzi87eBPZCUCKBykXOOpeIUblRgVjpywCrLbWwBR64b4TB/1uIc4SAtcJ4yp5aBL v6+LHvhDAj4309PpUqXTGFoqPfDZYJ3PfPkkKvKHyiWJ6I3ovNVLj8XypboY64So Z8YbeYxSaF0ZvKkuZI5RBjs8gCEI4hBi2iDp/MossLGJyuJ63We1ZIIPqJWa6Y/x qhnbqZy5gPOKaLctaiXhHmPb7lrzv8oDpVF9khE7uAmsg7F2iOklCJNuY9micOVy PoXra/Ft2rk5bvh/5HrKzV4Fe23Wpz+7aqPNl+2k5+c/omD0mWpEJ7+8ZoYHXdQ= -----END CERTIFICATE-----Generated at Mon Feb 23 05:37:06 2026 by rpki-client