$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/943469fe-0c4e-4980-9758-bfe794df0901.roa File: 943469fe-0c4e-4980-9758-bfe794df0901.roa (raw, json) Hash identifier: XP0BfmCy2buAS0RINCGf08gKEAI67mYH/MRKbpOwIZA= Subject key identifier: A3:2C:64:4A:40:38:F2:63:81:CC:97:7D:20:3D:E7:A8:FD:13:F3:39 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 0313378D2DBEE286442F8D36D20BF0D83BF7EA67 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/943469fe-0c4e-4980-9758-bfe794df0901.roa Signing time: Thu 05 Mar 2026 23:51:37 +0000 ROA not before: Thu 05 Mar 2026 23:51:37 +0000 ROA not after: Wed 03 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:c00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:13:37:8d:2d:be:e2:86:44:2f:8d:36:d2:0b:f0:d8:3b:f7:ea:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Mar 5 23:51:37 2026 GMT Not After : Jun 3 23:59:59 2026 GMT Subject: serialNumber=e2b98f6b19647c4615009fee998b47abe199d9613f5a32ee442c265cbbe4500d, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ce:5c:2d:06:2d:9e:e6:3f:63:d0:02:0b:a0: 05:60:7a:28:08:05:3b:9d:2a:0a:78:be:fb:81:c0: 88:90:a5:62:ad:ef:72:7c:d2:d6:12:fa:b7:29:a5: c0:c0:0b:aa:a4:35:8d:f9:6c:62:cd:ee:42:f6:3b: 93:d2:ca:a9:b3:3f:f9:5d:8e:16:53:e9:1d:5e:a9: af:d4:79:ba:6b:a2:75:61:0e:a6:59:19:c0:e1:15: 4a:a9:31:2a:cd:af:f9:73:84:19:17:81:b3:b4:55: d9:2a:ad:5b:2c:40:60:eb:31:99:73:1e:5d:fc:bf: e4:85:5b:1d:46:4c:b1:5e:9f:81:19:2b:39:5e:35: 86:02:99:cd:7a:f2:d9:fb:d2:69:3d:a5:62:ac:c5: 30:08:84:c2:91:57:8a:45:c2:1f:02:55:c5:7a:74: 88:6e:53:13:2a:94:9a:4a:14:91:ef:af:59:1a:68: aa:1c:f2:35:53:88:2b:1a:c1:60:a5:27:35:3a:49: 23:61:3a:31:06:cf:19:ae:50:7e:40:00:6e:df:9b: ab:dd:bb:7e:1a:a1:89:64:4a:59:08:5e:d6:a2:d8: 70:8b:00:73:27:60:b9:29:87:0b:e0:4d:56:56:ed: da:1f:53:25:2c:a1:55:f4:d5:83:68:a8:87:13:d5: a9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:2C:64:4A:40:38:F2:63:81:CC:97:7D:20:3D:E7:A8:FD:13:F3:39 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/943469fe-0c4e-4980-9758-bfe794df0901.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:c00::/40 Signature Algorithm: sha256WithRSAEncryption 3e:2f:5e:6f:41:28:19:05:78:f6:39:bc:19:b9:d3:d0:49:70: ba:cf:21:3d:70:e9:d3:3b:e7:f4:04:56:55:c8:88:b2:2f:34: 4c:11:8d:d9:cb:06:d9:25:de:69:48:88:2e:8c:0c:d6:f4:d7: 5e:8c:ad:a7:65:48:78:e0:81:9d:4e:3b:c6:35:57:0f:ce:48: 47:2c:aa:b4:bd:00:32:2e:9f:42:6b:1a:81:37:2b:c1:be:4c: cf:96:41:e7:52:9c:5b:88:d6:bf:72:84:ca:f9:72:5e:7e:ab: a1:ec:f5:85:0e:27:30:9a:54:93:05:c3:f2:10:f2:bb:c7:b8: 29:9f:04:8e:93:44:f0:41:64:a5:43:ba:ea:32:fa:c7:fa:58: be:c0:2a:bc:6e:ad:52:0f:3a:75:fa:8a:25:da:1d:c6:38:96: 5b:5d:e6:27:d1:09:80:7e:16:e6:5e:b2:9d:f6:27:40:bf:43: 22:a5:3c:61:bf:e7:45:4a:54:41:24:e6:d4:23:68:b9:18:74: 45:b1:a5:03:ff:7c:83:4a:ef:b3:ab:87:ad:d8:b2:f3:d4:c9: 91:dd:61:24:38:b9:ca:6a:a8:a5:ff:7e:18:9e:28:c1:e1:4a: d0:4c:cb:ce:7c:48:36:30:8b:e8:29:5f:91:47:27:8f:6b:48: fc:9f:38:0c -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUAxM3jS2+4oZEL4020gvw2Dv36mcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMzA1MjM1MTM3WhcNMjYwNjAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMmI5OGY2YjE5NjQ3YzQ2MTUwMDlmZWU5OThiNDdhYmUx OTlkOTYxM2Y1YTMyZWU0NDJjMjY1Y2JiZTQ1MDBkMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrzlwtBi2e5j9j0AILoAVgeigIBTudKgp4vvuBwIiQpWKt 73J80tYS+rcppcDAC6qkNY35bGLN7kL2O5PSyqmzP/ldjhZT6R1eqa/UebpronVh DqZZGcDhFUqpMSrNr/lzhBkXgbO0VdkqrVssQGDrMZlzHl38v+SFWx1GTLFen4EZ KzleNYYCmc168tn70mk9pWKsxTAIhMKRV4pFwh8CVcV6dIhuUxMqlJpKFJHvr1ka aKoc8jVTiCsawWClJzU6SSNhOjEGzxmuUH5AAG7fm6vdu34aoYlkSlkIXtai2HCL AHMnYLkphwvgTVZW7dofUyUsoVX01YNoqIcT1amfAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUoyxkSkA48mOBzJd9ID3nqP0T8zkwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzk0MzQ2OWZlLTBjNGUtNDk4MC05NzU4LWJmZTc5NGRmMDkwMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDwDDANBgkqhkiG9w0BAQsFAAOCAQEAPi9eb0EoGQV49jm8GbnT0Elw us8hPXDp0zvn9ARWVciIsi80TBGN2csG2SXeaUiILowM1vTXXoytp2VIeOCBnU47 xjVXD85IRyyqtL0AMi6fQmsagTcrwb5Mz5ZB51KcW4jWv3KEyvlyXn6roez1hQ4n MJpUkwXD8hDyu8e4KZ8EjpNE8EFkpUO66jL6x/pYvsAqvG6tUg86dfqKJdodxjiW W13mJ9EJgH4W5l6ynfYnQL9DIqU8Yb/nRUpUQSTm1CNouRh0RbGlA/98g0rvs6uH rdiy89TJkd1hJDi5ymqopf9+GJ4oweFK0EzLznxINjCL6ClfkUcnj2tI/J84DA== -----END CERTIFICATE-----Generated at Wed Mar 11 10:32:53 2026 by rpki-client