$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/98e8ca7a-6b39-4931-9bbc-86998d4c579f.roa File: 98e8ca7a-6b39-4931-9bbc-86998d4c579f.roa (raw, json) Hash identifier: aapL/V6km5zW4ZdHC5NgPhVCN39yyMlomhLdt8UXvT4= Subject key identifier: 2C:4D:48:B3:E9:8C:85:9D:F6:C7:6E:02:44:95:11:48:6D:F4:8C:AD Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 05BAB19F449EC47BAD6AFED33ED43EFB808F79AE Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/98e8ca7a-6b39-4931-9bbc-86998d4c579f.roa Signing time: Tue 03 Mar 2026 19:36:51 +0000 ROA not before: Tue 03 Mar 2026 19:36:51 +0000 ROA not after: Mon 01 Jun 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:602::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:ba:b1:9f:44:9e:c4:7b:ad:6a:fe:d3:3e:d4:3e:fb:80:8f:79:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Mar 3 19:36:51 2026 GMT Not After : Jun 1 23:59:59 2026 GMT Subject: serialNumber=b9d18016e3a62660756c65b5c31b7ae1b378fd64865aa0ab7f38df51cf867032, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9b:77:46:e8:2e:af:4b:9c:6d:80:b3:b8:a6: ad:c7:ac:4a:a4:35:45:d2:21:67:bc:29:37:7a:1d: 60:b9:c8:e0:c0:f4:cc:8d:b4:57:70:9f:f9:24:0e: 99:ba:16:4c:51:de:1d:16:bb:24:ec:56:31:e1:ec: 46:77:ba:50:fa:2e:a7:eb:de:fa:44:74:c2:3e:23: 32:27:5c:bc:12:9c:2c:9c:0f:da:38:1d:55:5e:3b: 27:5e:4b:3c:cf:f6:34:e8:07:72:34:eb:36:a7:b3: 47:8c:d5:9d:09:bd:d2:c2:da:8b:63:95:28:4b:65: 0f:fb:7e:9d:8f:e9:95:ef:da:ec:62:65:67:15:01: 08:85:1e:5f:3f:99:2d:73:81:ed:e1:5c:a5:07:71: c3:a4:c7:48:8e:db:59:35:df:a4:bc:05:50:0d:34: 5d:47:e1:d3:20:3e:d9:0c:3f:b5:08:db:9d:52:88: b6:a5:db:57:db:22:13:c2:bf:c1:98:dd:92:cf:7c: c7:a8:8d:7f:98:b8:4e:85:eb:bd:f1:b7:8f:f2:49: 8b:9f:91:13:95:3e:97:59:85:c8:33:fb:12:b2:ac: b8:fb:de:f8:f6:99:b5:fe:8c:3b:16:2d:98:af:27: 02:d2:32:4d:ab:77:8c:53:52:d0:03:bb:39:bd:fd: 72:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:4D:48:B3:E9:8C:85:9D:F6:C7:6E:02:44:95:11:48:6D:F4:8C:AD X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/98e8ca7a-6b39-4931-9bbc-86998d4c579f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:602::/48 Signature Algorithm: sha256WithRSAEncryption 9a:38:24:b3:c2:ca:98:1e:d0:4a:d8:4e:8f:bf:27:69:13:4c: 39:ed:b9:4f:cf:99:40:92:10:73:11:ad:31:86:01:d4:05:f4: c9:e7:4d:18:4d:b2:38:05:ff:bf:2a:9d:50:cd:4d:08:17:ac: a0:74:42:a3:4e:6a:fb:d2:d9:ed:2a:0f:d1:34:65:50:71:c4: 25:4e:ad:02:ad:a0:3d:49:12:9f:c8:fc:78:35:bb:5d:0e:66: 66:67:9c:be:86:a1:5d:4f:5a:8a:87:f8:1e:25:1a:11:22:75: c5:34:a5:3b:8d:bd:58:9e:76:a4:4a:d1:f5:51:29:91:bf:1e: 35:d9:59:1e:1e:59:71:8b:e7:85:91:e2:33:2b:8a:40:fb:8f: 0b:ef:ea:1d:90:08:bc:ba:a5:68:a5:10:55:df:85:d1:22:59: f9:48:89:7d:7e:99:5e:d9:82:55:1e:e0:82:0d:dc:47:6f:14: b9:13:a8:9e:ed:11:1b:9f:1d:aa:66:2d:90:23:89:4c:d5:f6: ab:02:5a:5a:91:a0:d4:40:50:20:3e:b5:2c:1a:75:ef:00:3d: e8:4a:9a:18:0d:80:31:d4:5a:ce:9f:05:9f:43:f1:38:3b:84: bb:42:c0:9a:d2:8f:1f:89:4f:ce:58:c5:a8:9c:5b:d3:7d:16: 9f:b6:52:f5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBbqxn0SexHutav7TPtQ++4CPea4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMzAzMTkzNjUxWhcNMjYwNjAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiOWQxODAxNmUzYTYyNjYwNzU2YzY1YjVjMzFiN2FlMWIz NzhmZDY0ODY1YWEwYWI3ZjM4ZGY1MWNmODY3MDMyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzm3dG6C6vS5xtgLO4pq3HrEqkNUXSIWe8KTd6HWC5yODA 9MyNtFdwn/kkDpm6FkxR3h0WuyTsVjHh7EZ3ulD6Lqfr3vpEdMI+IzInXLwSnCyc D9o4HVVeOydeSzzP9jToB3I06zans0eM1Z0JvdLC2otjlShLZQ/7fp2P6ZXv2uxi ZWcVAQiFHl8/mS1zge3hXKUHccOkx0iO21k136S8BVANNF1H4dMgPtkMP7UI251S iLal21fbIhPCv8GY3ZLPfMeojX+YuE6F673xt4/ySYufkROVPpdZhcgz+xKyrLj7 3vj2mbX+jDsWLZivJwLSMk2rd4xTUtADuzm9/XIrAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQULE1Is+mMhZ32x24CRJURSG30jK0wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzk4ZThjYTdhLTZiMzktNDkzMS05YmJjLTg2OTk4ZDRjNTc5Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwBgIwDQYJKoZIhvcNAQELBQADggEBAJo4JLPCypge0ErYTo+/J2kT TDntuU/PmUCSEHMRrTGGAdQF9MnnTRhNsjgF/78qnVDNTQgXrKB0QqNOavvS2e0q D9E0ZVBxxCVOrQKtoD1JEp/I/Hg1u10OZmZnnL6GoV1PWoqH+B4lGhEidcU0pTuN vViedqRK0fVRKZG/HjXZWR4eWXGL54WR4jMrikD7jwvv6h2QCLy6pWilEFXfhdEi WflIiX1+mV7ZglUe4IIN3EdvFLkTqJ7tERufHapmLZAjiUzV9qsCWlqRoNRAUCA+ tSwade8APehKmhgNgDHUWs6fBZ9D8Tg7hLtCwJrSjx+JT85YxaicW9N9Fp+2UvU= -----END CERTIFICATE-----Generated at Wed Mar 11 10:32:52 2026 by rpki-client