$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d2754057-8887-4dfa-96d2-8349e00ea226.roa File: d2754057-8887-4dfa-96d2-8349e00ea226.roa (raw, json) Hash identifier: FgdzhwvN5hle0pGrEFQ3i4Kdy426t/v+N0e8lVzaCD4= Subject key identifier: 5F:29:63:16:E4:4A:30:DC:91:0B:F1:5E:42:3F:52:0B:C8:93:F1:8A Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 04F22934B37149FE1B8087AF746D28C3BE1F26CE Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d2754057-8887-4dfa-96d2-8349e00ea226.roa Signing time: Fri 13 Feb 2026 15:10:12 +0000 ROA not before: Fri 13 Feb 2026 15:10:12 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6108::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Feb 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:f2:29:34:b3:71:49:fe:1b:80:87:af:74:6d:28:c3:be:1f:26:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Feb 13 15:10:12 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=558c395100bb159a5b16a437274f0146a1f3f93597f0498d3ecb12900f02a12f, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c9:8e:ab:9b:23:ec:ce:91:46:d9:c2:20:d0: ab:1a:de:f2:bf:bc:5e:4c:04:57:79:11:12:f9:cf: 19:03:1f:4d:f5:eb:64:13:b9:39:62:19:c4:41:35: 16:d7:b8:27:85:de:4f:5e:ca:5e:ca:98:53:22:cc: f8:25:1c:7a:46:37:72:b6:57:46:2b:cc:c4:9c:01: a0:20:bb:4a:78:71:0a:28:22:cd:3d:1a:5c:ae:90: 4d:1e:93:83:e8:d6:17:a2:a6:c3:5e:23:e5:0e:b2: df:b5:db:0f:10:89:fd:0c:d4:43:60:4d:d4:7b:8b: 4c:76:f9:54:11:e0:6a:90:db:9b:3c:ae:6d:e6:9e: 22:8b:70:6c:71:e3:13:13:8f:ff:68:4a:72:b6:12: 30:7c:72:aa:e4:b2:7b:0a:51:e7:9b:33:38:04:c6: 30:de:dc:74:c1:f4:cc:ca:43:2f:69:3b:95:10:fd: 63:f1:5b:c5:37:04:91:94:ea:49:cd:11:6d:f6:19: 69:d7:47:33:11:5e:22:0f:fa:f3:df:2e:1b:9f:67: ef:68:35:0b:f2:18:00:d8:36:18:98:43:d5:aa:00: 5c:af:19:b5:2e:82:e1:c9:66:91:76:7d:d2:88:ac: 2b:b9:b2:ee:07:58:8b:13:87:1a:9b:c1:f2:02:66: ce:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:29:63:16:E4:4A:30:DC:91:0B:F1:5E:42:3F:52:0B:C8:93:F1:8A X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d2754057-8887-4dfa-96d2-8349e00ea226.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6108::/48 Signature Algorithm: sha256WithRSAEncryption 73:00:cf:dc:91:b9:f7:4d:43:19:5e:96:12:ad:e6:51:ad:7c: 94:6f:29:6d:95:28:10:dc:49:93:38:7d:98:94:36:2a:af:f6: 0f:65:7d:31:61:e7:90:1a:d1:91:a1:5a:67:0c:39:2c:f1:91: cf:a9:60:e7:1f:30:eb:c2:1a:33:21:7d:7d:47:fe:28:2f:7d: a1:37:29:0b:0c:72:19:27:81:36:36:a9:2b:1e:1f:58:f4:64: e7:28:a2:3c:68:b0:9c:d1:9b:47:db:ef:44:73:f0:fd:9d:1e: 59:3c:b0:90:07:67:1f:9a:0f:31:13:91:2f:e9:a6:55:28:76: 8f:e0:20:49:a1:70:fa:9e:cb:f6:63:2d:e4:08:65:69:98:82: 7b:27:74:ba:e9:88:63:cb:13:47:92:37:54:15:c4:90:67:2b: 3a:90:0d:01:3f:92:0d:ab:02:7b:a6:30:9a:0c:91:92:9a:b4: e8:0b:3a:27:ad:ad:56:cd:09:31:97:57:73:3f:5a:09:f8:d6: 32:4d:91:14:f6:1a:96:72:13:a8:81:ab:89:cc:e3:9c:b6:f8: ee:eb:31:aa:7c:80:59:1d:c4:13:83:59:ce:24:d0:65:f1:43: a3:13:02:1d:50:79:80:12:33:4b:c8:56:5b:5a:13:e7:91:38: a1:5d:97:bc -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBPIpNLNxSf4bgIevdG0ow74fJs4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMjEzMTUxMDEyWhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NThjMzk1MTAwYmIxNTlhNWIxNmE0MzcyNzRmMDE0NmEx ZjNmOTM1OTdmMDQ5OGQzZWNiMTI5MDBmMDJhMTJmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8yY6rmyPszpFG2cIg0Ksa3vK/vF5MBFd5ERL5zxkDH031 62QTuTliGcRBNRbXuCeF3k9eyl7KmFMizPglHHpGN3K2V0YrzMScAaAgu0p4cQoo Is09GlyukE0ek4Po1heipsNeI+UOst+12w8Qif0M1ENgTdR7i0x2+VQR4GqQ25s8 rm3mniKLcGxx4xMTj/9oSnK2EjB8cqrksnsKUeebMzgExjDe3HTB9MzKQy9pO5UQ /WPxW8U3BJGU6knNEW32GWnXRzMRXiIP+vPfLhufZ+9oNQvyGADYNhiYQ9WqAFyv GbUuguHJZpF2fdKIrCu5su4HWIsThxqbwfICZs6hAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUXyljFuRKMNyRC/FeQj9SC8iT8YowHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2QyNzU0MDU3LTg4ODctNGRmYS05NmQyLTgzNDllMDBlYTIyNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQgwDQYJKoZIhvcNAQELBQADggEBAHMAz9yRufdNQxlelhKt5lGt fJRvKW2VKBDcSZM4fZiUNiqv9g9lfTFh55Aa0ZGhWmcMOSzxkc+pYOcfMOvCGjMh fX1H/igvfaE3KQsMchkngTY2qSseH1j0ZOcoojxosJzRm0fb70Rz8P2dHlk8sJAH Zx+aDzETkS/pplUodo/gIEmhcPqey/ZjLeQIZWmYgnsndLrpiGPLE0eSN1QVxJBn KzqQDQE/kg2rAnumMJoMkZKatOgLOietrVbNCTGXV3M/Wgn41jJNkRT2GpZyE6iB q4nM45y2+O7rMap8gFkdxBODWc4k0GXxQ6MTAh1QeYASM0vIVltaE+eROKFdl7w= -----END CERTIFICATE-----Generated at Mon Feb 23 05:36:47 2026 by rpki-client