$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/eaac29bc-37ee-4f76-9b3f-61b41eb5f249.roa File: eaac29bc-37ee-4f76-9b3f-61b41eb5f249.roa (raw, json) Hash identifier: wTEVYR9K8MYWn43KBQ8kYqQqwTmzhAHIOP2uo+h9OK0= Subject key identifier: C4:9D:F2:3E:30:FD:64:1E:33:20:07:5C:7F:34:0B:7D:A1:25:CA:53 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 056B6B52F31994C72288EBDBFF66A0F20BDB5134 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/eaac29bc-37ee-4f76-9b3f-61b41eb5f249.roa Signing time: Wed 04 Mar 2026 23:51:36 +0000 ROA not before: Wed 04 Mar 2026 23:51:36 +0000 ROA not after: Tue 02 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:f04::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:6b:6b:52:f3:19:94:c7:22:88:eb:db:ff:66:a0:f2:0b:db:51:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Mar 4 23:51:36 2026 GMT Not After : Jun 2 23:59:59 2026 GMT Subject: serialNumber=7f8503e98fdad2d9834c53e5d97e7be2b78db2b771ceef421425a90340f16387, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2b:e2:bc:99:e6:61:3b:a1:e6:8d:95:1c:db: 09:87:15:ed:30:d3:ac:c9:c0:db:22:c9:05:84:f2: 9e:96:6e:02:6a:64:8d:ce:77:03:a4:64:9b:d1:44: d2:ee:98:80:b6:80:74:8a:5e:0f:15:94:9f:bf:8b: f3:9b:5e:49:74:67:fc:7d:d3:19:60:3a:e7:39:c0: 02:ac:06:0f:33:23:70:80:1a:34:00:ec:41:af:e0: a7:d9:89:bf:b7:5e:e8:9e:10:97:b0:eb:b9:e6:2a: 15:fc:39:ca:13:9e:8c:3a:49:4a:bf:af:02:c2:49: 1d:1a:32:31:09:ac:59:e3:ce:2e:b4:3d:f5:18:d5: 62:45:1e:a8:6f:71:ff:f3:57:3d:d6:68:09:5d:68: b5:65:98:35:9b:4a:dd:75:87:f9:5f:cd:84:62:cb: 01:48:5a:e9:f1:16:c8:6f:f3:e7:7a:4b:58:6e:71: c7:94:52:f7:2b:33:05:88:7a:2c:cd:af:e6:df:9b: a5:96:5c:09:26:be:ff:37:b1:c6:fd:50:88:d1:31: b6:33:49:00:95:11:d6:85:9e:77:54:30:c3:81:8f: 56:5c:c2:e7:63:dc:ad:dd:50:f6:77:70:47:91:16: 48:81:1c:e0:58:76:3f:d4:fc:6d:6c:78:2d:e9:92: 28:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:9D:F2:3E:30:FD:64:1E:33:20:07:5C:7F:34:0B:7D:A1:25:CA:53 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/eaac29bc-37ee-4f76-9b3f-61b41eb5f249.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:f04::/46 Signature Algorithm: sha256WithRSAEncryption 08:f9:7a:b2:b2:ad:ce:90:e7:ae:15:25:96:85:4d:20:6a:f5: 87:9b:09:83:f2:81:d4:c6:41:c3:f5:ec:94:45:c9:18:d4:cb: 7b:fd:67:61:f4:d3:a2:85:9c:66:f7:92:e8:be:cc:20:59:ff: 32:95:44:aa:29:d3:4c:71:50:2a:84:e1:4e:9c:b5:7d:f3:03: e8:eb:5a:a4:23:cb:09:6d:99:cf:f0:eb:09:b7:49:12:71:b8: 79:06:bc:07:c6:ca:ac:65:b1:8d:65:d9:75:15:78:20:41:95: 20:b3:42:0b:a6:67:ab:2c:4f:10:19:70:2d:3a:54:0e:e2:57: ad:24:41:95:ab:0e:3e:5a:b5:f7:31:2f:64:d0:37:33:d6:e0: 90:46:13:ff:70:5f:ce:4f:d7:2c:e6:92:a5:c0:d9:82:e7:98: c2:6b:4c:52:b6:bb:62:8d:c0:c7:79:df:9e:a2:f4:3f:02:2e: 47:0e:79:e1:60:9e:b2:00:dd:91:b0:ac:7b:19:a5:9b:e8:83: 04:2c:0a:09:3c:d8:83:b7:35:1c:81:0a:29:dc:08:73:94:c3: 82:3c:17:c7:d5:5d:86:5f:1a:12:3f:0b:70:d0:56:c8:21:5b: 17:e4:43:3a:03:1d:65:34:aa:ce:ab:58:c0:d9:47:6a:c0:d8: b2:58:ea:3f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBWtrUvMZlMciiOvb/2ag8gvbUTQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMzA0MjM1MTM2WhcNMjYwNjAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3Zjg1MDNlOThmZGFkMmQ5ODM0YzUzZTVkOTdlN2JlMmI3 OGRiMmI3NzFjZWVmNDIxNDI1YTkwMzQwZjE2Mzg3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3K+K8meZhO6HmjZUc2wmHFe0w06zJwNsiyQWE8p6WbgJq ZI3OdwOkZJvRRNLumIC2gHSKXg8VlJ+/i/ObXkl0Z/x90xlgOuc5wAKsBg8zI3CA GjQA7EGv4KfZib+3XuieEJew67nmKhX8OcoTnow6SUq/rwLCSR0aMjEJrFnjzi60 PfUY1WJFHqhvcf/zVz3WaAldaLVlmDWbSt11h/lfzYRiywFIWunxFshv8+d6S1hu cceUUvcrMwWIeizNr+bfm6WWXAkmvv83scb9UIjRMbYzSQCVEdaFnndUMMOBj1Zc wudj3K3dUPZ3cEeRFkiBHOBYdj/U/G1seC3pkihfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUxJ3yPjD9ZB4zIAdcfzQLfaElylMwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2VhYWMyOWJjLTM3ZWUtNGY3Ni05YjNmLTYxYjQxZWI1ZjI0OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAPDwDwQwDQYJKoZIhvcNAQELBQADggEBAAj5erKyrc6Q564VJZaFTSBq 9YebCYPygdTGQcP17JRFyRjUy3v9Z2H006KFnGb3kui+zCBZ/zKVRKop00xxUCqE 4U6ctX3zA+jrWqQjywltmc/w6wm3SRJxuHkGvAfGyqxlsY1l2XUVeCBBlSCzQgum Z6ssTxAZcC06VA7iV60kQZWrDj5atfcxL2TQNzPW4JBGE/9wX85P1yzmkqXA2YLn mMJrTFK2u2KNwMd5356i9D8CLkcOeeFgnrIA3ZGwrHsZpZvogwQsCgk82IO3NRyB CincCHOUw4I8F8fVXYZfGhI/C3DQVsghWxfkQzoDHWU0qs6rWMDZR2rA2LJY6j8= -----END CERTIFICATE-----Generated at Wed Mar 11 10:32:54 2026 by rpki-client