$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c8560206-4c68-46a6-834e-4971768d50f8.roa File: c8560206-4c68-46a6-834e-4971768d50f8.roa (raw, json) Hash identifier: KYHk7PPaYJa2qwgYwKrx1RiYe9VKFzX8OIJeoBpjWug= Subject key identifier: 65:CB:96:C2:87:74:45:8E:10:9E:25:9A:44:E8:3E:5B:E9:75:D0:5C Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 4845FB069BC2030DD77690F761C8E6B5CA1166BA Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c8560206-4c68-46a6-834e-4971768d50f8.roa Signing time: Thu 26 Feb 2026 01:50:28 +0000 ROA not before: Thu 26 Feb 2026 01:50:28 +0000 ROA not after: Wed 27 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2606:7b40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:45:fb:06:9b:c2:03:0d:d7:76:90:f7:61:c8:e6:b5:ca:11:66:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Feb 26 01:50:28 2026 GMT Not After : May 27 23:59:59 2026 GMT Subject: serialNumber=f15d5621b34465573ad957c114a7a75b9f25bc9059fb34e5a897c62d5a123723, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1f:98:4b:36:5a:be:9d:bb:96:92:43:41:50: 40:b4:23:1d:25:6d:ab:d2:77:ed:9d:f0:8f:7b:29: e8:1c:02:b0:6c:89:91:91:71:84:c3:50:55:0e:de: 15:c5:0d:85:b2:7b:52:78:3e:c5:6d:06:d9:2f:e4: 02:f2:aa:59:8a:2f:d1:ec:8a:2d:30:ed:75:36:ec: 19:e4:90:41:dd:6a:9c:0a:9e:9c:d0:45:0e:67:01: 66:cd:74:b4:18:09:6c:50:5e:f9:5f:03:b3:cb:ee: 40:38:07:86:08:c6:f2:a1:cb:e9:1a:6e:a9:a1:45: ba:d3:62:11:88:03:bb:05:a5:0c:72:a5:9a:8d:05: 96:98:fc:46:4e:d6:4a:7c:c2:3e:28:b5:c4:46:55: e3:f9:08:83:6a:8f:9c:ee:73:5e:bb:24:f6:e6:59: 07:59:6a:31:20:3a:d1:4f:d8:0c:ab:2f:c8:f1:ae: fb:6e:06:35:fe:e7:a7:9e:f5:fc:c5:31:64:3c:32: 64:90:cb:ac:ee:06:22:60:37:85:8d:3f:0f:a4:00: ba:6c:d0:c6:42:19:ca:5e:97:51:5e:d3:f1:b6:2e: 86:3b:fa:91:f7:d5:65:db:2a:dc:f4:17:41:16:bb: 54:2e:66:67:51:d7:6a:85:39:71:cc:71:a4:8f:27: 27:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:CB:96:C2:87:74:45:8E:10:9E:25:9A:44:E8:3E:5B:E9:75:D0:5C X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c8560206-4c68-46a6-834e-4971768d50f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2606:7b40::/32 Signature Algorithm: sha256WithRSAEncryption 03:b5:51:93:02:5e:91:9b:30:88:c9:91:02:6c:a6:73:9c:5b: ad:f6:9b:05:f7:1e:0a:35:94:ab:36:3f:39:df:da:90:08:d9: a6:f9:55:80:11:f2:98:a9:b0:28:fc:8b:8e:cb:41:16:48:48: b4:27:c8:b9:46:c1:61:53:19:f7:cd:30:e8:26:74:d0:6c:67: 4e:11:31:53:84:f0:c5:9b:eb:cb:48:d2:71:10:ee:42:1d:a6: 06:85:e4:b2:6b:ec:a1:f3:5c:0e:8f:b7:89:be:1f:d1:9d:9b: 75:9e:70:3f:2a:8f:08:d6:ee:14:a7:42:c5:f5:fb:2e:16:2d: 49:7a:45:32:c0:2c:8f:14:15:2c:c5:3e:83:98:9a:1b:c2:28: a0:ef:d4:4f:2c:c7:53:54:59:3f:a8:5f:32:9b:f6:c0:dd:52: bd:78:a8:33:1f:2f:19:67:58:d0:2f:95:ee:f2:cd:78:6b:8b: 33:aa:1a:da:ae:4b:16:b1:07:93:67:4b:32:f3:78:c5:fe:be: 2b:f0:58:7e:f6:97:d3:d6:a9:de:9e:a2:e6:d0:1b:3c:c7:cd: 42:27:65:e3:bc:12:03:fc:8b:2c:d6:17:83:ae:69:7f:04:c0: 6d:c1:2d:4d:94:37:9e:61:13:72:db:9f:3b:81:63:39:a9:e9: b9:fe:8e:20 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUSEX7BpvCAw3XdpD3YcjmtcoRZrowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwMjI2MDE1MDI4WhcNMjYwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMTVkNTYyMWIzNDQ2NTU3M2FkOTU3YzExNGE3YTc1Yjlm MjViYzkwNTlmYjM0ZTVhODk3YzYyZDVhMTIzNzIzMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCUH5hLNlq+nbuWkkNBUEC0Ix0lbavSd+2d8I97KegcArBs iZGRcYTDUFUO3hXFDYWye1J4PsVtBtkv5ALyqlmKL9Hsii0w7XU27BnkkEHdapwK npzQRQ5nAWbNdLQYCWxQXvlfA7PL7kA4B4YIxvKhy+kabqmhRbrTYhGIA7sFpQxy pZqNBZaY/EZO1kp8wj4otcRGVeP5CINqj5zuc167JPbmWQdZajEgOtFP2AyrL8jx rvtuBjX+56ee9fzFMWQ8MmSQy6zuBiJgN4WNPw+kALps0MZCGcpel1Fe0/G2LoY7 +pH31WXbKtz0F0EWu1QuZmdR12qFOXHMcaSPJyf7AgMBAAGjggKyMIICrjAdBgNV HQ4EFgQUZcuWwod0RY4QniWaROg+W+l10FwwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2M4NTYwMjA2LTRjNjgtNDZhNi04MzRlLTQ5NzE3NjhkNTBmOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAmBntAMA0GCSqGSIb3DQEBCwUAA4IBAQADtVGTAl6RmzCIyZECbKZznFut 9psF9x4KNZSrNj8539qQCNmm+VWAEfKYqbAo/IuOy0EWSEi0J8i5RsFhUxn3zTDo JnTQbGdOETFThPDFm+vLSNJxEO5CHaYGheSya+yh81wOj7eJvh/RnZt1nnA/Ko8I 1u4Up0LF9fsuFi1JekUywCyPFBUsxT6DmJobwiig79RPLMdTVFk/qF8ym/bA3VK9 eKgzHy8ZZ1jQL5Xu8s14a4szqhrarksWsQeTZ0sy83jF/r4r8Fh+9pfT1qnenqLm 0Bs8x81CJ2XjvBID/Iss1heDrml/BMBtwS1NlDeeYRNy2587gWM5qem5/o4g -----END CERTIFICATE-----Generated at Sun Mar 1 22:15:07 2026 by rpki-client