$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/006626df-5bf8-49f3-ba99-6fe8761b63f1.roa File: 006626df-5bf8-49f3-ba99-6fe8761b63f1.roa (raw, json) Hash identifier: aOUVbZdFj0nnw6LtI2NbwffCLz2gWbyIGeVMDvmwItQ= Subject key identifier: A6:1D:15:B0:37:54:FB:20:42:B6:30:D0:F5:1E:98:9E:02:75:D9:76 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 472F38CC92620579517294F4DFF54E55F236DD37 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/006626df-5bf8-49f3-ba99-6fe8761b63f1.roa Signing time: Fri 13 Feb 2026 05:20:43 +0000 ROA not before: Fri 13 Feb 2026 05:20:43 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3be0::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:2f:38:cc:92:62:05:79:51:72:94:f4:df:f5:4e:55:f2:36:dd:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Feb 13 05:20:43 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=7710f690288596b5a249c97cd4be736f20130026d4dacad5c727823bf2e7a7ea, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1c:96:ed:d5:06:fb:85:6c:2d:41:be:f4:a5: fd:6d:91:46:ea:32:06:d4:03:e7:09:df:09:cc:76: 44:c6:fd:c9:cc:55:c5:fd:3e:80:f4:80:e5:6f:0d: 29:ec:9a:3b:68:bc:7d:ad:d1:18:c5:b3:d4:3f:4c: 2c:42:9c:c3:1d:5b:90:ce:1a:da:ac:d7:6a:cd:0c: 4b:36:75:f7:fa:01:c8:b5:06:bc:db:c0:74:d2:25: a7:3c:4f:ad:d4:69:42:da:83:4c:d6:42:9b:5e:70: f1:33:9c:e9:98:fd:30:52:12:94:c6:93:7d:0e:77: 63:a8:26:75:d4:d6:09:2f:37:cb:81:26:c0:96:65: d9:47:d0:e9:f5:70:0d:09:8c:ac:22:e2:da:ef:97: b2:43:a6:02:b1:cc:ca:03:cc:f4:cc:37:81:5a:fd: 4d:71:7c:22:6f:27:1d:6e:44:cf:42:37:8b:5a:7c: 16:66:90:e0:25:c3:3f:7e:74:b1:da:4c:57:cc:b8: 16:7a:c5:19:8a:13:2a:56:5d:1c:b9:26:04:4e:3b: fd:09:b4:80:9f:1e:eb:ce:da:67:5d:64:5b:83:bd: 8d:e4:5c:5a:e5:96:8b:dd:c8:bb:77:81:de:de:11: 12:cf:39:b7:0f:dd:e8:97:25:8b:0a:12:52:c2:08: 7d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:1D:15:B0:37:54:FB:20:42:B6:30:D0:F5:1E:98:9E:02:75:D9:76 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/006626df-5bf8-49f3-ba99-6fe8761b63f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3be0::/45 Signature Algorithm: sha256WithRSAEncryption b9:11:34:4a:d6:60:ac:77:fb:b9:24:d1:69:41:28:c8:bd:c7: e9:5b:6e:d3:36:c7:7d:a1:5a:b1:5d:2d:18:9e:7f:bb:2b:bd: 5a:7c:dc:b2:0e:61:8d:40:74:22:6a:00:18:fe:29:18:d9:26: 44:56:ee:c4:53:28:fe:3a:2c:f5:b8:0f:eb:f9:00:3c:21:29: 73:31:b0:f7:d9:21:29:66:d6:c1:86:8c:9e:f5:ec:2f:b1:07: 49:90:53:78:b6:a5:1a:76:63:dc:a2:ef:3a:a7:d1:de:35:a5: 5f:65:89:52:a5:40:26:5d:b6:5a:44:4d:e3:43:24:d0:01:98: e0:51:33:b9:f0:75:9f:60:87:be:a5:e7:c2:f7:22:3a:d1:0c: be:4f:9a:17:7a:d3:d1:fa:06:d1:b9:3b:d4:25:f1:46:c4:d2: fb:57:dc:81:f6:ee:0e:44:63:15:38:1a:b8:7d:b3:6d:16:46: 6e:ff:f2:fb:12:83:54:c1:cf:8a:cb:49:3e:01:ea:b7:fa:a1: 4b:c2:b6:22:f4:06:c4:4d:ed:a7:1f:a8:e3:14:c6:9d:59:27: 28:2c:13:03:3c:0b:3d:28:f5:46:25:ff:f2:cf:20:c5:fe:74: 1d:36:de:f8:d6:09:5a:29:dc:74:ad:88:c8:eb:b6:a9:50:76: 6c:3e:51:43 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURy84zJJiBXlRcpT03/VOVfI23TcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMDUyMDQzWhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NzEwZjY5MDI4ODU5NmI1YTI0OWM5N2NkNGJlNzM2ZjIw MTMwMDI2ZDRkYWNhZDVjNzI3ODIzYmYyZTdhN2VhMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0HJbt1Qb7hWwtQb70pf1tkUbqMgbUA+cJ3wnMdkTG/cnM VcX9PoD0gOVvDSnsmjtovH2t0RjFs9Q/TCxCnMMdW5DOGtqs12rNDEs2dff6Aci1 BrzbwHTSJac8T63UaULag0zWQptecPEznOmY/TBSEpTGk30Od2OoJnXU1gkvN8uB JsCWZdlH0On1cA0JjKwi4trvl7JDpgKxzMoDzPTMN4Fa/U1xfCJvJx1uRM9CN4ta fBZmkOAlwz9+dLHaTFfMuBZ6xRmKEypWXRy5JgROO/0JtICfHuvO2mddZFuDvY3k XFrllovdyLt3gd7eERLPObcP3eiXJYsKElLCCH1JAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUph0VsDdU+yBCtjDQ9R6YngJ12XYwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzAwNjYyNmRmLTViZjgtNDlmMy1iYTk5LTZmZTg3NjFiNjNmMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAAO+AwDQYJKoZIhvcNAQELBQADggEBALkRNErWYKx3+7kk0WlBKMi9 x+lbbtM2x32hWrFdLRief7srvVp83LIOYY1AdCJqABj+KRjZJkRW7sRTKP46LPW4 D+v5ADwhKXMxsPfZISlm1sGGjJ717C+xB0mQU3i2pRp2Y9yi7zqn0d41pV9liVKl QCZdtlpETeNDJNABmOBRM7nwdZ9gh76l58L3IjrRDL5Pmhd609H6BtG5O9Ql8UbE 0vtX3IH27g5EYxU4Grh9s20WRm7/8vsSg1TBz4rLST4B6rf6oUvCtiL0BsRN7acf qOMUxp1ZJygsEwM8Cz0o9UYl//LPIMX+dB023vjWCVop3HStiMjrtqlQdmw+UUM= -----END CERTIFICATE-----Generated at Sun Mar 1 22:17:47 2026 by rpki-client