$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0858861e-4010-4b21-8017-e656d2f4a14a.roa File: 0858861e-4010-4b21-8017-e656d2f4a14a.roa (raw, json) Hash identifier: 4sDn5OoFaEfTOzvacvSPgCF524+vBw2hwnhlbpaPO1g= Subject key identifier: 63:00:1B:1E:19:61:3A:B5:11:64:D4:AC:32:29:30:46:BA:66:48:48 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 7D61165EB95478DBD096D8432A3DE2D9ACC2B1AD Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0858861e-4010-4b21-8017-e656d2f4a14a.roa Signing time: Fri 13 Feb 2026 02:30:17 +0000 ROA not before: Fri 13 Feb 2026 02:30:17 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:38ae::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:61:16:5e:b9:54:78:db:d0:96:d8:43:2a:3d:e2:d9:ac:c2:b1:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Feb 13 02:30:17 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=fcd961ec80cf38442944359bf0427874160a9a41b0eab77f65a1b700ec16937a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:df:1c:1c:c6:aa:22:fa:65:a0:ae:6f:ae:8e: 6e:88:b8:04:3d:28:0e:a1:87:5f:2d:3e:a5:a0:1c: 54:67:01:5b:f1:88:57:5d:85:55:89:8d:6b:79:07: 16:57:5f:64:29:72:64:28:1e:26:4c:c6:af:5a:16: 36:28:f8:b1:93:1d:5a:07:27:15:9f:b4:82:de:13: 97:2e:69:0c:9c:94:52:50:57:95:6a:47:1f:f0:cc: cf:a7:7b:cb:48:c8:2f:0b:9f:b1:1d:3a:e7:d4:fe: 16:6a:bc:a6:d3:cc:ef:47:3d:81:ff:a4:47:92:56: 24:30:a3:4b:dd:70:21:4f:8e:ff:38:af:9d:0b:08: bb:05:d8:2e:fa:ba:f6:7c:ad:7c:21:f6:9e:03:d7: 94:b0:76:a9:63:3e:1f:5b:24:7a:06:40:2f:82:d7: 2e:f0:d3:34:86:b6:69:2c:6d:12:cc:88:14:96:16: d4:f5:7b:f9:42:01:72:64:bb:9a:88:9c:39:51:81: e2:71:b5:c7:67:ea:d2:cf:34:ed:76:8e:22:78:0d: a0:1f:a6:ab:b0:2f:6b:03:e2:73:43:c4:47:9e:16: ea:fb:a4:1d:7e:1a:b0:3c:69:de:e5:7e:5e:01:cf: 14:24:7e:15:61:18:31:14:7f:57:14:57:5f:f6:e6: 7d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:00:1B:1E:19:61:3A:B5:11:64:D4:AC:32:29:30:46:BA:66:48:48 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0858861e-4010-4b21-8017-e656d2f4a14a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:38ae::/47 Signature Algorithm: sha256WithRSAEncryption 0d:5d:b9:bd:a5:1e:6f:3c:3c:7a:c5:8e:b7:eb:ea:c4:26:43: 2b:db:0b:52:c1:15:3f:fa:44:71:84:e2:ef:ee:cd:35:5d:04: 50:da:3c:fd:19:ae:09:13:ec:cb:05:f6:14:0e:42:61:28:a7: 73:cd:11:ad:f4:c6:1f:b6:04:4d:08:d1:5d:fc:1c:e7:c3:5e: 93:ce:d6:31:ff:2e:bb:30:5b:4e:0b:1b:89:c1:64:f7:17:b1: 54:c1:bc:6c:4f:90:ba:57:7c:f7:c5:62:d2:4e:8e:c0:97:81: c3:3e:b2:73:78:9e:eb:22:8e:ac:55:a0:6d:14:19:26:bd:c4: 41:db:bd:55:17:e4:78:b1:f1:04:dd:7b:7f:67:f4:ba:6d:b0: f4:77:74:56:20:03:b0:84:12:30:6b:81:ad:82:0d:1c:58:dc: 1f:2a:d2:0c:c3:9e:02:c1:be:db:86:2d:5d:e6:f6:d6:5a:b7: c9:d7:03:9d:ea:45:64:4e:10:83:07:58:00:1b:e7:d6:73:7c: a1:ca:5f:72:84:40:41:7e:31:b2:b4:1a:71:ca:36:35:4f:e9: af:e6:d7:0e:9c:3f:0b:40:af:b1:25:4d:3f:d5:f1:63:66:b8: 0c:78:f1:f8:2e:3c:19:a2:b9:d4:f7:8f:b9:b5:84:03:25:c8: e6:87:ab:2a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfWEWXrlUeNvQlthDKj3i2azCsa0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMDIzMDE3WhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmY2Q5NjFlYzgwY2YzODQ0Mjk0NDM1OWJmMDQyNzg3NDE2 MGE5YTQxYjBlYWI3N2Y2NWExYjcwMGVjMTY5MzdhMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDq3xwcxqoi+mWgrm+ujm6IuAQ9KA6hh18tPqWgHFRnAVvx iFddhVWJjWt5BxZXX2QpcmQoHiZMxq9aFjYo+LGTHVoHJxWftILeE5cuaQyclFJQ V5VqRx/wzM+ne8tIyC8Ln7EdOufU/hZqvKbTzO9HPYH/pEeSViQwo0vdcCFPjv84 r50LCLsF2C76uvZ8rXwh9p4D15SwdqljPh9bJHoGQC+C1y7w0zSGtmksbRLMiBSW FtT1e/lCAXJku5qInDlRgeJxtcdn6tLPNO12jiJ4DaAfpquwL2sD4nNDxEeeFur7 pB1+GrA8ad7lfl4BzxQkfhVhGDEUf1cUV1/25n21AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUYwAbHhlhOrURZNSsMikwRrpmSEgwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzA4NTg4NjFlLTQwMTAtNGIyMS04MDE3LWU2NTZkMmY0YTE0YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAOK4wDQYJKoZIhvcNAQELBQADggEBAA1dub2lHm88PHrFjrfr6sQm QyvbC1LBFT/6RHGE4u/uzTVdBFDaPP0ZrgkT7MsF9hQOQmEop3PNEa30xh+2BE0I 0V38HOfDXpPO1jH/LrswW04LG4nBZPcXsVTBvGxPkLpXfPfFYtJOjsCXgcM+snN4 nusijqxVoG0UGSa9xEHbvVUX5Hix8QTde39n9LptsPR3dFYgA7CEEjBrga2CDRxY 3B8q0gzDngLBvtuGLV3m9tZat8nXA53qRWROEIMHWAAb59ZzfKHKX3KEQEF+MbK0 GnHKNjVP6a/m1w6cPwtAr7ElTT/V8WNmuAx48fguPBmiudT3j7m1hAMlyOaHqyo= -----END CERTIFICATE-----Generated at Sun Mar 1 21:54:55 2026 by rpki-client