$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/120f182c-8fbe-43f8-8280-bcdc7bdcb913.roa File: 120f182c-8fbe-43f8-8280-bcdc7bdcb913.roa (raw, json) Hash identifier: Joi/v7MgxmdbxGf1U1csDzh9ScZAHbJmhKL7u3Bj6DM= Subject key identifier: A4:2D:AF:A8:26:A5:8D:51:80:90:14:82:31:E9:0C:C6:21:E0:C8:8A Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 53C6A71EDF372DF817543EAFF44111BC46C05CC7 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/120f182c-8fbe-43f8-8280-bcdc7bdcb913.roa Signing time: Thu 12 Feb 2026 01:40:31 +0000 ROA not before: Thu 12 Feb 2026 01:40:31 +0000 ROA not after: Wed 13 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:207c::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:c6:a7:1e:df:37:2d:f8:17:54:3e:af:f4:41:11:bc:46:c0:5c:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Feb 12 01:40:31 2026 GMT Not After : May 13 23:59:59 2026 GMT Subject: serialNumber=a79dff99d78547d9d818fe580ffb025ea054dece09c0528e40f5e5a3b1085cdd, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:56:00:73:6e:58:9f:4f:aa:72:dc:44:fc:f1: 84:38:0c:e2:e1:e2:16:0d:93:50:1f:79:4f:76:e5: 52:b5:77:25:d6:ed:bf:e5:20:ae:bf:71:42:a2:94: ac:76:dd:ed:4c:b5:7c:7a:ef:0e:a5:86:19:c7:47: 41:3c:02:ea:c4:4e:6d:97:77:3e:3b:f2:49:36:0e: 1b:3b:07:6d:d7:11:09:ff:66:04:ae:cd:15:b7:fc: d0:44:28:17:dc:b6:4d:7e:f6:cb:38:2c:52:89:17: 03:c8:7c:c5:10:63:dc:bc:06:57:4d:1e:86:98:7f: c3:aa:c8:f4:3a:0a:4f:a2:1b:97:16:10:d3:b1:df: a5:3b:35:e7:be:47:98:e0:4d:cf:a8:5c:16:b3:23: 4a:d6:2f:d3:65:d3:7b:ca:56:e3:c4:d4:1b:fa:78: 0c:2b:8e:13:f8:aa:94:96:4d:88:25:17:51:05:c9: 5e:38:b3:ca:68:fc:e1:90:99:4b:c5:c2:83:0d:b6: 3c:d3:d4:f7:bb:76:3b:15:e2:81:6e:41:66:35:85: b8:bc:d9:9d:e1:a9:7c:fa:4e:19:3c:1f:9d:c4:90: e3:0a:2c:de:e4:a7:54:77:52:d2:d0:cb:3e:c7:a4: 14:e9:cb:e8:bb:ee:6e:fa:45:98:5b:24:15:b0:90: 7e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:2D:AF:A8:26:A5:8D:51:80:90:14:82:31:E9:0C:C6:21:E0:C8:8A X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/120f182c-8fbe-43f8-8280-bcdc7bdcb913.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:207c::/47 Signature Algorithm: sha256WithRSAEncryption 88:0f:06:e6:b6:e2:53:7a:8d:eb:c1:e5:58:0f:d0:ee:d5:e3: 6e:25:e7:16:24:bb:6a:6b:f4:f5:d8:aa:ea:a9:97:c2:60:0a: 39:2f:78:66:e5:2f:a8:1c:8d:b3:c4:0c:37:63:58:40:e5:d6: 46:6d:07:c0:e6:0f:06:99:81:13:b6:c5:6f:9f:22:bd:66:2a: 72:3e:44:19:ed:1b:12:58:53:54:fc:fb:7b:9e:58:fd:96:17: cb:0d:72:6f:e5:d0:db:9b:2f:5b:7d:07:a0:4c:87:ec:79:1d: 44:56:2a:24:fe:45:e6:7d:55:5e:51:df:3c:9b:e3:a6:c0:c8: e6:86:8d:b5:e7:59:b9:63:a4:b9:d1:3e:4b:ab:ca:73:d3:6d: 68:fb:82:4b:9f:e9:d7:a2:a0:0d:73:67:2c:69:4a:0c:76:d1: 21:2c:03:d2:4a:96:8b:74:1d:1e:cb:fc:96:69:53:d3:67:65: 31:5f:d3:b5:35:43:04:1e:36:05:0d:88:f9:ca:9a:dd:d0:6e: 51:28:67:8b:29:2b:36:81:df:63:19:8d:64:5e:34:d1:b4:79: b3:a2:a4:d3:ea:fd:e0:b9:fc:dc:27:49:ff:a0:f3:45:c1:56: b7:43:1d:0e:a1:32:23:33:d8:45:99:06:c7:51:32:b6:54:8d: 88:8d:d5:1b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUU8anHt83LfgXVD6v9EERvEbAXMcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEyMDE0MDMxWhcNMjYwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNzlkZmY5OWQ3ODU0N2Q5ZDgxOGZlNTgwZmZiMDI1ZWEw NTRkZWNlMDljMDUyOGU0MGY1ZTVhM2IxMDg1Y2RkMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSVgBzblifT6py3ET88YQ4DOLh4hYNk1AfeU925VK1dyXW 7b/lIK6/cUKilKx23e1MtXx67w6lhhnHR0E8AurETm2Xdz478kk2Dhs7B23XEQn/ ZgSuzRW3/NBEKBfctk1+9ss4LFKJFwPIfMUQY9y8BldNHoaYf8OqyPQ6Ck+iG5cW ENOx36U7Nee+R5jgTc+oXBazI0rWL9Nl03vKVuPE1Bv6eAwrjhP4qpSWTYglF1EF yV44s8po/OGQmUvFwoMNtjzT1Pe7djsV4oFuQWY1hbi82Z3hqXz6Thk8H53EkOMK LN7kp1R3UtLQyz7HpBTpy+i77m76RZhbJBWwkH7rAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUpC2vqCaljVGAkBSCMekMxiHgyIowHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzEyMGYxODJjLThmYmUtNDNmOC04MjgwLWJjZGM3YmRjYjkxMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAIHwwDQYJKoZIhvcNAQELBQADggEBAIgPBua24lN6jevB5VgP0O7V 424l5xYku2pr9PXYquqpl8JgCjkveGblL6gcjbPEDDdjWEDl1kZtB8DmDwaZgRO2 xW+fIr1mKnI+RBntGxJYU1T8+3ueWP2WF8sNcm/l0NubL1t9B6BMh+x5HURWKiT+ ReZ9VV5R3zyb46bAyOaGjbXnWbljpLnRPkurynPTbWj7gkuf6deioA1zZyxpSgx2 0SEsA9JKlot0HR7L/JZpU9NnZTFf07U1QwQeNgUNiPnKmt3QblEoZ4spKzaB32MZ jWReNNG0ebOipNPq/eC5/NwnSf+g80XBVrdDHQ6hMiMz2EWZBsdRMrZUjYiN1Rs= -----END CERTIFICATE-----Generated at Sun Mar 1 22:13:43 2026 by rpki-client