$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/18af821f-b3bf-43b8-95b3-711318d0f6ad.roa File: 18af821f-b3bf-43b8-95b3-711318d0f6ad.roa (raw, json) Hash identifier: aI/i/5egJTTwkSBCtJAurGfkFW7CCilo+ScV0jw/MVg= Subject key identifier: 43:80:BA:A4:93:01:73:16:8A:2A:40:D4:1C:3E:26:88:0D:61:AE:E2 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 2C2A0603E45CCAA5D133EF341701B7D8C3200B15 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/18af821f-b3bf-43b8-95b3-711318d0f6ad.roa Signing time: Fri 13 Feb 2026 10:10:14 +0000 ROA not before: Fri 13 Feb 2026 10:10:14 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:a120::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:2a:06:03:e4:5c:ca:a5:d1:33:ef:34:17:01:b7:d8:c3:20:0b:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Feb 13 10:10:14 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=c41c84883a852a3b94bf015f95fc94f07041590f3b574e3db89f1761d025cdd2, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:aa:51:7f:4b:f9:c4:1f:ba:76:b0:49:f7:bb: 7c:4f:ba:e6:de:a3:71:af:9f:84:58:43:ea:83:bf: 92:4a:ab:c7:c9:c4:dd:66:a5:61:7f:d7:8d:df:4a: eb:26:f7:e3:60:bb:57:d8:e9:37:f6:5f:0f:f3:c1: b3:ab:91:d7:75:32:4d:db:38:bf:b9:2b:56:4f:11: 41:8c:aa:5c:0f:e4:fc:11:7d:d6:83:20:3f:05:ca: 56:13:f5:c9:23:ae:64:f3:1e:67:09:9b:92:1c:41: 41:2a:08:10:24:07:13:38:42:52:44:f5:7f:34:58: 9a:b4:2a:b6:8c:c1:61:94:ae:99:54:30:0a:a6:26: c7:aa:8a:24:1e:3d:68:09:08:5d:b4:e7:f8:f2:b0: c3:8a:2f:bf:0d:48:0c:29:ac:bf:bf:33:9c:8d:a8: b2:95:88:b8:8b:41:79:ee:b6:a2:3d:c2:a7:7d:d5: f8:26:08:bd:3b:6a:09:d5:3f:2a:90:22:01:4b:4d: 35:ca:58:7a:52:e7:1a:03:93:e1:a6:36:53:0a:a6: 9a:4d:17:31:5c:9f:ba:74:5d:b6:23:8a:06:3a:25: 7d:af:44:7d:8c:f6:40:01:14:da:f3:25:53:97:d3: 75:7d:79:8b:79:37:27:a1:0e:80:3d:47:1a:e0:c1: c8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:80:BA:A4:93:01:73:16:8A:2A:40:D4:1C:3E:26:88:0D:61:AE:E2 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/18af821f-b3bf-43b8-95b3-711318d0f6ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:a120::/43 Signature Algorithm: sha256WithRSAEncryption ac:4a:09:21:9f:b6:24:66:1d:23:b4:72:de:e0:6b:4e:a8:aa: 27:b4:8e:04:d2:1e:a3:06:60:dd:ea:e8:5e:83:54:a2:ba:bb: 91:b2:d2:ef:ba:a7:06:a3:d1:d2:5a:64:79:42:27:11:f7:79: 61:77:f6:be:9f:9f:e5:e1:b6:db:d7:6d:3e:e4:85:ed:47:3b: c0:4c:1c:2e:59:a7:e8:92:95:c3:6e:d1:d9:01:6c:0f:57:a9: 8c:40:84:a8:78:c1:73:9f:27:ea:b8:e0:19:05:a9:d0:33:a2: 8e:06:8f:3f:6c:03:80:5f:18:ee:8a:cd:60:ba:3b:25:04:a7: 5d:a6:80:4a:e3:e0:db:98:a3:77:81:d0:d0:e9:8f:1b:46:35: 73:b1:f3:03:65:b4:c9:09:08:45:25:ef:43:be:ab:2d:f8:b3: c3:e5:9e:52:a7:25:13:f3:4c:dd:4d:67:57:bb:cc:e5:2e:eb: 72:2a:a4:aa:be:16:50:51:28:94:b1:bf:2e:1c:da:fe:9f:11: 40:4b:52:08:28:24:15:b3:b6:69:b4:ed:c1:12:82:46:79:60: c7:04:7b:69:3c:33:e6:38:2e:76:76:58:da:4a:c8:47:0e:c7: 2f:12:ea:14:0f:30:b0:60:80:d4:fb:be:f8:e1:27:c8:ea:f1: e6:80:28:51 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIULCoGA+RcyqXRM+80FwG32MMgCxUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMTAxMDE0WhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNDFjODQ4ODNhODUyYTNiOTRiZjAxNWY5NWZjOTRmMDcw NDE1OTBmM2I1NzRlM2RiODlmMTc2MWQwMjVjZGQyMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNqlF/S/nEH7p2sEn3u3xPuubeo3Gvn4RYQ+qDv5JKq8fJ xN1mpWF/143fSusm9+Ngu1fY6Tf2Xw/zwbOrkdd1Mk3bOL+5K1ZPEUGMqlwP5PwR fdaDID8FylYT9ckjrmTzHmcJm5IcQUEqCBAkBxM4QlJE9X80WJq0KraMwWGUrplU MAqmJseqiiQePWgJCF205/jysMOKL78NSAwprL+/M5yNqLKViLiLQXnutqI9wqd9 1fgmCL07agnVPyqQIgFLTTXKWHpS5xoDk+GmNlMKpppNFzFcn7p0XbYjigY6JX2v RH2M9kABFNrzJVOX03V9eYt5NyehDoA9Rxrgwcg1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUQ4C6pJMBcxaKKkDUHD4miA1hruIwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzE4YWY4MjFmLWIzYmYtNDNiOC05NWIzLTcxMTMxOGQwZjZhZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwUmAJAAoSAwDQYJKoZIhvcNAQELBQADggEBAKxKCSGftiRmHSO0ct7ga06o qie0jgTSHqMGYN3q6F6DVKK6u5Gy0u+6pwaj0dJaZHlCJxH3eWF39r6fn+XhttvX bT7khe1HO8BMHC5Zp+iSlcNu0dkBbA9XqYxAhKh4wXOfJ+q44BkFqdAzoo4Gjz9s A4BfGO6KzWC6OyUEp12mgErj4NuYo3eB0NDpjxtGNXOx8wNltMkJCEUl70O+qy34 s8PlnlKnJRPzTN1NZ1e7zOUu63IqpKq+FlBRKJSxvy4c2v6fEUBLUggoJBWztmm0 7cESgkZ5YMcEe2k8M+Y4LnZ2WNpKyEcOxy8S6hQPMLBggNT7vvjhJ8jq8eaAKFE= -----END CERTIFICATE-----Generated at Sun Mar 1 22:20:41 2026 by rpki-client