$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1e067887-aef8-4393-a205-b6492b816a8c.roa File: 1e067887-aef8-4393-a205-b6492b816a8c.roa (raw, json) Hash identifier: QheHN6/y+ZP1dwR4cy+0q9HniN1mCHIli1owv/A4Qv4= Subject key identifier: 00:5D:C6:28:D0:F1:9C:C7:64:64:10:8A:48:85:E8:45:73:1B:22:C7 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 0C9D9615F72EDCC80F7EAA35134C1E6B2F0D83B1 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1e067887-aef8-4393-a205-b6492b816a8c.roa Signing time: Thu 12 Feb 2026 01:00:36 +0000 ROA not before: Thu 12 Feb 2026 01:00:36 +0000 ROA not after: Wed 13 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2cfa::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:9d:96:15:f7:2e:dc:c8:0f:7e:aa:35:13:4c:1e:6b:2f:0d:83:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Feb 12 01:00:36 2026 GMT Not After : May 13 23:59:59 2026 GMT Subject: serialNumber=bb3677eced5dc3a74a2b7b6a6e3ad880d4c5d77ad3946f773681b429d7bbd3ed, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1a:1a:2d:10:af:3e:84:39:30:43:66:fa:43: d2:d8:b5:f7:19:d0:05:de:ad:36:b9:83:72:9d:b3: 65:25:a1:a3:a3:3a:c9:88:7d:31:03:1e:23:21:bf: 41:1f:39:2c:ec:1c:35:24:c3:54:9f:71:b8:44:7b: 3c:c8:fe:22:dc:d2:ac:f0:fd:e1:4a:24:4d:e1:c7: 4c:7b:3a:73:3e:90:b1:7c:36:e9:4b:c2:5a:61:ed: 01:4a:1c:45:da:5d:ac:ef:dc:b8:b3:0b:0d:91:a1: e4:2b:00:a9:b3:47:e4:6b:74:df:b8:6c:6a:e5:7c: c4:36:40:58:7f:21:47:10:8d:f9:54:fb:18:42:cc: 1e:ba:99:de:e8:82:2d:c6:9d:07:97:16:c3:28:bd: 2e:ad:f6:ed:3e:f8:16:53:ff:44:53:5d:0e:58:93: 98:fe:f2:f8:73:90:82:b9:2d:10:e1:f6:78:b0:ad: 60:38:63:5a:49:a6:65:94:fc:98:18:b5:e4:e2:c5: df:cd:ff:04:ba:08:9a:fd:6a:a0:16:48:fe:0c:e7: 6f:eb:e4:ec:62:f0:a2:eb:35:2a:c5:15:0e:e3:cc: aa:9a:a7:99:dd:75:a4:79:cf:c4:50:42:7f:aa:2d: 3b:4f:ae:6a:d2:d6:d6:a4:fe:a8:ed:74:bc:ab:5f: ea:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:5D:C6:28:D0:F1:9C:C7:64:64:10:8A:48:85:E8:45:73:1B:22:C7 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1e067887-aef8-4393-a205-b6492b816a8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2cfa::/47 Signature Algorithm: sha256WithRSAEncryption be:93:8c:bc:83:e6:68:cc:60:31:b5:e5:57:1b:ac:ab:0a:5e: 8a:85:f2:1f:b8:04:db:12:8b:a2:b5:92:5b:d7:c8:c5:6f:cb: 3e:e3:9c:10:c3:a0:22:71:d1:f6:fd:aa:17:ab:77:cc:d4:8b: d3:69:a7:e2:a3:27:9f:b7:80:7d:70:20:05:8d:36:0b:2d:77: c2:b2:f9:23:3c:ba:fb:a4:c5:ee:1b:8c:70:29:91:f7:6f:45: fc:b4:0f:d0:68:ff:04:25:6d:4f:a0:48:4c:7b:34:6d:ba:78: 9c:4c:a2:31:b5:81:dd:e1:12:0e:17:de:db:9e:3e:ec:90:58: 28:2a:5b:e1:d7:e4:78:84:76:f1:ea:15:73:d4:a3:f8:07:d6: 34:f9:84:97:53:c3:29:66:b6:5e:52:6f:6f:52:f4:f4:7b:15: 50:69:5d:6d:f4:57:34:2b:4c:36:d5:5a:0a:03:31:7f:a7:41: e2:4b:e8:1a:10:a9:1a:5d:56:13:84:56:6a:67:57:9f:3b:7a: 06:4f:b3:ab:89:e4:5b:fa:93:b0:11:6c:d0:f1:06:de:6c:7f: 74:07:cf:47:dc:a8:31:cc:d2:c8:e6:d6:65:7a:d6:ef:37:8f: 83:7b:23:60:f8:cc:11:e5:fa:b0:28:06:d7:9e:f0:f3:ec:d2: f5:64:a7:10 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDJ2WFfcu3MgPfqo1E0weay8Ng7EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEyMDEwMDM2WhcNMjYwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiYjM2NzdlY2VkNWRjM2E3NGEyYjdiNmE2ZTNhZDg4MGQ0 YzVkNzdhZDM5NDZmNzczNjgxYjQyOWQ3YmJkM2VkMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOGhotEK8+hDkwQ2b6Q9LYtfcZ0AXerTa5g3Kds2UloaOj OsmIfTEDHiMhv0EfOSzsHDUkw1SfcbhEezzI/iLc0qzw/eFKJE3hx0x7OnM+kLF8 NulLwlph7QFKHEXaXazv3LizCw2RoeQrAKmzR+RrdN+4bGrlfMQ2QFh/IUcQjflU +xhCzB66md7ogi3GnQeXFsMovS6t9u0++BZT/0RTXQ5Yk5j+8vhzkIK5LRDh9niw rWA4Y1pJpmWU/JgYteTixd/N/wS6CJr9aqAWSP4M52/r5Oxi8KLrNSrFFQ7jzKqa p5nddaR5z8RQQn+qLTtPrmrS1tak/qjtdLyrX+pXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUAF3GKNDxnMdkZBCKSIXoRXMbIscwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzFlMDY3ODg3LWFlZjgtNDM5My1hMjA1LWI2NDkyYjgxNmE4Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAALPowDQYJKoZIhvcNAQELBQADggEBAL6TjLyD5mjMYDG15VcbrKsK XoqF8h+4BNsSi6K1klvXyMVvyz7jnBDDoCJx0fb9qherd8zUi9Npp+KjJ5+3gH1w IAWNNgstd8Ky+SM8uvukxe4bjHApkfdvRfy0D9Bo/wQlbU+gSEx7NG26eJxMojG1 gd3hEg4X3tuePuyQWCgqW+HX5HiEdvHqFXPUo/gH1jT5hJdTwylmtl5Sb29S9PR7 FVBpXW30VzQrTDbVWgoDMX+nQeJL6BoQqRpdVhOEVmpnV587egZPs6uJ5Fv6k7AR bNDxBt5sf3QHz0fcqDHM0sjm1mV61u83j4N7I2D4zBHl+rAoBtee8PPs0vVkpxA= -----END CERTIFICATE-----Generated at Mon Mar 2 01:03:57 2026 by rpki-client