$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1e3f52fa-5ec5-4942-a57d-ae5342819e3f.roa File: 1e3f52fa-5ec5-4942-a57d-ae5342819e3f.roa (raw, json) Hash identifier: kKjNK+oWT8t0r8CzXDKzS0iX9vICm0B6hztjYYmWUks= Subject key identifier: 95:34:A7:B7:1F:04:CD:D4:B6:2D:00:06:F1:30:29:F4:9C:82:CF:30 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 0D075271EB2BEF2D9F9FDE617D81F37CCE0309F1 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1e3f52fa-5ec5-4942-a57d-ae5342819e3f.roa Signing time: Fri 13 Feb 2026 13:20:07 +0000 ROA not before: Fri 13 Feb 2026 13:20:07 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2980::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:07:52:71:eb:2b:ef:2d:9f:9f:de:61:7d:81:f3:7c:ce:03:09:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Feb 13 13:20:07 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=32d84deccf6e754f47b6ce5956f326fb2affa1d08720d8cec17a284dd5f018da, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:20:e6:15:70:7e:3e:79:f0:fb:7e:cd:d2:c3: 75:19:f6:89:ea:53:c2:dc:c2:2b:6c:b1:4e:5b:b5: b9:d8:f9:73:82:06:41:60:e5:ae:e0:67:bf:61:03: bf:b3:80:0e:cd:3a:7c:fe:3a:2e:bb:4b:e2:9a:de: d9:16:f6:4e:99:3c:fd:de:ed:18:b4:95:75:14:8b: b2:70:61:2d:4d:44:3d:de:e0:8d:75:6f:3d:02:22: 3f:86:97:3d:2d:82:e9:7a:85:3c:de:84:fd:70:9a: f5:16:f6:2b:eb:9e:4a:f2:f6:85:24:de:9d:e5:cf: 3c:c0:3f:c0:29:ed:35:cb:5f:7a:e2:ae:0f:a4:20: f7:dd:43:00:75:0e:2d:c0:2e:67:a6:95:b1:1d:fe: d5:45:15:b0:57:f6:c5:dd:f1:a9:a2:f4:5a:fa:e6: 1a:44:e1:f5:a4:19:3e:25:cb:03:59:cf:50:6e:f0: 79:5c:b6:0a:dc:cd:a0:bc:8f:18:7b:ff:c1:50:03: 0a:bf:26:5f:da:5a:09:db:26:8f:54:0e:e6:fa:1e: 72:22:3f:08:81:33:b1:b3:3a:27:fe:f9:c3:d6:3f: e6:95:a0:85:99:4c:d3:17:19:21:0b:e2:5a:a6:20: ff:a0:ac:10:72:fb:88:0f:b4:10:69:d4:03:9d:c5: fb:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:34:A7:B7:1F:04:CD:D4:B6:2D:00:06:F1:30:29:F4:9C:82:CF:30 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1e3f52fa-5ec5-4942-a57d-ae5342819e3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2980::/45 Signature Algorithm: sha256WithRSAEncryption 2b:90:e6:46:26:59:ff:fb:fe:4a:bc:d8:62:f0:b1:fa:e4:78: b3:b0:6f:c3:13:ab:f0:2d:14:4f:74:70:22:56:54:f9:8f:8e: 58:88:bf:16:3e:69:12:6a:8a:86:c7:74:ad:74:32:69:45:96: 59:4f:d8:b0:ff:4f:08:b9:6a:70:da:3e:31:ca:38:76:e2:7d: 50:66:12:5f:ef:d2:fa:9a:28:de:47:d4:3d:34:25:53:9d:1d: 25:47:59:b0:87:82:dc:da:aa:9f:6f:d7:bd:9f:f1:7e:3e:06: e9:0f:fd:9d:13:a1:24:4c:df:e3:af:c0:6f:cf:5f:85:2b:c2: a9:9c:c5:27:1c:10:50:e1:62:02:d5:8e:74:bd:41:e6:04:f3: 92:11:b3:85:0d:dd:da:23:a2:1e:7d:56:0c:e2:fd:f1:35:a2: b5:11:cb:99:1d:7c:02:32:c1:95:26:56:f0:75:06:bd:3b:51: ff:ae:db:e0:aa:a4:7b:5f:cd:57:bc:af:3c:4e:f4:e7:08:85: 34:bd:3b:1c:3c:29:94:fa:0c:20:47:87:31:f5:34:4f:9a:df: 7c:c8:72:b3:06:39:a8:a2:f9:46:40:d1:33:11:d7:86:b1:02: b5:a4:ca:b2:c1:8d:86:dc:47:18:15:0e:b7:12:b8:27:c8:b6: d0:82:f5:8c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDQdScesr7y2fn95hfYHzfM4DCfEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMTMyMDA3WhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMmQ4NGRlY2NmNmU3NTRmNDdiNmNlNTk1NmYzMjZmYjJh ZmZhMWQwODcyMGQ4Y2VjMTdhMjg0ZGQ1ZjAxOGRhMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSIOYVcH4+efD7fs3Sw3UZ9onqU8LcwitssU5btbnY+XOC BkFg5a7gZ79hA7+zgA7NOnz+Oi67S+Ka3tkW9k6ZPP3e7Ri0lXUUi7JwYS1NRD3e 4I11bz0CIj+Glz0tgul6hTzehP1wmvUW9ivrnkry9oUk3p3lzzzAP8Ap7TXLX3ri rg+kIPfdQwB1Di3ALmemlbEd/tVFFbBX9sXd8ami9Fr65hpE4fWkGT4lywNZz1Bu 8HlctgrczaC8jxh7/8FQAwq/Jl/aWgnbJo9UDub6HnIiPwiBM7GzOif++cPWP+aV oIWZTNMXGSEL4lqmIP+grBBy+4gPtBBp1AOdxfvrAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUlTSntx8EzdS2LQAG8TAp9JyCzzAwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzFlM2Y1MmZhLTVlYzUtNDk0Mi1hNTdkLWFlNTM0MjgxOWUzZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAAKYAwDQYJKoZIhvcNAQELBQADggEBACuQ5kYmWf/7/kq82GLwsfrk eLOwb8MTq/AtFE90cCJWVPmPjliIvxY+aRJqiobHdK10MmlFlllP2LD/Twi5anDa PjHKOHbifVBmEl/v0vqaKN5H1D00JVOdHSVHWbCHgtzaqp9v172f8X4+BukP/Z0T oSRM3+OvwG/PX4UrwqmcxSccEFDhYgLVjnS9QeYE85IRs4UN3dojoh59Vgzi/fE1 orURy5kdfAIywZUmVvB1Br07Uf+u2+CqpHtfzVe8rzxO9OcIhTS9Oxw8KZT6DCBH hzH1NE+a33zIcrMGOaii+UZA0TMR14axArWkyrLBjYbcRxgVDrcSuCfIttCC9Yw= -----END CERTIFICATE-----Generated at Sun Mar 1 22:17:59 2026 by rpki-client