$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/216e8495-f197-406c-8538-91f86ca1cd90.roa File: 216e8495-f197-406c-8538-91f86ca1cd90.roa (raw, json) Hash identifier: ObAePanOpQuM3pXvcrd6J18AA11h4uNtQcUQ76xtbCg= Subject key identifier: 2D:0F:0F:04:AB:C6:46:AC:84:08:51:89:46:D9:D5:B7:FD:3D:DA:BE Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 3221F96287B45E48AFF66DCB5A61F723F0C5CB6A Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/216e8495-f197-406c-8538-91f86ca1cd90.roa Signing time: Fri 13 Feb 2026 06:01:58 +0000 ROA not before: Fri 13 Feb 2026 06:01:58 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:32ec::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:21:f9:62:87:b4:5e:48:af:f6:6d:cb:5a:61:f7:23:f0:c5:cb:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Feb 13 06:01:58 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=5c30d848844ec3254a99705d711c8ec995e0ea78f1b9ee40872937de74dfd01e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:4a:69:2b:4b:a5:be:1e:cc:d8:c8:2b:89:78: 8e:1c:91:3a:a0:ee:e5:b0:b8:bc:97:d7:fc:ae:fa: bf:b4:a6:bf:c7:28:e2:1b:46:7e:27:8b:92:a0:6f: 3d:aa:b9:e7:1a:0e:42:5b:72:95:34:02:3b:6c:8c: a1:a6:93:ce:2f:80:fc:59:2e:7a:76:07:8f:1b:02: b0:e4:b1:c2:87:66:60:47:7d:4e:ab:b3:16:29:8a: 42:79:d6:2e:d0:bb:a4:da:02:b9:2a:67:34:e7:31: c9:0f:73:e4:a0:d8:0d:57:10:3b:14:eb:95:39:a6: 36:e8:53:f1:aa:5f:2e:1b:4c:02:2f:60:6f:e1:ec: d4:71:35:1e:b8:fe:37:ae:67:39:0f:a0:e2:14:64: b0:da:da:2a:9b:ff:46:54:3e:f8:2a:12:e1:f4:4c: 65:06:e1:06:62:2a:62:00:1c:29:0e:92:b4:a8:a3: 1d:95:b3:b4:0e:9b:eb:d2:01:4c:29:a7:40:6a:3b: 0c:0b:50:7b:40:f8:a8:12:f8:78:f1:f0:98:73:35: 4a:98:db:c8:2e:29:fd:c0:3d:67:a2:6e:40:a0:d4: 4c:24:09:3e:1e:b7:e0:42:3c:1e:78:69:6f:03:49: 1b:38:c4:ec:2f:bc:35:46:9b:34:3f:3e:05:71:40: 08:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:0F:0F:04:AB:C6:46:AC:84:08:51:89:46:D9:D5:B7:FD:3D:DA:BE X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/216e8495-f197-406c-8538-91f86ca1cd90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:32ec::/47 Signature Algorithm: sha256WithRSAEncryption 4f:13:3a:f9:f4:51:53:1c:4c:68:74:ed:18:ec:e5:21:6d:4e: bb:31:43:69:56:3e:fc:c1:60:18:9d:b4:0d:03:6f:93:5f:0b: fa:27:3a:e8:bf:65:ed:37:35:b4:0e:96:07:88:bb:af:35:f2: b5:81:48:43:8a:68:59:90:01:c9:6b:2a:a7:2b:3a:0b:3f:02: db:9f:a7:c1:ae:c5:74:89:d2:8f:18:cf:bf:d6:1e:0b:c1:e7: 7e:c6:1d:92:40:8a:fb:73:95:20:45:19:41:f1:9c:38:40:21: da:a2:3c:0b:f8:0c:b2:0f:34:86:c0:66:f2:68:a1:0f:6e:41: fa:26:17:f7:3c:ae:e6:c1:1b:25:1c:db:6b:73:6d:69:80:e0: 3f:f3:e5:9a:11:1e:d0:86:89:6e:c2:4d:d0:df:5b:3e:e0:ae: e7:82:67:87:8a:2a:f2:db:0c:66:b4:fa:bd:56:66:e8:12:bf: fd:68:a0:39:cd:55:2a:05:bc:7f:4e:e3:9e:ba:40:8c:5d:e1: 04:d7:fe:99:62:de:c0:ac:ef:3e:7f:09:9e:a8:08:89:9b:dc: 50:af:54:da:95:9d:07:88:d2:45:45:96:a4:94:49:0f:d7:fd: 9d:bd:b8:b3:13:8b:e6:cb:06:7d:30:e1:6d:eb:df:77:d3:5e: d5:18:e7:63 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMiH5Yoe0Xkiv9m3LWmH3I/DFy2owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMDYwMTU4WhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YzMwZDg0ODg0NGVjMzI1NGE5OTcwNWQ3MTFjOGVjOTk1 ZTBlYTc4ZjFiOWVlNDA4NzI5MzdkZTc0ZGZkMDFlMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCJSmkrS6W+HszYyCuJeI4ckTqg7uWwuLyX1/yu+r+0pr/H KOIbRn4ni5Kgbz2quecaDkJbcpU0AjtsjKGmk84vgPxZLnp2B48bArDkscKHZmBH fU6rsxYpikJ51i7Qu6TaArkqZzTnMckPc+Sg2A1XEDsU65U5pjboU/GqXy4bTAIv YG/h7NRxNR64/jeuZzkPoOIUZLDa2iqb/0ZUPvgqEuH0TGUG4QZiKmIAHCkOkrSo ox2Vs7QOm+vSAUwpp0BqOwwLUHtA+KgS+Hjx8JhzNUqY28guKf3APWeibkCg1Ewk CT4et+BCPB54aW8DSRs4xOwvvDVGmzQ/PgVxQAgtAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQULQ8PBKvGRqyECFGJRtnVt/092r4wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzIxNmU4NDk1LWYxOTctNDA2Yy04NTM4LTkxZjg2Y2ExY2Q5MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAMuwwDQYJKoZIhvcNAQELBQADggEBAE8TOvn0UVMcTGh07Rjs5SFt TrsxQ2lWPvzBYBidtA0Db5NfC/onOui/Ze03NbQOlgeIu6818rWBSEOKaFmQAclr KqcrOgs/Atufp8GuxXSJ0o8Yz7/WHgvB537GHZJAivtzlSBFGUHxnDhAIdqiPAv4 DLIPNIbAZvJooQ9uQfomF/c8rubBGyUc22tzbWmA4D/z5ZoRHtCGiW7CTdDfWz7g rueCZ4eKKvLbDGa0+r1WZugSv/1ooDnNVSoFvH9O4566QIxd4QTX/pli3sCs7z5/ CZ6oCImb3FCvVNqVnQeI0kVFlqSUSQ/X/Z29uLMTi+bLBn0w4W3r33fTXtUY52M= -----END CERTIFICATE-----Generated at Sun Mar 1 22:35:22 2026 by rpki-client