$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/238432a4-b16f-4e7d-8c52-b4d1551bdc01.roa File: 238432a4-b16f-4e7d-8c52-b4d1551bdc01.roa (raw, json) Hash identifier: vM9DMR/6/HqdkGxPtbr2vty/Z94Gsmo0OhLwJ8qTv8w= Subject key identifier: 92:F6:98:FF:88:D2:E9:54:61:C0:76:25:56:69:65:1A:76:5C:25:81 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 397A8F93BE00296B850B68DF1E8628F04EEDEF Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/238432a4-b16f-4e7d-8c52-b4d1551bdc01.roa Signing time: Thu 12 Feb 2026 03:30:12 +0000 ROA not before: Thu 12 Feb 2026 03:30:12 +0000 ROA not after: Wed 13 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:220a::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:7a:8f:93:be:00:29:6b:85:0b:68:df:1e:86:28:f0:4e:ed:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Feb 12 03:30:12 2026 GMT Not After : May 13 23:59:59 2026 GMT Subject: serialNumber=d687c0ff76c26775ef1409477030f1270d0aacb5b2aadc22e0c45675506d2173, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:25:bf:15:c3:49:2e:7e:f8:65:18:0b:42:61: 4b:bb:0a:29:e5:93:57:0f:7f:8d:83:38:b5:b3:55: fc:63:ac:5e:0a:22:37:44:64:b4:f5:e7:1b:65:ac: eb:a2:62:f6:c1:cb:c6:0e:11:58:eb:58:83:c0:b1: 64:42:6a:42:fb:42:41:44:29:fd:98:93:25:71:16: 3e:ac:3a:f8:66:b6:60:8d:c0:de:e4:e4:36:8d:28: 25:67:1e:f0:45:3f:c1:f9:b1:ed:65:52:1a:2d:e2: b2:5f:ff:3f:1c:d8:ca:55:81:5f:1a:1a:13:d8:69: 99:7b:96:5d:de:34:06:72:20:ef:62:12:dc:42:c1: 92:2d:d9:d7:27:b7:00:8c:c6:50:cc:27:ce:5d:5e: cb:56:ea:55:cf:81:f0:43:c6:64:76:c6:32:a9:44: 7e:1b:22:8e:24:86:98:ff:a4:98:3d:18:ba:46:5d: 2a:12:3c:58:ca:bd:e2:74:0f:ed:a2:55:f6:93:34: c0:e9:ce:da:41:6f:52:41:94:b6:0c:a4:2f:47:af: 4b:80:a5:21:a2:b4:26:de:08:90:94:ea:3e:c0:7d: 64:a4:e1:23:db:54:79:9e:1e:27:12:8e:01:44:8c: e1:3c:80:38:ce:95:60:2f:df:bd:c5:24:a0:6f:c1: 01:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F6:98:FF:88:D2:E9:54:61:C0:76:25:56:69:65:1A:76:5C:25:81 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/238432a4-b16f-4e7d-8c52-b4d1551bdc01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:220a::/47 Signature Algorithm: sha256WithRSAEncryption 48:a7:00:2d:85:8a:3b:31:d9:f0:80:09:34:41:08:6d:3d:53: 81:fa:dc:c4:f4:15:48:00:bf:a2:d1:52:b5:0b:c8:33:0f:01: 75:f0:fa:cb:0e:46:02:07:4f:8c:df:31:c9:ae:cf:b5:98:93: 5c:22:be:53:4c:9a:3a:46:6f:c1:24:ed:47:cb:11:ab:1a:41: ba:bb:c4:24:ae:59:2c:1f:31:21:6a:28:b5:30:c7:10:00:cf: 3a:da:d0:6b:4f:47:df:37:80:31:c9:ea:63:c7:94:7c:fa:e0: ee:06:fa:5c:a6:4e:f6:60:ab:06:e7:a3:f9:59:c9:9e:c1:e0: 01:ea:1b:fe:76:fd:5c:a4:e6:52:a3:e9:e4:06:5b:f3:bb:7a: a2:29:0a:4c:58:b5:23:1e:7c:b4:63:c0:a8:ec:bf:76:62:17: 81:c9:f2:ca:85:ff:01:0a:35:a3:0c:3b:c9:fb:14:54:d9:bb: 90:69:84:76:0d:dd:b1:9b:34:ff:1b:6c:44:9e:e9:58:f3:fa: 1f:34:83:9d:88:a4:9b:99:70:e3:c7:a7:d6:1a:39:8a:c8:59: 21:9a:53:33:48:9b:62:4c:25:8a:34:ea:c8:4d:57:a2:03:c2: 8f:e5:b0:f6:5d:25:57:cf:60:30:57:b4:be:29:c5:5d:2b:72: 67:af:3e:2b -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgITOXqPk74AKWuFC2jfHoYo8E7t7zANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI1NTEyMDkwMjdmNWU3YWQ1NGUwNGYwNDJlNGFjMGU5ZTY1 YzU2ZTU1Yzc3NDc4ZDJjZTAeFw0yNjAyMTIwMzMwMTJaFw0yNjA1MTMyMzU5NTla MHoxSTBHBgNVBAUTQGQ2ODdjMGZmNzZjMjY3NzVlZjE0MDk0NzcwMzBmMTI3MGQw YWFjYjViMmFhZGMyMmUwYzQ1Njc1NTA2ZDIxNzMxLTArBgNVBAMTJDlmMjMwZmE5 LWFhMmYtNDAyMC1hZTJhLTFhNjAzNzQwODRiODCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAJYlvxXDSS5++GUYC0JhS7sKKeWTVw9/jYM4tbNV/GOsXgoi N0RktPXnG2Ws66Ji9sHLxg4RWOtYg8CxZEJqQvtCQUQp/ZiTJXEWPqw6+Ga2YI3A 3uTkNo0oJWce8EU/wfmx7WVSGi3isl//PxzYylWBXxoaE9hpmXuWXd40BnIg72IS 3ELBki3Z1ye3AIzGUMwnzl1ey1bqVc+B8EPGZHbGMqlEfhsijiSGmP+kmD0YukZd KhI8WMq94nQP7aJV9pM0wOnO2kFvUkGUtgykL0evS4ClIaK0Jt4IkJTqPsB9ZKTh I9tUeZ4eJxKOAUSM4TyAOM6VYC/fvcUkoG/BAecCAwEAAaOCArQwggKwMB0GA1Ud DgQWBBSS9pj/iNLpVGHAdiVWaWUadlwlgTAfBgNVHSMEGDAWgBTo88Ug4g7yXTq3 oha7FAQxajc48TAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv ZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzk5ZjhmZWQyLTI5 MmItNDcyMi1iOTI4LWZlZTdiZjBhNTkxMC81NTEyMDkwMjdmNWU3YWQ1NGUwNGYw NDJlNGFjMGU5ZTY1YzU2ZTU1Yzc3NDc4ZDJjZS5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9lNzUxOGFmNS1hMzQzLTQyOGQtYmY3OC1mOTgy YjZlNjA1MDUvMjM4NDMyYTQtYjE2Zi00ZTdkLThjNTItYjRkMTU1MWJkYzAxLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgt Zjk4MmI2ZTYwNTA1L1huclZUZ1R3UXVTc0RwNWx4VzVWeDNSNDBzNC5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHASYAkAAiCjANBgkqhkiG9w0BAQsFAAOCAQEASKcALYWKOzHZ8IAJNEEIbT1T gfrcxPQVSAC/otFStQvIMw8BdfD6yw5GAgdPjN8xya7PtZiTXCK+U0yaOkZvwSTt R8sRqxpBurvEJK5ZLB8xIWootTDHEADPOtrQa09H3zeAMcnqY8eUfPrg7gb6XKZO 9mCrBuej+VnJnsHgAeob/nb9XKTmUqPp5AZb87t6oikKTFi1Ix58tGPAqOy/dmIX gcnyyoX/AQo1oww7yfsUVNm7kGmEdg3dsZs0/xtsRJ7pWPP6HzSDnYikm5lw48en 1ho5ishZIZpTM0ibYkwlijTqyE1XogPCj+Ww9l0lV89gMFe0vinFXStyZ68+Kw== -----END CERTIFICATE-----Generated at Mon Mar 2 03:33:08 2026 by rpki-client