$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/25d95210-6ac3-43e8-9eb2-185c06d1fdfa.roa File: 25d95210-6ac3-43e8-9eb2-185c06d1fdfa.roa (raw, json) Hash identifier: KphvlUttxtn/hEdAwFfIvPqkELKUZZv7r6Y753llnSg= Subject key identifier: 18:3F:1D:25:F2:4C:83:5A:D8:3B:B8:FE:25:AE:1B:A5:84:52:6D:00 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 470A7053FC75E6AE91F61D6F9F93B024DBBEFB79 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/25d95210-6ac3-43e8-9eb2-185c06d1fdfa.roa Signing time: Fri 13 Feb 2026 10:50:07 +0000 ROA not before: Fri 13 Feb 2026 10:50:07 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3b70::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:0a:70:53:fc:75:e6:ae:91:f6:1d:6f:9f:93:b0:24:db:be:fb:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Feb 13 10:50:07 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=444a5660fffa0fa64e00a3741538ef4511ab4e01a555c861647ab896427e36dc, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:04:af:a8:51:40:02:ba:13:ed:9d:8f:11:d5: 6a:18:18:2f:58:94:4c:e0:98:95:b7:74:00:d6:42: ef:75:3a:75:e3:d9:af:90:b1:e6:7c:d1:75:be:42: 3b:88:97:47:12:95:9e:e7:7c:93:73:ab:da:93:5e: b0:c1:aa:01:f2:23:f5:8b:58:8a:78:84:07:ea:ab: 73:ed:cc:3a:0e:46:16:94:11:4c:ae:de:cf:ae:30: 5e:6c:c0:c6:57:a9:12:ab:ab:e3:f8:ec:b5:fb:d9: fc:f1:d9:41:98:4a:12:5e:27:34:df:b4:fa:69:8f: 0d:d7:84:cb:4f:da:7c:58:b3:52:17:b7:7d:91:3d: ff:c5:d2:75:5d:20:38:01:b0:c7:2b:4c:5b:59:90: 91:2b:54:1b:54:9b:ae:34:6f:f0:fd:2a:01:57:1b: 5a:55:31:6b:4c:b0:02:1c:be:ef:55:77:62:c7:91: 7a:8c:7e:53:12:9d:4c:1d:03:78:d8:96:98:94:4c: 5a:aa:16:1c:43:06:77:af:ac:20:3c:7f:cd:48:8c: c9:c5:e2:0f:1a:4d:1d:12:fd:ce:8c:be:84:12:eb: ec:e9:87:7b:52:65:c2:50:91:06:fb:aa:85:a6:f5: 99:fa:f0:d0:d6:ca:99:06:3f:23:e2:11:47:76:10: f8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:3F:1D:25:F2:4C:83:5A:D8:3B:B8:FE:25:AE:1B:A5:84:52:6D:00 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/25d95210-6ac3-43e8-9eb2-185c06d1fdfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3b70::/45 Signature Algorithm: sha256WithRSAEncryption 0b:36:c6:1c:f6:5d:fe:07:ce:a9:ea:3e:62:e0:cc:8c:12:de: e3:a8:82:6b:09:ad:55:1c:c8:ea:00:a7:a7:f7:43:2b:9a:be: a2:f6:41:24:3e:1d:83:97:5b:bd:8f:31:58:54:25:cb:be:5a: 46:78:48:7b:26:37:32:99:bc:c2:9b:d4:58:f5:83:2b:92:5e: b2:84:e4:6e:fd:b8:ed:bf:66:08:38:db:1c:21:56:c7:dc:6a: 39:2c:94:1b:1b:3d:24:c7:e8:6f:4f:47:d3:ad:d6:bf:5e:e2: ef:fb:8c:7d:20:41:80:fa:05:a9:72:4f:38:31:84:af:f9:44: f4:29:1b:64:56:71:1b:79:af:41:11:b1:51:60:fd:b7:0a:2a: 7b:ba:ff:f9:ae:ac:1a:fb:87:9e:4d:1b:79:0e:e0:a4:66:52: c9:e6:fe:b6:cd:96:d9:19:e0:b9:19:1f:2a:a3:57:94:6f:6b: 89:44:f3:c7:0c:12:22:1d:b0:7f:97:20:d2:9b:4d:fe:c4:1f: 05:06:27:1e:d0:2c:9f:ce:81:c5:d1:66:bc:b2:85:0f:ba:0c: 6a:7b:50:cc:8a:da:a3:64:ee:8e:2c:2c:a4:01:de:c7:16:e7: 3b:66:11:22:67:9e:d2:95:a2:e3:f0:a7:81:de:18:65:66:51: a6:09:06:d8 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURwpwU/x15q6R9h1vn5OwJNu++3kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMTA1MDA3WhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NDRhNTY2MGZmZmEwZmE2NGUwMGEzNzQxNTM4ZWY0NTEx YWI0ZTAxYTU1NWM4NjE2NDdhYjg5NjQyN2UzNmRjMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrBK+oUUACuhPtnY8R1WoYGC9YlEzgmJW3dADWQu91OnXj 2a+QseZ80XW+QjuIl0cSlZ7nfJNzq9qTXrDBqgHyI/WLWIp4hAfqq3PtzDoORhaU EUyu3s+uMF5swMZXqRKrq+P47LX72fzx2UGYShJeJzTftPppjw3XhMtP2nxYs1IX t32RPf/F0nVdIDgBsMcrTFtZkJErVBtUm640b/D9KgFXG1pVMWtMsAIcvu9Vd2LH kXqMflMSnUwdA3jYlpiUTFqqFhxDBnevrCA8f81IjMnF4g8aTR0S/c6MvoQS6+zp h3tSZcJQkQb7qoWm9Zn68NDWypkGPyPiEUd2EPjZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUGD8dJfJMg1rYO7j+Ja4bpYRSbQAwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzI1ZDk1MjEwLTZhYzMtNDNlOC05ZWIyLTE4NWMwNmQxZmRmYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAAO3AwDQYJKoZIhvcNAQELBQADggEBAAs2xhz2Xf4HzqnqPmLgzIwS 3uOogmsJrVUcyOoAp6f3QyuavqL2QSQ+HYOXW72PMVhUJcu+WkZ4SHsmNzKZvMKb 1Fj1gyuSXrKE5G79uO2/Zgg42xwhVsfcajkslBsbPSTH6G9PR9Ot1r9e4u/7jH0g QYD6BalyTzgxhK/5RPQpG2RWcRt5r0ERsVFg/bcKKnu6//murBr7h55NG3kO4KRm Usnm/rbNltkZ4LkZHyqjV5Rva4lE88cMEiIdsH+XINKbTf7EHwUGJx7QLJ/OgcXR ZryyhQ+6DGp7UMyK2qNk7o4sLKQB3scW5ztmESJnntKVouPwp4HeGGVmUaYJBtg= -----END CERTIFICATE-----Generated at Sun Mar 1 22:14:50 2026 by rpki-client