$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/27d411b6-8019-4dd5-8536-4add75fd57d0.roa File: 27d411b6-8019-4dd5-8536-4add75fd57d0.roa (raw, json) Hash identifier: FiuUNGluI7oTGtNnlmBYE8+bIP6GID558XFiCmsJjKg= Subject key identifier: A2:C8:33:22:27:E7:93:0B:C6:6A:3C:09:28:B6:FA:98:8A:1E:63:A5 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 58F9A49EB063464580051391F47F5C687826FFAB Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/27d411b6-8019-4dd5-8536-4add75fd57d0.roa Signing time: Fri 13 Feb 2026 03:21:23 +0000 ROA not before: Fri 13 Feb 2026 03:21:23 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3d30::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:f9:a4:9e:b0:63:46:45:80:05:13:91:f4:7f:5c:68:78:26:ff:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Feb 13 03:21:23 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=ee0bef7bd7eae8a1cb6682c312f63646e1aeca4b4dbc75cee9cdd8daff65eb0e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6a:85:22:06:02:20:c4:34:48:a7:9e:6b:25: cb:37:1e:49:be:63:80:27:b2:d4:b7:58:71:22:57: 69:38:89:ba:ae:c0:2c:58:42:13:43:cb:b5:5b:d0: b1:cf:5a:f7:e3:17:4e:a7:6e:55:07:1b:df:fb:40: 61:ae:a6:a2:49:81:e1:2a:28:5b:47:9b:26:41:05: 33:8c:94:a8:b0:d2:28:b6:4e:40:39:45:75:27:67: 96:d3:1a:9d:ab:ed:9a:c3:fd:9e:21:f1:82:9f:af: 25:24:e3:bd:41:0e:d3:99:a8:3f:1b:c0:1b:75:09: 87:e7:66:e3:c2:2c:78:97:32:67:d2:68:ca:9e:8e: c8:86:75:f6:34:d1:b6:db:b4:fa:23:ac:42:e1:ae: 56:89:f2:15:29:57:06:36:2b:bf:7f:27:50:a9:60: 81:79:7e:fb:7c:af:6a:6d:60:32:7b:36:9d:00:b4: 1b:b9:83:ba:49:e4:da:74:5d:08:ff:05:aa:98:b3: 33:1e:81:4f:c4:00:0e:d2:51:70:ed:07:e2:3b:f7: 5f:6c:58:3d:c6:a8:c9:7c:3c:95:6b:1a:dd:5f:b4: 24:4d:9c:68:9a:a6:63:03:fa:b8:b6:67:67:08:c7: 59:f9:94:5d:35:5f:f6:c9:72:9e:24:36:55:3b:c7: dd:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C8:33:22:27:E7:93:0B:C6:6A:3C:09:28:B6:FA:98:8A:1E:63:A5 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/27d411b6-8019-4dd5-8536-4add75fd57d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3d30::/45 Signature Algorithm: sha256WithRSAEncryption 29:95:26:97:9d:6d:3f:b3:ac:ed:8b:72:00:e2:72:ba:11:eb: 82:1f:66:56:b5:f3:85:3e:00:ba:9d:2e:90:a1:d3:b5:e6:7c: 15:fd:25:9d:f4:85:bb:9b:29:02:a2:8e:94:16:54:6f:af:75: 31:35:4e:13:39:42:07:d4:39:ae:cf:56:1c:05:9b:f3:24:07: 96:b0:6c:eb:59:57:aa:78:36:5e:82:4c:0b:1d:e3:5a:18:a5: 3c:53:b8:1f:f3:0b:d1:1d:dd:5e:3a:2d:b4:cf:11:37:5f:07: e9:5e:90:da:70:41:5c:1e:15:50:69:f1:c9:b8:b3:6e:88:2a: 59:f9:f5:e7:01:ca:c9:34:d7:71:6d:33:1e:47:5c:8b:9e:ba: 3e:93:54:05:19:ee:d4:0d:79:c0:98:66:0c:6a:09:6b:73:1e: 57:b1:7d:f8:86:66:ae:3e:83:6a:78:29:90:75:7d:b9:08:c3: e9:d8:82:3f:12:71:cf:b7:3a:37:7c:88:76:63:5e:ba:dd:0b: 09:06:11:02:28:a5:cf:b1:61:b1:2a:a7:f6:b6:4b:b9:c0:4a: 3e:45:d7:48:15:92:86:d9:c6:52:1d:d2:09:cb:b1:db:5d:80: b7:0d:66:af:ec:fb:82:48:7c:48:28:ab:0f:6e:81:67:12:70: d9:46:e5:f0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWPmknrBjRkWABROR9H9caHgm/6swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMDMyMTIzWhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZTBiZWY3YmQ3ZWFlOGExY2I2NjgyYzMxMmY2MzY0NmUx YWVjYTRiNGRiYzc1Y2VlOWNkZDhkYWZmNjVlYjBlMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfaoUiBgIgxDRIp55rJcs3Hkm+Y4AnstS3WHEiV2k4ibqu wCxYQhNDy7Vb0LHPWvfjF06nblUHG9/7QGGupqJJgeEqKFtHmyZBBTOMlKiw0ii2 TkA5RXUnZ5bTGp2r7ZrD/Z4h8YKfryUk471BDtOZqD8bwBt1CYfnZuPCLHiXMmfS aMqejsiGdfY00bbbtPojrELhrlaJ8hUpVwY2K79/J1CpYIF5fvt8r2ptYDJ7Np0A tBu5g7pJ5Np0XQj/BaqYszMegU/EAA7SUXDtB+I7919sWD3GqMl8PJVrGt1ftCRN nGiapmMD+ri2Z2cIx1n5lF01X/bJcp4kNlU7x921AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUosgzIifnkwvGajwJKLb6mIoeY6UwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzI3ZDQxMWI2LTgwMTktNGRkNS04NTM2LTRhZGQ3NWZkNTdkMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAAPTAwDQYJKoZIhvcNAQELBQADggEBACmVJpedbT+zrO2LcgDicroR 64IfZla184U+ALqdLpCh07XmfBX9JZ30hbubKQKijpQWVG+vdTE1ThM5QgfUOa7P VhwFm/MkB5awbOtZV6p4Nl6CTAsd41oYpTxTuB/zC9Ed3V46LbTPETdfB+lekNpw QVweFVBp8cm4s26IKln59ecBysk013FtMx5HXIueuj6TVAUZ7tQNecCYZgxqCWtz HlexffiGZq4+g2p4KZB1fbkIw+nYgj8Scc+3Ojd8iHZjXrrdCwkGEQIopc+xYbEq p/a2S7nASj5F10gVkobZxlId0gnLsdtdgLcNZq/s+4JIfEgoqw9ugWcScNlG5fA= -----END CERTIFICATE-----Generated at Sun Mar 1 22:26:57 2026 by rpki-client