$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2aa6a9bc-2e32-4678-bba6-c2013e65e1ca.roa File: 2aa6a9bc-2e32-4678-bba6-c2013e65e1ca.roa (raw, json) Hash identifier: 1ornFCky3CKZf0i0kNOTxb+NPkrIKByGNo3B/XOa5Zw= Subject key identifier: 30:97:CE:B5:D0:CA:1B:7E:77:A1:A3:21:BF:89:67:A3:F5:A5:F9:5C Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 76AFA8CCD0B135D955E0ABED7182BFFEB8D2B740 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2aa6a9bc-2e32-4678-bba6-c2013e65e1ca.roa Signing time: Thu 12 Feb 2026 00:40:44 +0000 ROA not before: Thu 12 Feb 2026 00:40:44 +0000 ROA not after: Wed 13 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2a92::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:af:a8:cc:d0:b1:35:d9:55:e0:ab:ed:71:82:bf:fe:b8:d2:b7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Feb 12 00:40:44 2026 GMT Not After : May 13 23:59:59 2026 GMT Subject: serialNumber=a2ccb085a9a519f2efd64fe8b2a352a4c63dcbc69b6d82e09c3e9d291a7c4518, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:09:e2:af:12:b7:3f:49:10:42:ab:ce:25:6e: 10:89:e3:08:30:57:c9:35:4e:b2:41:0d:d4:65:5c: 60:f7:4d:39:16:93:54:20:66:d3:18:af:00:9e:fd: ec:71:f4:63:d4:4e:a3:07:18:1e:61:22:70:68:56: 31:db:4c:9e:bf:5e:f3:f4:a7:ee:25:eb:f3:17:d7: bf:61:0a:2d:53:9e:d1:65:54:14:d2:9f:4a:bd:37: ff:03:22:3e:6c:f6:42:3a:3f:a4:cc:31:5f:ca:da: 3e:bd:e1:13:76:5f:c7:a5:ca:63:a5:1f:88:a9:3d: 8a:86:1a:66:8b:cb:e1:85:5c:a1:ae:88:6d:48:03: 0f:3b:16:b4:49:f3:68:57:b4:17:32:5d:3b:20:97: e2:60:4c:98:2c:7d:2a:37:b4:e3:f3:31:72:63:b2: 3f:f8:fc:5e:54:e1:8f:11:09:dc:10:c7:b5:e1:3c: 2c:1b:5a:fa:22:fe:58:99:28:1c:3d:0d:97:1d:bd: 10:30:f7:3c:4b:9e:9a:0c:59:dd:3f:b3:51:16:e9: d7:c4:b4:f3:7d:d3:dd:19:46:3d:0a:b3:25:3a:ed: 3b:d5:b2:02:c9:0e:8b:d1:fa:14:e7:93:d9:3a:97: 61:5b:28:b3:dd:f9:7b:45:d5:87:12:0b:4d:23:24: 0c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:97:CE:B5:D0:CA:1B:7E:77:A1:A3:21:BF:89:67:A3:F5:A5:F9:5C X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2aa6a9bc-2e32-4678-bba6-c2013e65e1ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2a92::/47 Signature Algorithm: sha256WithRSAEncryption 11:44:f2:16:d5:f5:86:80:71:dc:2a:a9:6a:00:e5:e3:3e:d3: 42:1c:99:fb:3a:86:79:be:5b:20:75:68:01:9e:96:b9:39:3e: 7a:a8:04:77:3a:49:34:68:82:ec:ac:80:8e:c4:ae:77:86:c5: a8:5b:bd:1e:5c:05:20:15:7b:e2:55:3a:7d:49:7d:85:64:b2: f3:6b:2c:86:2d:32:f8:b3:98:f7:67:7f:b0:10:4b:1a:20:b5: bd:24:de:c0:a9:ad:06:ed:c0:71:c9:5e:84:4d:a9:dd:ce:dc: 4c:69:06:d8:49:30:c0:08:14:e5:f5:5e:65:aa:de:b7:53:ef: ef:6c:48:83:11:de:64:6a:2d:ba:3f:83:19:a1:91:84:55:c5: 25:bc:58:36:4e:2c:3e:e4:96:26:ac:36:a8:76:75:1e:0c:08: 52:7a:01:aa:46:e2:a8:39:52:c9:6b:69:59:ed:f3:66:39:25: e6:f9:02:10:f7:8c:eb:fe:23:cd:ff:91:ab:b3:ae:3b:0b:43: 65:9e:65:80:01:ce:09:27:c5:cc:06:9a:76:8e:db:80:b2:0b: 02:59:36:a8:88:7a:8e:67:b3:c2:ac:d9:a2:dd:f8:72:75:ad: d7:f8:ca:7f:c9:f0:86:c9:9f:37:98:fb:55:2d:c5:25:ef:5f: 96:44:3b:38 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdq+ozNCxNdlV4KvtcYK//rjSt0AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEyMDA0MDQ0WhcNMjYwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMmNjYjA4NWE5YTUxOWYyZWZkNjRmZThiMmEzNTJhNGM2 M2RjYmM2OWI2ZDgyZTA5YzNlOWQyOTFhN2M0NTE4MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdCeKvErc/SRBCq84lbhCJ4wgwV8k1TrJBDdRlXGD3TTkW k1QgZtMYrwCe/exx9GPUTqMHGB5hInBoVjHbTJ6/XvP0p+4l6/MX179hCi1TntFl VBTSn0q9N/8DIj5s9kI6P6TMMV/K2j694RN2X8elymOlH4ipPYqGGmaLy+GFXKGu iG1IAw87FrRJ82hXtBcyXTsgl+JgTJgsfSo3tOPzMXJjsj/4/F5U4Y8RCdwQx7Xh PCwbWvoi/liZKBw9DZcdvRAw9zxLnpoMWd0/s1EW6dfEtPN9090ZRj0KsyU67TvV sgLJDovR+hTnk9k6l2FbKLPd+XtF1YcSC00jJAyJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUMJfOtdDKG353oaMhv4lno/Wl+VwwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzJhYTZhOWJjLTJlMzItNDY3OC1iYmE2LWMyMDEzZTY1ZTFjYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAKpIwDQYJKoZIhvcNAQELBQADggEBABFE8hbV9YaAcdwqqWoA5eM+ 00Icmfs6hnm+WyB1aAGelrk5PnqoBHc6STRoguysgI7ErneGxahbvR5cBSAVe+JV On1JfYVksvNrLIYtMvizmPdnf7AQSxogtb0k3sCprQbtwHHJXoRNqd3O3ExpBthJ MMAIFOX1XmWq3rdT7+9sSIMR3mRqLbo/gxmhkYRVxSW8WDZOLD7kliasNqh2dR4M CFJ6AapG4qg5UslraVnt82Y5Jeb5AhD3jOv+I83/kauzrjsLQ2WeZYABzgknxcwG mnaO24CyCwJZNqiIeo5ns8Ks2aLd+HJ1rdf4yn/J8IbJnzeY+1UtxSXvX5ZEOzg= -----END CERTIFICATE-----Generated at Sun Mar 1 22:03:45 2026 by rpki-client