$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2b87d423-5c7d-4462-855c-30bef174b53d.roa File: 2b87d423-5c7d-4462-855c-30bef174b53d.roa (raw, json) Hash identifier: C0xaP176GFbXzY6eI4Dz/03lEcPCzz3x/VoI40IaozM= Subject key identifier: 01:B3:0E:09:DB:08:BF:CF:FB:99:6A:DF:7F:2A:FA:31:E4:81:B2:AD Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 379CEE513F6685EE060E6194CFCDE1CF604B116B Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2b87d423-5c7d-4462-855c-30bef174b53d.roa Signing time: Thu 12 Feb 2026 01:31:47 +0000 ROA not before: Thu 12 Feb 2026 01:31:47 +0000 ROA not after: Wed 13 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:29e8::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:9c:ee:51:3f:66:85:ee:06:0e:61:94:cf:cd:e1:cf:60:4b:11:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Feb 12 01:31:47 2026 GMT Not After : May 13 23:59:59 2026 GMT Subject: serialNumber=3a47278f5af414183a8769066f12136a43be6c70d6af555488bae7d98dfdcd48, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:96:a1:11:28:62:4c:d5:6c:95:b1:47:73:66: f9:93:68:2f:52:d1:d4:04:b5:59:0b:45:5d:b7:b5: 9b:8c:df:95:8f:47:a4:93:eb:3a:73:b0:2a:7d:80: b7:ea:42:b2:7e:70:6d:35:d7:83:20:69:65:86:73: 72:ae:38:1b:83:00:3f:6c:18:87:15:8e:c2:c1:f4: 0e:e7:5a:16:44:2b:f0:37:0a:6b:49:9c:3c:9c:5f: 79:37:4c:7c:76:98:13:df:f7:26:fc:dd:6f:01:ac: 0a:84:11:79:47:ab:19:53:9d:9e:22:e0:bb:03:ba: e2:7f:ac:f1:c5:a5:bc:24:d0:0e:85:78:aa:b3:e3: a4:e3:f8:c0:73:67:4f:5f:94:7a:fa:83:f0:98:33: 90:cc:68:a1:c1:9b:94:e9:c9:ec:45:1c:9e:1f:72: 39:54:6d:06:07:c2:42:3f:e3:7d:45:f6:4c:b6:98: 3b:d6:e9:e6:38:97:08:bf:23:9d:4a:7d:f9:95:83: e4:92:e9:25:aa:7a:26:03:55:85:6f:ff:08:bf:57: dd:2b:03:1e:91:ea:70:fe:e6:f4:59:14:3f:4c:44: c9:08:31:9d:ff:ec:65:43:ee:3c:8a:55:ff:f7:16: 70:e0:c4:00:b4:34:e2:b8:03:ca:47:cf:8b:45:06: 4d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B3:0E:09:DB:08:BF:CF:FB:99:6A:DF:7F:2A:FA:31:E4:81:B2:AD X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2b87d423-5c7d-4462-855c-30bef174b53d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:29e8::/47 Signature Algorithm: sha256WithRSAEncryption a8:ad:f9:42:fa:95:e1:ea:66:69:2b:fa:de:b5:d3:9d:7e:95: 89:0d:e9:1b:ae:ac:58:25:67:a1:ef:df:16:b1:38:2b:64:e8: cb:08:84:21:e3:6a:73:e7:a9:f9:bb:41:3d:d6:60:8d:43:3d: a0:f6:53:db:03:35:fe:af:ab:9f:6b:f1:22:c7:a0:72:31:b3: 7f:f0:ca:c3:0c:7d:05:e4:22:c3:60:30:4e:12:20:2e:00:33: 63:37:e2:06:db:cb:cf:a2:ef:c6:6d:bd:4e:d8:11:21:4e:c6: c5:21:96:48:4d:68:e4:c2:2c:86:f5:8e:c3:09:96:11:24:e0: d5:2b:54:e1:43:8d:b8:2d:15:8e:7f:35:db:b8:db:da:97:a4: 4b:88:1e:0f:6b:2f:4e:16:8b:3e:99:80:71:12:29:39:73:e6: de:24:01:2b:91:f6:27:c1:89:49:b6:7e:fc:10:cd:17:f0:82: 07:5e:22:9d:03:c9:c8:51:a7:fe:1c:a7:5f:11:13:da:fe:f5: b9:79:a2:68:8c:a7:07:fd:0f:81:0d:83:29:a0:2b:ae:ce:1b: f5:65:f5:3e:12:28:97:c6:a2:55:20:f3:e5:96:df:4d:e4:0c: b3:f4:3a:dc:10:59:fc:6a:1a:ee:ec:76:17:1c:6a:62:0f:87: 29:bf:2e:6a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUN5zuUT9mhe4GDmGUz83hz2BLEWswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEyMDEzMTQ3WhcNMjYwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AzYTQ3Mjc4ZjVhZjQxNDE4M2E4NzY5MDY2ZjEyMTM2YTQz YmU2YzcwZDZhZjU1NTQ4OGJhZTdkOThkZmRjZDQ4MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6lqERKGJM1WyVsUdzZvmTaC9S0dQEtVkLRV23tZuM35WP R6ST6zpzsCp9gLfqQrJ+cG0114MgaWWGc3KuOBuDAD9sGIcVjsLB9A7nWhZEK/A3 CmtJnDycX3k3THx2mBPf9yb83W8BrAqEEXlHqxlTnZ4i4LsDuuJ/rPHFpbwk0A6F eKqz46Tj+MBzZ09flHr6g/CYM5DMaKHBm5TpyexFHJ4fcjlUbQYHwkI/431F9ky2 mDvW6eY4lwi/I51KffmVg+SS6SWqeiYDVYVv/wi/V90rAx6R6nD+5vRZFD9MRMkI MZ3/7GVD7jyKVf/3FnDgxAC0NOK4A8pHz4tFBk2xAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUAbMOCdsIv8/7mWrffyr6MeSBsq0wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzJiODdkNDIzLTVjN2QtNDQ2Mi04NTVjLTMwYmVmMTc0YjUzZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAKegwDQYJKoZIhvcNAQELBQADggEBAKit+UL6leHqZmkr+t61051+ lYkN6RuurFglZ6Hv3xaxOCtk6MsIhCHjanPnqfm7QT3WYI1DPaD2U9sDNf6vq59r 8SLHoHIxs3/wysMMfQXkIsNgME4SIC4AM2M34gbby8+i78ZtvU7YESFOxsUhlkhN aOTCLIb1jsMJlhEk4NUrVOFDjbgtFY5/Ndu429qXpEuIHg9rL04Wiz6ZgHESKTlz 5t4kASuR9ifBiUm2fvwQzRfwggdeIp0DychRp/4cp18RE9r+9bl5omiMpwf9D4EN gymgK67OG/Vl9T4SKJfGolUg8+WW303kDLP0OtwQWfxqGu7sdhccamIPhym/Lmo= -----END CERTIFICATE-----Generated at Sun Mar 1 22:14:13 2026 by rpki-client