$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2db7281e-6487-465c-acf7-4b1f44beeb83.roa File: 2db7281e-6487-465c-acf7-4b1f44beeb83.roa (raw, json) Hash identifier: G9o5FzUe5rg+hkHIP8NU/qzJlawZRnd6NzDZVm+1wy4= Subject key identifier: 24:06:59:20:EB:2C:18:A0:6B:11:DB:B8:58:BB:34:C6:55:22:32:20 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 41287BD401DB3811003A5A60728B2D6867026B95 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2db7281e-6487-465c-acf7-4b1f44beeb83.roa Signing time: Thu 12 Feb 2026 02:50:12 +0000 ROA not before: Thu 12 Feb 2026 02:50:12 +0000 ROA not after: Wed 13 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:29d6::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:28:7b:d4:01:db:38:11:00:3a:5a:60:72:8b:2d:68:67:02:6b:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Feb 12 02:50:12 2026 GMT Not After : May 13 23:59:59 2026 GMT Subject: serialNumber=343b718508e8906a99a8951fb4903141b1cccb9f6cbd8d8c086bdf0797ed7143, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:74:4e:0f:a8:50:6d:e2:5a:35:e3:a9:13:3d: f6:c8:9c:4a:95:29:94:58:4b:c2:de:b6:dc:99:4d: 89:e8:5b:74:0b:c6:70:eb:f2:cd:d6:08:3e:06:ed: 67:70:3d:57:15:86:e5:e0:38:ee:b0:1c:f2:43:f6: ba:df:b2:ac:b3:df:76:25:ca:60:b7:90:6b:b1:50: 60:dc:a4:79:94:14:d4:82:d6:1c:f5:26:ff:c3:3f: fc:10:e5:63:a7:c3:7e:5f:1e:67:36:58:5e:f1:cd: 76:52:14:0c:9b:b6:d6:84:a5:dc:4e:26:a6:43:4c: 8c:92:57:19:b7:39:6b:d7:a5:6e:05:75:0a:c8:e2: 10:b8:65:80:a7:f5:2a:0e:31:bb:62:3a:76:89:06: e1:f3:c1:84:34:dd:c5:fa:2e:15:9e:ef:df:09:43: e1:ce:42:dc:a7:c8:27:e1:66:06:80:fe:10:2d:52: 69:15:14:c9:fa:67:e9:81:44:f3:19:77:cc:9e:a7: 2e:d9:22:84:97:06:f0:58:0b:6c:4b:07:85:f3:d2: 55:ba:c9:25:2c:6e:61:1a:8a:55:de:a8:3c:bc:b6: 48:68:1d:fd:93:19:68:a1:a8:13:7d:d1:e2:6b:37: 8d:64:ed:63:a4:f6:e7:3b:07:6f:bf:4a:9f:ce:f4: 98:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:06:59:20:EB:2C:18:A0:6B:11:DB:B8:58:BB:34:C6:55:22:32:20 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2db7281e-6487-465c-acf7-4b1f44beeb83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:29d6::/47 Signature Algorithm: sha256WithRSAEncryption 19:51:a8:79:e2:13:c3:5c:3b:cd:fd:56:f2:03:b3:ce:ad:77: 94:dc:df:0f:48:82:e1:21:39:47:8a:b1:eb:58:58:21:22:af: 7b:e2:6b:a1:06:89:8f:17:58:d1:d6:12:23:4e:b9:53:1a:3a: 2b:12:74:fc:3a:1b:bf:b8:60:98:bf:64:97:43:52:21:31:02: 5a:2e:c9:a0:e0:96:d8:bc:93:4a:7d:30:a8:45:70:e0:b9:6b: 26:a1:ec:8d:0c:77:62:c9:15:d1:18:75:c0:d5:31:b1:e4:93: 3a:ea:2a:e6:d0:75:b9:1a:18:7d:b5:cf:a4:47:d4:66:12:6b: 9f:0f:ff:ae:61:9d:40:8e:53:7a:2a:27:5a:1d:97:72:af:bc: 19:8b:a3:f5:b1:a8:e2:11:46:db:5c:90:d1:d4:6f:f8:a7:14: 3a:9a:00:0f:c2:c9:67:e7:7f:91:76:40:13:6f:76:94:ee:a3: 31:b5:91:f5:d9:c9:60:97:ef:70:a4:c7:4f:a6:b3:e1:c3:3a: e6:30:26:96:88:c7:db:89:5d:e1:1a:dd:a1:41:80:75:3c:25: d1:72:13:78:60:6b:8e:53:32:5c:32:f5:57:a9:03:12:cf:a3: 8f:0c:25:a9:b3:77:dd:ba:fb:00:79:ac:57:45:9a:f3:f5:cd: c5:9f:48:9b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQSh71AHbOBEAOlpgcostaGcCa5UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEyMDI1MDEyWhcNMjYwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNDNiNzE4NTA4ZTg5MDZhOTlhODk1MWZiNDkwMzE0MWIx Y2NjYjlmNmNiZDhkOGMwODZiZGYwNzk3ZWQ3MTQzMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/dE4PqFBt4lo146kTPfbInEqVKZRYS8LettyZTYnoW3QL xnDr8s3WCD4G7WdwPVcVhuXgOO6wHPJD9rrfsqyz33YlymC3kGuxUGDcpHmUFNSC 1hz1Jv/DP/wQ5WOnw35fHmc2WF7xzXZSFAybttaEpdxOJqZDTIySVxm3OWvXpW4F dQrI4hC4ZYCn9SoOMbtiOnaJBuHzwYQ03cX6LhWe798JQ+HOQtynyCfhZgaA/hAt UmkVFMn6Z+mBRPMZd8yepy7ZIoSXBvBYC2xLB4Xz0lW6ySUsbmEailXeqDy8tkho Hf2TGWihqBN90eJrN41k7WOk9uc7B2+/Sp/O9JgvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUJAZZIOssGKBrEdu4WLs0xlUiMiAwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzJkYjcyODFlLTY0ODctNDY1Yy1hY2Y3LTRiMWY0NGJlZWI4My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAKdYwDQYJKoZIhvcNAQELBQADggEBABlRqHniE8NcO839VvIDs86t d5Tc3w9IguEhOUeKsetYWCEir3via6EGiY8XWNHWEiNOuVMaOisSdPw6G7+4YJi/ ZJdDUiExAlouyaDglti8k0p9MKhFcOC5ayah7I0Md2LJFdEYdcDVMbHkkzrqKubQ dbkaGH21z6RH1GYSa58P/65hnUCOU3oqJ1odl3KvvBmLo/WxqOIRRttckNHUb/in FDqaAA/CyWfnf5F2QBNvdpTuozG1kfXZyWCX73Ckx0+ms+HDOuYwJpaIx9uJXeEa 3aFBgHU8JdFyE3hga45TMlwy9VepAxLPo48MJamzd926+wB5rFdFmvP1zcWfSJs= -----END CERTIFICATE-----Generated at Sun Mar 1 22:10:17 2026 by rpki-client