$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/33680eb8-3d83-41fe-b1a1-1ab931cb1f26.roa File: 33680eb8-3d83-41fe-b1a1-1ab931cb1f26.roa (raw, json) Hash identifier: ARjch+n5svJRSmUfJDlC3WPEPJsL3xV64IzoTN9KXBM= Subject key identifier: 1D:E9:2F:84:AA:23:79:BD:43:F6:06:A4:5E:5C:75:28:5C:98:03:D9 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 4485526D920F73D26B66913FFAFA49549792C9B4 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/33680eb8-3d83-41fe-b1a1-1ab931cb1f26.roa Signing time: Fri 13 Feb 2026 08:40:52 +0000 ROA not before: Fri 13 Feb 2026 08:40:52 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3500::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:85:52:6d:92:0f:73:d2:6b:66:91:3f:fa:fa:49:54:97:92:c9:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Feb 13 08:40:52 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=4e9b84269e411f02420143457c6d5e1c4b2d0762b6352f0eb35e88733bbcc197, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8b:05:d5:e1:c2:07:f8:87:2c:a2:a5:30:c3: 4f:6c:5e:61:e5:9e:e4:c6:a5:a3:1e:15:6c:10:0b: 01:41:9f:cf:b5:d0:c3:96:1f:b3:11:6e:03:63:c4: c5:cc:d9:c5:a7:2a:19:31:c9:b5:36:53:c2:a5:59: 87:8c:4d:7f:05:50:72:cb:19:96:c9:ae:64:0d:f9: ef:43:2b:80:8d:0e:f0:77:ee:ab:75:32:f2:d9:4f: b1:a3:83:35:8c:55:04:7b:5e:6c:06:10:6d:ba:75: cf:ad:a9:e6:9f:14:8e:e4:70:d7:97:8c:98:d4:2f: 60:ed:0e:e0:de:8d:4f:17:40:80:b9:f6:b8:8c:ea: f7:ec:8c:f4:83:33:65:88:7c:28:4d:ed:22:d4:14: 8d:7d:8d:17:e4:85:0a:6c:2c:90:90:67:1e:4c:6b: 81:ee:f3:26:05:61:27:0a:d6:1a:ab:db:e7:fd:a0: 56:14:72:09:87:b1:1a:83:4b:d9:b6:e2:1c:a3:58: 3c:e1:e4:17:6e:75:3c:d4:2a:e1:eb:dc:b2:7d:73: 4c:9f:96:79:9e:ef:c4:52:22:6b:0c:a4:eb:2b:69: 0b:bd:1d:50:4b:d6:5f:7f:dd:ef:27:e8:96:4d:40: 1d:da:a4:d7:74:94:a1:7c:66:52:db:f0:86:5b:12: ab:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:E9:2F:84:AA:23:79:BD:43:F6:06:A4:5E:5C:75:28:5C:98:03:D9 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/33680eb8-3d83-41fe-b1a1-1ab931cb1f26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3500::/45 Signature Algorithm: sha256WithRSAEncryption 24:b8:79:1d:b7:bb:7e:65:a7:f6:ba:ec:ec:ed:ae:75:58:d4: fe:6f:ff:db:ed:7f:4f:fd:48:39:dd:51:1d:85:26:4c:d9:fa: c2:34:54:6e:d6:6b:14:7b:f8:38:5f:7d:3b:a3:5d:a3:9c:7b: cc:0b:4d:5e:e2:0f:d0:e8:8d:f0:36:e3:cc:f0:12:bc:df:ad: 3d:6d:bc:63:bd:b0:38:40:02:67:1a:5c:37:58:81:fc:50:fe: 1a:03:7e:94:a8:6c:ba:05:01:66:de:03:30:d6:3e:66:9b:00: 63:90:1a:c4:0c:e7:9b:ab:bd:b3:bf:cb:af:29:07:c0:9d:53: 57:1e:7a:eb:65:b0:cd:b1:65:4c:3e:ed:cd:54:7e:8c:b9:3f: ca:0f:2e:ec:f2:1f:c8:0c:19:4c:1a:ea:fc:3c:08:c0:c9:45: ba:f2:0f:89:16:99:98:96:da:88:08:e8:45:03:a6:c0:61:fd: ea:75:d2:85:08:dc:1b:17:16:25:3b:66:99:1d:90:75:ce:f4: ad:fa:cf:4f:e9:e6:67:35:44:52:0f:57:d2:5d:cc:2b:66:e1: 0b:69:4d:e7:55:03:21:9c:4a:8f:f0:38:4e:a9:90:70:b5:e4: 34:32:5e:5d:25:7d:f9:9b:68:57:30:35:4d:0c:02:b5:a4:6b: 81:54:66:5e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURIVSbZIPc9JrZpE/+vpJVJeSybQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMDg0MDUyWhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZTliODQyNjllNDExZjAyNDIwMTQzNDU3YzZkNWUxYzRi MmQwNzYyYjYzNTJmMGViMzVlODg3MzNiYmNjMTk3MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0iwXV4cIH+IcsoqUww09sXmHlnuTGpaMeFWwQCwFBn8+1 0MOWH7MRbgNjxMXM2cWnKhkxybU2U8KlWYeMTX8FUHLLGZbJrmQN+e9DK4CNDvB3 7qt1MvLZT7GjgzWMVQR7XmwGEG26dc+tqeafFI7kcNeXjJjUL2DtDuDejU8XQIC5 9riM6vfsjPSDM2WIfChN7SLUFI19jRfkhQpsLJCQZx5Ma4Hu8yYFYScK1hqr2+f9 oFYUcgmHsRqDS9m24hyjWDzh5BdudTzUKuHr3LJ9c0yflnme78RSImsMpOsraQu9 HVBL1l9/3e8n6JZNQB3apNd0lKF8ZlLb8IZbEquVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUHekvhKojeb1D9gakXlx1KFyYA9kwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzMzNjgwZWI4LTNkODMtNDFmZS1iMWExLTFhYjkzMWNiMWYyNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAANQAwDQYJKoZIhvcNAQELBQADggEBACS4eR23u35lp/a67OztrnVY 1P5v/9vtf0/9SDndUR2FJkzZ+sI0VG7WaxR7+DhffTujXaOce8wLTV7iD9DojfA2 48zwErzfrT1tvGO9sDhAAmcaXDdYgfxQ/hoDfpSobLoFAWbeAzDWPmabAGOQGsQM 55urvbO/y68pB8CdU1ceeutlsM2xZUw+7c1Ufoy5P8oPLuzyH8gMGUwa6vw8CMDJ RbryD4kWmZiW2ogI6EUDpsBh/ep10oUI3BsXFiU7ZpkdkHXO9K36z0/p5mc1RFIP V9JdzCtm4QtpTedVAyGcSo/wOE6pkHC15DQyXl0lffmbaFcwNU0MArWka4FUZl4= -----END CERTIFICATE-----Generated at Mon Mar 2 02:50:29 2026 by rpki-client