$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3768ced2-1870-4d63-8948-783884e45d2d.roa File: 3768ced2-1870-4d63-8948-783884e45d2d.roa (raw, json) Hash identifier: 4vcc09QpcpTHid9E/5sgCMiFgFuNfp5oi0zhmG0g7t8= Subject key identifier: 8F:3A:D9:C7:DB:49:E6:46:B2:C2:DF:B3:7D:A3:29:34:5A:1E:1C:C8 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 33B2E9E4653F7215F1DEC0C3611B6AFBB310E7CD Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3768ced2-1870-4d63-8948-783884e45d2d.roa Signing time: Fri 13 Feb 2026 04:20:55 +0000 ROA not before: Fri 13 Feb 2026 04:20:55 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2160::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:b2:e9:e4:65:3f:72:15:f1:de:c0:c3:61:1b:6a:fb:b3:10:e7:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Feb 13 04:20:55 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=7c72c4356d54134c41198fae04a510d80abfe37e94f24e40929ca1f7356c1864, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:93:ef:94:12:0e:3c:0a:fb:d0:fd:68:85:5c: 44:b2:a8:7f:75:2e:b6:e9:fe:7d:e2:5a:82:8a:d6: d4:88:1d:19:7e:ee:98:3a:d5:fb:f5:02:70:05:bb: 1e:8f:7a:86:84:ac:90:68:cd:ea:01:f1:6f:52:33: 3e:e9:9e:d9:b7:9a:2b:70:3a:a8:45:40:b2:6d:da: 7d:c3:c0:25:90:09:6d:48:a6:89:41:d3:25:b2:38: 58:1c:e9:84:4b:e5:58:73:ee:95:f3:74:56:b4:3f: 4f:12:c8:3a:81:26:a3:aa:e6:a4:b8:71:89:af:62: 5b:81:41:02:e5:2f:00:c6:f9:e5:4a:7d:db:31:26: be:e1:25:33:e5:b9:60:a6:1e:b2:9a:f0:27:b1:3f: ea:dc:35:35:07:cc:02:9c:fb:0d:2b:92:6e:a5:2b: b5:6a:35:1f:58:a4:ea:13:b6:1e:00:f8:a0:3a:90: 6d:8c:e1:b0:09:40:bf:7c:c3:42:0b:64:a9:1b:4a: 1d:3c:93:c3:b9:b7:80:a9:b5:03:95:c3:5f:5c:a6: ff:b8:4c:b8:2d:6c:0f:51:38:82:8b:ab:07:e9:bc: 87:95:f5:fd:38:8d:ac:d6:cd:0b:c8:0b:a3:40:ff: 78:85:3f:91:3b:6b:af:f5:7b:6e:40:34:d8:26:88: 4c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:3A:D9:C7:DB:49:E6:46:B2:C2:DF:B3:7D:A3:29:34:5A:1E:1C:C8 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3768ced2-1870-4d63-8948-783884e45d2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2160::/43 Signature Algorithm: sha256WithRSAEncryption 43:10:02:f5:e7:41:66:e4:1b:e3:83:14:55:db:fa:c4:f7:6a: 92:3d:f5:c5:38:43:6e:c9:bc:ce:00:94:82:2b:5a:18:03:cb: 40:ff:a6:89:53:9f:7d:6d:49:cd:b5:79:d6:76:79:a3:82:59: 64:48:c0:1d:a0:81:31:3d:f7:49:65:81:53:07:99:df:67:c9: 74:8f:bc:42:cb:a9:e0:06:46:85:27:e4:f6:12:b5:8f:4f:80: 22:32:8d:b0:2e:58:d6:85:4b:82:7b:c5:72:c9:54:37:02:ed: 75:25:04:28:bf:80:a5:c2:9f:ca:5a:c6:3e:a6:86:76:de:b5: 06:fd:02:49:17:6f:d7:89:d3:a6:5a:45:9a:6b:7f:b5:27:65: a5:bf:aa:93:32:09:a4:c9:bd:38:46:7d:f6:36:1f:86:42:d9: a9:46:42:3a:71:a1:ad:c6:f6:80:dd:0b:0c:f9:ec:5e:67:03: d5:07:8f:44:03:43:3c:28:e6:3a:3a:9f:6b:27:1e:15:86:53: 7f:4f:90:18:3d:e6:92:26:40:93:f6:b9:21:c8:93:c9:7e:80: 6a:9a:db:34:ea:4b:58:d1:3b:07:7f:29:a8:c6:20:15:15:b5: 5f:40:b6:a0:bb:86:8c:c9:2d:87:f1:af:63:25:3d:1b:80:f2: 38:7f:e1:db -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUM7Lp5GU/chXx3sDDYRtq+7MQ580wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMDQyMDU1WhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3YzcyYzQzNTZkNTQxMzRjNDExOThmYWUwNGE1MTBkODBh YmZlMzdlOTRmMjRlNDA5MjljYTFmNzM1NmMxODY0MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6k++UEg48CvvQ/WiFXESyqH91Lrbp/n3iWoKK1tSIHRl+ 7pg61fv1AnAFux6PeoaErJBozeoB8W9SMz7pntm3mitwOqhFQLJt2n3DwCWQCW1I polB0yWyOFgc6YRL5Vhz7pXzdFa0P08SyDqBJqOq5qS4cYmvYluBQQLlLwDG+eVK fdsxJr7hJTPluWCmHrKa8CexP+rcNTUHzAKc+w0rkm6lK7VqNR9YpOoTth4A+KA6 kG2M4bAJQL98w0ILZKkbSh08k8O5t4CptQOVw19cpv+4TLgtbA9ROIKLqwfpvIeV 9f04jazWzQvIC6NA/3iFP5E7a6/1e25ANNgmiEylAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUjzrZx9tJ5kaywt+zfaMpNFoeHMgwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzM3NjhjZWQyLTE4NzAtNGQ2My04OTQ4LTc4Mzg4NGU0NWQyZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwUmAJAAIWAwDQYJKoZIhvcNAQELBQADggEBAEMQAvXnQWbkG+ODFFXb+sT3 apI99cU4Q27JvM4AlIIrWhgDy0D/polTn31tSc21edZ2eaOCWWRIwB2ggTE990ll gVMHmd9nyXSPvELLqeAGRoUn5PYStY9PgCIyjbAuWNaFS4J7xXLJVDcC7XUlBCi/ gKXCn8paxj6mhnbetQb9AkkXb9eJ06ZaRZprf7UnZaW/qpMyCaTJvThGffY2H4ZC 2alGQjpxoa3G9oDdCwz57F5nA9UHj0QDQzwo5jo6n2snHhWGU39PkBg95pImQJP2 uSHIk8l+gGqa2zTqS1jROwd/KajGIBUVtV9AtqC7hozJLYfxr2MlPRuA8jh/4ds= -----END CERTIFICATE-----Generated at Sun Mar 1 22:13:21 2026 by rpki-client