$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/38b27a8e-318b-4690-9b34-2b01ff343e2c.roa File: 38b27a8e-318b-4690-9b34-2b01ff343e2c.roa (raw, json) Hash identifier: kl5yL6iDCt1f6/KxHlcqHCEuTiWX5/WZ+vV5tHQlq4k= Subject key identifier: 6A:DE:5A:2D:12:C7:77:BE:70:A8:B4:1E:7C:C8:2B:64:3D:87:AC:22 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 1208CA56B53504CAACF57352A0CEF265F0A39780 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/38b27a8e-318b-4690-9b34-2b01ff343e2c.roa Signing time: Thu 12 Feb 2026 02:52:05 +0000 ROA not before: Thu 12 Feb 2026 02:52:05 +0000 ROA not after: Wed 13 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2bee::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:08:ca:56:b5:35:04:ca:ac:f5:73:52:a0:ce:f2:65:f0:a3:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Feb 12 02:52:05 2026 GMT Not After : May 13 23:59:59 2026 GMT Subject: serialNumber=b3cf07cf63cae04ac13c8c6d60dc7edb646dafd933a7fdc17bedec4fb4dc180a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:98:5f:b4:ac:b6:76:09:e2:6c:2f:51:00:38: e0:16:38:1e:9b:4f:80:c9:d2:cc:19:87:6a:66:a5: 70:9f:1e:9b:53:b8:47:7d:50:27:07:2b:8b:b5:2d: ae:d3:8c:52:df:d0:38:8c:d0:e7:ea:15:1d:f1:3e: 00:f3:26:72:07:79:02:14:f5:2e:d8:51:49:5f:29: c8:db:3f:80:be:56:43:43:34:df:b4:4b:b3:2d:b7: 53:b7:41:02:db:22:a3:a9:27:a0:5a:70:4f:0d:fb: ab:93:d2:b1:ed:ed:72:07:9f:80:ae:d5:26:16:bf: 24:8d:a2:e1:33:0e:97:e8:a2:c4:22:6a:c8:6d:08: 06:a7:eb:0d:0b:1f:2b:10:9a:50:dc:53:28:0c:44: b6:d9:60:7e:a4:99:a8:ae:e7:aa:01:8d:7e:ad:79: 7d:41:8d:ac:ac:e2:4c:46:7f:da:1d:41:66:10:6b: 3a:73:7a:40:38:df:ee:8f:c5:93:f3:c3:b2:01:dd: 86:40:e1:86:2a:ea:e9:be:94:2e:08:4b:d8:0c:99: 5a:8e:c6:0a:a0:6d:16:76:d6:3d:f6:8f:00:d4:2b: 87:c8:60:99:c1:95:4a:fb:75:ef:da:27:e6:15:11: a5:1e:2a:be:f6:f7:40:6b:fe:e4:a8:47:a4:67:25: 34:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:DE:5A:2D:12:C7:77:BE:70:A8:B4:1E:7C:C8:2B:64:3D:87:AC:22 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/38b27a8e-318b-4690-9b34-2b01ff343e2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2bee::/47 Signature Algorithm: sha256WithRSAEncryption 5f:2c:97:15:63:cc:62:00:89:62:29:29:94:36:42:30:de:42: 47:36:56:25:51:65:89:27:ca:af:56:01:fc:6c:24:40:08:6e: 51:cd:62:0f:f1:c8:4b:8b:e4:c7:fd:2b:e8:e3:80:89:c9:a5: af:0c:b8:68:bb:31:7e:5c:2c:00:c3:1f:9b:1c:02:a6:86:12: ee:5e:e0:2b:d3:f7:25:2e:b8:9b:9c:2a:3f:c9:61:84:b7:e2: c5:c1:80:bc:48:fe:9b:c2:3e:06:17:52:3f:c9:a5:48:4e:5b: 15:72:b3:c5:f7:1b:34:a3:2c:22:17:9d:dd:f0:10:aa:e3:69: 66:d4:7d:1b:ea:c2:2f:aa:bd:8d:a0:ce:60:2d:c3:5c:db:0f: 11:98:6d:27:32:b5:df:7d:c9:be:6f:de:4e:19:53:9a:d6:ec: fd:c8:8d:81:69:ee:93:ff:66:52:bf:5c:94:55:94:ff:b2:66: 1d:57:57:03:c6:46:37:12:25:c9:d4:1d:27:12:9e:00:66:87: 5b:21:4e:52:9e:22:53:a5:e6:14:f1:43:26:09:8f:32:52:3c: 32:10:80:e6:e6:76:16:2c:fd:e3:99:da:ef:37:34:6a:26:7c: e3:e7:3d:bf:9e:98:1d:92:d3:e9:4c:c7:73:b8:c4:4f:4a:1b: 2b:d3:ed:ab -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEgjKVrU1BMqs9XNSoM7yZfCjl4AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEyMDI1MjA1WhcNMjYwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiM2NmMDdjZjYzY2FlMDRhYzEzYzhjNmQ2MGRjN2VkYjY0 NmRhZmQ5MzNhN2ZkYzE3YmVkZWM0ZmI0ZGMxODBhMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCUmF+0rLZ2CeJsL1EAOOAWOB6bT4DJ0swZh2pmpXCfHptT uEd9UCcHK4u1La7TjFLf0DiM0OfqFR3xPgDzJnIHeQIU9S7YUUlfKcjbP4C+VkND NN+0S7Mtt1O3QQLbIqOpJ6BacE8N+6uT0rHt7XIHn4Cu1SYWvySNouEzDpfoosQi ashtCAan6w0LHysQmlDcUygMRLbZYH6kmaiu56oBjX6teX1Bjays4kxGf9odQWYQ azpzekA43+6PxZPzw7IB3YZA4YYq6um+lC4IS9gMmVqOxgqgbRZ21j32jwDUK4fI YJnBlUr7de/aJ+YVEaUeKr7290Br/uSoR6RnJTT9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUat5aLRLHd75wqLQefMgrZD2HrCIwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzM4YjI3YThlLTMxOGItNDY5MC05YjM0LTJiMDFmZjM0M2UyYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAK+4wDQYJKoZIhvcNAQELBQADggEBAF8slxVjzGIAiWIpKZQ2QjDe Qkc2ViVRZYknyq9WAfxsJEAIblHNYg/xyEuL5Mf9K+jjgInJpa8MuGi7MX5cLADD H5scAqaGEu5e4CvT9yUuuJucKj/JYYS34sXBgLxI/pvCPgYXUj/JpUhOWxVys8X3 GzSjLCIXnd3wEKrjaWbUfRvqwi+qvY2gzmAtw1zbDxGYbScytd99yb5v3k4ZU5rW 7P3IjYFp7pP/ZlK/XJRVlP+yZh1XVwPGRjcSJcnUHScSngBmh1shTlKeIlOl5hTx QyYJjzJSPDIQgObmdhYs/eOZ2u83NGomfOPnPb+emB2S0+lMx3O4xE9KGyvT7as= -----END CERTIFICATE-----Generated at Sun Mar 1 22:14:46 2026 by rpki-client