$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/408b29cb-1202-4e07-9248-112835240c57.roa File: 408b29cb-1202-4e07-9248-112835240c57.roa (raw, json) Hash identifier: wfy6urstVPeS3vALyaDMoDeHOfN9gPVZ8wIjI4O8T6E= Subject key identifier: 1A:63:8A:D7:40:C0:F8:54:12:5C:B6:95:B5:FB:23:D2:1A:DE:15:26 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 0CBD3FEAD24812B337F7898F95B99CD4C7576B3C Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/408b29cb-1202-4e07-9248-112835240c57.roa Signing time: Thu 12 Feb 2026 00:20:11 +0000 ROA not before: Thu 12 Feb 2026 00:20:11 +0000 ROA not after: Wed 13 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2edc::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:bd:3f:ea:d2:48:12:b3:37:f7:89:8f:95:b9:9c:d4:c7:57:6b:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Feb 12 00:20:11 2026 GMT Not After : May 13 23:59:59 2026 GMT Subject: serialNumber=c31c490452fd9a63fefee1f4967107d2ea7e9a9196c51da0588a9158a7e70633, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:27:fe:85:1e:91:90:aa:10:ff:63:bd:95:da: b5:8d:96:e7:17:8d:e8:8a:f8:b2:a3:a7:30:6f:a7: 65:af:2e:89:11:45:3f:71:70:b6:d1:19:be:45:cf: a2:22:4c:4d:b1:e1:32:89:93:f2:c2:4a:55:26:df: 12:1e:b2:e6:d3:2e:bc:06:f6:c4:b9:23:bd:3d:d9: 6b:9f:75:a2:fb:b4:8b:cd:cb:97:0a:4e:ad:91:09: 21:31:e2:3d:20:cc:15:18:63:31:16:30:1c:ca:33: ef:4d:10:19:a3:1e:3b:73:80:90:c7:dc:b1:d8:29: 51:4c:79:f3:6c:09:f9:e8:31:c8:06:8f:25:cc:16: 3e:4e:2d:e6:88:80:e4:d4:99:7e:09:4e:85:d3:80: 9c:4a:1d:24:04:d9:3e:f2:25:d9:30:80:21:3a:43: ff:dc:5e:a0:c7:ad:d9:af:13:96:85:2f:e3:50:91: a1:57:b6:16:26:16:05:6d:d6:24:d0:01:6f:df:83: 78:84:ce:2e:94:5c:f3:1b:9a:f7:6a:99:ae:cb:9d: b9:99:dd:87:13:a9:fc:05:7c:15:c6:09:60:78:75: cc:a9:24:38:d8:62:27:78:f3:a0:09:fe:9e:ed:f0: 91:c7:2a:b7:d5:3f:91:76:48:44:7d:ab:4c:40:ae: 06:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:63:8A:D7:40:C0:F8:54:12:5C:B6:95:B5:FB:23:D2:1A:DE:15:26 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/408b29cb-1202-4e07-9248-112835240c57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2edc::/47 Signature Algorithm: sha256WithRSAEncryption 3c:49:9b:4d:79:f9:e2:5a:2b:1d:82:05:d0:70:9b:53:c9:91: 6d:89:9a:18:d2:4c:2b:9e:35:2d:95:95:53:b3:96:18:e4:85: 8e:45:6b:b3:a6:84:09:9a:08:77:bc:88:38:7f:de:ea:09:be: 8a:68:34:0c:2a:5d:8a:1e:79:7a:81:a6:30:3d:d9:b5:80:72: b8:18:11:5b:68:24:89:28:40:5d:ed:e7:19:7f:83:c6:9a:2d: ac:ab:14:ea:f7:11:16:86:8d:11:25:b4:7d:46:5c:6e:ca:73: 26:52:7b:1d:d7:67:52:43:c5:0a:78:88:3c:14:ce:ec:8f:ec: f8:06:b6:77:57:8c:55:37:c6:43:7e:f4:f4:1d:d8:75:a2:7d: 85:2b:be:27:98:79:92:0f:4b:3b:ba:dd:1f:2e:57:e8:0e:79: e1:df:ef:5a:c0:d6:ee:33:20:08:46:5d:d6:59:8c:38:58:b6: 42:e0:8b:1c:34:ba:be:3e:da:da:df:a2:d4:d9:2f:96:f3:93: 3f:b0:ad:48:88:7a:a3:f8:e7:be:dd:48:9e:b3:d4:76:86:fb: f5:9f:59:98:ce:34:38:32:ad:5b:53:85:16:e7:14:a2:99:b1: c1:bc:02:eb:a3:1e:89:6e:33:e6:c8:13:d2:19:ba:e2:d4:8c: c6:e1:fe:7f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDL0/6tJIErM394mPlbmc1MdXazwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEyMDAyMDExWhcNMjYwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjMzFjNDkwNDUyZmQ5YTYzZmVmZWUxZjQ5NjcxMDdkMmVh N2U5YTkxOTZjNTFkYTA1ODhhOTE1OGE3ZTcwNjMzMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3J/6FHpGQqhD/Y72V2rWNlucXjeiK+LKjpzBvp2WvLokR RT9xcLbRGb5Fz6IiTE2x4TKJk/LCSlUm3xIesubTLrwG9sS5I7092WufdaL7tIvN y5cKTq2RCSEx4j0gzBUYYzEWMBzKM+9NEBmjHjtzgJDH3LHYKVFMefNsCfnoMcgG jyXMFj5OLeaIgOTUmX4JToXTgJxKHSQE2T7yJdkwgCE6Q//cXqDHrdmvE5aFL+NQ kaFXthYmFgVt1iTQAW/fg3iEzi6UXPMbmvdqma7LnbmZ3YcTqfwFfBXGCWB4dcyp JDjYYid486AJ/p7t8JHHKrfVP5F2SER9q0xArgbXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUGmOK10DA+FQSXLaVtfsj0hreFSYwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzQwOGIyOWNiLTEyMDItNGUwNy05MjQ4LTExMjgzNTI0MGM1Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAALtwwDQYJKoZIhvcNAQELBQADggEBADxJm015+eJaKx2CBdBwm1PJ kW2JmhjSTCueNS2VlVOzlhjkhY5Fa7OmhAmaCHe8iDh/3uoJvopoNAwqXYoeeXqB pjA92bWAcrgYEVtoJIkoQF3t5xl/g8aaLayrFOr3ERaGjREltH1GXG7KcyZSex3X Z1JDxQp4iDwUzuyP7PgGtndXjFU3xkN+9PQd2HWifYUrvieYeZIPSzu63R8uV+gO eeHf71rA1u4zIAhGXdZZjDhYtkLgixw0ur4+2trfotTZL5bzkz+wrUiIeqP4577d SJ6z1HaG+/WfWZjONDgyrVtThRbnFKKZscG8AuujHoluM+bIE9IZuuLUjMbh/n8= -----END CERTIFICATE-----Generated at Mon Mar 2 02:00:31 2026 by rpki-client