$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/43bf5491-94ac-4373-b65e-f395a95ef29a.roa File: 43bf5491-94ac-4373-b65e-f395a95ef29a.roa (raw, json) Hash identifier: 4z2jPSwOInEAqIk2MkDUgGnQlptUhI6+EDjgRFsUSpA= Subject key identifier: B5:A8:66:E8:2C:B3:F4:40:8F:28:23:60:A4:91:9A:8B:E5:1A:8C:BF Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 7CE3B69898501B4636B201CF51F4D0FC6476D7FE Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/43bf5491-94ac-4373-b65e-f395a95ef29a.roa Signing time: Fri 13 Feb 2026 03:02:05 +0000 ROA not before: Fri 13 Feb 2026 03:02:05 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3800::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:e3:b6:98:98:50:1b:46:36:b2:01:cf:51:f4:d0:fc:64:76:d7:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Feb 13 03:02:05 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=1a3adc260bc4501116b712cf18b0c87bf7665b91d52afb353f03bf92dd6a04fd, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a0:cc:87:6b:89:3e:c9:96:4b:cb:83:65:22: f8:e6:1c:80:e6:b1:c5:7e:cb:df:a4:3d:e0:fd:3b: f0:ac:22:76:47:12:f2:4d:71:a1:2e:e7:b9:e8:63: c9:50:17:6e:e9:81:8a:05:32:26:ae:e2:fa:72:2b: 37:ef:d7:ce:2a:e9:3b:b2:d6:4d:87:84:38:ba:5c: 96:74:77:ca:6d:90:30:4e:f3:33:bb:eb:12:8c:25: ea:a9:03:e1:79:ed:fe:d3:9f:f0:0b:5d:f3:18:c6: a0:ff:24:52:c0:ad:4d:71:8e:d9:31:49:fe:41:06: a6:58:36:ed:47:45:0d:24:d2:e4:ab:9c:b8:26:2c: 8b:a2:ee:96:34:f9:51:87:61:17:a1:21:d4:4f:ff: af:a9:a1:6b:91:5e:12:1c:75:3d:95:d5:64:72:56: c8:ae:a5:bb:cd:98:24:11:8e:62:63:ac:97:be:10: ff:39:a4:a2:a9:b0:69:91:2b:8a:d8:3b:73:91:71: 87:72:dc:68:6c:d3:1e:65:01:71:a6:d0:c7:b9:b2: f8:f2:2d:24:c8:86:3f:83:74:38:26:75:5c:75:af: c7:b0:92:35:b6:03:b4:d1:ac:46:79:d6:e7:4c:bc: cf:fa:2c:23:ee:43:2e:de:b8:16:da:a5:d4:f2:81: e3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A8:66:E8:2C:B3:F4:40:8F:28:23:60:A4:91:9A:8B:E5:1A:8C:BF X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/43bf5491-94ac-4373-b65e-f395a95ef29a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3800::/47 Signature Algorithm: sha256WithRSAEncryption 63:be:6d:b3:f6:ea:d2:cb:6a:e8:c4:74:01:f4:4a:39:e5:af: 7c:b9:47:13:b1:d5:77:a6:97:57:fe:3e:ce:37:c3:a9:06:29: d6:8c:47:6b:4e:79:4f:84:d2:c1:37:ae:14:15:7e:08:08:d4: fd:0b:8e:1e:d2:a3:7f:39:bd:d3:76:0d:51:92:4a:59:be:c0: 18:a5:8e:7d:a5:3f:bc:5f:4e:a7:c3:8c:5d:2f:2c:3d:ed:e8: ab:30:96:f9:03:c0:bd:d6:22:96:49:7d:56:a2:7b:db:4a:0e: de:73:3b:87:69:20:a9:8c:66:52:c8:b0:28:f5:93:68:df:f0: f4:a0:e8:e9:f1:58:02:8a:77:76:f7:e9:c9:9d:1d:09:e9:51: 36:cf:1f:0a:01:42:f3:cd:c2:c1:a3:f2:20:90:a6:8a:3e:34: 3b:99:4a:07:10:d9:8e:ca:95:a1:79:16:62:05:ff:47:72:3d: 37:0c:9c:4e:3e:a9:53:10:3b:fd:1b:99:cf:c0:81:08:e7:84: 43:f0:51:a5:f9:0f:cc:96:5d:ee:fa:ff:b8:b0:bb:5f:60:57: 8c:90:80:cc:4a:12:54:48:2f:93:b7:aa:80:52:ed:0a:2f:3e: 2f:3f:81:15:eb:c6:4a:8a:ca:5e:d9:89:3a:a8:c5:d8:e5:d1: 23:45:34:50 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfOO2mJhQG0Y2sgHPUfTQ/GR21/4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMDMwMjA1WhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxYTNhZGMyNjBiYzQ1MDExMTZiNzEyY2YxOGIwYzg3YmY3 NjY1YjkxZDUyYWZiMzUzZjAzYmY5MmRkNmEwNGZkMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDsoMyHa4k+yZZLy4NlIvjmHIDmscV+y9+kPeD9O/CsInZH EvJNcaEu57noY8lQF27pgYoFMiau4vpyKzfv184q6Tuy1k2HhDi6XJZ0d8ptkDBO 8zO76xKMJeqpA+F57f7Tn/ALXfMYxqD/JFLArU1xjtkxSf5BBqZYNu1HRQ0k0uSr nLgmLIui7pY0+VGHYRehIdRP/6+poWuRXhIcdT2V1WRyVsiupbvNmCQRjmJjrJe+ EP85pKKpsGmRK4rYO3ORcYdy3Ghs0x5lAXGm0Me5svjyLSTIhj+DdDgmdVx1r8ew kjW2A7TRrEZ51udMvM/6LCPuQy7euBbapdTygeOrAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUtahm6Cyz9ECPKCNgpJGai+UajL8wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzQzYmY1NDkxLTk0YWMtNDM3My1iNjVlLWYzOTVhOTVlZjI5YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAOAAwDQYJKoZIhvcNAQELBQADggEBAGO+bbP26tLLaujEdAH0Sjnl r3y5RxOx1Xeml1f+Ps43w6kGKdaMR2tOeU+E0sE3rhQVfggI1P0Ljh7So385vdN2 DVGSSlm+wBiljn2lP7xfTqfDjF0vLD3t6KswlvkDwL3WIpZJfVaie9tKDt5zO4dp IKmMZlLIsCj1k2jf8PSg6OnxWAKKd3b36cmdHQnpUTbPHwoBQvPNwsGj8iCQpoo+ NDuZSgcQ2Y7KlaF5FmIF/0dyPTcMnE4+qVMQO/0bmc/AgQjnhEPwUaX5D8yWXe76 /7iwu19gV4yQgMxKElRIL5O3qoBS7QovPi8/gRXrxkqKyl7ZiTqoxdjl0SNFNFA= -----END CERTIFICATE-----Generated at Mon Mar 2 04:30:27 2026 by rpki-client