$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/43fb50f4-676d-41f0-9624-7e9a201ff306.roa File: 43fb50f4-676d-41f0-9624-7e9a201ff306.roa (raw, json) Hash identifier: BNhXzfWzSfYfp86mC+TPrPddjpd7935L+dwSw5Bb4ks= Subject key identifier: 5B:6A:98:68:B6:F0:67:DF:2B:07:1B:6D:BC:68:6F:56:FD:13:E5:10 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 6E5D8832259807334B6E16CF397A068EC5CD35D3 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/43fb50f4-676d-41f0-9624-7e9a201ff306.roa Signing time: Fri 13 Feb 2026 04:00:08 +0000 ROA not before: Fri 13 Feb 2026 04:00:08 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3bfc::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:5d:88:32:25:98:07:33:4b:6e:16:cf:39:7a:06:8e:c5:cd:35:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Feb 13 04:00:08 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=e53801a3f9509a187b4543741fd5f8779380a51c34b47ccdaabfa2f7cd487b91, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b9:f6:70:6a:28:df:81:2b:d7:09:5a:c1:df: 4e:d5:be:62:3f:f7:be:4e:0a:e9:51:78:dd:00:5f: d9:5a:84:b0:1e:fe:37:c3:3f:cc:76:8f:7a:2a:09: ff:4f:81:82:c6:70:76:f9:8a:58:3f:24:69:aa:d3: 63:44:f1:69:2b:70:dc:6e:b7:35:ac:f3:1a:7d:f6: fb:fe:b9:ca:12:07:b2:ea:9e:3d:be:82:80:cf:ce: fe:8f:bc:fd:9a:af:1a:b3:93:89:d7:15:ba:73:79: 31:48:a2:63:eb:fb:01:c2:0b:b8:f4:ea:ff:1c:e4: 98:de:eb:19:43:90:7b:dc:ca:94:ed:a1:59:a3:87: 6a:00:f4:7a:6b:a5:79:8e:09:fb:49:b8:7c:f2:da: 91:ae:fa:d3:66:4e:58:ff:8d:2f:42:c2:d2:f3:d3: 73:e6:9f:4e:27:3f:ca:51:49:a3:15:9c:e9:a6:39: c3:78:85:93:ad:f9:4b:b8:90:69:c3:1b:6c:ab:fb: c5:40:fa:63:24:59:92:b2:d6:56:80:41:b6:23:c3: a9:05:84:ec:8f:fd:1e:0b:84:ba:cd:94:47:f7:84: eb:af:77:53:ac:c3:7b:22:b9:a4:dc:86:80:53:9a: 49:20:bd:95:d9:e7:24:9e:27:88:cd:32:90:ce:85: e5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:6A:98:68:B6:F0:67:DF:2B:07:1B:6D:BC:68:6F:56:FD:13:E5:10 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/43fb50f4-676d-41f0-9624-7e9a201ff306.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3bfc::/46 Signature Algorithm: sha256WithRSAEncryption 03:13:cc:45:c3:74:ac:50:66:8b:cc:20:5d:ef:55:72:29:03: f5:39:35:d0:a4:f1:92:f1:ee:0b:50:f0:98:68:7d:7c:9c:0f: 68:24:60:9f:ce:b7:e2:e1:f6:79:a5:a6:de:d9:62:10:1c:f0: 78:37:2b:45:11:8d:74:58:06:f5:e2:11:73:eb:33:7c:75:a7: f8:c5:b2:fa:2a:2d:ff:75:32:5a:0a:45:4d:cd:a7:ba:df:e2: a1:b4:bf:c6:36:91:a6:53:eb:33:e1:f1:94:07:ac:b4:06:3f: 2c:d3:70:e4:d8:28:a1:66:1b:98:17:dd:b7:2f:67:5a:5b:53: 12:0f:81:02:c9:e3:22:da:7a:9d:2f:5c:2d:b3:ff:4c:07:88: e8:40:cd:b1:95:3d:88:fd:38:da:87:a4:76:9c:14:d0:ad:05: 75:64:0a:9b:50:ef:f2:c7:4f:fe:b0:cf:83:d9:ef:44:f6:e5: 26:c2:e2:69:72:e1:c9:8b:ed:d5:13:1c:36:9b:ac:d6:18:e9: de:f0:7d:e4:80:4c:1c:a9:28:31:92:1d:51:1d:65:6d:15:07: b8:bd:78:08:74:d5:fc:76:fb:21:73:33:7e:e1:4d:ff:87:23: a0:43:0d:a4:dc:c5:a4:e8:18:a8:64:34:85:c2:a0:5e:49:62: b2:87:63:5f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUbl2IMiWYBzNLbhbPOXoGjsXNNdMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMDQwMDA4WhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNTM4MDFhM2Y5NTA5YTE4N2I0NTQzNzQxZmQ1Zjg3Nzkz ODBhNTFjMzRiNDdjY2RhYWJmYTJmN2NkNDg3YjkxMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsufZwaijfgSvXCVrB307VvmI/975OCulReN0AX9lahLAe /jfDP8x2j3oqCf9PgYLGcHb5ilg/JGmq02NE8WkrcNxutzWs8xp99vv+ucoSB7Lq nj2+goDPzv6PvP2arxqzk4nXFbpzeTFIomPr+wHCC7j06v8c5Jje6xlDkHvcypTt oVmjh2oA9HprpXmOCftJuHzy2pGu+tNmTlj/jS9CwtLz03Pmn04nP8pRSaMVnOmm OcN4hZOt+Uu4kGnDG2yr+8VA+mMkWZKy1laAQbYjw6kFhOyP/R4LhLrNlEf3hOuv d1Osw3siuaTchoBTmkkgvZXZ5ySeJ4jNMpDOheV7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUW2qYaLbwZ98rBxttvGhvVv0T5RAwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzQzZmI1MGY0LTY3NmQtNDFmMC05NjI0LTdlOWEyMDFmZjMwNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAO/wwDQYJKoZIhvcNAQELBQADggEBAAMTzEXDdKxQZovMIF3vVXIp A/U5NdCk8ZLx7gtQ8JhofXycD2gkYJ/Ot+Lh9nmlpt7ZYhAc8Hg3K0URjXRYBvXi EXPrM3x1p/jFsvoqLf91MloKRU3Np7rf4qG0v8Y2kaZT6zPh8ZQHrLQGPyzTcOTY KKFmG5gX3bcvZ1pbUxIPgQLJ4yLaep0vXC2z/0wHiOhAzbGVPYj9ONqHpHacFNCt BXVkCptQ7/LHT/6wz4PZ70T25SbC4mly4cmL7dUTHDabrNYY6d7wfeSATBypKDGS HVEdZW0VB7i9eAh01fx2+yFzM37hTf+HI6BDDaTcxaToGKhkNIXCoF5JYrKHY18= -----END CERTIFICATE-----Generated at Sun Mar 1 22:16:34 2026 by rpki-client