$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4432134f-8a95-447f-b74a-ce948ea14b5b.roa File: 4432134f-8a95-447f-b74a-ce948ea14b5b.roa (raw, json) Hash identifier: drMazmHhRZIAxE8tA+zoMyNFApfvOINM5y2dX/xHudw= Subject key identifier: F0:34:74:50:45:2F:C2:56:78:50:84:A4:83:54:9E:BC:E7:F5:21:C3 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 039FDA4D8CE77720DCFECD4647EE4E6F97D13A39 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4432134f-8a95-447f-b74a-ce948ea14b5b.roa Signing time: Fri 13 Feb 2026 03:01:23 +0000 ROA not before: Fri 13 Feb 2026 03:01:23 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:34f0::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:9f:da:4d:8c:e7:77:20:dc:fe:cd:46:47:ee:4e:6f:97:d1:3a:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Feb 13 03:01:23 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=b7fbfa841e6cdab1eecd72f3110281bb6df1befa58d505edfaee5b419669e088, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:26:14:c0:07:b0:2c:06:2a:5b:ea:d5:7e:d6: 60:c2:c9:1c:f3:cb:02:5e:d2:6a:67:24:0d:fd:0c: a6:17:60:7c:04:75:78:d9:b6:85:2d:38:16:02:7d: 82:7a:28:e1:af:77:19:d9:35:ed:3d:1e:e0:fb:67: 66:97:74:4b:1e:4c:24:f0:da:f1:9e:ef:17:d2:b9: 25:9d:8e:42:72:f3:4a:56:c8:6f:ff:67:61:c5:94: 47:8c:d8:d0:0a:6e:56:14:df:bd:bb:d5:a1:9c:de: 1c:6a:fa:69:47:6a:6f:2d:66:6b:21:a5:62:ed:74: 1f:57:20:71:1d:e7:4e:04:c6:bf:72:68:9d:99:25: b2:d9:db:2e:b8:2e:4b:38:8f:f7:7c:75:9f:8f:f8: a8:48:62:c9:24:31:c8:02:3c:8d:f1:b7:51:92:ca: e0:9c:2c:0a:c2:12:07:3f:ae:1a:6d:ab:dd:15:9c: c9:74:00:7f:0e:90:5a:15:c4:6e:38:e7:6b:7c:2a: 38:19:a8:d9:a4:71:47:c3:ae:f5:7c:78:d2:57:c2: 61:80:5f:5c:2e:a6:82:9c:97:90:0c:3d:cb:d9:b3: 0c:b1:dc:46:3e:53:09:22:46:40:69:76:74:e0:a7: 50:b7:2f:fa:7d:8e:3f:8a:76:21:1b:79:36:a9:cc: dd:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:34:74:50:45:2F:C2:56:78:50:84:A4:83:54:9E:BC:E7:F5:21:C3 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4432134f-8a95-447f-b74a-ce948ea14b5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:34f0::/47 Signature Algorithm: sha256WithRSAEncryption 90:7a:de:a7:51:b6:66:1a:59:ad:b4:2a:3f:93:10:28:c9:4c: 10:a0:ce:fc:ef:3b:be:0f:b3:64:3b:cd:36:56:c4:fb:82:06: c2:7d:78:fd:0f:95:6a:ee:1e:4f:df:6b:b1:a4:75:17:d3:31: 57:fc:76:e0:47:aa:7f:b6:15:53:19:34:eb:79:fc:1b:fe:9d: 44:20:90:81:2e:60:28:26:af:49:e2:07:e3:2b:52:44:f1:ec: f0:d3:a1:ac:45:ba:0e:fb:ce:10:63:24:d6:cd:ee:0f:ad:1a: 1a:de:ab:7c:4f:cf:9c:6b:cf:d6:cd:e1:db:6b:e9:41:9d:63: ca:b6:c6:32:f4:c4:5b:f2:e5:ac:aa:df:45:43:91:40:b2:a8: 0e:de:1e:75:7b:6f:23:0a:02:98:ae:4f:95:86:48:c1:93:f7: 75:70:53:15:ab:68:0d:e8:74:7e:3f:5a:06:f1:e5:e8:73:99: 3e:09:37:f3:1b:f6:95:0f:92:82:35:64:4d:ca:b2:b7:f5:89: 3d:f5:72:d5:d0:4f:02:ed:b8:aa:22:12:4e:6e:2d:c3:ce:7f: 26:71:b3:16:0f:78:01:99:03:76:8a:02:4c:74:83:27:93:a1: 7f:68:5f:5f:aa:e2:6c:f4:8c:1f:8f:64:95:10:65:43:6f:44: 00:dd:2f:af -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUA5/aTYzndyDc/s1GR+5Ob5fROjkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMDMwMTIzWhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiN2ZiZmE4NDFlNmNkYWIxZWVjZDcyZjMxMTAyODFiYjZk ZjFiZWZhNThkNTA1ZWRmYWVlNWI0MTk2NjllMDg4MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQJhTAB7AsBipb6tV+1mDCyRzzywJe0mpnJA39DKYXYHwE dXjZtoUtOBYCfYJ6KOGvdxnZNe09HuD7Z2aXdEseTCTw2vGe7xfSuSWdjkJy80pW yG//Z2HFlEeM2NAKblYU37271aGc3hxq+mlHam8tZmshpWLtdB9XIHEd504Exr9y aJ2ZJbLZ2y64Lks4j/d8dZ+P+KhIYskkMcgCPI3xt1GSyuCcLArCEgc/rhptq90V nMl0AH8OkFoVxG4452t8KjgZqNmkcUfDrvV8eNJXwmGAX1wupoKcl5AMPcvZswyx 3EY+UwkiRkBpdnTgp1C3L/p9jj+KdiEbeTapzN09AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU8DR0UEUvwlZ4UISkg1SevOf1IcMwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzQ0MzIxMzRmLThhOTUtNDQ3Zi1iNzRhLWNlOTQ4ZWExNGI1Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAANPAwDQYJKoZIhvcNAQELBQADggEBAJB63qdRtmYaWa20Kj+TECjJ TBCgzvzvO74Ps2Q7zTZWxPuCBsJ9eP0PlWruHk/fa7GkdRfTMVf8duBHqn+2FVMZ NOt5/Bv+nUQgkIEuYCgmr0niB+MrUkTx7PDToaxFug77zhBjJNbN7g+tGhreq3xP z5xrz9bN4dtr6UGdY8q2xjL0xFvy5ayq30VDkUCyqA7eHnV7byMKApiuT5WGSMGT 93VwUxWraA3odH4/Wgbx5ehzmT4JN/Mb9pUPkoI1ZE3Ksrf1iT31ctXQTwLtuKoi Ek5uLcPOfyZxsxYPeAGZA3aKAkx0gyeToX9oX1+q4mz0jB+PZJUQZUNvRADdL68= -----END CERTIFICATE-----Generated at Mon Mar 2 10:37:26 2026 by rpki-client