$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/498e9f94-6f00-48fe-93da-d3fca37091e2.roa File: 498e9f94-6f00-48fe-93da-d3fca37091e2.roa (raw, json) Hash identifier: xfDIYJTAHB+hFQQhhoiPjD1VGWMvc11EbLbfzLvrcpE= Subject key identifier: 93:89:C4:48:DC:A9:EB:0C:57:C8:72:9E:43:8F:90:34:89:16:DA:7B Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 4FC6D83A036540E4C41BD234721F271C512A87ED Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/498e9f94-6f00-48fe-93da-d3fca37091e2.roa Signing time: Fri 13 Feb 2026 11:50:06 +0000 ROA not before: Fri 13 Feb 2026 11:50:06 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2f20::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:c6:d8:3a:03:65:40:e4:c4:1b:d2:34:72:1f:27:1c:51:2a:87:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Feb 13 11:50:06 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=9c703c5816c3309f99280b5ae7d4641fb7727f531017fd2cfe358cfecf7da8e0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:05:ab:91:73:80:1b:02:8d:1e:90:51:1d:8f: 4e:44:c2:42:e3:01:df:90:e7:5c:28:9f:e5:b5:fb: 84:73:e4:bc:c0:6c:de:fc:89:09:86:5c:7a:11:fb: 9a:69:b9:65:f8:d2:ac:62:01:3d:46:1d:21:01:d3: 27:c2:e8:91:77:cd:f8:60:f9:e1:52:26:ea:76:7e: de:87:fc:bd:c5:8d:2d:cf:4f:84:3f:be:af:f5:8b: 0a:a3:35:1f:35:1b:1b:51:3a:8a:0e:ec:65:60:35: bc:97:7f:54:8c:de:35:b9:d8:23:fe:b8:8f:66:20: c3:ea:b4:7b:ab:8c:c5:d2:ae:36:22:7f:41:f7:d9: dd:63:fd:77:fa:f4:df:cb:7d:09:4a:fd:7b:f4:ad: 96:69:18:99:e2:98:31:32:68:8d:d4:82:a7:53:bb: 7f:c0:ef:9f:db:25:f3:30:07:82:95:db:49:cb:46: 70:76:01:c1:c6:22:ad:fb:34:c3:19:9d:80:ae:57: b8:36:2a:cc:c8:9b:43:57:f3:85:30:da:8e:2f:00: 0b:a4:cd:b1:4f:f9:f4:81:00:64:a0:42:16:9d:02: 93:17:93:70:22:c3:a3:0d:10:9a:25:19:8a:54:ec: bc:97:a3:f2:07:b6:04:09:79:df:81:54:b9:73:5e: e4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:89:C4:48:DC:A9:EB:0C:57:C8:72:9E:43:8F:90:34:89:16:DA:7B X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/498e9f94-6f00-48fe-93da-d3fca37091e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2f20::/45 Signature Algorithm: sha256WithRSAEncryption 19:8a:60:df:f1:46:f0:51:73:95:f0:d5:b3:c3:33:56:1e:92: 4f:07:85:de:47:e4:ba:97:09:85:f8:63:0d:60:73:32:0c:29: 97:cf:63:c6:a3:46:ca:c2:96:71:6a:ab:45:cc:0f:ec:bf:89: bc:16:48:fd:22:5b:f5:1b:6e:ee:e3:5a:91:f2:c5:88:0a:26: 2b:7e:b8:26:b3:27:bf:0e:1a:da:b8:86:7f:6f:be:bb:57:17: c3:07:6a:f3:82:f9:39:07:64:e5:59:0b:5a:e1:fe:68:c1:2f: c7:d7:01:3a:2b:7a:b4:e9:13:ee:6e:55:9a:ef:b5:9a:16:d8: 83:3c:5b:38:33:6c:68:9d:05:b4:85:17:a7:f5:0d:29:bb:cc: 98:a5:07:6f:8e:90:98:f8:75:25:fa:a7:a4:f6:95:7b:e8:f6: 18:88:08:d4:79:42:84:6d:bc:00:cb:91:45:f8:da:46:a2:d2: 08:cf:fa:c7:a7:e3:c7:09:78:a0:e9:5e:c2:06:58:00:71:63: 88:8e:51:e7:0c:f9:e8:4d:22:76:80:76:43:c5:c9:20:ff:a6: f1:52:70:6b:a2:48:c6:10:1a:22:b2:47:1c:ee:01:a0:00:1f: 4a:1b:13:e7:2b:ec:7d:a7:13:e1:8c:cb:f8:42:98:4c:6b:e1: fe:1a:7d:89 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUT8bYOgNlQOTEG9I0ch8nHFEqh+0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMTE1MDA2WhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A5YzcwM2M1ODE2YzMzMDlmOTkyODBiNWFlN2Q0NjQxZmI3 NzI3ZjUzMTAxN2ZkMmNmZTM1OGNmZWNmN2RhOGUwMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtBauRc4AbAo0ekFEdj05EwkLjAd+Q51won+W1+4Rz5LzA bN78iQmGXHoR+5ppuWX40qxiAT1GHSEB0yfC6JF3zfhg+eFSJup2ft6H/L3FjS3P T4Q/vq/1iwqjNR81GxtROooO7GVgNbyXf1SM3jW52CP+uI9mIMPqtHurjMXSrjYi f0H32d1j/Xf69N/LfQlK/Xv0rZZpGJnimDEyaI3UgqdTu3/A75/bJfMwB4KV20nL RnB2AcHGIq37NMMZnYCuV7g2KszIm0NX84Uw2o4vAAukzbFP+fSBAGSgQhadApMX k3Aiw6MNEJolGYpU7LyXo/IHtgQJed+BVLlzXuR3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUk4nESNyp6wxXyHKeQ4+QNIkW2nswHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzQ5OGU5Zjk0LTZmMDAtNDhmZS05M2RhLWQzZmNhMzcwOTFlMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAALyAwDQYJKoZIhvcNAQELBQADggEBABmKYN/xRvBRc5Xw1bPDM1Ye kk8Hhd5H5LqXCYX4Yw1gczIMKZfPY8ajRsrClnFqq0XMD+y/ibwWSP0iW/Ubbu7j WpHyxYgKJit+uCazJ78OGtq4hn9vvrtXF8MHavOC+TkHZOVZC1rh/mjBL8fXATor erTpE+5uVZrvtZoW2IM8WzgzbGidBbSFF6f1DSm7zJilB2+OkJj4dSX6p6T2lXvo 9hiICNR5QoRtvADLkUX42kai0gjP+sen48cJeKDpXsIGWABxY4iOUecM+ehNInaA dkPFySD/pvFScGuiSMYQGiKyRxzuAaAAH0obE+cr7H2nE+GMy/hCmExr4f4afYk= -----END CERTIFICATE-----Generated at Sun Mar 1 23:49:29 2026 by rpki-client