$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/52fea754-4442-42bd-ba6a-8608fca69d57.roa File: 52fea754-4442-42bd-ba6a-8608fca69d57.roa (raw, json) Hash identifier: JJEpJviVJWcyPcYJ8Iz1cu0Ro/Phcfk9v001QJjKPfU= Subject key identifier: 44:8C:BC:F0:23:4D:CA:89:BD:10:19:33:81:19:23:8A:7B:9F:FE:1B Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 141457455C4539A3D9571ADABA58EC0BF9D5F4DE Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/52fea754-4442-42bd-ba6a-8608fca69d57.roa Signing time: Fri 13 Feb 2026 03:50:45 +0000 ROA not before: Fri 13 Feb 2026 03:50:45 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3ce6::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:14:57:45:5c:45:39:a3:d9:57:1a:da:ba:58:ec:0b:f9:d5:f4:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Feb 13 03:50:45 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=4080286e9cc46450d2dc0e5acf3bd66869a4ad9d11911be06127ce37a78a91bc, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c7:4a:db:02:1e:72:f4:ef:59:5c:54:e7:6c: 54:d5:26:82:1b:27:02:09:ad:ed:28:9a:27:00:49: 3b:cc:73:94:e2:db:7c:0b:e7:c5:a8:2c:35:8c:1b: aa:64:b0:8b:d9:86:53:24:95:fb:83:29:80:aa:1b: 0b:f6:13:44:cf:51:ba:6a:3b:23:94:58:10:1e:60: d6:90:25:84:57:c5:d4:01:20:66:0c:8e:40:ea:2e: b2:c4:d5:b0:a6:bd:d6:90:19:16:e1:68:ea:0c:4d: af:60:7b:91:d2:2d:4c:91:40:06:13:13:f7:44:60: 01:d4:0b:db:c9:48:35:be:d5:2a:c4:aa:0e:65:af: ea:85:eb:aa:58:66:09:9c:7f:7e:de:38:81:27:30: c7:eb:ee:08:79:02:14:05:9d:75:08:c8:f7:1a:f4: 1a:b5:82:9b:bd:74:82:ec:dc:cf:a2:6a:87:28:f5: 43:46:ba:5c:7b:a4:32:ec:06:01:21:42:b6:d2:ca: 95:69:c8:6d:98:17:e9:23:ce:df:19:0e:f5:23:b8: 65:92:ef:d1:4b:e5:5a:7e:5b:55:e6:79:05:34:7d: ce:89:94:0e:62:ae:fc:24:44:1f:0b:2c:df:0e:55: 2a:46:34:96:9d:be:03:c8:7e:79:98:26:6b:a7:93: e0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:8C:BC:F0:23:4D:CA:89:BD:10:19:33:81:19:23:8A:7B:9F:FE:1B X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/52fea754-4442-42bd-ba6a-8608fca69d57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3ce6::/47 Signature Algorithm: sha256WithRSAEncryption 43:f2:94:70:2d:f3:94:5f:73:9c:5d:f5:27:da:42:d3:df:3d: 77:68:02:20:46:16:34:3a:54:64:20:f3:d3:93:3e:a7:b3:55: 3d:d6:53:8b:7d:c0:ca:2f:13:e6:39:df:dc:9f:4b:8c:d1:4c: c8:ef:4a:26:25:98:f8:fb:07:4b:76:95:98:01:c5:32:91:a9: 80:a2:28:0a:3b:da:91:01:f7:68:cc:9b:16:d9:21:12:a2:20: 68:d2:e8:c3:b3:8f:3f:5e:20:ef:20:bc:cc:94:b6:60:2e:85: f9:8f:85:a1:a0:0d:dd:c9:59:98:6c:f2:4f:3e:a3:bb:85:15: 3e:e0:05:5a:35:e4:0b:62:e9:b5:8b:bf:05:51:d8:9e:71:ce: c6:e9:47:47:2f:3c:52:18:4b:8c:74:59:aa:9e:3d:a9:0c:cc: 03:b2:3e:13:03:f3:5b:93:5e:71:5b:8c:ab:2a:e3:1a:25:7a: 67:0d:c9:50:23:5c:37:14:7a:e7:6f:45:eb:c7:d6:b3:85:26: 37:34:93:c4:26:d3:44:25:4c:cf:a0:0b:8c:75:66:e5:42:ce: 53:22:e3:fb:ad:c5:6c:37:de:19:c0:94:3c:89:8e:f7:89:59: 65:2d:de:f8:33:17:70:3c:52:f9:eb:51:14:d7:5f:d2:b7:12: 00:fc:d1:e9 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUFBRXRVxFOaPZVxrauljsC/nV9N4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMDM1MDQ1WhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MDgwMjg2ZTljYzQ2NDUwZDJkYzBlNWFjZjNiZDY2ODY5 YTRhZDlkMTE5MTFiZTA2MTI3Y2UzN2E3OGE5MWJjMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrx0rbAh5y9O9ZXFTnbFTVJoIbJwIJre0omicASTvMc5Ti 23wL58WoLDWMG6pksIvZhlMklfuDKYCqGwv2E0TPUbpqOyOUWBAeYNaQJYRXxdQB IGYMjkDqLrLE1bCmvdaQGRbhaOoMTa9ge5HSLUyRQAYTE/dEYAHUC9vJSDW+1SrE qg5lr+qF66pYZgmcf37eOIEnMMfr7gh5AhQFnXUIyPca9Bq1gpu9dILs3M+iaoco 9UNGulx7pDLsBgEhQrbSypVpyG2YF+kjzt8ZDvUjuGWS79FL5Vp+W1XmeQU0fc6J lA5irvwkRB8LLN8OVSpGNJadvgPIfnmYJmunk+DFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQURIy88CNNyom9EBkzgRkjinuf/hswHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzUyZmVhNzU0LTQ0NDItNDJiZC1iYTZhLTg2MDhmY2E2OWQ1Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAPOYwDQYJKoZIhvcNAQELBQADggEBAEPylHAt85Rfc5xd9SfaQtPf PXdoAiBGFjQ6VGQg89OTPqezVT3WU4t9wMovE+Y539yfS4zRTMjvSiYlmPj7B0t2 lZgBxTKRqYCiKAo72pEB92jMmxbZIRKiIGjS6MOzjz9eIO8gvMyUtmAuhfmPhaGg Dd3JWZhs8k8+o7uFFT7gBVo15Ati6bWLvwVR2J5xzsbpR0cvPFIYS4x0WaqePakM zAOyPhMD81uTXnFbjKsq4xolemcNyVAjXDcUeudvRevH1rOFJjc0k8Qm00QlTM+g C4x1ZuVCzlMi4/utxWw33hnAlDyJjveJWWUt3vgzF3A8UvnrURTXX9K3EgD80ek= -----END CERTIFICATE-----Generated at Sun Mar 1 22:22:08 2026 by rpki-client