$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5529604b-4164-4a99-98a2-ee8cada30229.roa File: 5529604b-4164-4a99-98a2-ee8cada30229.roa (raw, json) Hash identifier: 0eSh8QOt8t60+oDzGgo2WfjJ09VVZX+McjAxBYf02Hs= Subject key identifier: E9:6C:C1:A0:AC:E9:BE:EF:44:FD:67:90:D0:04:63:8D:05:06:C7:51 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 0D9E29123BB4B86F078B3E0D528F7FA7371A6646 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5529604b-4164-4a99-98a2-ee8cada30229.roa Signing time: Fri 13 Feb 2026 11:00:58 +0000 ROA not before: Fri 13 Feb 2026 11:00:58 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3880::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:9e:29:12:3b:b4:b8:6f:07:8b:3e:0d:52:8f:7f:a7:37:1a:66:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Feb 13 11:00:58 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=13bf0a5952f9f428a67c6853a3aa7b046833ae1171a7b32dbcf87a977cdb60d5, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8f:2a:8c:67:39:52:6c:9f:91:ad:33:c9:20: bf:f1:26:63:77:60:35:d8:30:39:38:9e:80:0f:a2: 35:6f:be:dd:85:ec:37:6f:a9:cb:e4:e5:83:41:68: dd:2b:0e:65:1e:43:47:e2:c0:81:46:b2:41:bf:d1: f5:99:72:9a:95:9c:80:e6:69:c1:a5:2e:6a:bc:d2: e1:07:6f:b0:4b:e9:d0:1c:f7:1c:6b:b3:60:12:6f: d4:80:dd:d7:be:27:e8:0d:7e:c6:45:07:d9:03:54: e4:63:74:d0:a4:68:f3:05:4c:c8:78:1b:82:ee:63: 97:8a:76:93:d6:bf:91:28:d5:3c:5a:30:ca:8a:2e: ec:5a:be:44:a6:aa:44:8e:87:ca:57:73:16:d1:fe: 75:9f:40:5a:4b:ac:bf:89:48:84:92:06:18:1d:53: 33:f6:0f:b1:3f:26:ed:aa:43:24:d6:d9:d3:50:fa: 82:f4:03:78:2f:c4:56:01:1b:2b:00:ae:1d:6e:11: 11:6f:c4:fe:96:f1:54:97:ce:95:59:8c:c3:3a:75: 88:01:74:74:9a:97:ce:fb:33:b0:0e:50:f8:c3:d2: 7b:8f:66:11:f0:5a:e0:fa:8f:73:ac:5d:69:79:53: 0e:cc:d4:70:3d:d4:99:e0:dc:a3:33:f0:61:3d:33: 4a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:6C:C1:A0:AC:E9:BE:EF:44:FD:67:90:D0:04:63:8D:05:06:C7:51 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5529604b-4164-4a99-98a2-ee8cada30229.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3880::/44 Signature Algorithm: sha256WithRSAEncryption 94:67:70:65:f2:01:aa:fc:a4:e6:c0:dc:94:ff:76:36:b6:ba: 2d:1b:5a:f1:9f:dc:8a:3f:b9:33:2f:7b:ff:16:17:60:f4:d1: bb:00:c6:0f:f3:19:f8:92:3e:b8:22:ee:7c:6e:1d:ca:fa:79: 4b:f3:37:57:90:60:16:01:d1:b4:92:8f:ed:32:70:55:a9:83: 58:de:75:d4:81:4c:07:16:24:e9:ba:84:4b:c6:f5:91:b1:94: ba:aa:72:55:cb:46:ae:62:e0:fc:de:3c:e2:03:d3:f6:7d:d5: 31:fb:49:55:ec:01:58:f9:9f:61:66:8f:72:0f:ee:d1:9e:60: f0:2e:3d:23:aa:64:6d:dc:56:55:be:38:56:f7:fb:65:d7:b5: eb:cb:46:66:02:ab:43:a6:9c:5d:7f:d2:0f:7c:15:91:40:d4: 9e:89:16:0a:9a:37:91:d9:57:ed:08:2f:af:10:8c:49:af:78: 99:f3:bf:89:ee:cc:11:c7:02:d2:43:a4:9c:95:ab:b3:c0:f2: b1:61:cd:44:38:50:36:92:2f:97:ac:74:3c:53:77:c0:e3:25: b5:3d:2e:3f:ca:fb:1d:a1:33:04:36:23:7c:3b:ac:e2:04:9e: c4:02:25:d0:7f:6b:58:ee:dd:58:18:a1:0b:df:6f:6e:ed:bc: 15:f1:41:38 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDZ4pEju0uG8Hiz4NUo9/pzcaZkYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMTEwMDU4WhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxM2JmMGE1OTUyZjlmNDI4YTY3YzY4NTNhM2FhN2IwNDY4 MzNhZTExNzFhN2IzMmRiY2Y4N2E5NzdjZGI2MGQ1MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsjyqMZzlSbJ+RrTPJIL/xJmN3YDXYMDk4noAPojVvvt2F 7Ddvqcvk5YNBaN0rDmUeQ0fiwIFGskG/0fWZcpqVnIDmacGlLmq80uEHb7BL6dAc 9xxrs2ASb9SA3de+J+gNfsZFB9kDVORjdNCkaPMFTMh4G4LuY5eKdpPWv5Eo1Txa MMqKLuxavkSmqkSOh8pXcxbR/nWfQFpLrL+JSISSBhgdUzP2D7E/Ju2qQyTW2dNQ +oL0A3gvxFYBGysArh1uERFvxP6W8VSXzpVZjMM6dYgBdHSal877M7AOUPjD0nuP ZhHwWuD6j3OsXWl5Uw7M1HA91Jng3KMz8GE9M0qxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU6WzBoKzpvu9E/WeQ0ARjjQUGx1EwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzU1Mjk2MDRiLTQxNjQtNGE5OS05OGEyLWVlOGNhZGEzMDIyOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAJAAOIAwDQYJKoZIhvcNAQELBQADggEBAJRncGXyAar8pObA3JT/dja2 ui0bWvGf3Io/uTMve/8WF2D00bsAxg/zGfiSPrgi7nxuHcr6eUvzN1eQYBYB0bSS j+0ycFWpg1jeddSBTAcWJOm6hEvG9ZGxlLqqclXLRq5i4PzePOID0/Z91TH7SVXs AVj5n2Fmj3IP7tGeYPAuPSOqZG3cVlW+OFb3+2XXtevLRmYCq0OmnF1/0g98FZFA 1J6JFgqaN5HZV+0IL68QjEmveJnzv4nuzBHHAtJDpJyVq7PA8rFhzUQ4UDaSL5es dDxTd8DjJbU9Lj/K+x2hMwQ2I3w7rOIEnsQCJdB/a1ju3VgYoQvfb27tvBXxQTg= -----END CERTIFICATE-----Generated at Sun Mar 1 22:20:37 2026 by rpki-client