$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5c1e43c0-8847-4c65-a473-4366b08b9489.roa File: 5c1e43c0-8847-4c65-a473-4366b08b9489.roa (raw, json) Hash identifier: RjocTTVyJe+GXqJe1o98BriQ4hUJIvqDxlDiHMUZbTk= Subject key identifier: 80:19:A1:10:49:9C:C1:CE:EB:75:53:27:1C:E3:F3:37:38:18:3A:18 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 219FFF08C52D602DBF81357515006999DCA75AF7 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5c1e43c0-8847-4c65-a473-4366b08b9489.roa Signing time: Fri 13 Feb 2026 06:10:51 +0000 ROA not before: Fri 13 Feb 2026 06:10:51 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3fe6::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:9f:ff:08:c5:2d:60:2d:bf:81:35:75:15:00:69:99:dc:a7:5a:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Feb 13 06:10:51 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=bf06af1f965ab14e6956c8cd984d99947fc2860ac0be9f5b72859ef299a07d81, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:01:f9:8d:e0:fe:dc:28:27:5f:9d:41:1c:90: 88:a1:55:93:bc:40:b2:b7:5d:ac:2d:74:88:dc:48: 81:e2:8e:5d:19:6e:85:47:85:d7:67:91:74:9f:46: 6e:f5:de:63:a0:ab:f4:39:0f:dc:ff:bf:25:d8:66: 34:4a:81:3d:6e:0b:1a:31:48:35:6d:c8:de:1d:25: 62:ad:ff:98:46:2e:bb:e2:4d:8f:05:b2:65:f6:b0: 59:30:5f:08:a3:db:f2:69:61:9c:d9:69:ee:8c:eb: ea:50:19:02:5c:f7:05:24:07:9d:0a:76:39:30:b3: 7a:fd:39:71:15:49:a7:f4:f7:ac:d4:99:ca:02:f7: 78:65:45:30:c8:ce:bc:fa:1d:e1:6c:7c:df:87:a6: 3a:56:77:f4:d7:cd:60:f5:e5:b4:c0:9f:a0:28:c7: b0:08:30:f0:75:b3:20:2e:1a:0f:12:b4:c5:55:31: cb:04:3b:42:1e:e9:9a:21:a4:44:75:b6:2e:b0:63: 8f:93:56:17:cd:7e:e8:0c:39:d4:c0:ac:1b:a5:af: 7a:3e:0c:70:ad:05:26:c1:e0:e7:fa:cd:b1:79:f6: af:f1:58:13:82:c7:13:59:b6:63:3b:76:e5:a9:c8: f9:47:02:ec:38:df:e8:fe:ec:78:1a:2b:0a:6e:5d: 4f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:19:A1:10:49:9C:C1:CE:EB:75:53:27:1C:E3:F3:37:38:18:3A:18 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5c1e43c0-8847-4c65-a473-4366b08b9489.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3fe6::/47 Signature Algorithm: sha256WithRSAEncryption 58:5b:75:a5:d6:59:a9:60:d9:6c:c1:26:b2:c7:09:df:7c:c5: 05:44:1d:cd:27:7c:4e:0a:ad:a4:a4:4d:0f:38:ee:e1:e5:ff: 41:5b:ab:1c:f3:e1:63:4f:a0:3e:3f:5e:12:6f:f4:bd:5b:88: 74:26:91:69:4e:22:df:be:60:bb:f9:d1:93:76:09:76:6b:87: db:37:f0:73:af:eb:a6:a4:42:c2:c9:bd:cc:ce:95:af:0b:37: 23:97:f8:e7:39:51:5d:f8:09:85:91:33:5e:c3:62:96:10:e1: 05:68:ee:63:92:dc:8e:d9:28:d4:ac:ee:f8:0e:71:05:b7:4a: 3a:f7:45:a2:5a:84:ae:ed:d4:31:1a:20:d4:a5:68:48:b5:88: c8:3c:84:03:43:d0:54:fb:cf:de:d4:04:c9:89:12:be:95:76: d8:89:e2:bb:26:86:0e:89:8d:7f:d7:a4:ee:d9:51:f0:1b:5d: 8b:dd:f1:b1:ff:51:46:00:a9:81:b6:90:c3:d0:dc:7f:6c:d7: 19:e9:90:d1:35:8d:78:80:81:3c:da:fe:4f:a2:42:8c:65:96: ec:7c:ab:91:75:bf:05:69:7a:15:e2:fa:15:92:9a:0c:83:55: dd:18:f2:47:4d:c2:ae:f4:17:cb:39:15:21:2a:a3:42:49:76: 02:f8:7d:c7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUIZ//CMUtYC2/gTV1FQBpmdynWvcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMDYxMDUxWhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZjA2YWYxZjk2NWFiMTRlNjk1NmM4Y2Q5ODRkOTk5NDdm YzI4NjBhYzBiZTlmNWI3Mjg1OWVmMjk5YTA3ZDgxMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0AfmN4P7cKCdfnUEckIihVZO8QLK3XawtdIjcSIHijl0Z boVHhddnkXSfRm713mOgq/Q5D9z/vyXYZjRKgT1uCxoxSDVtyN4dJWKt/5hGLrvi TY8FsmX2sFkwXwij2/JpYZzZae6M6+pQGQJc9wUkB50Kdjkws3r9OXEVSaf096zU mcoC93hlRTDIzrz6HeFsfN+HpjpWd/TXzWD15bTAn6Aox7AIMPB1syAuGg8StMVV McsEO0Ie6ZohpER1ti6wY4+TVhfNfugMOdTArBulr3o+DHCtBSbB4Of6zbF59q/x WBOCxxNZtmM7duWpyPlHAuw43+j+7HgaKwpuXU/7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUgBmhEEmcwc7rdVMnHOPzNzgYOhgwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzVjMWU0M2MwLTg4NDctNGM2NS1hNDczLTQzNjZiMDhiOTQ4OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAP+YwDQYJKoZIhvcNAQELBQADggEBAFhbdaXWWalg2WzBJrLHCd98 xQVEHc0nfE4KraSkTQ847uHl/0Fbqxzz4WNPoD4/XhJv9L1biHQmkWlOIt++YLv5 0ZN2CXZrh9s38HOv66akQsLJvczOla8LNyOX+Oc5UV34CYWRM17DYpYQ4QVo7mOS 3I7ZKNSs7vgOcQW3Sjr3RaJahK7t1DEaINSlaEi1iMg8hAND0FT7z97UBMmJEr6V dtiJ4rsmhg6JjX/XpO7ZUfAbXYvd8bH/UUYAqYG2kMPQ3H9s1xnpkNE1jXiAgTza /k+iQoxllux8q5F1vwVpehXi+hWSmgyDVd0Y8kdNwq70F8s5FSEqo0JJdgL4fcc= -----END CERTIFICATE-----Generated at Sun Mar 1 22:23:32 2026 by rpki-client