$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5c7073cc-cabc-4a1a-b8aa-fad0cbf482d8.roa File: 5c7073cc-cabc-4a1a-b8aa-fad0cbf482d8.roa (raw, json) Hash identifier: aW/Ym+DTn0XL+9WWtDfSmCR0BJ5pnBOByt0Gp4dO8S4= Subject key identifier: 20:54:EF:1A:3B:EE:B4:0D:DF:72:9F:4F:F5:66:B9:F6:0D:CE:38:04 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 53822FDF20B906678D11ACEDD46982DDBB6D66C6 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5c7073cc-cabc-4a1a-b8aa-fad0cbf482d8.roa Signing time: Fri 20 Feb 2026 00:40:06 +0000 ROA not before: Fri 20 Feb 2026 00:40:06 +0000 ROA not after: Thu 21 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 216.137.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:82:2f:df:20:b9:06:67:8d:11:ac:ed:d4:69:82:dd:bb:6d:66:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Feb 20 00:40:06 2026 GMT Not After : May 21 23:59:59 2026 GMT Subject: serialNumber=bfc7e97f032b51fb6cb8064026c837eb3efdb7a109c1b4af75b3227d46753027, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:36:2b:c2:29:bc:eb:0b:36:28:4b:2f:46:28: 0b:9f:96:b2:ce:7a:97:32:2b:c1:55:8d:0d:40:87: ae:d4:42:5a:3c:23:f9:f8:bb:12:2f:10:83:03:16: 7d:75:d7:39:97:f0:11:88:0c:91:6e:0c:c7:74:fc: b3:a7:d0:6f:38:5d:e9:07:d5:a5:49:ff:59:bc:66: c6:ba:1c:f6:c0:f8:b6:dc:0b:28:12:31:f8:66:23: 38:22:4f:d0:d4:10:85:cb:5c:4d:50:3c:10:34:6e: 6b:0c:f0:01:3f:ef:98:51:30:17:46:0c:b0:f0:7e: 24:67:b4:eb:20:62:d7:57:8d:b4:58:67:32:4a:43: d2:68:36:35:75:b4:1f:d6:2f:58:a2:bf:27:24:c3: 36:9a:91:63:0e:ea:36:14:df:14:d3:db:74:74:14: fe:75:4b:b2:61:9c:81:d9:24:06:37:ef:95:b4:5a: 6d:54:94:55:94:21:c4:0e:a6:17:cc:4e:88:1e:12: e7:f3:6d:13:45:91:82:77:f9:4d:de:c9:4a:00:85: 3f:bd:0b:dc:7b:99:a0:72:d7:c7:54:ed:8a:b7:ac: 5c:32:8a:b4:de:19:34:26:7b:94:c3:79:2c:63:f3: 1e:4d:e7:9a:06:4b:a5:36:8a:ae:bc:b0:b0:14:e2: 12:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:54:EF:1A:3B:EE:B4:0D:DF:72:9F:4F:F5:66:B9:F6:0D:CE:38:04 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5c7073cc-cabc-4a1a-b8aa-fad0cbf482d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.137.32.0/21 Signature Algorithm: sha256WithRSAEncryption 6f:7d:b1:e5:62:d7:a1:de:bf:c3:5b:10:6d:1e:3e:9b:ef:aa: 59:70:87:3c:dd:7e:06:6c:05:15:fe:f1:d8:3d:2f:55:63:96: d8:16:b4:06:3d:aa:72:4f:d6:c2:2f:1d:26:7e:50:ad:50:75: d4:b3:4b:55:10:da:35:82:cc:1b:66:72:3b:74:38:05:6a:f0: 21:08:25:55:2c:59:4d:3a:94:a6:00:9d:a1:f7:f4:85:f3:bd: 89:69:75:34:63:7c:c9:f7:1c:7d:d5:03:6b:de:ee:a9:36:2c: c6:b3:c9:3a:0f:92:86:10:ae:7c:cd:7e:dc:8e:81:c6:26:c8: 6e:71:12:74:2d:7c:af:e6:3d:99:1a:7d:e2:13:4c:2e:d3:dd: 00:62:1e:e3:ae:db:e4:93:78:8c:96:20:d5:2b:64:2b:ed:f2: fa:fe:29:d6:a2:09:9d:bb:ad:1b:3a:cf:d7:bd:2a:dc:e1:77: c8:5e:86:b1:c3:cd:aa:29:39:8b:11:69:5c:41:4a:cb:41:71: d1:3d:05:d2:59:68:e2:b0:89:56:57:69:d9:51:a7:09:15:16: 29:54:f2:09:22:61:29:06:36:41:7e:d6:74:9c:99:ab:13:53: 70:fd:55:66:09:cd:ba:70:6b:f0:b2:7b:a2:30:50:d8:bc:eb: 43:b6:56:a3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUU4Iv3yC5BmeNEazt1GmC3bttZsYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjIwMDA0MDA2WhcNMjYwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiZmM3ZTk3ZjAzMmI1MWZiNmNiODA2NDAyNmM4MzdlYjNl ZmRiN2ExMDljMWI0YWY3NWIzMjI3ZDQ2NzUzMDI3MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7NivCKbzrCzYoSy9GKAuflrLOepcyK8FVjQ1Ah67UQlo8 I/n4uxIvEIMDFn111zmX8BGIDJFuDMd0/LOn0G84XekH1aVJ/1m8Zsa6HPbA+Lbc CygSMfhmIzgiT9DUEIXLXE1QPBA0bmsM8AE/75hRMBdGDLDwfiRntOsgYtdXjbRY ZzJKQ9JoNjV1tB/WL1iivyckwzaakWMO6jYU3xTT23R0FP51S7JhnIHZJAY375W0 Wm1UlFWUIcQOphfMTogeEufzbRNFkYJ3+U3eyUoAhT+9C9x7maBy18dU7Yq3rFwy irTeGTQme5TDeSxj8x5N55oGS6U2iq68sLAU4hLzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUIFTvGjvutA3fcp9P9Wa59g3OOAQwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzVjNzA3M2NjLWNhYmMtNGExYS1iOGFhLWZhZDBjYmY0ODJkOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPYiSAwDQYJKoZIhvcNAQELBQADggEBAG99seVi16Hev8NbEG0ePpvvqllw hzzdfgZsBRX+8dg9L1VjltgWtAY9qnJP1sIvHSZ+UK1QddSzS1UQ2jWCzBtmcjt0 OAVq8CEIJVUsWU06lKYAnaH39IXzvYlpdTRjfMn3HH3VA2ve7qk2LMazyToPkoYQ rnzNftyOgcYmyG5xEnQtfK/mPZkafeITTC7T3QBiHuOu2+STeIyWINUrZCvt8vr+ KdaiCZ27rRs6z9e9Ktzhd8hehrHDzaopOYsRaVxBSstBcdE9BdJZaOKwiVZXadlR pwkVFilU8gkiYSkGNkF+1nScmasTU3D9VWYJzbpwa/Cye6IwUNi860O2VqM= -----END CERTIFICATE-----Generated at Mon Mar 2 00:06:58 2026 by rpki-client