$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6630d050-296a-40e5-b1fa-fcd590ff8eca.roa File: 6630d050-296a-40e5-b1fa-fcd590ff8eca.roa (raw, json) Hash identifier: k4hVBes1YrHb+GjM0xcmBazTgFcMrInMX8QLxYHn634= Subject key identifier: 13:08:12:7B:DE:04:1F:E2:01:58:9C:FE:73:52:56:B6:78:80:40:B6 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 5A2C1956D0654A0E95CA114954B879B62FF191A7 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6630d050-296a-40e5-b1fa-fcd590ff8eca.roa Signing time: Fri 13 Feb 2026 12:40:54 +0000 ROA not before: Fri 13 Feb 2026 12:40:54 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3528::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:2c:19:56:d0:65:4a:0e:95:ca:11:49:54:b8:79:b6:2f:f1:91:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Feb 13 12:40:54 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=59253ba9e61a5ae281c595804a2cf12815b69c5dc7df9f8c1c2435e68b679b90, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:39:6e:be:fe:1e:0c:f3:c2:6e:d9:8f:95:7a: e6:37:06:71:c3:40:a7:8f:11:b9:bc:6d:95:4d:7a: 3a:75:8c:53:27:06:bd:46:e8:95:f5:15:58:d3:9c: 19:ba:7d:22:33:17:ee:8e:96:4f:fb:55:90:73:f8: c0:94:2e:40:fb:09:94:46:b5:dc:cb:b8:ca:62:f1: 44:82:98:70:83:27:bb:70:60:da:34:17:00:65:9c: ab:8c:05:e2:af:a0:4a:0e:e8:fa:70:a7:50:95:27: 56:c1:d2:77:fb:1a:f8:64:cd:4b:a3:81:34:72:fc: b4:ef:1f:8a:70:68:dc:c2:fc:f9:5c:6c:21:6e:59: 8c:2c:d0:74:4d:dc:d5:9b:3b:d0:29:d9:2d:f3:2e: 17:fe:23:a5:f8:fa:4a:c9:d6:9f:10:3d:52:a5:ff: ff:8e:c0:81:13:f7:3b:28:5d:95:ad:f9:fe:b1:4b: 37:a9:b7:76:97:6a:7d:bb:b4:20:5d:15:02:27:63: 8a:37:fa:43:58:a1:0f:cb:95:8b:14:90:7c:e4:29: c3:71:af:e5:e0:80:f0:3e:20:4b:0a:a1:69:0f:b9: 63:3b:5e:59:05:d6:19:a3:10:9b:63:9b:42:40:c5: 64:d7:e5:3f:b0:d4:32:6a:6b:58:5a:71:6a:b5:9e: a9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:08:12:7B:DE:04:1F:E2:01:58:9C:FE:73:52:56:B6:78:80:40:B6 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6630d050-296a-40e5-b1fa-fcd590ff8eca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3528::/46 Signature Algorithm: sha256WithRSAEncryption 2d:0b:e1:01:e1:7b:98:f5:ee:95:8b:05:8a:54:4a:20:61:0f: 20:a0:79:37:3c:88:20:cd:3d:f5:b2:7b:61:db:8c:9b:a1:88: 74:9e:17:87:0c:62:4e:e6:60:c8:1f:0a:27:f7:5e:71:63:78: 8f:d9:ba:bd:6e:0e:98:66:94:b2:4a:91:29:15:a1:2d:dd:f3: fc:c4:0f:df:ab:4a:ce:2d:ae:19:cc:4d:81:6f:9f:46:c9:39: c2:65:4b:be:3a:62:5f:e6:68:91:c6:c0:d2:c0:b3:55:f9:21: 25:2b:ad:41:85:01:a6:54:a4:95:50:cc:ec:83:5b:e5:c3:53: e1:65:13:55:ee:7c:79:5b:e4:90:af:8f:30:c0:c7:55:5f:c7: 8a:a3:c0:be:71:79:d7:75:84:05:9c:de:0c:00:fa:5c:2b:7f: 0a:38:55:3f:b9:4b:cb:bb:39:53:d4:4b:2d:6d:91:0f:5b:9f: 30:f9:ab:4b:18:e0:1e:5d:8b:74:74:33:bb:1f:1c:0e:3d:b9: 9d:4b:49:74:09:03:37:3b:aa:95:87:11:37:c6:06:5c:bf:f8: 74:d9:ad:2d:dc:08:d0:bd:4e:30:24:c3:ed:01:59:18:c9:86: 85:49:89:86:8d:96:8c:0d:0a:b1:bf:f2:cb:8a:ab:7c:e9:1a: d4:27:3c:19 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWiwZVtBlSg6VyhFJVLh5ti/xkacwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMTI0MDU0WhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A1OTI1M2JhOWU2MWE1YWUyODFjNTk1ODA0YTJjZjEyODE1 YjY5YzVkYzdkZjlmOGMxYzI0MzVlNjhiNjc5YjkwMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChOW6+/h4M88Ju2Y+VeuY3BnHDQKePEbm8bZVNejp1jFMn Br1G6JX1FVjTnBm6fSIzF+6Olk/7VZBz+MCULkD7CZRGtdzLuMpi8USCmHCDJ7tw YNo0FwBlnKuMBeKvoEoO6Ppwp1CVJ1bB0nf7GvhkzUujgTRy/LTvH4pwaNzC/Plc bCFuWYws0HRN3NWbO9Ap2S3zLhf+I6X4+krJ1p8QPVKl//+OwIET9zsoXZWt+f6x Szept3aXan27tCBdFQInY4o3+kNYoQ/LlYsUkHzkKcNxr+XggPA+IEsKoWkPuWM7 XlkF1hmjEJtjm0JAxWTX5T+w1DJqa1hacWq1nqnTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUEwgSe94EH+IBWJz+c1JWtniAQLYwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzY2MzBkMDUwLTI5NmEtNDBlNS1iMWZhLWZjZDU5MGZmOGVjYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAANSgwDQYJKoZIhvcNAQELBQADggEBAC0L4QHhe5j17pWLBYpUSiBh DyCgeTc8iCDNPfWye2HbjJuhiHSeF4cMYk7mYMgfCif3XnFjeI/Zur1uDphmlLJK kSkVoS3d8/zED9+rSs4trhnMTYFvn0bJOcJlS746Yl/maJHGwNLAs1X5ISUrrUGF AaZUpJVQzOyDW+XDU+FlE1XufHlb5JCvjzDAx1Vfx4qjwL5xedd1hAWc3gwA+lwr fwo4VT+5S8u7OVPUSy1tkQ9bnzD5q0sY4B5di3R0M7sfHA49uZ1LSXQJAzc7qpWH ETfGBly/+HTZrS3cCNC9TjAkw+0BWRjJhoVJiYaNlowNCrG/8suKq3zpGtQnPBk= -----END CERTIFICATE-----Generated at Mon Mar 2 00:10:45 2026 by rpki-client