$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/769a94c8-6e59-49fa-8aff-49e4406b7578.roa File: 769a94c8-6e59-49fa-8aff-49e4406b7578.roa (raw, json) Hash identifier: ifi63u8nIi/seLbAQmRv9GnfOsB5xC7UVwX4bsWwLcI= Subject key identifier: 13:09:AA:15:79:73:11:7D:7C:47:D9:E7:4A:CC:3F:40:A3:97:06:5D Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 40643295AE967F0DCC0CE1F2D0E88D07A6B4A2D7 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/769a94c8-6e59-49fa-8aff-49e4406b7578.roa Signing time: Fri 13 Feb 2026 12:21:31 +0000 ROA not before: Fri 13 Feb 2026 12:21:31 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:291c::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:64:32:95:ae:96:7f:0d:cc:0c:e1:f2:d0:e8:8d:07:a6:b4:a2:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Feb 13 12:21:31 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=bf39c737984fd0912ed8ee8f104be444aab35844df9ce45403798c58da8b90ac, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:da:6f:d6:a9:ac:92:98:5b:1e:c7:83:24:71: 99:61:e2:8a:35:27:7c:35:e6:3d:de:f3:cc:02:04: 68:2e:d0:14:38:94:d4:f1:d9:0d:8f:49:16:0a:2f: b4:af:95:82:d7:98:53:97:6b:e2:2a:69:8c:32:74: 19:8d:bc:95:42:05:fc:6f:25:fb:47:7c:0d:27:76: c3:c8:a8:ed:6f:38:23:c3:c8:81:6f:9c:48:ca:1b: 6c:fa:77:de:f2:c3:58:f1:e9:b6:7d:72:29:12:5d: 8c:9c:cd:43:11:28:e8:c8:12:2c:81:67:05:26:8b: ef:13:75:76:27:76:7c:85:83:d3:24:72:d4:f7:df: 5f:8f:34:1b:ee:8c:e8:18:29:3a:a4:aa:f4:26:8c: b6:d6:9a:31:89:3e:37:ed:26:5f:e6:64:96:67:50: 5c:78:da:f5:3b:1c:04:6f:d6:0c:91:6f:39:e8:b6: 16:9b:60:99:19:5f:ce:4d:2f:a9:7c:31:d3:69:81: c3:9d:b4:d9:2d:20:3c:b4:bc:00:15:d0:4f:9d:7d: 1b:bd:b8:69:09:ec:9b:81:05:5b:7b:e0:a7:c2:be: 6f:54:c1:4d:8d:a4:2f:f7:26:ce:e7:f8:cd:b6:0c: 3f:57:b8:3b:15:e3:e7:58:84:b5:01:a2:0c:8a:ea: df:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:09:AA:15:79:73:11:7D:7C:47:D9:E7:4A:CC:3F:40:A3:97:06:5D X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/769a94c8-6e59-49fa-8aff-49e4406b7578.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:291c::/46 Signature Algorithm: sha256WithRSAEncryption a4:a5:d3:80:e4:ae:9d:3c:6b:0e:d6:9c:0a:b7:23:7c:32:99: 17:a2:88:41:74:38:6d:3b:21:0f:24:f1:ea:0c:3c:67:62:ef: 3f:0e:0d:2f:41:0e:b4:00:8a:08:81:92:7a:98:47:1d:88:8a: ad:92:60:cb:fc:57:9f:01:93:e8:bc:af:db:7a:d4:e9:b1:48: 3c:44:e2:05:d9:d2:cc:76:29:ba:20:a7:89:55:84:69:b4:ff: 27:12:61:ca:bb:e7:94:49:4a:f0:8e:46:1f:eb:4a:04:e2:6b: ce:cb:fe:fe:b0:46:2f:86:b3:eb:69:85:cb:c8:84:a9:02:78: 90:57:49:50:3d:97:14:cc:73:3c:9d:c9:a8:81:ac:2a:cf:9b: 3f:de:14:73:60:67:e3:ea:7e:fb:b1:0f:28:00:aa:52:f1:e3: bf:b6:06:94:0a:2d:f4:54:27:ec:12:29:02:30:1c:e3:1e:5b: 49:ba:62:f1:d9:90:c9:f1:c0:07:fa:0c:56:06:40:37:d2:e6: 91:09:a8:d3:43:8d:99:1d:dc:f6:59:9c:da:4b:0e:ed:ad:5d: 0b:8d:67:84:7f:fa:dc:6a:0b:d5:12:33:ae:b9:d3:9b:7e:f1: 71:12:b8:fe:6d:90:04:99:80:f6:5b:49:f3:16:46:22:37:d9: fd:63:64:b0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQGQyla6Wfw3MDOHy0OiNB6a0otcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMTIyMTMxWhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZjM5YzczNzk4NGZkMDkxMmVkOGVlOGYxMDRiZTQ0NGFh YjM1ODQ0ZGY5Y2U0NTQwMzc5OGM1OGRhOGI5MGFjMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDA2m/WqaySmFsex4MkcZlh4oo1J3w15j3e88wCBGgu0BQ4 lNTx2Q2PSRYKL7SvlYLXmFOXa+IqaYwydBmNvJVCBfxvJftHfA0ndsPIqO1vOCPD yIFvnEjKG2z6d97yw1jx6bZ9cikSXYyczUMRKOjIEiyBZwUmi+8TdXYndnyFg9Mk ctT331+PNBvujOgYKTqkqvQmjLbWmjGJPjftJl/mZJZnUFx42vU7HARv1gyRbzno thabYJkZX85NL6l8MdNpgcOdtNktIDy0vAAV0E+dfRu9uGkJ7JuBBVt74KfCvm9U wU2NpC/3Js7n+M22DD9XuDsV4+dYhLUBogyK6t/FAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUEwmqFXlzEX18R9nnSsw/QKOXBl0wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1Lzc2OWE5NGM4LTZlNTktNDlmYS04YWZmLTQ5ZTQ0MDZiNzU3OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAKRwwDQYJKoZIhvcNAQELBQADggEBAKSl04Dkrp08aw7WnAq3I3wy mReiiEF0OG07IQ8k8eoMPGdi7z8ODS9BDrQAigiBknqYRx2Iiq2SYMv8V58Bk+i8 r9t61OmxSDxE4gXZ0sx2Kbogp4lVhGm0/ycSYcq755RJSvCORh/rSgTia87L/v6w Ri+Gs+tphcvIhKkCeJBXSVA9lxTMczydyaiBrCrPmz/eFHNgZ+PqfvuxDygAqlLx 47+2BpQKLfRUJ+wSKQIwHOMeW0m6YvHZkMnxwAf6DFYGQDfS5pEJqNNDjZkd3PZZ nNpLDu2tXQuNZ4R/+txqC9USM66505t+8XESuP5tkASZgPZbSfMWRiI32f1jZLA= -----END CERTIFICATE-----Generated at Mon Mar 2 03:45:23 2026 by rpki-client