$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8a068e60-8471-42a0-afe3-22d5cdf00b01.roa File: 8a068e60-8471-42a0-afe3-22d5cdf00b01.roa (raw, json) Hash identifier: iC93EQzTAuJAPDUZPN6CY5abVVKsHwMYaJAgdHsiOVI= Subject key identifier: D5:EB:C1:58:49:91:17:D9:D2:C4:60:1F:D9:ED:55:23:94:B4:EE:D9 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 3A2097C0A2293FCB307F523DA8D2E146721E97A6 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8a068e60-8471-42a0-afe3-22d5cdf00b01.roa Signing time: Fri 13 Feb 2026 08:51:54 +0000 ROA not before: Fri 13 Feb 2026 08:51:54 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2d10::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:20:97:c0:a2:29:3f:cb:30:7f:52:3d:a8:d2:e1:46:72:1e:97:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Feb 13 08:51:54 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=341a71d3454e9d1eee08c28a5043eb0f15a23fd880fa3579ba60b726db08cc1c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3f:e3:8a:85:d5:45:2c:c9:6c:3f:58:27:0d: db:04:ed:91:f1:b8:d8:4f:ea:55:ea:0d:1b:12:ad: 47:ad:31:16:32:1d:28:97:2d:01:a4:36:45:af:4c: dd:62:12:78:94:0a:57:85:4a:9c:b5:c9:0a:0f:86: a3:09:96:7e:72:2e:e1:c5:98:69:f8:1b:9d:58:35: 06:80:84:bb:6a:5e:6d:26:26:25:f1:54:55:32:95: 85:30:b0:37:89:ad:f6:69:80:ee:51:99:63:b9:d5: 34:d2:d0:9e:64:57:53:e1:74:42:42:dc:a9:d7:2a: 73:e8:25:7f:7b:31:15:82:8a:5b:5c:b9:b6:06:10: 5e:ec:b8:b7:43:5f:e5:66:e8:3b:84:ef:75:e9:bf: 6c:a8:52:dd:79:25:a5:1b:ec:80:63:26:cb:05:92: 13:c4:e9:9a:55:09:60:7e:44:59:c7:87:9a:4a:e7: c6:61:ff:18:77:57:99:ac:d6:40:ac:fc:d5:a0:d4: d9:27:81:e2:0b:4c:ab:02:ac:f7:cb:fe:27:24:ea: f4:d5:92:bc:16:ca:c5:e8:67:a5:66:29:63:88:f5: 90:a5:8f:47:73:12:a5:0b:e2:8d:b7:36:0e:c6:e6: b8:ac:46:06:84:99:e3:ad:f6:7e:d5:c1:14:b3:56: d3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:EB:C1:58:49:91:17:D9:D2:C4:60:1F:D9:ED:55:23:94:B4:EE:D9 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8a068e60-8471-42a0-afe3-22d5cdf00b01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2d10::/45 Signature Algorithm: sha256WithRSAEncryption 22:05:f4:0b:1e:ba:1f:ec:c6:12:2d:e3:47:28:d5:d7:f4:50: fb:c6:23:3a:54:f6:c0:eb:9b:88:d4:1f:a0:65:fc:e3:4e:23: 58:b3:5f:86:f1:73:b7:76:01:1b:40:a1:68:dc:29:49:f1:90: 29:3d:30:ae:0d:e7:1f:7a:cb:2d:d9:c8:83:ee:60:19:45:a2: 8c:ba:8c:48:11:0b:38:10:10:10:0f:25:79:63:08:1e:a5:c9: 3b:7e:c6:e9:72:c6:c1:4c:a3:db:14:7c:fe:a6:dc:03:98:3f: 97:9b:fd:e6:bb:33:88:93:20:94:71:1b:80:33:51:f1:42:cc: 02:56:5d:c6:7c:99:ac:98:67:93:56:2c:d4:43:2a:18:66:c8: 09:11:a4:fb:75:5f:8a:27:1d:c7:bd:62:47:44:0f:76:5c:d1: be:8e:01:be:0a:d5:38:6f:7e:3a:fa:3d:ac:e5:4c:82:92:9b: cc:fd:4a:81:09:ea:9f:5c:25:db:b7:4c:33:e4:fd:10:65:f6: 2a:69:08:61:e2:7a:05:35:4f:66:26:9b:aa:02:6c:4b:e1:8f: db:a6:5d:e5:16:3b:39:43:2e:49:e7:ba:66:4b:82:bf:fa:a7: 72:90:29:04:91:ab:2f:a6:92:78:2b:75:07:54:1f:ae:df:78: e6:38:6b:28 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUOiCXwKIpP8swf1I9qNLhRnIel6YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMDg1MTU0WhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNDFhNzFkMzQ1NGU5ZDFlZWUwOGMyOGE1MDQzZWIwZjE1 YTIzZmQ4ODBmYTM1NzliYTYwYjcyNmRiMDhjYzFjMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuP+OKhdVFLMlsP1gnDdsE7ZHxuNhP6lXqDRsSrUetMRYy HSiXLQGkNkWvTN1iEniUCleFSpy1yQoPhqMJln5yLuHFmGn4G51YNQaAhLtqXm0m JiXxVFUylYUwsDeJrfZpgO5RmWO51TTS0J5kV1PhdEJC3KnXKnPoJX97MRWCiltc ubYGEF7suLdDX+Vm6DuE73Xpv2yoUt15JaUb7IBjJssFkhPE6ZpVCWB+RFnHh5pK 58Zh/xh3V5ms1kCs/NWg1NkngeILTKsCrPfL/ick6vTVkrwWysXoZ6VmKWOI9ZCl j0dzEqUL4o23Ng7G5risRgaEmeOt9n7VwRSzVtPNAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU1evBWEmRF9nSxGAf2e1VI5S07tkwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzhhMDY4ZTYwLTg0NzEtNDJhMC1hZmUzLTIyZDVjZGYwMGIwMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAALRAwDQYJKoZIhvcNAQELBQADggEBACIF9Aseuh/sxhIt40co1df0 UPvGIzpU9sDrm4jUH6Bl/ONOI1izX4bxc7d2ARtAoWjcKUnxkCk9MK4N5x96yy3Z yIPuYBlFooy6jEgRCzgQEBAPJXljCB6lyTt+xulyxsFMo9sUfP6m3AOYP5eb/ea7 M4iTIJRxG4AzUfFCzAJWXcZ8mayYZ5NWLNRDKhhmyAkRpPt1X4onHce9YkdED3Zc 0b6OAb4K1Thvfjr6PazlTIKSm8z9SoEJ6p9cJdu3TDPk/RBl9ippCGHiegU1T2Ym m6oCbEvhj9umXeUWOzlDLknnumZLgr/6p3KQKQSRqy+mkngrdQdUH67feOY4ayg= -----END CERTIFICATE-----Generated at Sun Mar 1 22:14:02 2026 by rpki-client