$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8b8f38fc-3dae-42ba-94e4-d10993e2848b.roa File: 8b8f38fc-3dae-42ba-94e4-d10993e2848b.roa (raw, json) Hash identifier: PRr8DiK/U4ysjsESSSkt0t+nM3q9kh0E1Oq9JbRLqH8= Subject key identifier: 8F:F4:17:E3:FA:90:95:31:1A:8C:5B:36:F1:99:59:40:C1:2B:81:4F Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 72EF9816893E6F93BA9541F0FFBC5FF728FFB1BA Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8b8f38fc-3dae-42ba-94e4-d10993e2848b.roa Signing time: Fri 13 Feb 2026 14:01:23 +0000 ROA not before: Fri 13 Feb 2026 14:01:23 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3eb0::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:ef:98:16:89:3e:6f:93:ba:95:41:f0:ff:bc:5f:f7:28:ff:b1:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Feb 13 14:01:23 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=0cdc34194ee91e7172b5537afb31505c121e9b4cc524baaca6706a1f6aa7caad, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:30:45:bf:d5:7f:6a:5b:f6:ef:f9:c8:e1:7d: d5:1a:b3:da:e4:fd:de:3b:d5:2f:99:8e:74:3e:50: b2:5a:47:0a:6a:42:b6:ab:01:0c:39:65:40:b1:5c: da:b7:fe:28:e6:9d:9c:35:e0:e2:0f:03:1b:c5:2c: 39:2f:f5:2d:79:0d:da:8f:14:6a:07:2c:ae:4b:73: e6:79:c8:85:59:6f:fa:1a:d6:5a:5d:e1:62:77:2f: dc:ea:7b:dc:80:69:5f:be:d7:19:bb:48:20:a2:e3: 95:e0:f6:ce:2a:bd:56:72:d8:30:7d:19:84:25:0a: 03:99:8c:6f:ce:90:27:47:66:5a:5e:ad:63:0d:b9: 77:b6:46:db:53:1a:e3:3b:2b:f8:1c:56:93:e8:31: 42:cd:a1:dc:16:98:08:d4:37:f8:38:79:d6:04:ad: 77:ed:4a:c1:58:c1:7c:cd:7c:c0:e0:f6:52:ba:9a: 68:18:86:19:89:ee:78:be:dd:58:9e:b2:9d:2f:a0: f3:d2:02:8d:f6:59:f2:63:3c:e1:01:bd:ca:1e:95: d6:f3:fb:cf:f6:b5:96:28:57:ea:e8:90:d3:cb:fa: be:ad:fb:9e:86:0e:5e:b8:64:82:1f:c0:c2:12:a8: 3c:66:88:c3:56:fc:c0:62:34:54:cc:f6:73:2d:54: fa:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F4:17:E3:FA:90:95:31:1A:8C:5B:36:F1:99:59:40:C1:2B:81:4F X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8b8f38fc-3dae-42ba-94e4-d10993e2848b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3eb0::/45 Signature Algorithm: sha256WithRSAEncryption 23:d8:04:04:23:de:44:3a:40:41:79:5e:cc:c3:a2:9e:3c:53: fc:54:62:7e:c8:7b:6d:31:88:f5:dd:44:81:57:fb:55:2f:55: d0:25:09:ea:06:74:b5:1d:47:fd:9b:0b:17:a7:74:05:30:51: 1e:f5:c7:db:52:0c:8c:01:44:f4:e7:96:00:b5:5b:7a:87:11: ab:f5:a4:ab:e4:66:93:d8:c3:f0:78:91:9c:67:79:58:9f:7a: 01:86:3f:4a:43:24:9b:02:e3:6f:68:24:53:fe:45:bd:de:e2: 99:80:97:5a:5f:3f:8e:a8:37:67:a0:16:54:e1:8e:c7:70:7b: 75:0e:b9:ba:a8:b4:5c:8d:c7:48:0a:09:82:df:24:ee:a1:b2: b2:a5:8a:f7:04:52:fe:54:8e:68:a5:7e:c8:ab:1e:ab:05:42: a4:c1:69:41:b3:30:1b:77:c5:e4:a9:c8:0e:68:1e:c3:ba:46: 80:32:e5:e0:8e:20:63:40:92:25:ec:3e:d6:30:8e:3d:ae:ad: df:9f:76:63:cf:0e:2b:19:e7:3e:d5:65:bc:73:f9:e5:34:93: 96:5b:ac:a9:23:91:fc:d6:5d:2c:20:cb:97:11:31:82:55:7c: ff:28:f1:af:b7:a0:d6:f0:68:1b:cc:5d:85:a8:5c:76:b4:18: 5b:6d:36:20 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcu+YFok+b5O6lUHw/7xf9yj/sbowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMTQwMTIzWhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwY2RjMzQxOTRlZTkxZTcxNzJiNTUzN2FmYjMxNTA1YzEy MWU5YjRjYzUyNGJhYWNhNjcwNmExZjZhYTdjYWFkMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD0MEW/1X9qW/bv+cjhfdUas9rk/d471S+ZjnQ+ULJaRwpq QrarAQw5ZUCxXNq3/ijmnZw14OIPAxvFLDkv9S15DdqPFGoHLK5Lc+Z5yIVZb/oa 1lpd4WJ3L9zqe9yAaV++1xm7SCCi45Xg9s4qvVZy2DB9GYQlCgOZjG/OkCdHZlpe rWMNuXe2RttTGuM7K/gcVpPoMULNodwWmAjUN/g4edYErXftSsFYwXzNfMDg9lK6 mmgYhhmJ7ni+3Viesp0voPPSAo32WfJjPOEBvcoeldbz+8/2tZYoV+rokNPL+r6t +56GDl64ZIIfwMISqDxmiMNW/MBiNFTM9nMtVPrDAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUj/QX4/qQlTEajFs28ZlZQMErgU8wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzhiOGYzOGZjLTNkYWUtNDJiYS05NGU0LWQxMDk5M2UyODQ4Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAAPrAwDQYJKoZIhvcNAQELBQADggEBACPYBAQj3kQ6QEF5XszDop48 U/xUYn7Ie20xiPXdRIFX+1UvVdAlCeoGdLUdR/2bCxendAUwUR71x9tSDIwBRPTn lgC1W3qHEav1pKvkZpPYw/B4kZxneVifegGGP0pDJJsC429oJFP+Rb3e4pmAl1pf P46oN2egFlThjsdwe3UOubqotFyNx0gKCYLfJO6hsrKlivcEUv5UjmilfsirHqsF QqTBaUGzMBt3xeSpyA5oHsO6RoAy5eCOIGNAkiXsPtYwjj2urd+fdmPPDisZ5z7V Zbxz+eU0k5ZbrKkjkfzWXSwgy5cRMYJVfP8o8a+3oNbwaBvMXYWoXHa0GFttNiA= -----END CERTIFICATE-----Generated at Sun Mar 1 23:53:05 2026 by rpki-client