$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8f21b05a-1e41-4761-8000-56eb0f555516.roa File: 8f21b05a-1e41-4761-8000-56eb0f555516.roa (raw, json) Hash identifier: W5+niWWJXiwKDFCjtW8CQcyYxSaIfmdvRbISfSp1nIQ= Subject key identifier: 0E:25:09:84:7B:CB:29:24:6E:1F:E8:62:20:55:B4:73:FD:59:92:F6 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 27027718458CE04A38E00203EAC936E786D86E Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8f21b05a-1e41-4761-8000-56eb0f555516.roa Signing time: Fri 13 Feb 2026 08:00:59 +0000 ROA not before: Fri 13 Feb 2026 08:00:59 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3780::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:02:77:18:45:8c:e0:4a:38:e0:02:03:ea:c9:36:e7:86:d8:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Feb 13 08:00:59 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=828fabb44b649767f1342563072f77067865614b379635e34c0737ff42575dd6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:88:56:20:94:70:ed:ae:fd:b8:de:de:26:a6: e2:c9:b0:88:9c:5a:f5:c3:b1:19:d1:d8:d1:76:6b: 4a:5c:04:54:d5:6a:b8:9a:a4:09:2f:d4:49:c6:ec: 48:0e:82:2e:f3:c5:60:8c:e8:00:97:60:84:e2:9e: 1e:57:51:1d:3e:98:50:d1:4b:7a:49:8d:cd:7b:b5: 4e:5c:a6:40:f4:11:3a:8c:2e:d2:9b:a1:28:d5:1e: 70:c3:1a:f0:a0:64:90:e7:4c:66:7d:06:10:5a:7e: 41:2b:02:99:e4:f5:8e:a7:6f:c4:ee:90:7e:38:bf: c9:70:b0:3d:87:e6:f6:2c:31:c3:86:24:92:d7:cf: 6b:47:e9:d1:76:fb:1e:db:3b:40:31:2a:d7:94:3d: d9:84:80:e3:e7:65:e1:23:a0:f9:76:b2:76:d0:8f: cc:97:57:7a:da:0f:4f:23:43:95:86:4d:26:21:58: d7:18:4e:6d:c6:b0:a3:fa:72:0e:30:37:3a:1b:15: 40:9c:42:3b:e7:48:d0:7e:db:27:c9:e9:d5:6d:ea: 21:fa:b0:d5:81:cb:3e:17:9a:d0:6a:5b:1e:8d:f5: d9:bd:90:ee:68:47:4a:91:4f:dd:e3:8f:03:f8:04: 23:40:14:ac:b3:74:d8:8f:1e:05:e8:b9:1c:b2:79: 2f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:25:09:84:7B:CB:29:24:6E:1F:E8:62:20:55:B4:73:FD:59:92:F6 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8f21b05a-1e41-4761-8000-56eb0f555516.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3780::/45 Signature Algorithm: sha256WithRSAEncryption 83:6f:cf:3c:00:ee:a1:d3:8f:ef:a6:72:2a:42:9c:fa:29:a3: 47:1a:72:cf:5f:e1:72:0d:96:73:02:e5:f7:44:e7:df:00:f3: 0b:45:87:b1:ac:b8:65:61:5a:f4:ad:50:b5:63:1a:e6:22:0b: 55:9a:7d:34:d3:ff:fd:2c:43:56:96:0e:97:9f:50:c0:0f:46: d5:54:96:36:dd:5c:a8:98:6a:c8:d2:3d:bb:b8:a6:a2:ac:88: 5b:19:5d:ee:89:eb:56:89:a3:15:76:33:f4:71:30:62:d9:e0: e8:fc:8a:47:19:33:42:6e:35:c8:3a:b2:dd:30:47:90:c0:24: 1d:61:2f:cd:fe:12:bc:bb:d8:80:81:ac:70:ce:ed:2d:a6:12: 40:03:12:53:d5:07:20:c6:18:33:d2:47:f2:ce:78:26:04:48: 5b:8e:1f:81:05:4a:b0:d6:ef:10:af:4c:3a:5d:ea:79:14:d7: 99:77:ec:fc:6c:d3:30:ef:21:f9:af:f0:19:12:40:02:53:aa: 88:58:24:cf:fa:9e:49:fa:b1:f1:d0:31:eb:99:fe:10:9f:c9: 75:1e:90:96:78:c4:df:d5:b8:11:73:27:74:49:99:60:34:5c: 56:49:0a:91:39:f4:30:3c:35:ad:97:64:8d:e3:f8:e9:29:63: 49:fe:4a:66 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgITJwJ3GEWM4Eo44AID6sk254bYbjANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI1NTEyMDkwMjdmNWU3YWQ1NGUwNGYwNDJlNGFjMGU5ZTY1 YzU2ZTU1Yzc3NDc4ZDJjZTAeFw0yNjAyMTMwODAwNTlaFw0yNjA1MTQyMzU5NTla MHoxSTBHBgNVBAUTQDgyOGZhYmI0NGI2NDk3NjdmMTM0MjU2MzA3MmY3NzA2Nzg2 NTYxNGIzNzk2MzVlMzRjMDczN2ZmNDI1NzVkZDYxLTArBgNVBAMTJDlmMjMwZmE5 LWFhMmYtNDAyMC1hZTJhLTFhNjAzNzQwODRiODCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAMCIViCUcO2u/bje3iam4smwiJxa9cOxGdHY0XZrSlwEVNVq uJqkCS/UScbsSA6CLvPFYIzoAJdghOKeHldRHT6YUNFLekmNzXu1TlymQPQROowu 0puhKNUecMMa8KBkkOdMZn0GEFp+QSsCmeT1jqdvxO6Qfji/yXCwPYfm9iwxw4Yk ktfPa0fp0Xb7Hts7QDEq15Q92YSA4+dl4SOg+XaydtCPzJdXetoPTyNDlYZNJiFY 1xhObcawo/pyDjA3OhsVQJxCO+dI0H7bJ8np1W3qIfqw1YHLPhea0GpbHo312b2Q 7mhHSpFP3eOPA/gEI0AUrLN02I8eBei5HLJ5L90CAwEAAaOCArQwggKwMB0GA1Ud DgQWBBQOJQmEe8spJG4f6GIgVbRz/VmS9jAfBgNVHSMEGDAWgBTo88Ug4g7yXTq3 oha7FAQxajc48TAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv ZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzk5ZjhmZWQyLTI5 MmItNDcyMi1iOTI4LWZlZTdiZjBhNTkxMC81NTEyMDkwMjdmNWU3YWQ1NGUwNGYw NDJlNGFjMGU5ZTY1YzU2ZTU1Yzc3NDc4ZDJjZS5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9lNzUxOGFmNS1hMzQzLTQyOGQtYmY3OC1mOTgy YjZlNjA1MDUvOGYyMWIwNWEtMWU0MS00NzYxLTgwMDAtNTZlYjBmNTU1NTE2LnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgt Zjk4MmI2ZTYwNTA1L1huclZUZ1R3UXVTc0RwNWx4VzVWeDNSNDBzNC5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHAyYAkAA3gDANBgkqhkiG9w0BAQsFAAOCAQEAg2/PPADuodOP76ZyKkKc+imj Rxpyz1/hcg2WcwLl90Tn3wDzC0WHsay4ZWFa9K1QtWMa5iILVZp9NNP//SxDVpYO l59QwA9G1VSWNt1cqJhqyNI9u7imoqyIWxld7onrVomjFXYz9HEwYtng6PyKRxkz Qm41yDqy3TBHkMAkHWEvzf4SvLvYgIGscM7tLaYSQAMSU9UHIMYYM9JH8s54JgRI W44fgQVKsNbvEK9MOl3qeRTXmXfs/GzTMO8h+a/wGRJAAlOqiFgkz/qeSfqx8dAx 65n+EJ/JdR6QlnjE39W4EXMndEmZYDRcVkkKkTn0MDw1rZdkjeP46SljSf5KZg== -----END CERTIFICATE-----Generated at Sun Mar 1 22:29:39 2026 by rpki-client