$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/904c96d8-2358-4397-a7d3-5679b0a28092.roa File: 904c96d8-2358-4397-a7d3-5679b0a28092.roa (raw, json) Hash identifier: AzHuxCRW1z+bXdGFd2ap7aEB/cQRem0yeUqZAVP24NE= Subject key identifier: 05:DE:21:12:17:7E:D7:AB:AE:62:19:C9:05:2E:32:12:DA:B9:D8:2D Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 7D1C557AC81E5830046B36DE2926DFA674605A83 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/904c96d8-2358-4397-a7d3-5679b0a28092.roa Signing time: Thu 12 Feb 2026 01:50:51 +0000 ROA not before: Thu 12 Feb 2026 01:50:51 +0000 ROA not after: Wed 13 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2cd0::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:1c:55:7a:c8:1e:58:30:04:6b:36:de:29:26:df:a6:74:60:5a:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Feb 12 01:50:51 2026 GMT Not After : May 13 23:59:59 2026 GMT Subject: serialNumber=0358cb2389794c37fbb4aee3a431317931674ed5ea24f1b6abdb99277a8cd019, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e8:5b:c8:3c:a0:db:0d:f5:42:fe:ff:a2:40: b0:00:87:7b:d2:5f:cc:e7:da:2b:11:0f:a1:47:2c: 2a:d0:c3:5a:20:3d:f6:94:f8:9e:0b:06:d7:23:1b: f5:4f:ac:d6:00:91:81:39:7b:6b:40:c5:ac:d4:b6: d9:1c:4a:68:79:09:44:50:83:c2:18:97:42:94:1c: 93:dd:31:f7:35:09:a7:af:2e:6a:24:38:f3:e0:70: 22:0e:60:ff:52:27:eb:a7:e9:ec:8c:da:11:36:ce: 30:34:bf:eb:81:f4:4b:2a:f4:68:54:d8:a8:cd:9b: 6d:e5:92:8c:50:2d:14:b9:c1:da:c9:00:df:af:8d: e0:c7:58:74:a5:53:e3:d2:26:5e:2a:25:5f:2a:35: f9:ca:f4:bb:20:49:97:15:77:64:fd:2f:90:44:73: c3:c7:67:9e:1e:38:7a:ad:43:17:28:0f:b6:04:18: 97:0a:0e:92:44:b3:6e:52:88:85:42:99:8f:8f:b7: a5:9d:43:ce:3c:ef:59:3e:c1:55:98:db:9e:14:71: e0:05:9e:c5:56:45:5e:77:78:dd:58:c6:c9:2d:23: 90:30:de:11:3f:ae:df:3a:99:1c:a5:08:1b:63:cb: f0:9b:96:e2:4c:5a:79:9c:8b:52:b6:6f:2a:e8:ca: bd:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:DE:21:12:17:7E:D7:AB:AE:62:19:C9:05:2E:32:12:DA:B9:D8:2D X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/904c96d8-2358-4397-a7d3-5679b0a28092.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2cd0::/47 Signature Algorithm: sha256WithRSAEncryption 2c:76:86:26:98:1b:1c:96:7a:d7:5e:d0:11:10:12:c1:b6:bd: ce:2d:4d:41:8b:dd:97:de:3a:54:f3:87:6a:b3:e6:26:d8:14: 11:22:9b:a8:9c:37:6c:bb:03:42:0a:cd:bc:82:35:a4:b7:25: ef:db:8c:2d:d9:eb:4c:8b:c4:45:36:7b:cd:8c:67:7f:e5:b6: 16:25:80:66:7b:8d:b9:bc:81:06:14:f7:5e:07:e3:e7:ff:c8: a1:90:c1:b3:a1:99:d0:df:9d:c1:ec:52:4c:e9:66:98:06:ad: 85:5b:a3:b4:2e:77:4e:8a:f5:ba:c0:4d:5b:af:5c:d0:d9:a7: 1a:19:be:dd:35:66:58:eb:5a:55:d1:c6:bb:4c:ed:ba:7d:96: 05:a8:a8:3d:e5:f0:9e:9e:cc:7b:18:a0:39:bc:8b:6b:9c:82: 5b:3c:66:00:db:41:62:3d:57:a2:aa:f2:df:a1:8b:eb:26:42: 6c:53:0e:cc:8d:3c:8c:7a:4e:91:ac:93:7e:92:cf:ae:2d:15: e1:58:95:f2:25:9a:54:02:1c:69:cf:37:0a:5c:b2:c7:a5:6b: b1:fc:45:b1:47:7a:fb:4f:ef:92:38:7d:0c:43:81:47:0c:0d: b1:f2:cb:c0:a2:48:c2:0b:06:af:c0:e4:a4:19:43:b2:c5:04: e1:93:c4:7b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfRxVesgeWDAEazbeKSbfpnRgWoMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEyMDE1MDUxWhcNMjYwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMzU4Y2IyMzg5Nzk0YzM3ZmJiNGFlZTNhNDMxMzE3OTMx Njc0ZWQ1ZWEyNGYxYjZhYmRiOTkyNzdhOGNkMDE5MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDG6FvIPKDbDfVC/v+iQLAAh3vSX8zn2isRD6FHLCrQw1og PfaU+J4LBtcjG/VPrNYAkYE5e2tAxazUttkcSmh5CURQg8IYl0KUHJPdMfc1Caev LmokOPPgcCIOYP9SJ+un6eyM2hE2zjA0v+uB9Esq9GhU2KjNm23lkoxQLRS5wdrJ AN+vjeDHWHSlU+PSJl4qJV8qNfnK9LsgSZcVd2T9L5BEc8PHZ54eOHqtQxcoD7YE GJcKDpJEs25SiIVCmY+Pt6WdQ84871k+wVWY254UceAFnsVWRV53eN1YxsktI5Aw 3hE/rt86mRylCBtjy/CbluJMWnmci1K2byroyr1XAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUBd4hEhd+16uuYhnJBS4yEtq52C0wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzkwNGM5NmQ4LTIzNTgtNDM5Ny1hN2QzLTU2NzliMGEyODA5Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAALNAwDQYJKoZIhvcNAQELBQADggEBACx2hiaYGxyWetde0BEQEsG2 vc4tTUGL3ZfeOlTzh2qz5ibYFBEim6icN2y7A0IKzbyCNaS3Je/bjC3Z60yLxEU2 e82MZ3/lthYlgGZ7jbm8gQYU914H4+f/yKGQwbOhmdDfncHsUkzpZpgGrYVbo7Qu d06K9brATVuvXNDZpxoZvt01ZljrWlXRxrtM7bp9lgWoqD3l8J6ezHsYoDm8i2uc gls8ZgDbQWI9V6Kq8t+hi+smQmxTDsyNPIx6TpGsk36Sz64tFeFYlfIlmlQCHGnP Nwpcssela7H8RbFHevtP75I4fQxDgUcMDbHyy8CiSMILBq/A5KQZQ7LFBOGTxHs= -----END CERTIFICATE-----Generated at Sun Mar 1 22:24:34 2026 by rpki-client