$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/99e49c2e-8ab1-4cea-8165-8e049cab961a.roa File: 99e49c2e-8ab1-4cea-8165-8e049cab961a.roa (raw, json) Hash identifier: yEcGWCJOFu5C16flIE4IEvc1MGhsfNH3oYQCqRgC3es= Subject key identifier: 0B:39:20:49:ED:92:7B:09:61:31:23:CD:73:80:55:F2:D6:A1:C8:39 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 54E9248DFFB77FEEAA0DA966FC5FA2ACBB6E86CA Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/99e49c2e-8ab1-4cea-8165-8e049cab961a.roa Signing time: Fri 13 Feb 2026 13:30:17 +0000 ROA not before: Fri 13 Feb 2026 13:30:17 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3678::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:e9:24:8d:ff:b7:7f:ee:aa:0d:a9:66:fc:5f:a2:ac:bb:6e:86:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Feb 13 13:30:17 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=2b711af19b88730d8d834dec866e06a238dd3130c1f22e5d6a86444e5f9f0ddf, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:df:be:cc:a4:22:e3:c2:9e:4a:f9:a0:20:7e: 51:4e:f4:03:8c:9c:01:e1:c7:1b:c0:fc:7b:de:2e: ea:75:d9:86:da:a9:b6:20:6a:a2:f9:74:2d:0b:97: 8a:f0:bd:40:18:e4:b4:fc:99:70:95:57:04:f0:e7: 68:d9:eb:c9:d9:a2:82:f1:a4:37:bc:e6:25:25:8b: 82:dc:c5:50:a4:9b:5a:90:c1:d0:4b:ee:d5:75:91: a8:9c:8d:2a:1a:60:94:19:85:75:50:4f:69:ce:8c: f3:6e:1c:e7:e5:56:75:e5:5d:d8:f6:4a:50:4d:08: 0c:eb:d4:45:55:d9:5f:c3:e7:69:9f:17:30:a5:ff: 08:9c:7e:52:c8:ba:cf:78:8b:36:d2:a8:56:63:3d: c3:ab:9e:f0:1a:5f:9a:92:7e:a1:ba:a7:8a:9d:f1: 7b:43:2a:54:98:82:36:ac:1c:59:af:5c:78:80:23: b3:a7:01:13:b6:49:24:8c:3c:73:31:50:ab:88:5f: 2b:34:1d:79:7b:db:e5:42:20:ad:15:6f:a8:e1:ed: 70:a5:b3:b5:8f:79:97:f2:ad:d8:48:2a:9a:36:55: 3e:29:c0:4b:60:12:71:ff:4a:81:3a:45:34:86:10: 21:e1:f7:92:52:38:ea:35:79:b8:60:46:9f:15:4b: b8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:39:20:49:ED:92:7B:09:61:31:23:CD:73:80:55:F2:D6:A1:C8:39 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/99e49c2e-8ab1-4cea-8165-8e049cab961a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3678::/45 Signature Algorithm: sha256WithRSAEncryption 5e:60:77:61:41:e6:0f:62:7e:05:c1:41:9d:d9:1f:23:29:9a: 9e:36:90:c4:0a:a6:3c:fa:2c:17:ff:a3:78:e3:22:62:1c:a2: fa:01:f6:b9:b8:b3:00:99:d6:8a:91:2f:af:f1:8a:b0:a4:10: 67:f6:06:f6:51:12:2e:9b:df:67:4d:60:5e:92:9e:2e:20:27: 34:2c:55:27:b9:24:f8:d5:de:71:d0:5b:c0:61:32:84:95:0d: c1:2f:2a:4d:82:90:c1:e9:53:93:b1:3f:fe:d4:b0:bc:f5:43: ab:22:00:eb:9a:0a:6f:c1:03:ab:7b:51:ec:09:4e:9c:37:9f: e8:89:90:78:24:53:2d:a7:83:d4:3a:90:60:e1:e6:9f:ba:c3: ac:47:37:80:ba:a5:af:58:06:d7:8c:09:b0:6f:3b:22:43:8a: 6f:77:e4:14:b7:09:88:72:30:c8:c1:d8:8b:11:90:2c:13:bb: cc:ac:81:d8:78:ed:82:be:68:24:c1:17:51:ec:4c:3f:d6:ee: d7:ae:c5:36:d4:77:27:8e:4f:6b:c0:68:a7:91:f8:e4:43:8b: 32:52:d5:0a:bd:e8:53:01:d9:52:df:bb:6a:56:f3:f0:fa:52: 78:b6:6f:90:d3:41:86:7c:9b:ec:31:2a:2e:18:2b:20:7d:0e: 3b:03:1a:f8 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUVOkkjf+3f+6qDalm/F+irLtuhsowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMTMzMDE3WhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AyYjcxMWFmMTliODg3MzBkOGQ4MzRkZWM4NjZlMDZhMjM4 ZGQzMTMwYzFmMjJlNWQ2YTg2NDQ0ZTVmOWYwZGRmMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCS377MpCLjwp5K+aAgflFO9AOMnAHhxxvA/HveLup12Yba qbYgaqL5dC0Ll4rwvUAY5LT8mXCVVwTw52jZ68nZooLxpDe85iUli4LcxVCkm1qQ wdBL7tV1kaicjSoaYJQZhXVQT2nOjPNuHOflVnXlXdj2SlBNCAzr1EVV2V/D52mf FzCl/wicflLIus94izbSqFZjPcOrnvAaX5qSfqG6p4qd8XtDKlSYgjasHFmvXHiA I7OnARO2SSSMPHMxUKuIXys0HXl72+VCIK0Vb6jh7XCls7WPeZfyrdhIKpo2VT4p wEtgEnH/SoE6RTSGECHh95JSOOo1ebhgRp8VS7hLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUCzkgSe2SewlhMSPNc4BV8tahyDkwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1Lzk5ZTQ5YzJlLThhYjEtNGNlYS04MTY1LThlMDQ5Y2FiOTYxYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAANngwDQYJKoZIhvcNAQELBQADggEBAF5gd2FB5g9ifgXBQZ3ZHyMp mp42kMQKpjz6LBf/o3jjImIcovoB9rm4swCZ1oqRL6/xirCkEGf2BvZREi6b32dN YF6Sni4gJzQsVSe5JPjV3nHQW8BhMoSVDcEvKk2CkMHpU5OxP/7UsLz1Q6siAOua Cm/BA6t7UewJTpw3n+iJkHgkUy2ng9Q6kGDh5p+6w6xHN4C6pa9YBteMCbBvOyJD im935BS3CYhyMMjB2IsRkCwTu8ysgdh47YK+aCTBF1HsTD/W7teuxTbUdyeOT2vA aKeR+ORDizJS1Qq96FMB2VLfu2pW8/D6Uni2b5DTQYZ8m+wxKi4YKyB9DjsDGvg= -----END CERTIFICATE-----Generated at Sun Mar 1 22:16:37 2026 by rpki-client