$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9c63f2a3-689c-45b6-9606-46ac53893c29.roa File: 9c63f2a3-689c-45b6-9606-46ac53893c29.roa (raw, json) Hash identifier: caSiFsce0KuGhRy77/mPARPHR4JCVeginWHJUZ4sFSw= Subject key identifier: 27:1C:20:CA:80:C7:A6:49:70:99:12:14:EE:6E:B4:59:AD:A4:F8:98 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 1C07EE810C259C34A2B58AA5EDD1F0FAFF8B5F95 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9c63f2a3-689c-45b6-9606-46ac53893c29.roa Signing time: Fri 13 Feb 2026 10:50:56 +0000 ROA not before: Fri 13 Feb 2026 10:50:56 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3d40::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:07:ee:81:0c:25:9c:34:a2:b5:8a:a5:ed:d1:f0:fa:ff:8b:5f:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Feb 13 10:50:56 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=cb921b2325cf9d70ee49a0d8f192555648a8030e7c39bff10b122c09c4c82ac5, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:bb:f0:a8:62:47:51:1d:89:12:ef:c9:a4:e0: 12:12:59:8c:4b:37:c2:bc:12:d5:c6:6f:65:4a:6d: a8:c2:09:16:12:8d:06:0c:6f:50:f2:93:1e:ae:5e: d3:f0:46:3c:03:c8:0d:54:f1:63:ee:31:00:c4:2e: 27:be:2b:f7:9b:9f:d1:ea:5d:49:9e:ee:74:ed:b1: c2:f3:1d:8e:b3:42:86:0c:34:c9:4d:b9:4c:4a:d6: ce:cb:12:1a:7b:13:9c:fb:8c:60:d8:da:8d:e0:c1: 17:06:a8:63:1a:d2:ac:85:54:3d:64:e7:c7:0f:fd: a4:7f:80:89:08:95:cb:10:6d:a5:81:42:c3:89:d8: 6e:8d:65:8e:f7:7d:2a:53:bb:96:88:87:27:4c:0e: 67:cb:77:bd:66:e0:8d:d6:51:31:28:e7:48:2b:02: 22:72:4c:a5:10:68:92:7c:26:9d:c4:b1:b6:96:f0: b3:b9:04:fc:7f:87:3e:af:43:6f:34:44:e4:88:01: 7d:02:d4:2d:d2:56:50:eb:47:a8:0e:38:79:c2:c0: 31:88:6b:4a:9e:5d:de:6c:20:11:cf:b5:c0:6d:d7: 47:46:45:0b:df:ac:17:a4:51:c4:6e:2c:a3:b0:fc: 18:6e:0d:46:41:11:10:e5:4e:2e:22:fd:a4:f5:ea: fb:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:1C:20:CA:80:C7:A6:49:70:99:12:14:EE:6E:B4:59:AD:A4:F8:98 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9c63f2a3-689c-45b6-9606-46ac53893c29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3d40::/43 Signature Algorithm: sha256WithRSAEncryption 13:53:95:eb:b2:e2:30:bc:1b:f9:a7:95:8d:98:a4:a1:e7:87: b1:33:0a:a8:6f:25:da:c1:10:1b:32:69:6d:79:b8:c0:e0:45: 40:b6:b1:7a:e4:91:37:43:58:c7:7e:9e:6c:e9:28:52:03:37: e7:9d:74:e0:c1:14:5e:5f:cd:59:d9:b2:c5:d0:70:00:79:91: 7f:fe:bf:61:af:38:0a:ce:71:ae:7a:09:22:90:cc:2e:79:a6: e0:a4:f8:a4:fd:f3:56:e6:67:9b:37:03:0a:42:eb:7d:3c:70: 8e:7b:12:25:7b:f2:29:3b:16:04:65:f1:0d:c8:8b:66:ab:6c: e3:2f:ef:32:4f:5a:6d:11:10:5e:6b:26:9b:29:88:bb:46:0e: f0:87:5e:b0:9f:82:36:1e:33:fb:07:f3:f3:ed:91:c1:6a:0c: 15:81:10:c7:f8:33:ba:1b:bc:c1:4c:fb:a6:98:2b:fb:15:86: 7c:9c:fa:6f:3f:a9:4b:b0:64:03:3b:4a:12:ef:8a:cf:2a:18: f9:fe:72:1a:9b:93:0b:69:f3:f2:6e:4a:c9:65:52:a0:7e:d4: 47:30:cb:5d:67:e0:29:5b:ef:f4:0c:7e:3f:93:27:1d:a5:48: 23:01:64:5e:8e:6d:e5:2f:75:9b:0e:3e:ea:5a:ef:db:76:78: b4:42:30:b5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUHAfugQwlnDSitYql7dHw+v+LX5UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMTA1MDU2WhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BjYjkyMWIyMzI1Y2Y5ZDcwZWU0OWEwZDhmMTkyNTU1NjQ4 YTgwMzBlN2MzOWJmZjEwYjEyMmMwOWM0YzgyYWM1MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD7u/CoYkdRHYkS78mk4BISWYxLN8K8EtXGb2VKbajCCRYS jQYMb1Dykx6uXtPwRjwDyA1U8WPuMQDELie+K/ebn9HqXUme7nTtscLzHY6zQoYM NMlNuUxK1s7LEhp7E5z7jGDY2o3gwRcGqGMa0qyFVD1k58cP/aR/gIkIlcsQbaWB QsOJ2G6NZY73fSpTu5aIhydMDmfLd71m4I3WUTEo50grAiJyTKUQaJJ8Jp3EsbaW 8LO5BPx/hz6vQ280ROSIAX0C1C3SVlDrR6gOOHnCwDGIa0qeXd5sIBHPtcBt10dG RQvfrBekUcRuLKOw/BhuDUZBERDlTi4i/aT16vsPAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUJxwgyoDHpklwmRIU7m60Wa2k+JgwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzljNjNmMmEzLTY4OWMtNDViNi05NjA2LTQ2YWM1Mzg5M2MyOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwUmAJAAPUAwDQYJKoZIhvcNAQELBQADggEBABNTleuy4jC8G/mnlY2YpKHn h7EzCqhvJdrBEBsyaW15uMDgRUC2sXrkkTdDWMd+nmzpKFIDN+eddODBFF5fzVnZ ssXQcAB5kX/+v2GvOArOca56CSKQzC55puCk+KT981bmZ5s3AwpC6308cI57EiV7 8ik7FgRl8Q3Ii2arbOMv7zJPWm0REF5rJpspiLtGDvCHXrCfgjYeM/sH8/PtkcFq DBWBEMf4M7obvMFM+6aYK/sVhnyc+m8/qUuwZAM7ShLvis8qGPn+chqbkwtp8/Ju SsllUqB+1Ecwy11n4Clb7/QMfj+TJx2lSCMBZF6ObeUvdZsOPupa79t2eLRCMLU= -----END CERTIFICATE-----Generated at Sun Mar 1 22:23:52 2026 by rpki-client