$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a810385f-e1cf-4a3e-8908-dbd75edb517d.roa File: a810385f-e1cf-4a3e-8908-dbd75edb517d.roa (raw, json) Hash identifier: okhHcBbUdXdCAbXMArsCrTgwiAeaUankbkksDD5lnVA= Subject key identifier: 78:7A:49:F5:DB:CE:5B:9C:95:D1:FF:47:7D:CC:3F:9C:DD:7F:6C:E1 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 7AC8674700616FF1871B61B0040B70AEE15C62BD Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a810385f-e1cf-4a3e-8908-dbd75edb517d.roa Signing time: Fri 13 Feb 2026 09:40:12 +0000 ROA not before: Fri 13 Feb 2026 09:40:12 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2f60::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:c8:67:47:00:61:6f:f1:87:1b:61:b0:04:0b:70:ae:e1:5c:62:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Feb 13 09:40:12 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=6e51e692116e78ced0f1cacaa1423f37a86c0ccbb9de4259eda122bf9e9e9e08, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f3:ff:a9:1f:b6:e1:84:f3:b6:2e:33:17:35: b5:94:0e:34:ba:39:12:9e:a8:48:8b:35:02:b0:2b: 9d:33:b5:f0:bc:c9:3b:9e:4b:8a:ac:b7:4d:7e:d4: 71:a7:6f:e2:47:61:60:66:64:08:0a:7c:9f:b5:72: b0:b3:b5:09:a5:41:e2:c0:cc:ca:79:19:0b:15:bd: f3:38:aa:5c:a6:34:44:d6:b6:50:3d:da:da:14:e5: 40:8e:03:66:30:8b:de:fb:f7:27:5a:1f:ac:70:d5: dc:5d:43:15:cb:d2:5c:68:0c:e8:8a:41:71:b7:5f: 6b:dc:8c:5b:46:4c:73:60:da:29:03:58:ce:3a:c9: 7a:bd:34:19:e0:7f:ab:8e:13:01:fd:e8:6c:e1:d4: 54:84:01:b7:38:90:5e:a8:a5:e6:a4:38:bd:39:2e: 59:16:6f:33:b7:0c:75:fa:3e:ea:a0:1f:9b:8a:ce: 93:c9:f1:9c:92:96:df:9e:8a:09:33:53:e6:96:a5: 09:c1:b0:bd:73:68:6c:27:9b:04:01:ac:e7:4e:c7: f6:60:64:3b:3d:6a:eb:69:2f:47:5c:ca:53:17:2e: a2:30:6b:e0:89:3f:2f:7b:98:cd:47:04:08:a7:22: 93:8d:46:dd:45:92:98:2e:d6:34:a4:ae:c0:19:0e: 29:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:7A:49:F5:DB:CE:5B:9C:95:D1:FF:47:7D:CC:3F:9C:DD:7F:6C:E1 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a810385f-e1cf-4a3e-8908-dbd75edb517d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2f60::/43 Signature Algorithm: sha256WithRSAEncryption 4e:be:79:ba:dc:94:29:b3:58:1f:c4:6f:a8:c8:ff:3f:4e:69: 1e:bd:60:a9:8f:13:3c:bb:ae:8a:28:b5:01:4e:2f:2b:6c:d4: 71:e3:9f:58:8f:3d:02:a4:6e:13:05:b4:ee:35:da:dd:b5:10: d7:b5:39:b0:05:bf:a2:5e:fa:3f:1a:aa:bf:20:fb:0d:97:dd: d9:b0:f2:e5:d9:91:04:db:8d:23:45:36:86:7a:a7:4b:1e:30: 58:69:67:b5:99:ac:41:c2:73:c0:ee:f7:2e:e5:a0:c1:f0:63: 4b:6b:4e:30:74:e0:45:78:47:84:70:ad:4a:aa:df:2b:be:d8: df:e2:47:7c:a9:48:5a:21:fb:e2:58:34:c6:72:fc:91:f5:b3: fd:0c:3d:eb:83:f0:a2:e3:67:00:90:e7:9e:c7:06:43:ee:1a: e6:0d:5b:a0:ad:ba:db:06:f6:b4:45:a7:fe:77:d9:76:d4:12: c4:df:b9:e4:b6:48:63:56:08:06:da:be:49:46:1c:97:e2:c9: 10:1f:75:8b:b1:d8:d5:ea:b9:bc:59:7b:7e:34:46:d2:4d:88: c3:3b:83:59:93:cf:34:bd:6d:d1:16:d0:c0:c7:85:ba:1b:b9: b1:31:6b:fa:75:89:91:48:e8:52:eb:d1:a7:0f:ff:ed:a6:9b: 46:8b:1a:b1 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUeshnRwBhb/GHG2GwBAtwruFcYr0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMDk0MDEyWhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZTUxZTY5MjExNmU3OGNlZDBmMWNhY2FhMTQyM2YzN2E4 NmMwY2NiYjlkZTQyNTllZGExMjJiZjllOWU5ZTA4MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDl8/+pH7bhhPO2LjMXNbWUDjS6ORKeqEiLNQKwK50ztfC8 yTueS4qst01+1HGnb+JHYWBmZAgKfJ+1crCztQmlQeLAzMp5GQsVvfM4qlymNETW tlA92toU5UCOA2Ywi9779ydaH6xw1dxdQxXL0lxoDOiKQXG3X2vcjFtGTHNg2ikD WM46yXq9NBngf6uOEwH96Gzh1FSEAbc4kF6opeakOL05LlkWbzO3DHX6PuqgH5uK zpPJ8ZySlt+eigkzU+aWpQnBsL1zaGwnmwQBrOdOx/ZgZDs9autpL0dcylMXLqIw a+CJPy97mM1HBAinIpONRt1Fkpgu1jSkrsAZDimNAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUeHpJ9dvOW5yV0f9Hfcw/nN1/bOEwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2E4MTAzODVmLWUxY2YtNGEzZS04OTA4LWRiZDc1ZWRiNTE3ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwUmAJAAL2AwDQYJKoZIhvcNAQELBQADggEBAE6+ebrclCmzWB/Eb6jI/z9O aR69YKmPEzy7roootQFOLyts1HHjn1iPPQKkbhMFtO412t21ENe1ObAFv6Je+j8a qr8g+w2X3dmw8uXZkQTbjSNFNoZ6p0seMFhpZ7WZrEHCc8Du9y7loMHwY0trTjB0 4EV4R4RwrUqq3yu+2N/iR3ypSFoh++JYNMZy/JH1s/0MPeuD8KLjZwCQ557HBkPu GuYNW6CtutsG9rRFp/532XbUEsTfueS2SGNWCAbavklGHJfiyRAfdYux2NXqubxZ e340RtJNiMM7g1mTzzS9bdEW0MDHhbobubExa/p1iZFI6FLr0acP/+2mm0aLGrE= -----END CERTIFICATE-----Generated at Sun Mar 1 23:38:03 2026 by rpki-client