$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ae95a965-bc28-4d5a-a484-88c611b77ee2.roa File: ae95a965-bc28-4d5a-a484-88c611b77ee2.roa (raw, json) Hash identifier: BDXfYIY3DSe7MX2wyQW+SimYqgS2ilcuNjhZO9D2m/o= Subject key identifier: 4F:16:58:9A:96:49:DF:71:8A:05:01:AD:05:95:BF:12:86:B1:56:73 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 31B47CA682AD891F99BE34182CFE50A8FA1CE49C Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ae95a965-bc28-4d5a-a484-88c611b77ee2.roa Signing time: Thu 12 Feb 2026 01:31:24 +0000 ROA not before: Thu 12 Feb 2026 01:31:24 +0000 ROA not after: Wed 13 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2fe4::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:b4:7c:a6:82:ad:89:1f:99:be:34:18:2c:fe:50:a8:fa:1c:e4:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Feb 12 01:31:24 2026 GMT Not After : May 13 23:59:59 2026 GMT Subject: serialNumber=9138082b18df39af514342afda4560b040fcd8046bdd7f54e997ed59caf425cf, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:09:89:34:34:3e:62:29:14:05:f2:4b:01:c7: 31:a6:28:a1:3f:56:1b:ac:01:f7:a1:63:e4:c8:47: e5:48:db:91:4a:1f:eb:bd:c0:ce:a5:dc:dd:7d:46: 35:01:3c:ca:5f:46:c7:b3:dd:25:d5:2f:2a:7a:8d: 66:6d:27:8e:b4:1a:ae:5f:c1:34:5c:2c:e3:2d:29: a1:d9:52:05:dc:18:ea:9d:dc:18:17:23:16:3e:70: 09:0e:5b:18:ff:9b:39:ea:01:fb:de:72:49:e3:df: ab:26:65:14:f6:7b:af:5f:0f:17:d2:f2:b0:be:07: 08:da:68:dc:74:9f:1d:ab:f4:69:c0:83:5f:72:81: 89:fe:51:58:f3:d7:6c:44:92:6a:c3:88:5b:16:83: f5:a2:ae:cf:9d:b2:68:e4:f0:fb:10:91:97:80:c8: b4:8a:81:cb:6b:ef:6c:dc:86:ee:bb:6d:35:ff:42: 1f:11:a4:69:05:dc:5d:c8:4d:39:32:79:f5:cb:b3: 50:1b:35:81:0a:3f:6d:90:21:e2:93:ef:38:dd:b1: e5:d9:ab:96:cc:f0:ef:8c:9a:81:f5:9a:ef:05:a5: 5c:60:12:bf:c4:18:ef:13:82:bd:71:88:8c:b3:f3: b4:a3:ba:8e:a8:7f:f8:df:8e:b9:0b:25:c9:ed:d0: da:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:16:58:9A:96:49:DF:71:8A:05:01:AD:05:95:BF:12:86:B1:56:73 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ae95a965-bc28-4d5a-a484-88c611b77ee2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2fe4::/47 Signature Algorithm: sha256WithRSAEncryption 2e:a9:a3:2b:bb:83:3f:75:fa:5d:21:1c:ad:d6:42:37:18:e0: 9a:e9:31:cf:fc:a0:85:b2:a9:17:e6:85:b8:09:80:1b:0b:59: 16:8e:01:45:43:a7:9f:13:80:7a:9c:06:cc:39:71:4e:06:a4: 44:d9:a2:de:be:05:c1:1d:0d:77:9c:a3:37:8b:9d:33:17:b3: d4:cc:d4:8e:c3:4c:c7:a0:86:33:3a:f2:bb:6b:35:a7:ad:28: 46:26:66:1c:fd:57:72:2b:d4:73:70:0c:7a:08:23:bf:ba:cb: be:3e:41:19:ed:08:7c:73:f4:aa:56:37:be:92:6c:96:f5:3b: 61:14:35:f6:b1:bb:5b:e0:e7:23:f2:3c:df:cb:65:09:dc:1c: a5:a1:b2:b2:d6:77:85:f3:15:8a:78:48:00:aa:b8:1d:7f:db: 59:cc:c4:cb:7e:ea:85:d2:57:37:85:87:24:8e:b5:a6:8e:97: ed:ae:5b:6a:fd:cf:34:05:3b:9f:5f:2e:6a:94:ca:d8:e0:f3: cb:6b:12:1b:c5:eb:7e:82:a7:4a:34:fa:ff:16:98:c3:23:24: 44:58:1c:ee:81:29:e3:c1:55:4c:28:74:be:32:39:d1:96:a5: aa:3f:3c:75:6a:7d:97:a2:0d:50:8a:dd:31:4c:97:53:05:bb: 35:49:bb:44 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMbR8poKtiR+ZvjQYLP5QqPoc5JwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEyMDEzMTI0WhcNMjYwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MTM4MDgyYjE4ZGYzOWFmNTE0MzQyYWZkYTQ1NjBiMDQw ZmNkODA0NmJkZDdmNTRlOTk3ZWQ1OWNhZjQyNWNmMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9CYk0ND5iKRQF8ksBxzGmKKE/VhusAfehY+TIR+VI25FK H+u9wM6l3N19RjUBPMpfRsez3SXVLyp6jWZtJ460Gq5fwTRcLOMtKaHZUgXcGOqd 3BgXIxY+cAkOWxj/mznqAfvecknj36smZRT2e69fDxfS8rC+BwjaaNx0nx2r9GnA g19ygYn+UVjz12xEkmrDiFsWg/Wirs+dsmjk8PsQkZeAyLSKgctr72zchu67bTX/ Qh8RpGkF3F3ITTkyefXLs1AbNYEKP22QIeKT7zjdseXZq5bM8O+MmoH1mu8FpVxg Er/EGO8Tgr1xiIyz87Sjuo6of/jfjrkLJcnt0NpJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUTxZYmpZJ33GKBQGtBZW/EoaxVnMwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2FlOTVhOTY1LWJjMjgtNGQ1YS1hNDg0LTg4YzYxMWI3N2VlMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAL+QwDQYJKoZIhvcNAQELBQADggEBAC6poyu7gz91+l0hHK3WQjcY 4JrpMc/8oIWyqRfmhbgJgBsLWRaOAUVDp58TgHqcBsw5cU4GpETZot6+BcEdDXec ozeLnTMXs9TM1I7DTMeghjM68rtrNaetKEYmZhz9V3Ir1HNwDHoII7+6y74+QRnt CHxz9KpWN76SbJb1O2EUNfaxu1vg5yPyPN/LZQncHKWhsrLWd4XzFYp4SACquB1/ 21nMxMt+6oXSVzeFhySOtaaOl+2uW2r9zzQFO59fLmqUytjg88trEhvF636Cp0o0 +v8WmMMjJERYHO6BKePBVUwodL4yOdGWpao/PHVqfZeiDVCK3TFMl1MFuzVJu0Q= -----END CERTIFICATE-----Generated at Sun Mar 1 22:19:16 2026 by rpki-client