$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ae9d0623-199e-4f46-8c01-c79a0f227d85.roa File: ae9d0623-199e-4f46-8c01-c79a0f227d85.roa (raw, json) Hash identifier: upGaFuEn2my6+c8HFPPnWyjtkOc7pqdphqiwoRa7p6A= Subject key identifier: 68:14:FD:C1:41:94:77:D2:97:4A:E5:8A:0C:D0:54:2B:96:91:D4:FA Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 3225226B27010C6DAB88B1D704C5B1EA087E6976 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ae9d0623-199e-4f46-8c01-c79a0f227d85.roa Signing time: Thu 12 Feb 2026 03:01:47 +0000 ROA not before: Thu 12 Feb 2026 03:01:47 +0000 ROA not after: Wed 13 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2e90::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:25:22:6b:27:01:0c:6d:ab:88:b1:d7:04:c5:b1:ea:08:7e:69:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Feb 12 03:01:47 2026 GMT Not After : May 13 23:59:59 2026 GMT Subject: serialNumber=0e4f0a725959e67efaaddf738e421e503776357cb064e31f88897c2874ef76e6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:69:71:01:81:14:9e:5a:44:6f:c0:c5:e1:0b: b2:d9:2e:6e:3a:f1:d9:37:ed:d1:01:87:3b:67:93: b4:cc:ac:0f:ea:d2:62:37:27:0a:65:3c:9d:90:d9: 2d:c0:75:9d:74:73:72:58:7f:76:d3:89:47:cd:ff: 81:73:32:a2:da:c9:16:35:2b:69:43:30:dd:a6:da: 62:26:6d:f4:0c:51:a5:d7:f8:9d:e3:74:8c:63:ef: 9f:33:66:cb:c4:5a:72:a6:11:79:3b:dd:af:31:c9: c2:c3:c8:0b:af:f4:af:37:58:da:44:0c:b5:c1:39: 88:00:8d:54:81:b3:aa:b9:21:79:f2:ea:9f:92:a9: 48:65:a9:50:61:02:1e:36:84:ff:cc:8f:ca:b4:6d: 74:46:2e:75:6a:f1:dd:b3:79:b3:57:79:09:2f:e9: d7:6b:f6:5a:0d:09:02:ce:0c:ef:02:4a:b0:ad:5c: 73:5e:b5:77:18:8f:ce:87:38:52:3b:0a:df:c1:78: 9f:7a:02:4f:6d:ef:f0:45:d9:bb:ed:fe:59:c3:36: 3b:41:8a:57:9e:d2:74:30:28:d8:a2:19:ed:98:da: 1a:4d:a3:e2:0f:7c:de:b8:60:0f:f1:79:5d:14:57: d1:f9:71:ff:14:6c:d9:67:3a:9e:79:ee:ff:05:b4: 2a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:14:FD:C1:41:94:77:D2:97:4A:E5:8A:0C:D0:54:2B:96:91:D4:FA X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ae9d0623-199e-4f46-8c01-c79a0f227d85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2e90::/47 Signature Algorithm: sha256WithRSAEncryption 39:21:67:27:d7:b3:26:7f:b3:5a:25:c2:c9:70:7c:fb:dc:6b: 0c:dd:5e:0e:e3:6a:44:da:a3:44:43:ea:14:2e:74:4c:e3:1e: 84:f6:ca:be:68:49:95:73:a3:b6:18:d3:df:b5:4f:2b:04:43: d9:08:86:5e:d0:37:57:08:0a:cc:93:43:89:22:b7:f6:ac:95: 7e:99:60:32:e9:b6:7b:77:b3:af:be:7a:99:9b:02:e4:e2:99: 9f:f2:47:fa:98:7b:83:fd:30:1c:63:19:df:7c:f3:14:b3:14: 7d:11:25:2f:59:d7:84:59:7f:f5:c7:67:91:9a:e3:f0:7a:0e: 20:4c:ac:4f:98:06:ed:26:ca:27:51:35:6c:5f:89:b9:59:1c: 83:c5:35:61:90:7b:4a:62:83:92:e9:82:b8:e7:99:8c:73:eb: ce:00:ab:ea:e7:ab:75:bc:51:a1:e1:c2:cb:e1:53:6c:aa:fa: 57:74:00:6c:14:d3:41:cc:e1:f2:aa:f4:42:9a:92:c5:97:ea: 05:cc:f8:a3:ec:e9:62:6f:d5:29:2b:d4:cd:9a:9b:d3:f3:bc: dd:ce:b8:1c:09:53:df:af:10:d8:44:b1:26:65:5f:46:e7:b9: 2f:1e:2d:cb:3c:e3:17:b3:e7:38:7f:c8:e7:db:7a:90:13:8f: 02:6d:4d:67 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMiUiaycBDG2riLHXBMWx6gh+aXYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEyMDMwMTQ3WhcNMjYwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZTRmMGE3MjU5NTllNjdlZmFhZGRmNzM4ZTQyMWU1MDM3 NzYzNTdjYjA2NGUzMWY4ODg5N2MyODc0ZWY3NmU2MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDzaXEBgRSeWkRvwMXhC7LZLm468dk37dEBhztnk7TMrA/q 0mI3JwplPJ2Q2S3AdZ10c3JYf3bTiUfN/4FzMqLayRY1K2lDMN2m2mImbfQMUaXX +J3jdIxj758zZsvEWnKmEXk73a8xycLDyAuv9K83WNpEDLXBOYgAjVSBs6q5IXny 6p+SqUhlqVBhAh42hP/Mj8q0bXRGLnVq8d2zebNXeQkv6ddr9loNCQLODO8CSrCt XHNetXcYj86HOFI7Ct/BeJ96Ak9t7/BF2bvt/lnDNjtBilee0nQwKNiiGe2Y2hpN o+IPfN64YA/xeV0UV9H5cf8UbNlnOp557v8FtCp5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUaBT9wUGUd9KXSuWKDNBUK5aR1PowHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2FlOWQwNjIzLTE5OWUtNGY0Ni04YzAxLWM3OWEwZjIyN2Q4NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAALpAwDQYJKoZIhvcNAQELBQADggEBADkhZyfXsyZ/s1olwslwfPvc awzdXg7jakTao0RD6hQudEzjHoT2yr5oSZVzo7YY09+1TysEQ9kIhl7QN1cICsyT Q4kit/aslX6ZYDLptnt3s6++epmbAuTimZ/yR/qYe4P9MBxjGd988xSzFH0RJS9Z 14RZf/XHZ5Ga4/B6DiBMrE+YBu0myidRNWxfiblZHIPFNWGQe0pig5LpgrjnmYxz 684Aq+rnq3W8UaHhwsvhU2yq+ld0AGwU00HM4fKq9EKaksWX6gXM+KPs6WJv1Skr 1M2am9PzvN3OuBwJU9+vENhEsSZlX0bnuS8eLcs84xez5zh/yOfbepATjwJtTWc= -----END CERTIFICATE-----Generated at Sun Mar 1 23:55:18 2026 by rpki-client