$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/af6153a7-e9b1-4f54-80db-757c7d4b46ac.roa File: af6153a7-e9b1-4f54-80db-757c7d4b46ac.roa (raw, json) Hash identifier: I50Uh8FjQweOOr4rSKA010RO0EqTSFiSg7tfeipBiko= Subject key identifier: 88:B2:75:FB:77:9E:73:0E:DA:4C:B3:B9:41:8D:62:80:11:21:36:81 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 4894D89C42BA0AB39CF378974D8478B16D35FA08 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/af6153a7-e9b1-4f54-80db-757c7d4b46ac.roa Signing time: Fri 13 Feb 2026 06:41:05 +0000 ROA not before: Fri 13 Feb 2026 06:41:05 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2854::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:94:d8:9c:42:ba:0a:b3:9c:f3:78:97:4d:84:78:b1:6d:35:fa:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Feb 13 06:41:05 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=dccabc8263f212deafe8bbea7741ea72bf7d1fde984a7bea1a65b689e58ade34, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:05:a0:7f:dc:b8:82:c3:31:12:14:30:9b:3e: 8e:1a:11:ff:26:0a:77:da:2c:7c:6f:76:f0:14:3b: ae:c9:5d:81:7a:f1:8d:54:92:4d:88:34:05:13:07: 80:14:ab:ad:5a:75:c7:7c:35:29:90:70:e5:2b:9e: 3d:24:17:d3:40:67:6d:68:05:48:68:dd:31:81:9b: 13:e9:11:46:25:89:40:8e:7b:26:81:f8:4e:fa:30: 11:f5:df:53:96:79:7e:64:e0:22:a6:0e:a4:d7:34: 00:76:35:dc:41:fb:75:ce:8e:d0:60:20:6e:21:52: fe:90:2c:82:ce:93:7e:92:65:46:1f:a9:41:3a:4b: 5b:9d:78:fc:11:30:da:60:43:10:c3:54:cd:55:1e: c3:b0:6b:a8:ec:b0:1b:ee:42:88:26:b7:1a:d7:ee: 86:fe:41:b3:5b:3c:3c:64:a5:bc:40:3a:cd:bf:cf: c0:67:a4:ca:5b:67:5f:f6:c9:04:51:d9:28:71:50: c9:f5:43:72:9b:ec:34:44:62:db:89:ce:2d:e4:0d: 7e:cc:d4:67:61:47:43:1a:ca:b4:30:09:00:5c:8a: a2:17:a4:76:f7:0a:71:09:4c:7c:a0:88:09:73:c3: c5:7b:d7:a7:7a:4c:96:94:bb:8d:8e:de:e1:14:39: 8f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B2:75:FB:77:9E:73:0E:DA:4C:B3:B9:41:8D:62:80:11:21:36:81 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/af6153a7-e9b1-4f54-80db-757c7d4b46ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2854::/46 Signature Algorithm: sha256WithRSAEncryption 78:ab:49:3b:e4:e4:0d:9b:2d:12:92:da:c9:bb:7d:53:bd:e6: 2c:2e:27:ec:67:62:d7:49:35:e2:5d:3d:2b:45:4a:11:25:e5: 96:f5:f2:c3:fe:95:9b:8b:16:87:b9:df:1e:5a:bd:2b:5c:61: 1b:b6:22:1d:b1:65:f3:04:c4:f6:71:9b:26:11:34:aa:f4:29: 7f:21:77:0e:cc:3c:bb:e9:79:61:d4:94:e6:68:fd:51:02:83: 89:a8:3a:37:48:9b:cc:f8:98:a0:22:c0:7c:b3:66:39:dc:c1: a8:5e:b4:51:06:73:36:d7:9c:5c:ca:65:52:9e:52:7d:08:39: e6:16:5b:18:10:60:2d:12:4e:70:6c:46:84:25:ac:d5:28:96: 06:50:20:d2:3e:1a:cb:33:02:5f:1f:be:d8:c3:c4:92:ab:80: 59:1e:ae:31:2a:e0:da:a0:4c:ac:b4:46:f1:e2:1b:d4:40:45: da:43:fe:b7:85:bc:47:b2:4c:e5:cc:89:cf:6a:cb:16:4f:61: ee:ca:96:2d:cd:18:fb:0c:fa:43:72:e5:3e:df:ca:15:6c:25: d2:50:51:50:64:b0:5c:45:d5:42:bf:ef:83:cb:f5:85:c7:da: 65:37:14:93:72:f6:27:39:c0:2a:bb:3b:cf:04:17:59:14:a0: 19:0a:5b:fa -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSJTYnEK6CrOc83iXTYR4sW01+ggwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMDY0MTA1WhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkY2NhYmM4MjYzZjIxMmRlYWZlOGJiZWE3NzQxZWE3MmJm N2QxZmRlOTg0YTdiZWExYTY1YjY4OWU1OGFkZTM0MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgBaB/3LiCwzESFDCbPo4aEf8mCnfaLHxvdvAUO67JXYF6 8Y1Ukk2INAUTB4AUq61adcd8NSmQcOUrnj0kF9NAZ21oBUho3TGBmxPpEUYliUCO eyaB+E76MBH131OWeX5k4CKmDqTXNAB2NdxB+3XOjtBgIG4hUv6QLILOk36SZUYf qUE6S1udePwRMNpgQxDDVM1VHsOwa6jssBvuQogmtxrX7ob+QbNbPDxkpbxAOs2/ z8BnpMpbZ1/2yQRR2ShxUMn1Q3Kb7DREYtuJzi3kDX7M1GdhR0MayrQwCQBciqIX pHb3CnEJTHygiAlzw8V716d6TJaUu42O3uEUOY9VAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUiLJ1+3eecw7aTLO5QY1igBEhNoEwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2FmNjE1M2E3LWU5YjEtNGY1NC04MGRiLTc1N2M3ZDRiNDZhYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAKFQwDQYJKoZIhvcNAQELBQADggEBAHirSTvk5A2bLRKS2sm7fVO9 5iwuJ+xnYtdJNeJdPStFShEl5Zb18sP+lZuLFoe53x5avStcYRu2Ih2xZfMExPZx myYRNKr0KX8hdw7MPLvpeWHUlOZo/VECg4moOjdIm8z4mKAiwHyzZjncwahetFEG czbXnFzKZVKeUn0IOeYWWxgQYC0STnBsRoQlrNUolgZQINI+GsszAl8fvtjDxJKr gFkerjEq4NqgTKy0RvHiG9RARdpD/reFvEeyTOXMic9qyxZPYe7Kli3NGPsM+kNy 5T7fyhVsJdJQUVBksFxF1UK/74PL9YXH2mU3FJNy9ic5wCq7O88EF1kUoBkKW/o= -----END CERTIFICATE-----Generated at Sun Mar 1 23:51:00 2026 by rpki-client