$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b58e7b56-2b26-426d-bc23-141abdb481f1.roa File: b58e7b56-2b26-426d-bc23-141abdb481f1.roa (raw, json) Hash identifier: /ATszqB50Gm99piKoXZVTbYatnEel9Y6T4ty21vYdNc= Subject key identifier: F4:57:63:93:A4:C9:52:F2:A4:84:F5:61:0F:DB:60:6F:DE:49:35:0A Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 2179EC2470F9A4FFF0FB1362B6F45CE663BFB0BB Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b58e7b56-2b26-426d-bc23-141abdb481f1.roa Signing time: Thu 12 Feb 2026 00:01:22 +0000 ROA not before: Thu 12 Feb 2026 00:01:22 +0000 ROA not after: Wed 13 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2efc::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:79:ec:24:70:f9:a4:ff:f0:fb:13:62:b6:f4:5c:e6:63:bf:b0:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Feb 12 00:01:22 2026 GMT Not After : May 13 23:59:59 2026 GMT Subject: serialNumber=004787710e021887e4db9a1a9d391b4dc03e6da4220c99eb1ad09b08f5098229, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:42:9c:08:3a:81:88:a5:f7:e2:31:4e:aa:41: 9e:31:85:e2:47:e3:90:45:d6:9a:04:3a:89:04:41: 2e:67:e8:4b:3e:cd:dc:b1:54:57:7d:4e:7a:72:11: a5:c2:2b:90:f5:21:8c:9a:f3:ed:ea:ac:1c:43:f2: cf:c6:53:1e:f9:62:9e:9c:a8:ec:ae:4a:46:d6:66: cb:53:15:d8:ad:4d:77:7a:2c:b9:36:53:78:e8:3d: 9a:8e:ec:5d:d9:de:44:d7:10:fe:4e:b3:94:5c:0b: c8:c8:01:6c:e2:bf:b4:d8:28:1e:dc:ac:76:24:0e: b1:b6:19:7c:5f:6c:0e:25:b9:e6:6b:bc:97:a7:ae: 4f:c2:5c:ef:10:26:a6:b4:b9:4b:26:a2:7b:32:07: 81:6c:08:c0:08:12:69:a8:42:ef:25:ce:00:ea:7d: 9e:24:6b:57:3a:bd:a2:79:35:86:f0:14:93:9d:92: 24:ca:e4:16:f9:f6:d0:10:66:05:c9:02:48:4f:b6: 89:78:59:fc:f4:59:e9:57:ad:7c:b4:12:41:25:44: b2:08:fe:b8:9a:a5:b3:6a:ca:90:8c:16:3d:63:ff: 49:6f:0d:6d:69:2e:37:0d:89:ed:f8:2b:94:1c:33: 46:ed:99:21:d9:8f:69:7f:56:3d:13:6e:f5:c4:43: bf:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:57:63:93:A4:C9:52:F2:A4:84:F5:61:0F:DB:60:6F:DE:49:35:0A X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b58e7b56-2b26-426d-bc23-141abdb481f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2efc::/47 Signature Algorithm: sha256WithRSAEncryption bb:d9:13:8d:53:7f:76:8e:1d:31:23:5e:c2:67:72:58:4b:99: 6b:d3:16:e0:6f:07:1b:97:4e:50:0d:4c:6b:8e:67:c2:47:a4: e0:ba:40:13:aa:0a:3d:05:78:4a:ac:30:3f:aa:59:22:6b:27: 85:aa:ca:4b:6a:8b:d3:4c:8b:9c:d5:e8:4f:83:66:5a:b1:96: 6a:a8:a6:3c:bf:59:78:9e:0f:27:ef:f2:ec:b2:63:03:01:ac: 56:f0:86:73:f9:6f:86:15:67:d5:62:6b:61:0b:bc:94:64:79: a5:62:8e:87:d7:bf:ff:97:a9:3f:6f:2a:cd:0b:a4:71:93:4a: 39:d7:89:75:26:f4:de:a2:44:96:c7:8b:a3:1d:4b:cd:2b:26: 87:07:99:e5:1d:1f:ca:b7:bc:f9:5a:eb:49:8a:ef:07:b1:5d: b9:53:ce:01:db:67:70:ea:1e:8d:71:5d:73:1a:cc:b3:08:ae: c6:60:79:f8:f6:07:16:83:b3:89:4d:f8:ba:51:c8:44:e1:f0: 68:7b:30:10:11:aa:50:d0:08:76:a2:c6:db:cd:55:5c:95:a0: 90:93:50:35:09:94:e9:b8:ef:0a:76:06:21:fe:90:eb:cc:8a: b9:43:4b:76:0d:47:af:94:4b:f6:d5:8d:c0:59:6b:e4:1c:bb: d1:c5:80:67 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUIXnsJHD5pP/w+xNitvRc5mO/sLswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEyMDAwMTIyWhcNMjYwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMDQ3ODc3MTBlMDIxODg3ZTRkYjlhMWE5ZDM5MWI0ZGMw M2U2ZGE0MjIwYzk5ZWIxYWQwOWIwOGY1MDk4MjI5MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSQpwIOoGIpffiMU6qQZ4xheJH45BF1poEOokEQS5n6Es+ zdyxVFd9TnpyEaXCK5D1IYya8+3qrBxD8s/GUx75Yp6cqOyuSkbWZstTFditTXd6 LLk2U3joPZqO7F3Z3kTXEP5Os5RcC8jIAWziv7TYKB7crHYkDrG2GXxfbA4lueZr vJenrk/CXO8QJqa0uUsmonsyB4FsCMAIEmmoQu8lzgDqfZ4ka1c6vaJ5NYbwFJOd kiTK5Bb59tAQZgXJAkhPtol4Wfz0WelXrXy0EkElRLII/riapbNqypCMFj1j/0lv DW1pLjcNie34K5QcM0btmSHZj2l/Vj0TbvXEQ78bAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU9Fdjk6TJUvKkhPVhD9tgb95JNQowHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2I1OGU3YjU2LTJiMjYtNDI2ZC1iYzIzLTE0MWFiZGI0ODFmMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAALvwwDQYJKoZIhvcNAQELBQADggEBALvZE41Tf3aOHTEjXsJnclhL mWvTFuBvBxuXTlANTGuOZ8JHpOC6QBOqCj0FeEqsMD+qWSJrJ4Wqyktqi9NMi5zV 6E+DZlqxlmqopjy/WXieDyfv8uyyYwMBrFbwhnP5b4YVZ9Via2ELvJRkeaVijofX v/+XqT9vKs0LpHGTSjnXiXUm9N6iRJbHi6MdS80rJocHmeUdH8q3vPla60mK7wex XblTzgHbZ3DqHo1xXXMazLMIrsZgefj2BxaDs4lN+LpRyETh8Gh7MBARqlDQCHai xtvNVVyVoJCTUDUJlOm47wp2BiH+kOvMirlDS3YNR6+US/bVjcBZa+Qcu9HFgGc= -----END CERTIFICATE-----Generated at Sun Mar 1 22:13:39 2026 by rpki-client