$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bfd55fbf-0037-4880-b3ca-24c6b4313864.roa File: bfd55fbf-0037-4880-b3ca-24c6b4313864.roa (raw, json) Hash identifier: B3/vjg8ETNq0To26vj+b0MyXgkkbqrrMsf8rGyDHQsg= Subject key identifier: 76:90:83:C5:38:01:3A:38:3A:AE:E4:0A:C4:E1:81:11:81:CB:B2:1B Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 5D3C8C2B87A6006B31E6B2649645987233303129 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bfd55fbf-0037-4880-b3ca-24c6b4313864.roa Signing time: Fri 13 Feb 2026 14:00:12 +0000 ROA not before: Fri 13 Feb 2026 14:00:12 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3696::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:3c:8c:2b:87:a6:00:6b:31:e6:b2:64:96:45:98:72:33:30:31:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Feb 13 14:00:12 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=f6848cedb1eda6cd021364088ee3215cbbd02fa9f0301bae5ab3cf208f6619f7, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ba:b1:ac:2b:4a:df:cf:11:77:57:39:b7:df: 26:c3:6d:1b:1b:7f:1a:3f:f9:50:7c:b4:66:7c:ec: ab:e1:00:2d:79:97:b6:ac:3d:de:7a:d8:fb:ff:75: 20:df:60:a7:09:54:e9:1e:ce:b2:45:36:e2:d1:d7: 47:f8:aa:e2:a1:b1:93:95:d0:13:1a:2f:bd:ea:ff: a8:21:86:ce:e7:85:2d:ce:94:a0:93:10:65:cc:31: ad:fe:92:e1:39:c8:00:74:12:5b:cb:ef:01:fd:b5: c3:30:e8:61:4b:cf:fc:6b:02:2b:6c:0b:a7:4e:b8: b8:ff:b7:e4:c9:4d:44:1a:98:c7:45:50:77:29:0d: e8:ed:c4:d1:35:eb:18:ac:c3:24:37:83:d3:81:04: 1e:a4:64:4e:c2:e2:1f:22:b8:53:5d:56:76:83:19: 80:27:bf:1a:5c:df:7e:fd:a7:85:d5:00:28:10:58: a0:51:d6:df:e2:31:31:50:d3:e6:12:46:ec:9d:20: e9:a7:f7:6e:b9:b6:50:e1:55:b2:de:47:f0:7b:ee: 30:59:a9:43:3e:d7:e3:e0:c4:0f:22:68:eb:5b:eb: b4:d1:4c:18:d3:5d:58:41:c1:90:c0:d4:80:4b:ec: be:91:a2:ad:0f:43:9c:8f:01:fc:e7:3b:96:90:63: b7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:90:83:C5:38:01:3A:38:3A:AE:E4:0A:C4:E1:81:11:81:CB:B2:1B X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bfd55fbf-0037-4880-b3ca-24c6b4313864.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3696::/47 Signature Algorithm: sha256WithRSAEncryption 7d:70:aa:fd:38:8c:64:29:11:49:67:d3:58:3e:24:32:cc:a4: 8e:b1:f9:9a:bd:73:1d:53:5c:f2:db:9a:6d:3b:6a:be:9f:0f: 3e:fd:89:af:1f:37:04:f5:cd:e9:fe:a9:26:35:39:b6:c0:a7: 84:e4:67:58:7d:7a:df:97:b5:85:3f:26:4b:b3:b0:9c:ed:e5: 17:66:89:09:a0:17:0d:7b:d8:ad:7b:e0:b9:b0:34:1f:2d:f9: 9f:25:eb:91:c9:64:27:52:79:d6:af:f5:97:fb:49:ca:57:a1: 73:6c:bc:82:bb:e7:a5:f3:18:0f:d1:d8:4e:86:6d:4f:51:6d: 5b:50:6c:94:14:15:4c:37:02:24:f2:5e:86:d6:e7:8a:0d:39: 62:38:47:05:84:42:ef:86:64:11:5a:22:ef:1a:ec:55:f8:b2: 13:7d:26:5a:14:c7:a9:92:37:3a:34:dd:07:4c:b9:c0:1b:41: d6:8d:6a:a3:8a:1a:16:71:df:31:2c:e6:b6:da:2f:ec:20:56: 9d:bb:7b:76:c8:3f:9e:70:a5:fc:55:85:3c:5a:ff:b9:bf:6a: 71:ff:97:60:c0:51:2d:31:e8:d7:ab:1e:2b:0c:be:50:01:1b: 45:2f:60:9e:5c:ad:7a:08:8f:c2:ba:ac:ef:3f:0a:07:01:9c: 67:48:1f:79 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXTyMK4emAGsx5rJklkWYcjMwMSkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMTQwMDEyWhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNjg0OGNlZGIxZWRhNmNkMDIxMzY0MDg4ZWUzMjE1Y2Ji ZDAyZmE5ZjAzMDFiYWU1YWIzY2YyMDhmNjYxOWY3MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUurGsK0rfzxF3Vzm33ybDbRsbfxo/+VB8tGZ87KvhAC15 l7asPd562Pv/dSDfYKcJVOkezrJFNuLR10f4quKhsZOV0BMaL73q/6ghhs7nhS3O lKCTEGXMMa3+kuE5yAB0ElvL7wH9tcMw6GFLz/xrAitsC6dOuLj/t+TJTUQamMdF UHcpDejtxNE16xiswyQ3g9OBBB6kZE7C4h8iuFNdVnaDGYAnvxpc3379p4XVACgQ WKBR1t/iMTFQ0+YSRuydIOmn9265tlDhVbLeR/B77jBZqUM+1+PgxA8iaOtb67TR TBjTXVhBwZDA1IBL7L6Roq0PQ5yPAfznO5aQY7e9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUdpCDxTgBOjg6ruQKxOGBEYHLshswHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2JmZDU1ZmJmLTAwMzctNDg4MC1iM2NhLTI0YzZiNDMxMzg2NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAANpYwDQYJKoZIhvcNAQELBQADggEBAH1wqv04jGQpEUln01g+JDLM pI6x+Zq9cx1TXPLbmm07ar6fDz79ia8fNwT1zen+qSY1ObbAp4TkZ1h9et+XtYU/ JkuzsJzt5RdmiQmgFw172K174LmwNB8t+Z8l65HJZCdSedav9Zf7ScpXoXNsvIK7 56XzGA/R2E6GbU9RbVtQbJQUFUw3AiTyXobW54oNOWI4RwWEQu+GZBFaIu8a7FX4 shN9JloUx6mSNzo03QdMucAbQdaNaqOKGhZx3zEs5rbaL+wgVp27e3bIP55wpfxV hTxa/7m/anH/l2DAUS0x6NerHisMvlABG0UvYJ5crXoIj8K6rO8/CgcBnGdIH3k= -----END CERTIFICATE-----Generated at Sun Mar 1 22:12:49 2026 by rpki-client