$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c3e71b33-4bac-42ba-9552-e53e12255e93.roa File: c3e71b33-4bac-42ba-9552-e53e12255e93.roa (raw, json) Hash identifier: SY1z23lFiMndPKoN/B+HpOBx8CUp6ANIWAqJe/318pE= Subject key identifier: DA:62:88:FE:19:4E:DA:DD:08:14:18:D0:60:6D:DF:EA:65:EB:F7:FB Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 1A59B6509EAD2844DAB13FF627685CCB09286B86 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c3e71b33-4bac-42ba-9552-e53e12255e93.roa Signing time: Fri 13 Feb 2026 08:00:03 +0000 ROA not before: Fri 13 Feb 2026 08:00:03 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3ccc::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:59:b6:50:9e:ad:28:44:da:b1:3f:f6:27:68:5c:cb:09:28:6b:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Feb 13 08:00:03 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=8120ba36da100b7d44be5b8975b9f0722296480e918902b469468a54cc28f631, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:11:8b:57:ff:8b:13:e1:e2:d7:b1:e6:8d:11: 15:58:ed:ed:fe:d4:0b:bd:2c:e5:0c:65:7f:8a:58: b8:51:e6:af:3c:5c:a0:b5:9e:2e:c1:0a:d4:39:19: 15:eb:f6:4f:40:5f:5e:79:37:51:aa:11:6d:91:de: 35:1a:99:02:54:72:0b:ce:c7:f7:30:50:74:61:7e: ac:8e:e0:03:42:fd:6e:1a:d9:bd:1d:86:82:a4:47: e9:bf:f0:2d:5d:fa:09:d6:3c:69:57:c4:67:8c:73: 20:53:87:4d:f5:a1:8f:5a:72:b4:3b:6d:7e:98:8e: e4:b7:f7:74:b6:1f:c0:be:03:e1:96:20:e7:0d:0d: b6:b2:5f:41:ed:dd:90:fd:fd:4e:89:48:a8:79:fb: 3b:e6:7f:3a:9d:8c:87:1e:8a:5f:66:3c:bc:62:46: 57:0b:f7:d3:ec:9f:16:d8:a5:f5:a6:8e:12:36:b0: 70:e4:d6:6b:bd:28:7a:6b:d2:0d:55:fa:45:c9:6a: 32:d5:ee:77:6c:58:83:47:25:1f:90:e5:4f:ef:2b: 83:d1:8e:72:05:83:a2:63:99:71:e2:af:0e:6b:17: 9e:ff:04:9a:02:a0:b3:43:59:4f:d5:cb:86:6e:9d: 65:46:e8:30:0b:e6:de:d7:c1:5d:f2:e6:44:a3:2d: e9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:62:88:FE:19:4E:DA:DD:08:14:18:D0:60:6D:DF:EA:65:EB:F7:FB X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c3e71b33-4bac-42ba-9552-e53e12255e93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3ccc::/47 Signature Algorithm: sha256WithRSAEncryption a9:be:a1:8b:b6:c0:54:a0:a6:fa:78:5a:d2:84:b4:a1:27:44: 32:37:af:ec:51:53:9a:33:55:25:11:ef:06:d2:c2:7d:19:1a: 8e:91:15:75:af:e9:34:6b:be:7e:c9:c4:b8:2b:35:92:98:7f: ca:cb:e3:81:bf:a0:bb:78:c2:d5:1e:e9:ec:bc:af:e6:40:81: bd:08:19:c7:a4:f0:0e:d7:47:59:db:5f:5d:7f:a0:65:ae:4d: 27:48:23:ee:86:21:75:82:36:64:6d:ea:ed:9c:da:5d:40:51: 1c:d9:2f:7b:49:b8:9a:36:07:25:db:74:c4:7e:ec:4f:a5:7a: 51:e8:5f:76:74:fd:9b:a6:29:0e:62:d7:53:93:6c:fb:2b:49: 0e:dd:f7:4a:63:a7:ef:8e:09:8d:65:eb:b5:64:35:00:0d:c7: df:58:ce:7f:17:85:64:ab:13:06:c4:02:94:d0:62:83:13:72: 4b:08:f8:3c:8c:14:8a:cf:b4:62:65:17:1d:9d:45:38:bb:b1: 5e:62:e5:61:be:5e:cd:b0:43:ca:ea:a2:c0:80:eb:6f:bb:c8: 69:b5:88:cf:f8:f4:84:af:ab:35:6c:7b:30:08:80:f0:84:36: c9:79:c5:66:4d:a9:cb:e6:80:23:82:bf:66:83:22:70:f1:10: 79:a9:d2:21 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUGlm2UJ6tKETasT/2J2hcywkoa4YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMDgwMDAzWhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MTIwYmEzNmRhMTAwYjdkNDRiZTViODk3NWI5ZjA3MjIy OTY0ODBlOTE4OTAyYjQ2OTQ2OGE1NGNjMjhmNjMxMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCSEYtX/4sT4eLXseaNERVY7e3+1Au9LOUMZX+KWLhR5q88 XKC1ni7BCtQ5GRXr9k9AX155N1GqEW2R3jUamQJUcgvOx/cwUHRhfqyO4ANC/W4a 2b0dhoKkR+m/8C1d+gnWPGlXxGeMcyBTh031oY9acrQ7bX6YjuS393S2H8C+A+GW IOcNDbayX0Ht3ZD9/U6JSKh5+zvmfzqdjIceil9mPLxiRlcL99PsnxbYpfWmjhI2 sHDk1mu9KHpr0g1V+kXJajLV7ndsWINHJR+Q5U/vK4PRjnIFg6JjmXHirw5rF57/ BJoCoLNDWU/Vy4ZunWVG6DAL5t7XwV3y5kSjLen5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU2mKI/hlO2t0IFBjQYG3f6mXr9/swHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2MzZTcxYjMzLTRiYWMtNDJiYS05NTUyLWU1M2UxMjI1NWU5My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAPMwwDQYJKoZIhvcNAQELBQADggEBAKm+oYu2wFSgpvp4WtKEtKEn RDI3r+xRU5ozVSUR7wbSwn0ZGo6RFXWv6TRrvn7JxLgrNZKYf8rL44G/oLt4wtUe 6ey8r+ZAgb0IGcek8A7XR1nbX11/oGWuTSdII+6GIXWCNmRt6u2c2l1AURzZL3tJ uJo2ByXbdMR+7E+lelHoX3Z0/ZumKQ5i11OTbPsrSQ7d90pjp++OCY1l67VkNQAN x99Yzn8XhWSrEwbEApTQYoMTcksI+DyMFIrPtGJlFx2dRTi7sV5i5WG+Xs2wQ8rq osCA62+7yGm1iM/49ISvqzVsezAIgPCENsl5xWZNqcvmgCOCv2aDInDxEHmp0iE= -----END CERTIFICATE-----Generated at Sun Mar 1 22:03:45 2026 by rpki-client