$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c4870fe4-525a-43d6-9c50-bb60f79af0c4.roa File: c4870fe4-525a-43d6-9c50-bb60f79af0c4.roa (raw, json) Hash identifier: JYYe58+a8yZTWlIpmqurwftYIuobowewu4D13TvuZ6Y= Subject key identifier: B8:5B:89:19:4F:99:17:9E:0F:7B:77:E6:8C:E0:3B:29:98:21:E5:98 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 050807581DC0D0400A579F9395A07FDEC7498009 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c4870fe4-525a-43d6-9c50-bb60f79af0c4.roa Signing time: Thu 12 Feb 2026 02:40:43 +0000 ROA not before: Thu 12 Feb 2026 02:40:43 +0000 ROA not after: Wed 13 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1f9e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:08:07:58:1d:c0:d0:40:0a:57:9f:93:95:a0:7f:de:c7:49:80:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Feb 12 02:40:43 2026 GMT Not After : May 13 23:59:59 2026 GMT Subject: serialNumber=850c5a36be29ba8c34c6602b71287c792be00b99bcb4d4fb7404d3814edbc7b5, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:fa:cb:a9:68:52:09:7b:25:0d:48:e6:4e:9c: e0:99:25:82:f9:7c:90:02:ba:49:df:f8:73:39:9f: b1:92:09:d2:06:a7:5f:72:fa:19:c8:6d:63:c4:05: 75:7b:54:c3:f5:7c:03:dc:c5:75:d2:1d:1d:8a:f6: 92:90:7c:9d:4b:26:ee:88:f1:3e:88:09:c5:cd:b3: 20:1c:33:ec:b1:31:25:ff:58:85:e3:ea:84:19:e6: b1:ba:bd:fe:78:c0:b5:c0:58:4a:9c:45:c1:c2:e0: 9e:fe:52:ce:0e:3d:26:a1:56:19:20:04:f2:5d:ff: 70:04:83:e7:59:32:4f:c0:71:78:0a:f8:31:e7:47: 9e:c0:4f:88:6c:c9:04:78:d0:78:e0:6e:2e:84:e5: 69:6e:20:4b:74:6e:a5:13:29:44:21:3f:d6:64:72: de:54:5d:37:6b:b3:9b:35:66:c3:29:c8:b6:d0:20: dc:0d:e1:71:ec:0d:e9:7a:7b:03:22:b7:58:bf:aa: 3b:45:bd:71:06:4e:1d:cc:c5:e9:09:94:43:63:c6: 8d:7d:1d:43:db:5d:1c:d8:0c:f4:b8:e0:7a:99:c8: e6:96:14:de:9e:3c:9b:de:bb:0e:08:fc:b4:47:42: 7b:60:77:b2:02:63:ea:6c:82:8d:5a:ed:2a:12:52: 3d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:5B:89:19:4F:99:17:9E:0F:7B:77:E6:8C:E0:3B:29:98:21:E5:98 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c4870fe4-525a-43d6-9c50-bb60f79af0c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1f9e::/48 Signature Algorithm: sha256WithRSAEncryption 8e:d0:d1:1d:3c:27:b3:25:dd:34:29:67:ce:4c:e8:77:7b:cb: 6e:d5:e5:d6:5f:74:1e:cc:16:8b:80:06:f1:53:16:29:04:f5: 9a:e7:c1:f4:06:00:ab:ef:5f:06:3d:1f:4f:86:f4:e8:83:b8: 89:3c:d7:0f:4f:9b:ac:6c:2d:c9:f2:7d:6d:f7:c3:1a:86:a0: d4:75:09:3b:34:8c:ea:de:d9:e2:f1:5d:6e:27:13:3e:c2:4a: a6:9c:50:96:81:5c:3a:9e:d6:7f:3a:f0:be:f4:8e:ba:09:60: e7:79:80:b5:20:45:6b:14:fa:fe:89:e3:93:98:b5:4c:8f:5e: 96:85:61:b0:4a:9c:92:93:3d:92:9f:d3:20:0b:97:20:b9:78: 12:33:c1:22:76:f6:15:f8:73:0c:24:1d:05:e5:a1:a7:d5:98: cf:df:ad:03:53:ed:cb:49:9e:4c:88:e1:65:be:37:db:a3:c2: 97:98:28:0b:d4:e3:f9:00:36:0f:e1:a8:2d:8b:f3:b9:c7:74: ec:7b:d0:5a:e6:55:72:63:b6:80:31:83:77:df:32:39:db:8d: 7c:bf:8f:a5:7c:13:5b:00:9c:d0:01:2e:b9:93:ce:c8:ce:a2: 96:60:f5:f9:95:fb:67:2e:8e:9a:0d:50:36:04:9a:43:1f:9f: 9f:54:3d:e0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBQgHWB3A0EAKV5+TlaB/3sdJgAkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEyMDI0MDQzWhcNMjYwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NTBjNWEzNmJlMjliYThjMzRjNjYwMmI3MTI4N2M3OTJi ZTAwYjk5YmNiNGQ0ZmI3NDA0ZDM4MTRlZGJjN2I1MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDf+supaFIJeyUNSOZOnOCZJYL5fJACuknf+HM5n7GSCdIG p19y+hnIbWPEBXV7VMP1fAPcxXXSHR2K9pKQfJ1LJu6I8T6ICcXNsyAcM+yxMSX/ WIXj6oQZ5rG6vf54wLXAWEqcRcHC4J7+Us4OPSahVhkgBPJd/3AEg+dZMk/AcXgK +DHnR57AT4hsyQR40Hjgbi6E5WluIEt0bqUTKUQhP9Zkct5UXTdrs5s1ZsMpyLbQ INwN4XHsDel6ewMit1i/qjtFvXEGTh3MxekJlENjxo19HUPbXRzYDPS44HqZyOaW FN6ePJveuw4I/LRHQntgd7ICY+psgo1a7SoSUj37AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUuFuJGU+ZF54Pe3fmjOA7KZgh5ZgwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2M0ODcwZmU0LTUyNWEtNDNkNi05YzUwLWJiNjBmNzlhZjBjNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAJAAH54wDQYJKoZIhvcNAQELBQADggEBAI7Q0R08J7Ml3TQpZ85M6Hd7 y27V5dZfdB7MFouABvFTFikE9ZrnwfQGAKvvXwY9H0+G9OiDuIk81w9Pm6xsLcny fW33wxqGoNR1CTs0jOre2eLxXW4nEz7CSqacUJaBXDqe1n868L70jroJYOd5gLUg RWsU+v6J45OYtUyPXpaFYbBKnJKTPZKf0yALlyC5eBIzwSJ29hX4cwwkHQXloafV mM/frQNT7ctJnkyI4WW+N9ujwpeYKAvU4/kANg/hqC2L87nHdOx70FrmVXJjtoAx g3ffMjnbjXy/j6V8E1sAnNABLrmTzsjOopZg9fmV+2cujpoNUDYEmkMfn59UPeA= -----END CERTIFICATE-----Generated at Sun Mar 1 23:55:13 2026 by rpki-client