$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ca4ba002-0696-41af-8db0-d7d4a7e45fa9.roa File: ca4ba002-0696-41af-8db0-d7d4a7e45fa9.roa (raw, json) Hash identifier: VbzPRthYX5uPmnh6obUNxDvEblu4XefZx7zzR09Mnlk= Subject key identifier: 45:A7:2C:DD:E1:6F:18:1C:17:B8:9D:F8:BC:FF:46:DD:FD:38:E0:E1 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 0CE72BB2CD000EFE86C1155C4B0574A3D9A1C014 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ca4ba002-0696-41af-8db0-d7d4a7e45fa9.roa Signing time: Thu 12 Feb 2026 01:10:11 +0000 ROA not before: Thu 12 Feb 2026 01:10:11 +0000 ROA not after: Wed 13 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:11b8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:e7:2b:b2:cd:00:0e:fe:86:c1:15:5c:4b:05:74:a3:d9:a1:c0:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Feb 12 01:10:11 2026 GMT Not After : May 13 23:59:59 2026 GMT Subject: serialNumber=f95fbcea1131604d93b2309592a7eaf5a673de9830521c34e4c435dabaceb9a9, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5b:85:30:a8:87:45:2e:37:8b:d2:f4:e9:90: 0a:7f:0a:54:26:ce:98:8a:fa:3b:6a:95:fb:f8:21: 08:c0:17:75:0c:6b:2d:71:97:47:9c:e7:2f:7d:6b: 8e:40:40:0d:7a:00:69:83:c4:bb:26:e6:5c:db:11: 17:28:75:83:cd:43:02:fa:20:03:e3:e2:2a:d9:f6: d6:55:b2:be:b3:5d:cf:69:6b:8a:93:9f:20:56:2f: a2:a9:c1:fb:82:7a:0f:a2:86:2c:10:9b:f2:30:98: 34:f4:4a:95:62:e0:8d:a1:d4:e6:83:d6:8d:30:a7: 4d:79:3a:35:95:38:e7:56:b8:fc:7f:a4:41:75:a2: 07:e0:16:de:50:25:2b:ff:b6:e7:80:89:07:3c:eb: d0:bd:56:78:65:72:25:40:09:78:c9:a6:16:6b:35: 43:46:da:66:0b:45:44:95:95:dc:71:ed:4d:67:ca: a2:c8:d6:27:92:3a:41:30:88:46:2d:14:59:4b:62: af:05:4a:95:f9:43:07:da:a4:79:f0:68:b9:20:72: 05:8c:28:6f:87:e0:19:a1:ae:7a:cd:a6:a2:f1:69: 21:f5:e6:44:d3:05:65:32:25:2f:0c:c9:e0:dd:81: b5:85:6c:e3:1d:ab:c3:2e:ce:e3:8c:14:f4:af:c4: db:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A7:2C:DD:E1:6F:18:1C:17:B8:9D:F8:BC:FF:46:DD:FD:38:E0:E1 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ca4ba002-0696-41af-8db0-d7d4a7e45fa9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:11b8::/48 Signature Algorithm: sha256WithRSAEncryption b4:c3:7b:d5:de:60:37:c2:1a:d3:2e:f4:ff:da:05:6c:7a:26: a1:57:6a:63:79:73:b2:29:16:2b:d5:bb:96:54:cc:65:b1:1f: 5a:92:a2:2b:10:b1:e7:be:06:e8:7a:ab:37:26:7f:8c:4e:b9: 9f:fe:5f:4d:d9:2d:22:78:42:a1:bb:43:41:60:81:3d:51:13: 1d:67:9e:8c:69:3e:5d:90:be:76:bf:e8:63:ca:11:76:58:85: 2e:a0:60:de:5c:63:80:b0:f3:d2:63:e1:3f:bd:27:fa:b8:21: 74:a6:ec:b3:b5:70:2c:8b:ba:74:e0:ad:68:b9:1b:48:18:a0: 29:3d:34:ec:58:4f:23:9f:81:17:b3:5a:a2:12:54:15:d2:59: 2d:1a:b5:90:86:4b:52:e5:d3:e7:52:b2:d1:7b:09:c6:7f:3f: 52:34:a8:56:09:6e:a4:e5:5a:99:88:00:42:13:b3:5f:c5:67: 25:84:4f:4e:76:60:d4:7a:1a:fd:b3:e6:6f:ca:f8:7b:6a:87: 99:10:69:ad:ee:92:b5:7d:0b:fb:e1:3f:d9:6a:ec:32:54:14: 3c:30:47:2a:c0:0c:a3:a8:4f:52:7c:c7:a2:4e:be:ca:40:a4: f0:d0:e2:0d:e4:11:17:84:b4:de:a7:9d:cd:2d:3d:1e:66:df: 5b:b1:34:89 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDOcrss0ADv6GwRVcSwV0o9mhwBQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEyMDExMDExWhcNMjYwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BmOTVmYmNlYTExMzE2MDRkOTNiMjMwOTU5MmE3ZWFmNWE2 NzNkZTk4MzA1MjFjMzRlNGM0MzVkYWJhY2ViOWE5MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/W4UwqIdFLjeL0vTpkAp/ClQmzpiK+jtqlfv4IQjAF3UM ay1xl0ec5y99a45AQA16AGmDxLsm5lzbERcodYPNQwL6IAPj4irZ9tZVsr6zXc9p a4qTnyBWL6KpwfuCeg+ihiwQm/IwmDT0SpVi4I2h1OaD1o0wp015OjWVOOdWuPx/ pEF1ogfgFt5QJSv/tueAiQc869C9VnhlciVACXjJphZrNUNG2mYLRUSVldxx7U1n yqLI1ieSOkEwiEYtFFlLYq8FSpX5QwfapHnwaLkgcgWMKG+H4BmhrnrNpqLxaSH1 5kTTBWUyJS8MyeDdgbWFbOMdq8MuzuOMFPSvxNttAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQURacs3eFvGBwXuJ34vP9G3f044OEwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2NhNGJhMDAyLTA2OTYtNDFhZi04ZGIwLWQ3ZDRhN2U0NWZhOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAJAAEbgwDQYJKoZIhvcNAQELBQADggEBALTDe9XeYDfCGtMu9P/aBWx6 JqFXamN5c7IpFivVu5ZUzGWxH1qSoisQsee+Buh6qzcmf4xOuZ/+X03ZLSJ4QqG7 Q0FggT1REx1nnoxpPl2Qvna/6GPKEXZYhS6gYN5cY4Cw89Jj4T+9J/q4IXSm7LO1 cCyLunTgrWi5G0gYoCk9NOxYTyOfgRezWqISVBXSWS0atZCGS1Ll0+dSstF7CcZ/ P1I0qFYJbqTlWpmIAEITs1/FZyWET052YNR6Gv2z5m/K+Htqh5kQaa3ukrV9C/vh P9lq7DJUFDwwRyrADKOoT1J8x6JOvspApPDQ4g3kEReEtN6nnc0tPR5m31uxNIk= -----END CERTIFICATE-----Generated at Mon Mar 2 04:29:13 2026 by rpki-client