$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cdca7f73-aa7a-473f-97f1-381036bbd6cb.roa File: cdca7f73-aa7a-473f-97f1-381036bbd6cb.roa (raw, json) Hash identifier: JsMQPBsY9pkq5PhxiUJ7shk147ZnS7ydoQd+x2pUBf0= Subject key identifier: DD:AE:B2:2A:EE:EF:53:54:0B:4A:DE:94:46:AB:A8:79:B6:F1:94:78 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 5D21249595DEBFFD939F3C656488D7773EB05DFF Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cdca7f73-aa7a-473f-97f1-381036bbd6cb.roa Signing time: Fri 13 Feb 2026 03:31:31 +0000 ROA not before: Fri 13 Feb 2026 03:31:31 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3f64::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:21:24:95:95:de:bf:fd:93:9f:3c:65:64:88:d7:77:3e:b0:5d:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Feb 13 03:31:31 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=43d70bc9632033cdbace730417d0c3ec28df321727686eae3ed7faf6432c1e29, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9f:a4:cd:51:da:f0:75:15:99:96:32:06:58: 10:f7:57:f5:64:90:27:07:bf:f2:1b:8e:92:38:87: 88:9c:a2:77:24:03:71:0d:39:13:55:7a:e1:4c:79: 92:15:c5:4c:e2:41:25:78:9f:8b:66:47:d0:af:17: 18:42:c8:fd:9b:2c:6f:b0:08:96:ed:d0:56:9f:9a: c9:aa:26:9b:9a:0c:54:81:82:e4:bb:d0:0a:31:cb: 61:74:6a:d9:9c:97:92:c4:bf:b7:91:4f:fa:4c:66: b0:a3:c7:5c:06:65:a9:df:39:42:71:8f:d0:20:d8: 10:03:0e:59:f0:35:ac:ae:bd:6f:5f:4e:e5:45:c1: 19:7f:ff:60:5a:06:a3:c4:c1:ff:52:c0:4a:10:e0: 4b:d7:9b:9c:2e:89:ea:46:22:55:49:99:3b:da:b7: 17:66:7e:3c:95:21:7a:ca:c5:ac:61:79:5a:41:e6: 68:69:59:97:6b:87:10:17:2b:0a:cc:81:5c:a3:73: 03:a9:8d:46:5a:1d:b4:7a:70:fe:cb:96:fc:da:71: be:c6:ad:e2:c6:c2:31:0a:79:6f:ac:3d:5a:49:98: 88:28:1f:64:0c:16:0d:9f:a7:98:fb:49:18:b8:08: 6a:14:e1:05:21:2b:f2:1f:ab:8a:a8:60:2a:14:1f: 6f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:AE:B2:2A:EE:EF:53:54:0B:4A:DE:94:46:AB:A8:79:B6:F1:94:78 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cdca7f73-aa7a-473f-97f1-381036bbd6cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3f64::/47 Signature Algorithm: sha256WithRSAEncryption 83:26:ca:71:96:cc:56:88:ae:10:1c:69:2d:c9:52:85:68:3c: d6:ad:a4:11:8f:1f:94:03:fd:ff:8e:9a:84:76:cb:f7:9d:07: f1:33:30:7c:f1:7c:18:9e:e0:05:b9:92:9d:54:f2:bb:40:98: 1c:1f:d9:d1:7a:fe:dd:e5:69:b8:44:f2:c4:49:cb:8a:84:9a: f2:63:08:3e:9a:f4:0b:c4:48:04:8d:3d:97:4b:98:fe:aa:59: 74:7b:9a:79:24:af:18:1a:f6:02:ee:b4:5d:4b:25:04:df:d1: 56:17:a2:dd:42:b8:e5:ef:d7:2a:c3:c9:73:40:08:e3:69:7c: c8:31:d4:f8:f3:11:d9:d3:b7:32:d9:34:37:c7:ca:f0:98:e1: 00:9c:3e:aa:21:72:a4:1e:84:05:51:18:64:bd:c0:9d:73:5d: fd:10:e3:ba:98:8c:e7:73:47:c2:f1:95:5a:3c:b5:08:1b:8e: 18:ba:3a:de:08:ac:95:77:43:37:40:13:fb:3b:49:9f:38:eb: ce:e9:c0:40:db:49:5c:5a:38:66:39:4c:81:62:c7:48:d5:89: 47:f4:b3:ee:cf:4b:52:bb:b8:e5:fc:df:60:6c:5b:cb:3a:95: 88:2e:88:9e:82:70:c5:60:c7:10:34:17:4b:5c:69:05:dd:cc: 76:db:58:95 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXSEklZXev/2TnzxlZIjXdz6wXf8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMDMzMTMxWhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0M2Q3MGJjOTYzMjAzM2NkYmFjZTczMDQxN2QwYzNlYzI4 ZGYzMjE3Mjc2ODZlYWUzZWQ3ZmFmNjQzMmMxZTI5MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4n6TNUdrwdRWZljIGWBD3V/VkkCcHv/IbjpI4h4iconck A3ENORNVeuFMeZIVxUziQSV4n4tmR9CvFxhCyP2bLG+wCJbt0FafmsmqJpuaDFSB guS70Aoxy2F0atmcl5LEv7eRT/pMZrCjx1wGZanfOUJxj9Ag2BADDlnwNayuvW9f TuVFwRl//2BaBqPEwf9SwEoQ4EvXm5wuiepGIlVJmTvatxdmfjyVIXrKxaxheVpB 5mhpWZdrhxAXKwrMgVyjcwOpjUZaHbR6cP7Llvzacb7GreLGwjEKeW+sPVpJmIgo H2QMFg2fp5j7SRi4CGoU4QUhK/Ifq4qoYCoUH2/vAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU3a6yKu7vU1QLSt6URquoebbxlHgwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2NkY2E3ZjczLWFhN2EtNDczZi05N2YxLTM4MTAzNmJiZDZjYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAP2QwDQYJKoZIhvcNAQELBQADggEBAIMmynGWzFaIrhAcaS3JUoVo PNatpBGPH5QD/f+OmoR2y/edB/EzMHzxfBie4AW5kp1U8rtAmBwf2dF6/t3labhE 8sRJy4qEmvJjCD6a9AvESASNPZdLmP6qWXR7mnkkrxga9gLutF1LJQTf0VYXot1C uOXv1yrDyXNACONpfMgx1PjzEdnTtzLZNDfHyvCY4QCcPqohcqQehAVRGGS9wJ1z Xf0Q47qYjOdzR8LxlVo8tQgbjhi6Ot4IrJV3QzdAE/s7SZ84687pwEDbSVxaOGY5 TIFix0jViUf0s+7PS1K7uOX832BsW8s6lYguiJ6CcMVgxxA0F0tcaQXdzHbbWJU= -----END CERTIFICATE-----Generated at Sun Mar 1 23:49:44 2026 by rpki-client