$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d3f37ce9-66a3-462b-a15f-c214b268a35e.roa File: d3f37ce9-66a3-462b-a15f-c214b268a35e.roa (raw, json) Hash identifier: xX9i6Ma6BwlBMmCM+H1R2cmAsN5aSZKutEYBN4lvw4s= Subject key identifier: D5:46:F2:FA:4A:A2:69:E6:F7:FA:24:60:EA:A9:D5:65:11:31:30:E3 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 3BC91AB5AAE400AF69554466B5080474EDF6D668 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d3f37ce9-66a3-462b-a15f-c214b268a35e.roa Signing time: Fri 13 Feb 2026 04:21:23 +0000 ROA not before: Fri 13 Feb 2026 04:21:23 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2f78::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:c9:1a:b5:aa:e4:00:af:69:55:44:66:b5:08:04:74:ed:f6:d6:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Feb 13 04:21:23 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=eaf0057419cf97084c4140404be0c6f3d4b9d6b5f7819eebb62ba5534957993e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a1:da:a2:cd:85:a4:24:d4:34:3f:ca:b6:b1: 17:a1:87:2b:c1:c2:cb:7a:1e:81:f5:af:d0:b9:33: 82:ff:74:66:c3:31:fc:99:2a:d0:de:41:47:e9:e8: 40:24:ba:e6:41:c7:44:80:92:7d:a1:82:47:b2:13: 12:0b:80:43:e2:0b:45:05:06:88:21:42:03:88:5d: a9:10:e5:c1:87:14:12:b4:0c:f1:e8:ca:df:12:95: de:b9:7d:9b:7b:97:cb:67:f7:c7:77:30:07:96:01: 8c:91:62:5a:cb:22:c4:ce:ca:9d:24:29:0b:b7:9b: e9:d7:96:3d:ca:88:12:07:84:cc:6e:d4:62:fc:c6: ae:92:92:3d:dd:1b:2b:51:2c:5b:e6:b1:bf:d1:25: e0:6a:48:52:74:da:a2:c6:39:97:03:1d:b4:c5:33: 15:70:69:1a:50:e1:e2:ad:7b:2d:05:5e:13:88:3a: 96:6e:7d:ac:64:3a:13:c9:0e:df:31:eb:ab:8a:04: 7d:fb:3c:e4:a3:d6:d8:b5:5a:31:8e:a5:5c:49:af: 96:57:1f:0e:c5:ab:9f:99:2b:79:39:ca:b6:4f:7d: 40:01:31:a3:88:55:ce:4d:52:70:75:2a:4d:1f:05: 45:92:a9:12:6e:47:32:e2:a6:17:4e:c2:ad:5b:73: de:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:46:F2:FA:4A:A2:69:E6:F7:FA:24:60:EA:A9:D5:65:11:31:30:E3 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d3f37ce9-66a3-462b-a15f-c214b268a35e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2f78::/46 Signature Algorithm: sha256WithRSAEncryption 44:58:f0:86:b9:19:4c:48:ed:d6:16:c1:16:d5:3a:8b:66:9e: 56:60:c2:d0:c9:51:47:c3:f8:e1:ce:77:5e:4e:11:c1:51:90: 80:30:7c:9d:40:89:bd:78:39:36:2b:ee:92:5e:1e:ec:6f:52: 10:82:21:30:c7:7a:3d:1e:ca:db:db:7f:26:28:54:0e:08:63: 91:39:32:c5:9f:53:51:a8:bf:17:d0:0e:1f:31:a8:a4:3d:d1: 3d:5e:84:e2:41:c3:d0:ef:96:b5:e1:48:62:48:f9:92:e9:0d: 5b:c2:17:ca:1d:47:87:55:94:87:c2:67:32:1f:07:c1:46:d1: 80:40:b0:2f:e5:7f:de:e4:c9:d7:c5:8c:f8:82:37:c0:fd:ee: 10:46:4c:69:6b:51:cd:1d:81:6c:c5:30:94:7a:01:16:18:8c: da:2a:3e:23:a8:c5:29:0d:b8:a9:19:0a:de:5e:a7:5e:7e:9e: 4b:6b:ca:87:35:92:cb:f1:f7:26:7c:f3:09:5c:35:be:4b:28: 84:a4:b6:96:8f:0e:9f:95:25:e2:33:cc:2f:7c:5c:17:98:e4: 91:e6:e0:d7:44:8f:c7:dd:6e:b8:49:ed:d4:d1:1c:74:e0:76: 8f:51:63:28:bd:a9:f1:86:2b:a7:d3:c7:6d:37:c4:1c:c8:3a: 34:ce:3b:a9 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUO8katarkAK9pVURmtQgEdO321mgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMDQyMTIzWhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlYWYwMDU3NDE5Y2Y5NzA4NGM0MTQwNDA0YmUwYzZmM2Q0 YjlkNmI1Zjc4MTllZWJiNjJiYTU1MzQ5NTc5OTNlMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkodqizYWkJNQ0P8q2sRehhyvBwst6HoH1r9C5M4L/dGbD MfyZKtDeQUfp6EAkuuZBx0SAkn2hgkeyExILgEPiC0UFBoghQgOIXakQ5cGHFBK0 DPHoyt8Sld65fZt7l8tn98d3MAeWAYyRYlrLIsTOyp0kKQu3m+nXlj3KiBIHhMxu 1GL8xq6Skj3dGytRLFvmsb/RJeBqSFJ02qLGOZcDHbTFMxVwaRpQ4eKtey0FXhOI OpZufaxkOhPJDt8x66uKBH37POSj1ti1WjGOpVxJr5ZXHw7Fq5+ZK3k5yrZPfUAB MaOIVc5NUnB1Kk0fBUWSqRJuRzLiphdOwq1bc979AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU1Uby+kqiaeb3+iRg6qnVZRExMOMwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2QzZjM3Y2U5LTY2YTMtNDYyYi1hMTVmLWMyMTRiMjY4YTM1ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAL3gwDQYJKoZIhvcNAQELBQADggEBAERY8Ia5GUxI7dYWwRbVOotm nlZgwtDJUUfD+OHOd15OEcFRkIAwfJ1Aib14OTYr7pJeHuxvUhCCITDHej0eytvb fyYoVA4IY5E5MsWfU1GovxfQDh8xqKQ90T1ehOJBw9DvlrXhSGJI+ZLpDVvCF8od R4dVlIfCZzIfB8FG0YBAsC/lf97kydfFjPiCN8D97hBGTGlrUc0dgWzFMJR6ARYY jNoqPiOoxSkNuKkZCt5ep15+nktryoc1ksvx9yZ88wlcNb5LKISktpaPDp+VJeIz zC98XBeY5JHm4NdEj8fdbrhJ7dTRHHTgdo9RYyi9qfGGK6fTx203xBzIOjTOO6k= -----END CERTIFICATE-----Generated at Sun Mar 1 22:17:09 2026 by rpki-client