$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d3ffa665-5512-47e2-a644-3c41fd88f9b3.roa File: d3ffa665-5512-47e2-a644-3c41fd88f9b3.roa (raw, json) Hash identifier: l8bSpJ4/lFpBXfGkHvFHQ7TBDxmPJ7gE0p63PFwWJyM= Subject key identifier: 0D:BE:77:DF:BA:15:6D:98:A7:3F:A9:3A:94:14:8C:58:25:4A:8B:95 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 5E670C8F4FBB51330AB468EB15D7FEB9875A8962 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d3ffa665-5512-47e2-a644-3c41fd88f9b3.roa Signing time: Fri 13 Feb 2026 09:41:04 +0000 ROA not before: Fri 13 Feb 2026 09:41:04 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:37e4::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:67:0c:8f:4f:bb:51:33:0a:b4:68:eb:15:d7:fe:b9:87:5a:89:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Feb 13 09:41:04 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=2ef3c7704770ca787995b783824d0ad6296cbb904d2f4201ed8ecb50251e132f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1d:29:58:cd:d0:55:69:3a:ae:68:e0:28:06: 29:d8:13:e1:94:5b:ac:a0:97:93:b3:2f:41:6f:86: f3:fa:bc:81:c5:dd:3b:a1:6a:11:ab:cc:52:72:ec: ca:c1:62:8e:c0:d8:5c:28:37:ff:9e:ee:0a:ec:1d: 99:91:58:78:92:58:2b:cb:6b:c6:aa:5c:00:77:23: b7:6d:3c:d3:75:57:d1:f3:8d:c0:c7:de:dc:4b:4b: 24:5a:49:cf:28:2d:60:fe:04:22:04:6e:1e:dd:ac: 41:41:41:a4:47:dc:bb:d7:fc:e8:b5:1d:70:d0:7d: b4:28:d3:c2:07:5f:63:57:91:6d:7a:31:e2:18:d7: e3:48:12:f5:b8:fa:30:31:bb:0a:8d:1d:50:35:a3: b1:bd:37:94:0f:f7:bb:8f:6d:7e:60:61:70:70:07: 8b:a1:9c:d1:2a:48:5a:52:14:d8:a5:75:f3:44:2b: 14:53:8b:8f:1a:e5:71:6f:79:ae:58:68:3a:dc:cb: 9e:fa:9c:06:53:6e:b0:b9:85:8b:1f:9a:e2:d9:76: ee:25:11:07:d8:84:6a:ee:4d:52:fe:ce:a6:7b:94: 9a:f5:6d:8c:ff:d8:92:12:4f:73:0d:d6:34:82:8d: b7:26:20:d7:09:65:78:f0:06:3f:30:af:9f:d5:81: bb:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:BE:77:DF:BA:15:6D:98:A7:3F:A9:3A:94:14:8C:58:25:4A:8B:95 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d3ffa665-5512-47e2-a644-3c41fd88f9b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:37e4::/47 Signature Algorithm: sha256WithRSAEncryption 90:9e:5e:23:cc:8c:83:80:5e:bc:93:9c:37:fb:48:d5:63:fe: 11:e2:a7:04:c5:32:66:f6:e7:39:f9:90:a7:0d:b7:ef:cb:7e: b4:52:ca:c4:22:58:eb:2e:27:91:de:4d:ac:88:e6:fa:f6:5f: f1:6f:68:83:c6:54:bf:72:1f:db:0f:41:9f:e9:b9:4c:be:b1: 6a:58:09:75:7c:e6:a8:9f:2c:4a:84:6e:1f:45:df:bb:ae:ac: 7e:fe:fd:6e:1c:1b:e0:90:e2:e7:a4:cc:b0:94:cd:0c:37:37: 4b:af:e3:bb:33:89:91:16:97:15:c6:87:d9:58:22:db:10:28: 52:9f:d0:c1:2d:62:f0:70:f0:e5:ab:78:2d:33:ed:fb:00:81: f5:e7:bc:14:be:c7:8b:42:0d:ee:c3:0f:0b:87:d3:2a:65:cd: 80:94:a9:f5:bc:76:2a:fe:e5:f4:9b:9f:7b:f0:5c:f3:ca:19: 4d:46:b3:1d:67:cf:d9:5f:bc:36:47:3f:f6:30:de:ad:79:30: 9d:d4:7a:9b:9c:53:42:47:64:92:c9:ee:a1:c9:81:2f:9f:e3: 8a:39:1b:af:5d:9a:58:d9:41:71:70:01:35:9a:74:37:9c:04: 5d:59:9b:00:a4:4d:82:eb:2a:aa:fc:84:bb:09:64:71:5b:41: 1f:8e:a0:58 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXmcMj0+7UTMKtGjrFdf+uYdaiWIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMDk0MTA0WhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZWYzYzc3MDQ3NzBjYTc4Nzk5NWI3ODM4MjRkMGFkNjI5 NmNiYjkwNGQyZjQyMDFlZDhlY2I1MDI1MWUxMzJmMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPHSlYzdBVaTquaOAoBinYE+GUW6ygl5OzL0FvhvP6vIHF 3TuhahGrzFJy7MrBYo7A2FwoN/+e7grsHZmRWHiSWCvLa8aqXAB3I7dtPNN1V9Hz jcDH3txLSyRaSc8oLWD+BCIEbh7drEFBQaRH3LvX/Oi1HXDQfbQo08IHX2NXkW16 MeIY1+NIEvW4+jAxuwqNHVA1o7G9N5QP97uPbX5gYXBwB4uhnNEqSFpSFNildfNE KxRTi48a5XFvea5YaDrcy576nAZTbrC5hYsfmuLZdu4lEQfYhGruTVL+zqZ7lJr1 bYz/2JIST3MN1jSCjbcmINcJZXjwBj8wr5/VgbtzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUDb5337oVbZinP6k6lBSMWCVKi5UwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2QzZmZhNjY1LTU1MTItNDdlMi1hNjQ0LTNjNDFmZDg4ZjliMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAN+QwDQYJKoZIhvcNAQELBQADggEBAJCeXiPMjIOAXryTnDf7SNVj /hHipwTFMmb25zn5kKcNt+/LfrRSysQiWOsuJ5HeTayI5vr2X/FvaIPGVL9yH9sP QZ/puUy+sWpYCXV85qifLEqEbh9F37uurH7+/W4cG+CQ4uekzLCUzQw3N0uv47sz iZEWlxXGh9lYItsQKFKf0MEtYvBw8OWreC0z7fsAgfXnvBS+x4tCDe7DDwuH0ypl zYCUqfW8dir+5fSbn3vwXPPKGU1Gsx1nz9lfvDZHP/Yw3q15MJ3UepucU0JHZJLJ 7qHJgS+f44o5G69dmljZQXFwATWadDecBF1ZmwCkTYLrKqr8hLsJZHFbQR+OoFg= -----END CERTIFICATE-----Generated at Mon Mar 2 10:36:03 2026 by rpki-client