$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ddb16ec8-b98a-49ea-abbb-aa6500178c9e.roa File: ddb16ec8-b98a-49ea-abbb-aa6500178c9e.roa (raw, json) Hash identifier: lE1DCGgEO3YikwUNt/PCJt0bJ8XUSRI1oG/7V2kxUTM= Subject key identifier: 9B:86:69:0D:AB:91:03:45:75:61:C7:7F:80:3F:2F:87:F0:76:C1:7C Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 682D7448B4108FAA41597BA46587844E9BE90F42 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ddb16ec8-b98a-49ea-abbb-aa6500178c9e.roa Signing time: Fri 13 Feb 2026 04:01:44 +0000 ROA not before: Fri 13 Feb 2026 04:01:44 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3390::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:2d:74:48:b4:10:8f:aa:41:59:7b:a4:65:87:84:4e:9b:e9:0f:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Feb 13 04:01:44 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=abe48b2d117f87540af1ef3916b2cdccc7bcf843da51e6c122d4f69c122018eb, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:69:fc:58:81:88:96:1f:44:f9:f3:18:29:a0: 1e:e3:1a:8e:03:03:c7:a1:5d:4d:0b:b9:fb:23:5e: 9d:8e:ac:ec:63:73:c4:a4:9d:50:b4:f4:6c:5c:3b: d6:f7:95:28:8d:aa:d7:de:34:6b:40:3b:11:35:3c: b7:22:dc:b5:03:fe:2c:85:9f:5d:ec:3a:c4:dd:a6: 04:4c:f6:09:cd:b3:45:76:75:5d:ff:fd:d8:25:5b: bc:05:e6:35:b2:b1:67:99:69:bd:0a:46:46:55:f8: b8:ee:f3:0d:33:11:6c:85:9f:2f:0d:b5:ad:52:36: 91:ad:14:b9:b1:dd:f2:47:85:19:8a:1c:ce:26:26: 53:cd:7c:b0:0f:f5:b0:53:91:d5:bc:7d:65:1d:0e: fa:e3:1b:01:05:c4:31:4d:f1:13:19:23:c7:85:92: 24:96:1a:24:35:8c:60:14:22:fb:67:c6:3e:d3:b1: b1:b0:bc:6a:bc:36:80:c3:46:2c:dc:24:14:59:08: 02:b1:96:73:e2:d9:eb:58:e3:b6:69:99:9f:5a:3b: 48:2f:79:a4:ba:42:01:6d:a4:01:99:bc:66:6b:c6: a0:b4:39:92:2f:2f:99:56:5c:9f:d8:e8:70:34:a0: 87:b4:0f:35:7f:ed:47:42:bf:7d:f2:a3:1f:1b:f4: d5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:86:69:0D:AB:91:03:45:75:61:C7:7F:80:3F:2F:87:F0:76:C1:7C X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ddb16ec8-b98a-49ea-abbb-aa6500178c9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3390::/45 Signature Algorithm: sha256WithRSAEncryption 2e:6b:9c:d4:e5:06:fc:9b:4c:da:ce:87:e4:36:67:0f:87:ae: a4:6c:dc:b6:19:26:fd:31:01:28:47:63:6c:52:a7:95:bd:96: 10:98:35:31:6e:10:37:f1:fe:73:9c:fe:64:d7:fe:4a:2e:be: 13:2e:78:7c:81:9c:96:5c:0d:69:cc:1c:7e:a2:32:32:83:d3: 84:0c:53:8b:41:ac:6c:99:31:1d:96:52:e6:62:ee:77:7c:61: 99:7b:95:a6:4b:34:60:13:84:8d:02:fb:c9:1e:78:b3:7d:e2: b8:df:44:37:99:c2:00:c9:f0:31:51:f3:77:4d:64:e9:30:46: 35:a8:7e:c4:88:df:db:12:b9:74:22:14:46:cf:2f:ed:b1:3a: e2:cd:b6:69:01:42:0c:be:8f:f2:78:0b:7c:38:a1:0f:32:f0: ca:4f:53:1e:04:78:23:49:ed:07:85:ce:94:0d:ad:cf:24:79: 57:89:ac:04:3d:3b:86:1b:ce:7d:89:0a:25:89:a5:d7:a3:cb: 28:b1:bf:ae:2e:46:a8:9f:6b:14:2e:dc:e1:aa:67:23:f4:c6: 41:a3:79:3e:d0:9d:84:ca:92:a6:63:7c:ac:52:96:80:84:b5: 71:4a:29:c7:0c:17:7b:eb:6c:26:0c:3e:6f:e8:9b:40:1d:16: 1c:6a:8a:e1 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUaC10SLQQj6pBWXukZYeETpvpD0IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMDQwMTQ0WhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYmU0OGIyZDExN2Y4NzU0MGFmMWVmMzkxNmIyY2RjY2M3 YmNmODQzZGE1MWU2YzEyMmQ0ZjY5YzEyMjAxOGViMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8afxYgYiWH0T58xgpoB7jGo4DA8ehXU0LufsjXp2OrOxj c8SknVC09GxcO9b3lSiNqtfeNGtAOxE1PLci3LUD/iyFn13sOsTdpgRM9gnNs0V2 dV3//dglW7wF5jWysWeZab0KRkZV+Lju8w0zEWyFny8Nta1SNpGtFLmx3fJHhRmK HM4mJlPNfLAP9bBTkdW8fWUdDvrjGwEFxDFN8RMZI8eFkiSWGiQ1jGAUIvtnxj7T sbGwvGq8NoDDRizcJBRZCAKxlnPi2etY47ZpmZ9aO0gveaS6QgFtpAGZvGZrxqC0 OZIvL5lWXJ/Y6HA0oIe0DzV/7UdCv33yox8b9NWPAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUm4ZpDauRA0V1Ycd/gD8vh/B2wXwwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2RkYjE2ZWM4LWI5OGEtNDllYS1hYmJiLWFhNjUwMDE3OGM5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAAM5AwDQYJKoZIhvcNAQELBQADggEBAC5rnNTlBvybTNrOh+Q2Zw+H rqRs3LYZJv0xAShHY2xSp5W9lhCYNTFuEDfx/nOc/mTX/kouvhMueHyBnJZcDWnM HH6iMjKD04QMU4tBrGyZMR2WUuZi7nd8YZl7laZLNGAThI0C+8keeLN94rjfRDeZ wgDJ8DFR83dNZOkwRjWofsSI39sSuXQiFEbPL+2xOuLNtmkBQgy+j/J4C3w4oQ8y 8MpPUx4EeCNJ7QeFzpQNrc8keVeJrAQ9O4Ybzn2JCiWJpdejyyixv64uRqifaxQu 3OGqZyP0xkGjeT7QnYTKkqZjfKxSloCEtXFKKccMF3vrbCYMPm/om0AdFhxqiuE= -----END CERTIFICATE-----Generated at Mon Mar 2 09:40:13 2026 by rpki-client