$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ed88bb5c-8a90-4e41-870e-0d87a561cb48.roa File: ed88bb5c-8a90-4e41-870e-0d87a561cb48.roa (raw, json) Hash identifier: QBw4J70PJ+oIO92ACpOGkpnDZxIVZvW9QPOJgvsTtUk= Subject key identifier: DD:98:AF:0C:99:17:44:52:CA:F0:60:D4:ED:BC:20:23:62:2E:83:2D Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 77D8B076A95C9786E4B7007C0BAF31CAE60DE238 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ed88bb5c-8a90-4e41-870e-0d87a561cb48.roa Signing time: Fri 13 Feb 2026 05:51:18 +0000 ROA not before: Fri 13 Feb 2026 05:51:18 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2a20::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:d8:b0:76:a9:5c:97:86:e4:b7:00:7c:0b:af:31:ca:e6:0d:e2:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Feb 13 05:51:18 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=bf932e8ec41910f92a63df31e414e77f663dcd8421a90349937ad97e55c4d1eb, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:99:5b:a7:78:24:23:2d:55:22:27:73:99:b0: a6:a6:10:60:91:db:c4:d7:91:49:7c:bd:2f:d8:b6: 1b:5b:47:3f:9f:65:ac:a1:6b:07:4b:1b:31:1a:2c: a4:fd:df:04:aa:be:23:2b:74:cb:0f:ed:ee:de:5d: aa:34:56:1d:9e:dd:ed:b7:21:de:fe:1a:5b:63:7c: ab:b0:c3:17:e5:27:9a:db:31:ec:5b:1c:60:93:38: ef:06:26:07:89:35:3f:f9:3f:de:69:41:dd:2b:64: 9d:6c:57:2b:27:d0:5d:c6:79:ca:d5:59:11:7c:51: 6d:3d:ec:a1:f3:10:94:9f:ea:37:d7:55:db:71:75: 3f:a3:d8:5c:35:cd:d1:ff:42:4c:cf:96:ca:18:67: cc:0b:85:9f:fc:cf:bf:1d:89:b1:13:05:cc:d4:dc: 50:09:8d:02:ac:8b:95:98:ad:bb:d0:40:20:78:8a: 66:7a:51:e5:d3:f7:de:9a:db:53:97:a2:6b:d0:d5: 2a:75:33:71:8c:7b:5a:bd:12:37:a4:db:7a:69:05: a2:9a:49:20:6e:e1:b2:cf:8f:62:58:b0:aa:1f:a3: 93:33:04:af:fa:a4:96:de:73:97:b5:99:04:25:6b: 24:2a:fe:78:0f:02:4b:40:f4:27:3c:56:bc:b1:06: 8b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:98:AF:0C:99:17:44:52:CA:F0:60:D4:ED:BC:20:23:62:2E:83:2D X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ed88bb5c-8a90-4e41-870e-0d87a561cb48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2a20::/46 Signature Algorithm: sha256WithRSAEncryption 90:aa:8d:17:6f:36:72:57:73:77:59:03:b2:77:46:93:cc:cb: 82:92:85:7b:79:e2:a1:a1:38:88:88:b0:34:16:03:04:e8:51: 67:e4:d2:59:83:1a:39:98:56:cd:4b:70:1f:25:45:f2:e1:c4: f1:07:66:aa:ab:da:39:d9:7f:69:aa:f9:c7:11:d0:32:23:d4: f9:c6:4c:5c:7e:df:56:bb:64:93:f6:0d:9e:a9:f7:df:50:9b: 76:e4:48:15:cb:27:c8:f2:56:09:d6:4b:2d:42:9b:10:24:73: 49:b6:c8:c8:a6:e5:1b:e7:3f:37:6b:15:87:86:25:56:45:98: f0:64:33:d0:71:4e:0d:c6:15:6e:17:87:ea:19:99:24:31:38: 75:12:87:ec:b6:13:74:2d:f7:29:b1:80:03:1d:68:88:54:00: 74:dc:69:d1:60:ee:7b:e6:78:8f:a2:41:67:6b:26:91:62:ca: 2e:07:61:7a:df:1f:02:96:25:11:c1:76:01:01:2d:75:35:25: de:eb:9f:9e:78:a9:18:89:69:f1:44:cf:ce:b3:ac:72:b0:3e: 51:88:b9:14:f7:91:ab:d0:05:3d:a5:2e:4e:ee:bb:c6:9e:4b: fe:67:80:51:54:4c:ba:25:cc:df:81:5b:3e:0e:99:2c:58:ca: df:92:04:df -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUd9iwdqlcl4bktwB8C68xyuYN4jgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMDU1MTE4WhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZjkzMmU4ZWM0MTkxMGY5MmE2M2RmMzFlNDE0ZTc3ZjY2 M2RjZDg0MjFhOTAzNDk5MzdhZDk3ZTU1YzRkMWViMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7mVuneCQjLVUiJ3OZsKamEGCR28TXkUl8vS/YthtbRz+f ZayhawdLGzEaLKT93wSqviMrdMsP7e7eXao0Vh2e3e23Id7+GltjfKuwwxflJ5rb MexbHGCTOO8GJgeJNT/5P95pQd0rZJ1sVysn0F3GecrVWRF8UW097KHzEJSf6jfX VdtxdT+j2Fw1zdH/QkzPlsoYZ8wLhZ/8z78dibETBczU3FAJjQKsi5WYrbvQQCB4 imZ6UeXT996a21OXomvQ1Sp1M3GMe1q9Ejek23ppBaKaSSBu4bLPj2JYsKofo5Mz BK/6pJbec5e1mQQlayQq/ngPAktA9Cc8VryxBotjAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU3ZivDJkXRFLK8GDU7bwgI2Iugy0wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2VkODhiYjVjLThhOTAtNGU0MS04NzBlLTBkODdhNTYxY2I0OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAKiAwDQYJKoZIhvcNAQELBQADggEBAJCqjRdvNnJXc3dZA7J3RpPM y4KShXt54qGhOIiIsDQWAwToUWfk0lmDGjmYVs1LcB8lRfLhxPEHZqqr2jnZf2mq +ccR0DIj1PnGTFx+31a7ZJP2DZ6p999Qm3bkSBXLJ8jyVgnWSy1CmxAkc0m2yMim 5RvnPzdrFYeGJVZFmPBkM9BxTg3GFW4Xh+oZmSQxOHUSh+y2E3Qt9ymxgAMdaIhU AHTcadFg7nvmeI+iQWdrJpFiyi4HYXrfHwKWJRHBdgEBLXU1Jd7rn554qRiJafFE z86zrHKwPlGIuRT3kavQBT2lLk7uu8aeS/5ngFFUTLolzN+BWz4OmSxYyt+SBN8= -----END CERTIFICATE-----Generated at Mon Mar 2 03:23:32 2026 by rpki-client