$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f3ff4c52-b64d-49c9-9cab-cbf27041e56a.roa File: f3ff4c52-b64d-49c9-9cab-cbf27041e56a.roa (raw, json) Hash identifier: yCkEy8Ky/ieEGMupir+MojKVM1peQm/LenjPq332kIQ= Subject key identifier: 66:13:8C:E9:5E:BB:EE:47:62:AA:08:D5:56:D9:3C:EC:F0:43:1B:A4 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 7B7F6300B2800EF3DEEE1F4B0FCC4429C2B9B4E4 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f3ff4c52-b64d-49c9-9cab-cbf27041e56a.roa Signing time: Fri 13 Feb 2026 08:11:36 +0000 ROA not before: Fri 13 Feb 2026 08:11:36 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3dc0::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:7f:63:00:b2:80:0e:f3:de:ee:1f:4b:0f:cc:44:29:c2:b9:b4:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Feb 13 08:11:36 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=39defc0e589dd18b0536786b89e60ab79c6234cff546fdbee4b703ad2d259923, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3d:a3:50:1d:ba:1e:59:3c:86:86:ac:0b:69: 83:e4:c1:77:ee:e9:50:1a:5f:25:0b:a7:db:87:df: 7d:99:44:86:73:ac:18:6a:e9:59:0c:0e:aa:c4:1f: 3b:d1:d4:08:76:0f:3b:ea:bf:de:f4:13:f0:ab:29: 6a:13:50:ce:48:ec:fb:3c:19:3b:62:e3:63:38:ca: b1:4b:0f:3a:55:8d:85:e8:68:65:75:7a:2d:a7:13: 9a:2c:42:ca:0c:ac:14:18:b6:c9:5f:32:cd:9b:f7: 33:47:5e:31:15:91:48:af:35:03:fb:52:3d:79:80: 13:0a:6f:e4:c0:a7:ac:b9:26:43:f5:62:55:39:4a: 96:c8:90:5f:13:87:04:f5:ff:e5:0c:f8:dc:05:02: eb:4d:2c:f1:64:8e:c2:1d:f0:e1:86:2c:af:72:52: 04:de:ed:b0:73:ea:90:41:ff:60:5b:6d:b0:72:c5: a6:e5:ee:a8:34:d7:c3:a0:ea:75:df:86:7a:a6:4b: 1d:5e:aa:54:6e:27:c3:25:c5:95:50:7b:c6:53:4f: dd:24:53:f1:9e:c6:37:b1:06:a7:54:9b:59:e8:64: 0f:ee:73:ec:b5:fa:ce:a5:f6:6d:eb:98:e5:db:4a: e1:65:48:c7:b8:5a:f7:d0:5a:8f:b6:25:31:ad:0f: 6d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:13:8C:E9:5E:BB:EE:47:62:AA:08:D5:56:D9:3C:EC:F0:43:1B:A4 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f3ff4c52-b64d-49c9-9cab-cbf27041e56a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3dc0::/47 Signature Algorithm: sha256WithRSAEncryption 06:5a:5d:19:7e:0d:31:92:99:59:39:27:61:97:a8:9c:dd:1b: 80:c3:cc:1a:a5:10:e7:81:5f:2e:bb:15:ef:fc:e9:56:3b:07: 8e:ac:94:0b:a0:8f:f7:ba:8b:bd:ab:4d:c0:84:f2:4e:28:8b: 30:85:27:d1:da:e2:86:10:0b:1c:88:6b:dc:33:80:66:28:e7: 27:d5:9f:d1:6e:c2:a1:89:6c:a3:76:67:b4:f5:aa:55:41:5d: 6b:4a:a7:b8:a0:aa:e0:2a:f1:f3:8e:96:29:05:34:69:88:0f: d3:f2:a1:be:0a:b0:03:9b:1b:bf:85:d3:8e:61:d9:9d:fc:86: 3d:1c:e6:10:7c:ab:b2:79:52:6d:5b:f9:23:d6:50:a4:74:12: 89:56:5a:58:5d:57:73:9f:99:b0:94:80:92:b7:3f:51:18:e6: 65:c2:d9:b6:03:5a:d5:ef:8c:c4:11:82:db:12:63:87:10:eb: ec:48:cd:ce:47:b4:08:69:e7:cf:2a:4d:e3:3e:01:9c:26:1c: 96:74:e3:c4:ae:2a:fd:89:88:40:b7:16:ac:f3:e5:72:ea:e0: 04:17:de:87:a0:95:e7:7c:6a:a6:4b:85:cd:d9:77:07:d7:ec: 97:5a:55:14:65:d8:19:24:f5:26:d0:55:8a:5d:11:ae:2f:f7: cc:86:39:80 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUe39jALKADvPe7h9LD8xEKcK5tOQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMDgxMTM2WhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzOWRlZmMwZTU4OWRkMThiMDUzNjc4NmI4OWU2MGFiNzlj NjIzNGNmZjU0NmZkYmVlNGI3MDNhZDJkMjU5OTIzMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+PaNQHboeWTyGhqwLaYPkwXfu6VAaXyULp9uH332ZRIZz rBhq6VkMDqrEHzvR1Ah2Dzvqv970E/CrKWoTUM5I7Ps8GTti42M4yrFLDzpVjYXo aGV1ei2nE5osQsoMrBQYtslfMs2b9zNHXjEVkUivNQP7Uj15gBMKb+TAp6y5JkP1 YlU5SpbIkF8ThwT1/+UM+NwFAutNLPFkjsId8OGGLK9yUgTe7bBz6pBB/2BbbbBy xabl7qg018Og6nXfhnqmSx1eqlRuJ8MlxZVQe8ZTT90kU/GexjexBqdUm1noZA/u c+y1+s6l9m3rmOXbSuFlSMe4WvfQWo+2JTGtD20LAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUZhOM6V677kdiqgjVVtk87PBDG6QwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2YzZmY0YzUyLWI2NGQtNDljOS05Y2FiLWNiZjI3MDQxZTU2YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAPcAwDQYJKoZIhvcNAQELBQADggEBAAZaXRl+DTGSmVk5J2GXqJzd G4DDzBqlEOeBXy67Fe/86VY7B46slAugj/e6i72rTcCE8k4oizCFJ9Ha4oYQCxyI a9wzgGYo5yfVn9FuwqGJbKN2Z7T1qlVBXWtKp7igquAq8fOOlikFNGmID9Pyob4K sAObG7+F045h2Z38hj0c5hB8q7J5Um1b+SPWUKR0EolWWlhdV3OfmbCUgJK3P1EY 5mXC2bYDWtXvjMQRgtsSY4cQ6+xIzc5HtAhp588qTeM+AZwmHJZ048SuKv2JiEC3 Fqzz5XLq4AQX3oegled8aqZLhc3ZdwfX7JdaVRRl2Bkk9SbQVYpdEa4v98yGOYA= -----END CERTIFICATE-----Generated at Sun Mar 1 23:53:21 2026 by rpki-client