$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f54ded7c-3632-4c5a-bdac-adbe5548a332.roa File: f54ded7c-3632-4c5a-bdac-adbe5548a332.roa (raw, json) Hash identifier: Ovi7IlsaKzxruZsQbLu1UxqUiK1ti6dMXpzcZL8KMTA= Subject key identifier: AD:85:92:52:50:26:00:F3:82:59:96:43:E5:DE:79:76:27:42:B1:3F Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 1C28AA46A9D0B209F113E55BFD6BA2005FE7DCBF Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f54ded7c-3632-4c5a-bdac-adbe5548a332.roa Signing time: Fri 13 Feb 2026 13:22:02 +0000 ROA not before: Fri 13 Feb 2026 13:22:02 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2db0::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:28:aa:46:a9:d0:b2:09:f1:13:e5:5b:fd:6b:a2:00:5f:e7:dc:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Feb 13 13:22:02 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=aea824115daae06548eec4a702ddeaa16b82ef40134b4184aa026fa127a47094, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e2:0f:71:0f:17:2a:0b:25:90:aa:4e:e4:45: 89:fb:18:14:83:9e:2a:fe:c4:d5:91:6f:e8:ef:4e: 90:60:1d:50:49:c9:3a:b9:cb:2a:be:8e:25:5d:7c: 78:d2:a6:ec:93:b9:8a:dc:c5:38:a0:a7:4b:90:04: d0:f6:af:99:3e:ba:ff:33:ad:1d:97:bf:e0:51:45: eb:3e:fa:e4:3b:44:14:10:3f:06:38:48:87:63:f0: 61:b9:11:71:26:3c:43:cc:38:2f:88:08:c9:1f:b9: b7:e6:79:27:36:b7:37:84:ee:9f:3e:f3:25:db:50: 12:da:9e:9d:ad:92:dc:d4:f9:4a:09:7c:24:71:10: 57:2d:23:78:c5:07:0b:c4:ad:05:dd:1f:02:35:c2: 55:c5:b2:e1:a8:e1:2a:59:6f:21:7f:90:40:03:c1: c2:4e:99:c2:4f:49:88:0f:4d:f3:64:f7:6e:42:b9: 1d:2f:b6:cc:5c:ec:66:46:12:7f:5b:ed:6b:ef:10: 18:a1:a6:07:82:b7:1b:f0:01:96:78:2e:6d:a7:30: d2:66:8f:b6:bb:49:9b:60:5f:16:08:6e:2b:70:c1: ca:fb:bc:ec:5e:05:72:23:ea:d9:1f:2a:0f:21:c1: 8d:0d:d7:09:ea:0a:c3:83:c6:f4:e2:55:d1:f1:8a: a6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:85:92:52:50:26:00:F3:82:59:96:43:E5:DE:79:76:27:42:B1:3F X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f54ded7c-3632-4c5a-bdac-adbe5548a332.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2db0::/45 Signature Algorithm: sha256WithRSAEncryption 57:3e:80:32:23:da:73:68:a7:1c:41:42:f4:87:53:1f:67:a0: 66:67:fd:48:11:b3:55:0f:65:13:74:f0:2b:67:e9:28:d0:c3: 57:0d:9e:ac:de:12:48:d2:66:56:3c:42:b2:48:46:ea:88:52: bd:85:6f:37:86:62:02:83:37:42:75:47:f8:24:f5:a6:a1:dc: 22:62:50:88:53:3c:35:35:39:7f:5c:9f:5c:99:74:eb:92:f1: 71:2b:75:da:54:65:01:d7:70:a2:07:40:c7:40:8a:66:3e:fa: 4a:3e:8c:58:88:6e:6a:98:16:65:b8:9a:ee:05:53:f4:d9:d9: a4:2f:6c:7e:7d:c6:e0:82:70:f0:3e:ea:f1:9c:47:b7:b8:bb: a9:4f:0a:09:08:a4:55:c6:b6:5b:66:1c:3b:0e:6d:0d:b3:f1: d0:48:f6:e8:a1:31:ea:3e:b1:d7:ce:e2:30:11:aa:32:d8:2f: 79:3d:24:6c:13:44:ad:f1:e1:d1:89:34:cf:fd:22:f4:b6:c8: b8:a7:a8:27:d5:bd:f6:1b:35:0a:18:81:0e:9e:d0:81:33:9d: 40:6f:cc:0b:4b:3e:e3:42:6d:36:db:d9:79:94:41:56:ff:f6: 67:9f:49:5a:85:e9:3f:db:b9:96:17:4b:04:2f:82:35:f4:66: 33:01:5e:5d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUHCiqRqnQsgnxE+Vb/WuiAF/n3L8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMTMyMjAyWhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZWE4MjQxMTVkYWFlMDY1NDhlZWM0YTcwMmRkZWFhMTZi ODJlZjQwMTM0YjQxODRhYTAyNmZhMTI3YTQ3MDk0MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDS4g9xDxcqCyWQqk7kRYn7GBSDnir+xNWRb+jvTpBgHVBJ yTq5yyq+jiVdfHjSpuyTuYrcxTigp0uQBND2r5k+uv8zrR2Xv+BRRes++uQ7RBQQ PwY4SIdj8GG5EXEmPEPMOC+ICMkfubfmeSc2tzeE7p8+8yXbUBLanp2tktzU+UoJ fCRxEFctI3jFBwvErQXdHwI1wlXFsuGo4SpZbyF/kEADwcJOmcJPSYgPTfNk925C uR0vtsxc7GZGEn9b7WvvEBihpgeCtxvwAZZ4Lm2nMNJmj7a7SZtgXxYIbitwwcr7 vOxeBXIj6tkfKg8hwY0N1wnqCsODxvTiVdHxiqZTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUrYWSUlAmAPOCWZZD5d55didCsT8wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2Y1NGRlZDdjLTM2MzItNGM1YS1iZGFjLWFkYmU1NTQ4YTMzMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAALbAwDQYJKoZIhvcNAQELBQADggEBAFc+gDIj2nNopxxBQvSHUx9n oGZn/UgRs1UPZRN08Ctn6SjQw1cNnqzeEkjSZlY8QrJIRuqIUr2FbzeGYgKDN0J1 R/gk9aah3CJiUIhTPDU1OX9cn1yZdOuS8XErddpUZQHXcKIHQMdAimY++ko+jFiI bmqYFmW4mu4FU/TZ2aQvbH59xuCCcPA+6vGcR7e4u6lPCgkIpFXGtltmHDsObQ2z 8dBI9uihMeo+sdfO4jARqjLYL3k9JGwTRK3x4dGJNM/9IvS2yLinqCfVvfYbNQoY gQ6e0IEznUBvzAtLPuNCbTbb2XmUQVb/9mefSVqF6T/buZYXSwQvgjX0ZjMBXl0= -----END CERTIFICATE-----Generated at Sun Mar 1 22:10:00 2026 by rpki-client