$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/028fef29-7bea-4b1a-9e0b-6696724e2cea.roa File: 028fef29-7bea-4b1a-9e0b-6696724e2cea.roa (raw, json) Hash identifier: e/Id3/vj8AVVEEmtR+LkEMwVVH+yMTmxUMK/19YvHvk= Subject key identifier: 07:79:ED:43:D6:36:32:0F:08:DB:2A:32:C2:F0:7C:14:3D:C2:C7:50 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 43A2ED78E712246B68F516CE2CF224C69D6D352D Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/028fef29-7bea-4b1a-9e0b-6696724e2cea.roa Signing time: Mon 04 May 2026 06:00:07 +0000 ROA not before: Mon 04 May 2026 06:00:07 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:f000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:a2:ed:78:e7:12:24:6b:68:f5:16:ce:2c:f2:24:c6:9d:6d:35:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: May 4 06:00:07 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=71689ce1b6b99e6e6944ea5cf5a37480351d0ebd82f99cf4cc5d334434c64434, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0f:13:11:55:3f:cb:e6:99:87:b6:40:4f:84: e8:0e:ad:89:5e:3b:65:92:a5:f6:95:c0:49:ce:22: 2c:5f:ce:c2:2a:9e:54:0f:90:72:f6:69:c2:fb:de: f5:d5:d6:7a:9f:43:5c:45:29:cb:d5:97:cb:b2:bd: 6f:d1:23:71:e6:8d:d6:22:73:33:4b:13:56:29:13: 18:35:84:b8:43:3e:5f:19:21:df:d9:ee:5b:36:cd: ef:84:29:b4:db:47:d5:a6:a4:ae:08:ed:df:1e:93: a9:ed:6a:30:3f:20:47:fc:1f:db:d6:2e:47:19:01: 29:f5:0e:62:ea:68:a5:78:a6:c3:8f:bd:8c:48:bd: 1e:cd:07:f9:d8:a6:10:c7:f4:48:6c:5f:33:73:91: f8:a7:f9:92:58:27:d2:3b:8d:60:6e:58:02:14:9b: 4b:a0:b9:e9:7c:92:81:2b:e1:0b:9e:b8:e6:1d:60: b9:1e:15:1a:19:67:1b:55:ac:7a:49:05:4c:7d:93: 8b:76:c6:b0:29:73:9d:90:18:8a:f3:37:ca:57:fd: 2d:bc:14:4c:d5:e3:ea:b2:ed:52:72:12:a9:7c:6a: f3:4e:43:a1:07:b5:09:53:e6:d7:11:8d:92:50:d2: 65:fd:fb:fd:43:4d:73:dd:bc:8b:30:ce:ee:03:e4: b9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:79:ED:43:D6:36:32:0F:08:DB:2A:32:C2:F0:7C:14:3D:C2:C7:50 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/028fef29-7bea-4b1a-9e0b-6696724e2cea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:f000::/38 Signature Algorithm: sha256WithRSAEncryption b5:78:25:df:14:6c:a8:aa:cd:fa:e6:95:ad:79:11:df:8d:5f: ab:15:67:bc:e2:9e:da:e2:94:a8:32:95:f2:fb:19:80:43:ad: 81:85:6d:1a:44:df:7d:dc:22:00:f6:19:f4:2c:23:57:51:65: 18:e9:a1:e1:d5:5e:99:06:67:99:16:ff:28:24:e2:46:55:34: 08:a9:d7:91:13:0a:20:32:7d:8c:8a:82:d5:24:8e:aa:4a:f0: ff:1c:e7:1d:08:52:fd:d8:2c:c3:30:0f:32:8e:11:b7:bf:db: 72:be:fb:d8:a0:f6:13:b7:30:f4:cc:9b:ef:59:bd:29:5a:20: 53:bf:ee:bf:a4:37:44:68:af:52:f3:d7:1a:34:fb:a9:3d:bb: 5f:6d:32:e6:d2:0f:f8:3d:3e:3a:83:57:8a:30:45:ed:12:ca: f5:2d:6d:a2:a5:7c:8b:f5:43:99:23:78:ca:e9:96:64:e0:e6: f0:39:cb:f9:15:e5:32:42:97:12:56:1f:9a:cb:fc:1d:06:e1: 66:3d:ac:0c:e4:4e:00:9b:6c:bb:3e:5d:91:f5:e3:19:fb:a3: a0:86:d0:7c:2e:97:e5:ba:e5:b3:a3:b9:91:73:b0:b8:8d:69: ad:a8:c2:cd:13:e1:53:a4:fb:55:d5:31:ad:fa:eb:dc:93:7d: 6b:39:41:79 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUQ6LteOcSJGto9RbOLPIkxp1tNS0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MDYwMDA3WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MTY4OWNlMWI2Yjk5ZTZlNjk0NGVhNWNmNWEzNzQ4MDM1 MWQwZWJkODJmOTljZjRjYzVkMzM0NDM0YzY0NDM0MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRDxMRVT/L5pmHtkBPhOgOrYleO2WSpfaVwEnOIixfzsIq nlQPkHL2acL73vXV1nqfQ1xFKcvVl8uyvW/RI3HmjdYiczNLE1YpExg1hLhDPl8Z Id/Z7ls2ze+EKbTbR9WmpK4I7d8ek6ntajA/IEf8H9vWLkcZASn1DmLqaKV4psOP vYxIvR7NB/nYphDH9EhsXzNzkfin+ZJYJ9I7jWBuWAIUm0uguel8koEr4QueuOYd YLkeFRoZZxtVrHpJBUx9k4t2xrApc52QGIrzN8pX/S28FEzV4+qy7VJyEql8avNO Q6EHtQlT5tcRjZJQ0mX9+/1DTXPdvIswzu4D5Lm5AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUB3ntQ9Y2Mg8I2yoywvB8FD3Cx1AwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzAyOGZlZjI5LTdiZWEtNGIxYS05ZTBiLTY2OTY3MjRlMmNlYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgImAJAA8DANBgkqhkiG9w0BAQsFAAOCAQEAtXgl3xRsqKrN+uaVrXkR341f qxVnvOKe2uKUqDKV8vsZgEOtgYVtGkTffdwiAPYZ9CwjV1FlGOmh4dVemQZnmRb/ KCTiRlU0CKnXkRMKIDJ9jIqC1SSOqkrw/xznHQhS/dgswzAPMo4Rt7/bcr772KD2 E7cw9Myb71m9KVogU7/uv6Q3RGivUvPXGjT7qT27X20y5tIP+D0+OoNXijBF7RLK 9S1toqV8i/VDmSN4yumWZODm8DnL+RXlMkKXElYfmsv8HQbhZj2sDOROAJtsuz5d kfXjGfujoIbQfC6X5brls6O5kXOwuI1prajCzRPhU6T7VdUxrfrr3JN9azlBeQ== -----END CERTIFICATE-----Generated at Wed May 13 01:32:26 2026 by rpki-client