$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/02a85596-9992-48e1-98ac-1d50f5da9f70.roa File: 02a85596-9992-48e1-98ac-1d50f5da9f70.roa (raw, json) Hash identifier: QzlIMeG04DUiPuhodjw94IDP1UgWleOZXEA+l0lrmAg= Subject key identifier: 90:64:98:D8:C0:50:07:35:2F:71:22:C6:C3:69:4C:70:8E:27:CB:7C Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 358E45FCE191B5B843E78C637B783E9B162E8489 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/02a85596-9992-48e1-98ac-1d50f5da9f70.roa Signing time: Mon 04 May 2026 08:40:48 +0000 ROA not before: Mon 04 May 2026 08:40:48 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2d50::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:8e:45:fc:e1:91:b5:b8:43:e7:8c:63:7b:78:3e:9b:16:2e:84:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: May 4 08:40:48 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=5e55c4e62929d7e579666f63e628e8f2c1364a4b337aa17192d4f6b02de2748b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:07:c9:cc:66:cc:ee:4c:1f:d7:61:52:0e:c8: 94:7c:af:15:6b:d4:62:f6:81:a5:8e:d0:bf:e8:07: ae:5b:d1:12:da:7c:6b:1b:34:0e:3e:5d:0e:11:f7: 45:3a:7f:0e:7e:28:58:95:ba:a2:ba:97:ef:67:35: a8:b9:59:15:97:2b:2f:54:06:85:2a:16:cd:26:5f: 4c:0e:34:e1:e6:6a:49:b9:8a:0d:55:12:6a:70:f5: 97:4d:68:7d:29:15:e5:14:24:95:4e:85:bc:f8:64: be:e5:54:f8:7c:6a:49:b7:c1:30:87:f4:b9:c6:ed: 59:14:ea:a3:37:d3:2c:3f:aa:2e:3a:83:42:01:1f: 50:0a:78:12:f7:df:ed:2a:34:9b:45:6b:b9:91:c4: 00:9f:87:c6:5d:e8:e8:af:4f:28:b8:2a:ea:bc:dd: 72:ed:7a:2d:fc:31:cc:2b:9c:e1:8d:cf:39:c8:08: 17:dd:be:38:e2:05:b2:50:63:ec:a4:f3:d2:ae:29: c9:65:dd:f2:28:30:0f:bb:ea:2b:81:6c:74:eb:84: 7a:ef:c0:05:02:ce:52:86:4d:07:e1:79:8f:28:1f: 29:9d:f1:7e:e4:86:18:e0:54:49:38:3f:18:3b:ba: d0:1b:a4:11:1d:12:d8:ab:01:35:db:d0:17:1f:39: b0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:64:98:D8:C0:50:07:35:2F:71:22:C6:C3:69:4C:70:8E:27:CB:7C X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/02a85596-9992-48e1-98ac-1d50f5da9f70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2d50::/44 Signature Algorithm: sha256WithRSAEncryption ae:14:8c:78:29:3d:e8:e1:17:60:35:11:f1:33:8c:59:7a:80: 12:aa:18:14:66:41:a0:1b:b0:90:58:2d:6f:e7:49:1f:cb:4d: e9:ba:4d:1e:78:46:8b:1b:04:a8:a5:1a:fa:f1:57:8a:45:ef: 94:e7:a8:74:b9:09:42:28:e5:7d:3c:82:68:68:91:6c:f7:12: fd:71:8a:03:98:69:a0:e9:3f:ef:d9:53:b2:cd:fd:93:8c:f6: 67:01:4e:e5:b1:4c:ae:c0:de:6e:d4:3e:74:ab:e5:07:81:87: 98:64:26:fd:71:75:c5:da:ac:ae:59:d2:ba:db:c7:9c:da:20: e5:50:d2:6c:fe:41:e8:1b:1d:11:90:a0:72:ce:af:5a:d5:e6: b4:2f:a7:d4:ce:31:cd:ed:14:25:cf:31:10:dd:98:45:ab:54: fc:fa:3e:c7:28:d2:0e:20:d1:95:56:be:b4:4c:4d:b3:96:df: 3c:06:8c:f6:85:c1:a6:23:54:6d:0c:c2:e3:9e:51:8d:cf:07: ee:b2:21:40:45:08:51:2b:94:01:01:7d:ef:0d:8a:26:21:09: ca:af:d6:ef:6d:95:77:90:b7:37:88:5d:42:59:ca:e3:b2:f4: fc:f5:9d:8c:89:0b:df:69:c3:1c:71:0d:ea:89:3f:21:96:1a: 9e:a2:5a:0f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUNY5F/OGRtbhD54xje3g+mxYuhIkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MDg0MDQ4WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZTU1YzRlNjI5MjlkN2U1Nzk2NjZmNjNlNjI4ZThmMmMx MzY0YTRiMzM3YWExNzE5MmQ0ZjZiMDJkZTI3NDhiMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKB8nMZszuTB/XYVIOyJR8rxVr1GL2gaWO0L/oB65b0RLa fGsbNA4+XQ4R90U6fw5+KFiVuqK6l+9nNai5WRWXKy9UBoUqFs0mX0wONOHmakm5 ig1VEmpw9ZdNaH0pFeUUJJVOhbz4ZL7lVPh8akm3wTCH9LnG7VkU6qM30yw/qi46 g0IBH1AKeBL33+0qNJtFa7mRxACfh8Zd6OivTyi4Kuq83XLtei38McwrnOGNzznI CBfdvjjiBbJQY+yk89KuKcll3fIoMA+76iuBbHTrhHrvwAUCzlKGTQfheY8oHymd 8X7khhjgVEk4Pxg7utAbpBEdEtirATXb0BcfObC1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUkGSY2MBQBzUvcSLGw2lMcI4ny3wwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzAyYTg1NTk2LTk5OTItNDhlMS05OGFjLTFkNTBmNWRhOWY3MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAJAALVAwDQYJKoZIhvcNAQELBQADggEBAK4UjHgpPejhF2A1EfEzjFl6 gBKqGBRmQaAbsJBYLW/nSR/LTem6TR54RosbBKilGvrxV4pF75TnqHS5CUIo5X08 gmhokWz3Ev1xigOYaaDpP+/ZU7LN/ZOM9mcBTuWxTK7A3m7UPnSr5QeBh5hkJv1x dcXarK5Z0rrbx5zaIOVQ0mz+QegbHRGQoHLOr1rV5rQvp9TOMc3tFCXPMRDdmEWr VPz6Psco0g4g0ZVWvrRMTbOW3zwGjPaFwaYjVG0MwuOeUY3PB+6yIUBFCFErlAEB fe8NiiYhCcqv1u9tlXeQtzeIXUJZyuOy9Pz1nYyJC99pwxxxDeqJPyGWGp6iWg8= -----END CERTIFICATE-----Generated at Wed May 13 00:50:05 2026 by rpki-client