$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0a1be42f-c916-412a-837a-0752a00c5ab4.roa File: 0a1be42f-c916-412a-837a-0752a00c5ab4.roa (raw, json) Hash identifier: +FOY0R85ifxfUUkoswcerSBC9yjGA0acdE0Zvd5WebU= Subject key identifier: 88:2C:E8:0D:AA:81:BA:78:C0:E5:25:B8:55:04:62:97:EC:FA:51:C6 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 3AB87C35787236C6A43FB4B241B117421DA10775 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0a1be42f-c916-412a-837a-0752a00c5ab4.roa Signing time: Mon 04 May 2026 09:20:49 +0000 ROA not before: Mon 04 May 2026 09:20:49 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3210::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:b8:7c:35:78:72:36:c6:a4:3f:b4:b2:41:b1:17:42:1d:a1:07:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: May 4 09:20:49 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=ffd91b7a13367b2a8bb0ada6740c9be93d45df8d8287588e70797ff390ab9562, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:55:71:c3:a1:69:4c:9d:f0:36:18:07:48:5e: 8d:ab:cd:b5:81:31:61:14:ed:83:16:0a:d9:19:7f: af:ee:96:ea:a0:59:c1:1e:0f:54:2e:0d:1d:31:de: 16:a2:a5:79:59:06:a7:07:cf:43:69:58:ac:52:3e: 58:83:f9:36:7f:3b:e3:f0:c9:e8:f6:4f:4c:c6:35: fb:ce:d0:aa:a0:a5:74:13:a1:47:b2:8b:44:1b:52: 86:bb:a6:f2:9b:b4:5d:76:e4:fd:22:5c:7d:2b:53: 45:b4:db:6a:aa:87:4a:9c:25:53:10:3d:78:89:f8: d1:35:85:f0:98:aa:1e:73:a3:55:9f:1c:a4:ec:44: e7:ef:a2:26:87:61:0c:ed:a5:1c:84:7d:f8:ee:70: 36:f9:00:5e:8b:76:a7:05:65:90:4e:fe:2c:8b:b7: a2:f5:10:f3:f8:2e:4b:dd:62:c6:09:78:f6:aa:ec: 42:76:2a:e0:c1:38:44:93:60:84:38:84:a8:2e:88: 92:b0:ac:a9:38:86:dc:64:fd:e2:0b:3c:0f:e5:0d: ad:71:aa:d5:3c:7e:f0:7d:6c:76:f1:15:f5:38:b9: 8c:78:60:75:6c:a9:a2:8f:cf:e0:cf:8f:16:56:d8: 87:e7:a8:d0:bd:0c:79:0b:61:46:d2:0e:18:48:99: 06:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:2C:E8:0D:AA:81:BA:78:C0:E5:25:B8:55:04:62:97:EC:FA:51:C6 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0a1be42f-c916-412a-837a-0752a00c5ab4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3210::/46 Signature Algorithm: sha256WithRSAEncryption a7:5b:dc:33:68:f8:f5:f3:c7:d1:e0:d3:3c:b8:24:24:fd:d4: bc:2f:48:0a:71:54:bf:0f:2d:10:f5:de:90:3f:2d:cb:8d:90: 15:8e:0c:d8:10:0e:4e:bd:3a:ed:e3:74:86:1c:68:df:88:60: 03:2b:d7:a1:9b:29:9a:25:9e:52:5e:7f:40:8e:18:08:c8:41: 17:0a:9a:d4:09:0f:a1:d2:7e:9b:91:7f:5e:5a:c5:ba:ca:df: c4:3e:df:1e:c0:d3:d9:73:21:c4:0d:81:53:18:50:6b:6d:64: 73:c6:b4:17:29:b3:2c:ea:4b:d9:69:ab:df:f6:a5:3f:f4:f0: ea:6b:d0:a9:43:3e:d3:eb:90:8d:64:ad:ea:16:16:5a:99:23: 8b:f8:e1:e2:11:09:82:1d:f1:57:0c:e8:6e:4b:ec:7b:65:23: 26:c7:a8:3f:4e:68:6a:66:f0:cb:fa:d1:4d:d9:43:9b:6e:83: 10:31:97:49:b1:65:f2:6d:c0:07:5f:9c:0c:5d:d0:28:55:24: 0e:74:73:ee:0b:05:8e:44:20:2c:a2:50:25:b9:bf:b9:36:29: 50:41:d1:77:18:4b:0c:e9:11:af:47:e2:15:0f:e7:fe:c0:c3: e0:52:ba:b2:a5:6a:9a:fd:98:45:d3:14:81:60:af:f7:82:71: 20:dd:bf:9a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUOrh8NXhyNsakP7SyQbEXQh2hB3UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MDkyMDQ5WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmZmQ5MWI3YTEzMzY3YjJhOGJiMGFkYTY3NDBjOWJlOTNk NDVkZjhkODI4NzU4OGU3MDc5N2ZmMzkwYWI5NTYyMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrVXHDoWlMnfA2GAdIXo2rzbWBMWEU7YMWCtkZf6/uluqg WcEeD1QuDR0x3haipXlZBqcHz0NpWKxSPliD+TZ/O+Pwyej2T0zGNfvO0KqgpXQT oUeyi0QbUoa7pvKbtF125P0iXH0rU0W022qqh0qcJVMQPXiJ+NE1hfCYqh5zo1Wf HKTsROfvoiaHYQztpRyEffjucDb5AF6LdqcFZZBO/iyLt6L1EPP4LkvdYsYJePaq 7EJ2KuDBOESTYIQ4hKguiJKwrKk4htxk/eILPA/lDa1xqtU8fvB9bHbxFfU4uYx4 YHVsqaKPz+DPjxZW2IfnqNC9DHkLYUbSDhhImQYPAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUiCzoDaqBunjA5SW4VQRil+z6UcYwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzBhMWJlNDJmLWM5MTYtNDEyYS04MzdhLTA3NTJhMDBjNWFiNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAMhAwDQYJKoZIhvcNAQELBQADggEBAKdb3DNo+PXzx9Hg0zy4JCT9 1LwvSApxVL8PLRD13pA/LcuNkBWODNgQDk69Ou3jdIYcaN+IYAMr16GbKZolnlJe f0COGAjIQRcKmtQJD6HSfpuRf15axbrK38Q+3x7A09lzIcQNgVMYUGttZHPGtBcp syzqS9lpq9/2pT/08Opr0KlDPtPrkI1kreoWFlqZI4v44eIRCYId8VcM6G5L7Htl IybHqD9OaGpm8Mv60U3ZQ5tugxAxl0mxZfJtwAdfnAxd0ChVJA50c+4LBY5EICyi UCW5v7k2KVBB0XcYSwzpEa9H4hUP5/7Aw+BSurKlapr9mEXTFIFgr/eCcSDdv5o= -----END CERTIFICATE-----Generated at Wed May 13 01:09:43 2026 by rpki-client