$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/17d9e3e8-78cf-4768-8700-a451dc9a34e3.roa File: 17d9e3e8-78cf-4768-8700-a451dc9a34e3.roa (raw, json) Hash identifier: S9E2rDzFZbvKHhzv1Mv1sVZWlCNwpggpNg1lJCoSUtQ= Subject key identifier: FF:C2:D9:72:E4:EC:4E:A8:B5:6C:77:FC:D1:A7:D9:34:94:46:41:BA Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 7FA011FE32A98BBC09EB1D8A4C6350F57293C70D Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/17d9e3e8-78cf-4768-8700-a451dc9a34e3.roa Signing time: Mon 04 May 2026 04:31:53 +0000 ROA not before: Mon 04 May 2026 04:31:53 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2e80::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:a0:11:fe:32:a9:8b:bc:09:eb:1d:8a:4c:63:50:f5:72:93:c7:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: May 4 04:31:53 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=8a17ff60172444aa7c6357a8cd8e9660209fe6779d0884a2ceb76d7ee6fe91d4, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:fb:cd:05:7f:26:c9:e5:7b:81:52:ae:d5:c9: 2e:45:b1:20:a7:7b:ff:cb:45:22:94:68:44:64:87: 95:e5:5d:47:cd:4e:f1:ed:7e:13:d2:4a:35:04:29: a0:d2:49:31:67:b5:f4:c9:8a:8d:30:f0:32:7c:45: f1:77:71:bf:3f:0e:76:3b:eb:21:42:44:6a:e6:f6: 5a:70:10:56:a5:3c:1d:cf:b0:17:34:89:dd:2a:59: 67:0f:53:e5:10:13:9d:4d:b5:6f:1c:d6:d3:b7:d3: cc:7a:d7:16:2b:6c:16:ad:b0:7b:6e:46:b2:f8:5e: 3f:63:fb:b9:3b:91:9f:b2:d3:7c:1c:ba:a2:bb:bd: 45:9c:8f:bb:ad:37:76:79:2a:ff:ea:25:a4:1a:d3: 41:40:0d:9b:1c:df:75:9c:e2:21:b3:e7:79:63:68: d1:d8:62:0f:20:bf:f2:24:72:90:a6:38:c2:b4:29: 17:9b:e8:1a:ba:e9:09:d1:7c:17:4a:60:9d:5b:ec: fa:2c:e8:7d:e3:0a:5c:e0:c4:bb:bb:0a:82:39:7b: 31:97:c9:5c:ba:27:4e:3a:7d:fa:7b:06:f0:f7:50: a5:c4:a1:7f:95:f4:c3:87:72:de:31:3a:10:70:ff: cc:7e:24:c5:39:ea:33:2b:f2:55:80:06:b3:72:f4: ba:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:C2:D9:72:E4:EC:4E:A8:B5:6C:77:FC:D1:A7:D9:34:94:46:41:BA X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/17d9e3e8-78cf-4768-8700-a451dc9a34e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2e80::/41 Signature Algorithm: sha256WithRSAEncryption 52:19:84:bc:ef:d9:51:ab:37:c5:66:ef:bc:9a:3b:fd:cf:8a: 29:d8:72:74:b9:69:d3:be:37:57:a6:34:37:9a:f0:69:8e:db: c2:48:99:2d:85:60:bb:4d:5c:93:82:ad:0c:a9:73:31:4b:dc: b1:45:ec:87:42:a5:dd:35:88:99:81:0e:e3:0a:c8:a3:d1:61: bf:1f:0c:0b:6f:e7:51:0f:6e:28:9c:19:fd:85:bd:44:8f:5c: 4c:9b:d4:57:7b:97:55:c1:08:5a:4f:8c:8b:97:30:fb:87:7b: c5:36:14:9a:26:b1:11:85:3c:87:30:33:fa:bc:58:c6:c6:ea: 48:aa:28:5e:34:70:f4:91:26:56:12:90:50:11:97:34:03:d5: 87:e6:17:e3:74:66:ae:eb:84:64:0f:c3:c6:ba:33:94:89:b7: 7b:78:5e:c2:c4:e5:26:29:d7:04:0b:d1:67:7b:45:48:b1:c3: 9e:1c:a6:39:2d:9b:b4:0d:47:14:20:5d:93:e9:e8:b5:38:89: ae:cc:07:b6:29:d7:ec:df:64:b6:6c:f7:a9:97:05:c4:69:c0: 59:ca:89:b0:7a:c6:ee:e3:ad:8f:25:8a:7f:16:8a:7d:6b:37: 1f:6a:75:78:a8:45:24:dc:ac:16:86:e4:79:88:76:01:98:0b: 6f:da:cd:ea -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUf6AR/jKpi7wJ6x2KTGNQ9XKTxw0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MDQzMTUzWhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YTE3ZmY2MDE3MjQ0NGFhN2M2MzU3YThjZDhlOTY2MDIw OWZlNjc3OWQwODg0YTJjZWI3NmQ3ZWU2ZmU5MWQ0MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDf+80FfybJ5XuBUq7VyS5FsSCne//LRSKUaERkh5XlXUfN TvHtfhPSSjUEKaDSSTFntfTJio0w8DJ8RfF3cb8/DnY76yFCRGrm9lpwEFalPB3P sBc0id0qWWcPU+UQE51NtW8c1tO308x61xYrbBatsHtuRrL4Xj9j+7k7kZ+y03wc uqK7vUWcj7utN3Z5Kv/qJaQa00FADZsc33Wc4iGz53ljaNHYYg8gv/IkcpCmOMK0 KReb6Bq66QnRfBdKYJ1b7Pos6H3jClzgxLu7CoI5ezGXyVy6J046ffp7BvD3UKXE oX+V9MOHct4xOhBw/8x+JMU56jMr8lWABrNy9LrDAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU/8LZcuTsTqi1bHf80afZNJRGQbowHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzE3ZDllM2U4LTc4Y2YtNDc2OC04NzAwLWE0NTFkYzlhMzRlMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwcmAJAALoAwDQYJKoZIhvcNAQELBQADggEBAFIZhLzv2VGrN8Vm77yaO/3P iinYcnS5adO+N1emNDea8GmO28JImS2FYLtNXJOCrQypczFL3LFF7IdCpd01iJmB DuMKyKPRYb8fDAtv51EPbiicGf2FvUSPXEyb1Fd7l1XBCFpPjIuXMPuHe8U2FJom sRGFPIcwM/q8WMbG6kiqKF40cPSRJlYSkFARlzQD1YfmF+N0Zq7rhGQPw8a6M5SJ t3t4XsLE5SYp1wQL0Wd7RUixw54cpjktm7QNRxQgXZPp6LU4ia7MB7Yp1+zfZLZs 96mXBcRpwFnKibB6xu7jrY8lin8Win1rNx9qdXioRSTcrBaG5HmIdgGYC2/azeo= -----END CERTIFICATE-----Generated at Wed May 13 00:48:13 2026 by rpki-client