$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/20cad616-5e4d-4e36-b6f4-e7ba12009afd.roa File: 20cad616-5e4d-4e36-b6f4-e7ba12009afd.roa (raw, json) Hash identifier: SnsWv1cV53UExUDkCiOUzPVsBnmRduYnuwaKQIpydd0= Subject key identifier: 0B:CE:8B:EA:70:58:1C:11:03:53:CA:6B:40:19:8E:3D:AD:9C:60:DB Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 23B60FB99724095863D5B7A1B18B520BAAEE951C Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/20cad616-5e4d-4e36-b6f4-e7ba12009afd.roa Signing time: Mon 04 May 2026 10:51:12 +0000 ROA not before: Mon 04 May 2026 10:51:12 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3e20::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:b6:0f:b9:97:24:09:58:63:d5:b7:a1:b1:8b:52:0b:aa:ee:95:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: May 4 10:51:12 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=a6002c1ddb0f097036a1662ffa9098c2b2564c47e62adde82b3548c10e91bc02, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:18:35:41:5e:4e:08:d9:6e:27:6c:ce:fd:58: c6:8b:83:69:75:18:ef:bc:4a:4c:d7:b6:26:a5:6f: 0e:68:d0:d5:57:9c:4d:37:92:a3:92:4c:72:c8:c2: 0f:de:a1:90:f5:dc:2b:54:48:77:f8:bf:6c:c6:13: c1:3e:4b:a6:62:bb:48:bc:56:26:fe:ed:7e:5b:b0: 5c:cd:5c:49:34:12:69:b5:6f:67:db:2e:d7:e8:01: 77:65:58:a4:6b:f2:ae:b2:45:64:c8:9f:09:f2:96: 61:93:60:88:d5:28:26:f4:19:39:ae:b4:7b:32:bc: ac:02:98:47:41:0d:e9:45:b5:ec:35:09:d2:c3:9f: 64:ca:da:ee:15:6e:0a:30:27:e8:28:2a:86:97:93: 62:c8:ee:21:37:ad:cd:5e:b2:75:b0:51:73:e4:5e: 0d:b2:70:aa:fd:c2:41:50:3a:07:3a:10:14:7d:c1: d1:ec:d7:f7:5b:b3:40:a1:b6:19:08:84:cf:5c:ed: 83:96:76:8d:04:e4:72:5c:91:f9:f2:29:4a:62:d4: f7:94:37:65:0f:fa:b7:2e:eb:83:34:a1:81:92:e6: b1:66:13:aa:16:bc:ad:ca:c2:f8:f9:5a:72:35:28: 34:e4:79:6a:42:96:eb:63:5d:46:f0:c5:7d:72:87: aa:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:CE:8B:EA:70:58:1C:11:03:53:CA:6B:40:19:8E:3D:AD:9C:60:DB X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/20cad616-5e4d-4e36-b6f4-e7ba12009afd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3e20::/47 Signature Algorithm: sha256WithRSAEncryption 20:e8:56:ae:d5:8e:bc:c5:c4:63:b2:49:4f:44:6e:11:41:7e: a3:11:71:64:54:fe:0d:9b:cc:41:00:e3:79:7e:48:9d:6e:18: c2:64:8d:1d:19:25:d0:ba:59:46:a0:14:13:98:42:36:da:7f: 75:e3:54:15:27:0e:17:89:cd:16:48:d6:47:81:e6:c4:45:d4: a1:29:93:86:54:67:01:33:48:fb:9e:1b:8d:c4:a3:b9:04:cc: 25:ed:7c:28:d5:33:e2:d8:48:0b:a2:a9:2b:a9:79:67:37:6d: 8c:48:19:28:37:ae:c6:5c:9e:49:43:ad:cf:bf:d3:9e:1e:40: 2e:6c:a2:5d:46:09:61:2e:52:d8:1e:cc:b3:cf:d7:09:b3:ae: d6:c0:f2:9c:28:92:83:e5:d2:e4:16:3c:e5:56:d3:72:9f:8d: d9:af:7e:24:ed:61:1c:0a:f0:59:bd:cf:07:50:8e:7d:7b:72: f8:9f:3a:f6:02:b2:2f:0e:66:b5:55:e6:f6:d5:8d:d8:5b:af: 33:02:05:a3:da:e1:dc:65:ea:56:f4:42:43:dc:35:a3:39:91: 2d:8c:41:24:30:21:8c:1a:7c:48:7f:b0:e2:b0:dd:ff:44:be: 79:12:b9:45:ed:4c:e2:2d:1f:ec:cc:68:da:2a:16:6e:e8:69: f4:24:16:7d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUI7YPuZckCVhj1behsYtSC6rulRwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MTA1MTEyWhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNjAwMmMxZGRiMGYwOTcwMzZhMTY2MmZmYTkwOThjMmIy NTY0YzQ3ZTYyYWRkZTgyYjM1NDhjMTBlOTFiYzAyMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGGDVBXk4I2W4nbM79WMaLg2l1GO+8SkzXtialbw5o0NVX nE03kqOSTHLIwg/eoZD13CtUSHf4v2zGE8E+S6Ziu0i8Vib+7X5bsFzNXEk0Emm1 b2fbLtfoAXdlWKRr8q6yRWTInwnylmGTYIjVKCb0GTmutHsyvKwCmEdBDelFtew1 CdLDn2TK2u4VbgowJ+goKoaXk2LI7iE3rc1esnWwUXPkXg2ycKr9wkFQOgc6EBR9 wdHs1/dbs0ChthkIhM9c7YOWdo0E5HJckfnyKUpi1PeUN2UP+rcu64M0oYGS5rFm E6oWvK3Kwvj5WnI1KDTkeWpClutjXUbwxX1yh6q9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUC86L6nBYHBEDU8prQBmOPa2cYNswHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzIwY2FkNjE2LTVlNGQtNGUzNi1iNmY0LWU3YmExMjAwOWFmZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAPiAwDQYJKoZIhvcNAQELBQADggEBACDoVq7VjrzFxGOySU9EbhFB fqMRcWRU/g2bzEEA43l+SJ1uGMJkjR0ZJdC6WUagFBOYQjbaf3XjVBUnDheJzRZI 1keB5sRF1KEpk4ZUZwEzSPueG43Eo7kEzCXtfCjVM+LYSAuiqSupeWc3bYxIGSg3 rsZcnklDrc+/054eQC5sol1GCWEuUtgezLPP1wmzrtbA8pwokoPl0uQWPOVW03Kf jdmvfiTtYRwK8Fm9zwdQjn17cvifOvYCsi8OZrVV5vbVjdhbrzMCBaPa4dxl6lb0 QkPcNaM5kS2MQSQwIYwafEh/sOKw3f9EvnkSuUXtTOItH+zMaNoqFm7oafQkFn0= -----END CERTIFICATE-----Generated at Wed May 13 00:59:06 2026 by rpki-client