$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/238d6798-a54d-4e2c-b678-5a2b21b1b360.roa File: 238d6798-a54d-4e2c-b678-5a2b21b1b360.roa (raw, json) Hash identifier: yMDNAxPSCspZA1i9npz3Qml29wjDDe4J3tqTiXDzYiE= Subject key identifier: 4E:F2:47:9B:C8:6D:46:30:F4:74:F8:36:3B:1F:72:28:FC:EA:05:41 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 648A83431063FE6A1B14F81D6C5E2824C6B43BED Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/238d6798-a54d-4e2c-b678-5a2b21b1b360.roa Signing time: Mon 04 May 2026 08:30:15 +0000 ROA not before: Mon 04 May 2026 08:30:15 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2680::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:8a:83:43:10:63:fe:6a:1b:14:f8:1d:6c:5e:28:24:c6:b4:3b:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: May 4 08:30:15 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=671f4ec144bc438dd741fdef76f9ee38bc9c9432f736e4161d67b0f30f928715, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0e:ff:59:e0:53:4f:a8:63:94:df:c3:d1:da: cc:e1:f1:81:0b:62:70:a2:91:74:99:95:97:61:84: a4:5e:9c:f2:b0:99:fe:b7:f1:9a:66:a2:4c:c0:17: c2:2c:de:1a:f6:73:bc:a6:d2:7e:fe:82:44:2e:7a: 69:23:3e:ad:17:d8:35:72:ef:aa:9a:d0:95:d6:9e: 35:ee:b1:07:40:47:39:04:f5:b2:55:b9:c5:29:9d: b9:41:82:f9:f7:33:84:06:2e:16:18:17:ef:25:9c: d9:3b:b2:ce:e1:5d:23:c0:51:90:bb:ce:22:63:61: bb:3b:5b:70:f7:af:ce:01:84:a3:55:22:78:f0:20: d2:60:1e:93:ba:eb:19:02:c0:63:09:bc:ff:90:8e: 00:fa:f5:2c:a3:4a:f1:d6:72:1e:1e:6c:80:69:f4: 84:50:2c:39:64:df:bb:09:c2:37:03:18:1d:f0:7a: 9b:83:98:91:5c:d5:5e:c4:08:4f:d4:41:1d:c2:13: 1a:b9:01:e3:2a:fa:3c:37:0f:ce:7e:93:fd:9e:4e: bf:11:8a:fd:b5:f0:27:50:0c:4a:4a:dd:0b:92:94: ba:5b:5f:fc:b8:c4:be:ca:0c:88:1f:9f:65:c2:da: 45:1d:e6:ea:3c:6c:8a:6d:2f:ec:d3:73:66:1e:ff: a9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:F2:47:9B:C8:6D:46:30:F4:74:F8:36:3B:1F:72:28:FC:EA:05:41 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/238d6798-a54d-4e2c-b678-5a2b21b1b360.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2680::/41 Signature Algorithm: sha256WithRSAEncryption b7:7a:f0:b1:26:20:bf:17:b9:e4:69:58:fe:39:4d:7c:d1:59: ee:a9:de:76:f3:77:80:e9:b4:2f:f4:33:3a:1c:77:33:8b:2b: 38:07:eb:e3:6a:4b:a8:81:ef:59:9b:66:ab:e3:06:39:0e:90: 24:2a:ee:fa:8e:a3:a8:89:16:50:87:3d:b0:61:a7:df:3a:e8: 18:65:16:4b:d9:a2:7e:a7:f7:12:98:53:30:bd:c2:7e:b2:19: c5:08:a5:71:a7:78:c6:af:2e:c3:b3:53:c0:f1:88:cd:8d:36: c6:71:71:dc:0d:29:47:e9:30:af:ee:b7:49:93:c7:18:7f:e9: f7:e6:dc:c9:7d:c2:9b:2f:b1:aa:95:8f:94:ef:02:31:8a:d9: 14:62:2c:69:d2:6f:74:c1:f3:d2:84:4a:67:0f:66:c4:51:73: e4:12:b2:cd:ec:d9:15:ce:8c:f1:1a:63:0a:8a:cf:3d:ff:42: 2d:41:98:ea:50:36:34:57:b8:16:65:dd:11:cf:50:8b:c4:de: 3c:37:5c:bd:7a:de:66:12:a6:29:80:56:22:cb:d4:43:ad:66: ce:1f:4c:ca:88:fb:73:32:f6:61:ea:62:c2:31:39:74:79:1a: 10:aa:c1:05:cf:86:e7:95:8e:f9:32:e2:32:d3:d1:1b:b7:e7: ee:12:41:c5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZIqDQxBj/mobFPgdbF4oJMa0O+0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MDgzMDE1WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NzFmNGVjMTQ0YmM0MzhkZDc0MWZkZWY3NmY5ZWUzOGJj OWM5NDMyZjczNmU0MTYxZDY3YjBmMzBmOTI4NzE1MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgDv9Z4FNPqGOU38PR2szh8YELYnCikXSZlZdhhKRenPKw mf638ZpmokzAF8Is3hr2c7ym0n7+gkQuemkjPq0X2DVy76qa0JXWnjXusQdARzkE 9bJVucUpnblBgvn3M4QGLhYYF+8lnNk7ss7hXSPAUZC7ziJjYbs7W3D3r84BhKNV InjwINJgHpO66xkCwGMJvP+QjgD69SyjSvHWch4ebIBp9IRQLDlk37sJwjcDGB3w epuDmJFc1V7ECE/UQR3CExq5AeMq+jw3D85+k/2eTr8Riv218CdQDEpK3QuSlLpb X/y4xL7KDIgfn2XC2kUd5uo8bIptL+zTc2Ye/6mBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUTvJHm8htRjD0dPg2Ox9yKPzqBUEwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzIzOGQ2Nzk4LWE1NGQtNGUyYy1iNjc4LTVhMmIyMWIxYjM2MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwcmAJAAJoAwDQYJKoZIhvcNAQELBQADggEBALd68LEmIL8XueRpWP45TXzR We6p3nbzd4DptC/0MzocdzOLKzgH6+NqS6iB71mbZqvjBjkOkCQq7vqOo6iJFlCH PbBhp9866BhlFkvZon6n9xKYUzC9wn6yGcUIpXGneMavLsOzU8DxiM2NNsZxcdwN KUfpMK/ut0mTxxh/6ffm3Ml9wpsvsaqVj5TvAjGK2RRiLGnSb3TB89KESmcPZsRR c+QSss3s2RXOjPEaYwqKzz3/Qi1BmOpQNjRXuBZl3RHPUIvE3jw3XL163mYSpimA ViLL1EOtZs4fTMqI+3My9mHqYsIxOXR5GhCqwQXPhueVjvky4jLT0Ru35+4SQcU= -----END CERTIFICATE-----Generated at Wed May 13 01:24:35 2026 by rpki-client