$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/29ef5680-83ff-4872-af1e-53b29265256c.roa File: 29ef5680-83ff-4872-af1e-53b29265256c.roa (raw, json) Hash identifier: uXyjLvf0asGGKzLoOQ6Dsas09q3omPn2h3hXpSJTZWY= Subject key identifier: 6A:76:3F:70:99:50:E6:D4:21:C6:1D:CE:2B:B5:A6:E9:DC:20:8F:F6 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 51543D6C8587F862E84DF7311D563197B897C614 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/29ef5680-83ff-4872-af1e-53b29265256c.roa Signing time: Mon 04 May 2026 05:10:03 +0000 ROA not before: Mon 04 May 2026 05:10:03 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3d32::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:54:3d:6c:85:87:f8:62:e8:4d:f7:31:1d:56:31:97:b8:97:c6:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: May 4 05:10:03 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=a4c01107dee17badd42b9f21494ad383168810d2938230ea27b75b92f98f2aef, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:94:bb:f0:61:02:7d:d5:8a:d3:f7:d2:d9:dd: cc:72:9f:53:d2:a1:e2:a4:26:e9:2b:f0:66:d1:e9: d2:89:ad:7f:6e:d1:58:8c:87:b4:ad:b1:ff:00:11: 4b:35:36:e9:7f:68:53:67:99:2a:52:ce:3c:47:31: ad:7e:0a:f6:b3:c0:39:07:53:b6:ee:12:dc:44:db: 77:0b:a8:b8:a6:d1:eb:2b:2b:d0:1b:fd:28:67:36: e3:5a:9f:38:3f:0b:66:d2:17:ae:aa:b9:74:18:a4: e8:90:e2:1d:e4:d1:65:b6:14:c1:29:87:9f:fa:20: 77:c6:95:99:c2:09:0e:e6:d4:65:1e:21:66:35:3c: 7b:f4:24:a0:99:1e:6e:e2:c5:74:88:22:96:41:01: 37:5d:db:c0:1c:c4:ae:6c:d2:ed:ea:bb:be:76:51: b9:86:78:e0:93:37:e4:4b:f4:e0:a0:61:27:c6:c5: 93:cd:b5:1a:df:2b:40:28:c4:99:40:4f:8a:d6:99: ad:49:bb:07:01:8f:23:59:93:33:7e:d4:6c:6e:b5: 38:28:b1:58:98:e0:5c:db:7f:ad:9a:4a:6a:83:46: bc:a9:e2:95:e5:b7:60:ff:81:2c:d4:a2:29:53:5d: 48:72:70:06:1c:da:0d:20:9c:c4:88:c5:3c:f8:dc: 2f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:76:3F:70:99:50:E6:D4:21:C6:1D:CE:2B:B5:A6:E9:DC:20:8F:F6 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/29ef5680-83ff-4872-af1e-53b29265256c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3d32::/47 Signature Algorithm: sha256WithRSAEncryption 1d:10:79:ca:0e:37:08:33:53:8d:8b:35:8d:af:6b:4b:ef:58: 94:09:9b:71:9a:80:01:ed:a6:93:6a:2d:32:27:da:57:4d:dc: 53:00:b4:b0:9f:a2:f4:ef:d5:5f:47:d5:0e:e2:1d:34:4d:e3: 37:ab:1d:08:97:c8:17:39:60:ee:d2:63:0d:e9:bf:c0:b1:1f: 6f:b5:42:2c:46:e7:30:a1:6d:bc:9b:91:4a:70:13:7a:3f:ee: 18:a9:e6:df:ce:aa:5b:12:b0:03:e8:52:75:a3:2b:6f:ed:1f: 02:d4:37:94:a0:03:2c:c0:1d:ff:57:c3:ca:c4:62:dc:8f:93: 5d:1c:80:e4:2e:36:b6:ab:1e:4c:ff:0f:67:99:63:ad:9e:a4: 60:c5:0a:c2:62:5d:65:3c:ac:46:f5:f9:c6:a9:bb:72:cd:7c: a9:a1:88:44:31:24:92:6e:3e:74:ca:fa:2a:bb:56:06:ba:37: 7a:3e:f4:79:52:33:7b:f7:fd:ab:61:de:60:4a:d9:2d:fd:9d: 1f:91:0a:75:af:f8:59:cf:be:e3:07:88:bb:c8:e2:a9:06:af: 08:73:96:c0:36:da:67:7c:0f:a7:3d:a9:7a:4c:89:fe:c8:0c: 21:24:bf:57:a9:96:63:7a:18:d8:c2:3a:c5:a4:6e:2a:0b:e6: 6c:1e:ec:57 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUVQ9bIWH+GLoTfcxHVYxl7iXxhQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MDUxMDAzWhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNGMwMTEwN2RlZTE3YmFkZDQyYjlmMjE0OTRhZDM4MzE2 ODgxMGQyOTM4MjMwZWEyN2I3NWI5MmY5OGYyYWVmMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDxlLvwYQJ91YrT99LZ3cxyn1PSoeKkJukr8GbR6dKJrX9u 0ViMh7Stsf8AEUs1Nul/aFNnmSpSzjxHMa1+CvazwDkHU7buEtxE23cLqLim0esr K9Ab/ShnNuNanzg/C2bSF66quXQYpOiQ4h3k0WW2FMEph5/6IHfGlZnCCQ7m1GUe IWY1PHv0JKCZHm7ixXSIIpZBATdd28AcxK5s0u3qu752UbmGeOCTN+RL9OCgYSfG xZPNtRrfK0AoxJlAT4rWma1JuwcBjyNZkzN+1GxutTgosViY4Fzbf62aSmqDRryp 4pXlt2D/gSzUoilTXUhycAYc2g0gnMSIxTz43C/zAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUanY/cJlQ5tQhxh3OK7Wm6dwgj/YwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzI5ZWY1NjgwLTgzZmYtNDg3Mi1hZjFlLTUzYjI5MjY1MjU2Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAPTIwDQYJKoZIhvcNAQELBQADggEBAB0QecoONwgzU42LNY2va0vv WJQJm3GagAHtppNqLTIn2ldN3FMAtLCfovTv1V9H1Q7iHTRN4zerHQiXyBc5YO7S Yw3pv8CxH2+1QixG5zChbbybkUpwE3o/7hip5t/OqlsSsAPoUnWjK2/tHwLUN5Sg AyzAHf9Xw8rEYtyPk10cgOQuNrarHkz/D2eZY62epGDFCsJiXWU8rEb1+capu3LN fKmhiEQxJJJuPnTK+iq7Vga6N3o+9HlSM3v3/ath3mBK2S39nR+RCnWv+FnPvuMH iLvI4qkGrwhzlsA22md8D6c9qXpMif7IDCEkv1eplmN6GNjCOsWkbioL5mwe7Fc= -----END CERTIFICATE-----Generated at Wed May 13 01:04:44 2026 by rpki-client