$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2cd3a895-0175-4e42-b61c-311a7970fc57.roa File: 2cd3a895-0175-4e42-b61c-311a7970fc57.roa (raw, json) Hash identifier: tezk2qaXJrJg9Lv+zPfX11q57rjnFAahpFZan+j+//4= Subject key identifier: 8F:7E:C7:3D:5C:A5:43:8B:56:AF:5A:CE:62:E6:DB:40:83:1E:23:0E Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 081CEA3E9D328ECF1F94518A0AC1939261B5A031 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2cd3a895-0175-4e42-b61c-311a7970fc57.roa Signing time: Mon 04 May 2026 09:31:01 +0000 ROA not before: Mon 04 May 2026 09:31:01 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3520::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:1c:ea:3e:9d:32:8e:cf:1f:94:51:8a:0a:c1:93:92:61:b5:a0:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: May 4 09:31:01 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=7a7816b4c5b8110eb59e1c99be8280a72d2791cfd7c2b5f021c30b03e32e54bd, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9d:8d:9a:32:f4:4d:55:36:a0:01:4b:82:20: c6:4a:22:32:d7:b3:e6:8c:de:a3:61:0f:8d:c7:73: d3:dc:85:88:3a:e7:73:90:27:dc:75:08:ca:c6:79: a0:16:3f:3f:91:79:d6:ad:12:2e:50:ec:86:cb:85: 71:fb:d0:c6:8d:bd:96:8d:ee:b3:6d:a9:05:ea:82: 36:6e:04:78:2a:77:0e:53:41:d5:25:af:fa:31:69: 8c:f0:4e:79:c0:b8:b1:56:8a:08:f9:76:84:e7:9e: 20:09:36:a0:e2:1f:87:db:73:c4:27:45:2a:8b:ea: 71:f5:bb:40:94:1a:88:96:be:61:6a:7e:ac:94:be: f3:ae:dc:07:73:84:d4:2b:13:81:81:92:c2:c6:7a: b9:cf:65:c0:0c:62:df:47:c8:51:6a:b5:83:e7:80: 1b:94:83:52:b4:27:2b:7b:8d:a2:3c:ce:3d:b0:84: cb:64:e1:19:23:09:99:e8:49:7d:bb:17:cc:6f:a9: b7:bd:d9:70:cd:91:28:20:0e:e3:be:77:6b:8a:85: 99:e9:67:3f:87:7f:d1:6e:76:ba:a1:3e:69:f2:01: 4d:b3:ef:f7:b8:fb:dc:d4:40:85:c8:ce:52:df:b1: 8f:36:c6:20:a6:b2:83:a1:0d:23:71:0d:e8:b8:d2: db:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:7E:C7:3D:5C:A5:43:8B:56:AF:5A:CE:62:E6:DB:40:83:1E:23:0E X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2cd3a895-0175-4e42-b61c-311a7970fc57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3520::/46 Signature Algorithm: sha256WithRSAEncryption a0:7d:f6:0f:08:aa:5f:b3:75:c2:a1:0c:c5:55:7b:36:ec:d9: 47:b4:b1:e9:7a:af:c4:3d:bb:d7:b0:a2:f6:e7:dd:10:b6:b2: 49:e7:dc:e9:d3:64:b4:d5:dc:ed:44:03:48:e9:97:31:35:a8: 88:6a:d0:bf:57:94:c1:9a:6b:cf:84:f8:ab:07:04:36:f0:d8: 9a:34:01:d4:b6:1d:15:95:ea:41:f8:29:ba:10:59:44:d2:ad: c4:2f:12:2a:55:a9:09:83:7e:a4:70:d8:ed:61:b4:80:3c:6e: a9:72:a5:be:39:10:5b:14:6b:5b:d2:8f:2b:3c:28:a5:74:9d: 16:f5:05:f9:a9:6c:d1:46:15:76:4a:b6:8b:87:48:83:d6:94: c8:4a:db:70:cd:29:fb:3b:fc:0f:c2:a6:2b:b5:6b:90:4c:d0: 1b:fa:fb:05:13:5d:b5:b9:86:ae:48:25:9a:03:d6:e2:2a:4f: 80:35:f1:d3:41:a7:0e:99:16:20:9c:ab:82:e0:e7:cf:48:cc: 8a:e8:04:6b:06:46:83:0f:41:43:3b:7d:69:36:b3:79:8a:f8: dd:0e:fb:25:31:15:18:f9:b0:32:74:ff:22:9f:de:18:6f:7c: ae:6b:39:7c:5c:8c:e6:46:33:a0:3b:40:87:68:67:06:b8:ae: 47:6e:2f:6e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCBzqPp0yjs8flFGKCsGTkmG1oDEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MDkzMTAxWhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3YTc4MTZiNGM1YjgxMTBlYjU5ZTFjOTliZTgyODBhNzJk Mjc5MWNmZDdjMmI1ZjAyMWMzMGIwM2UzMmU1NGJkMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxnY2aMvRNVTagAUuCIMZKIjLXs+aM3qNhD43Hc9PchYg6 53OQJ9x1CMrGeaAWPz+RedatEi5Q7IbLhXH70MaNvZaN7rNtqQXqgjZuBHgqdw5T QdUlr/oxaYzwTnnAuLFWigj5doTnniAJNqDiH4fbc8QnRSqL6nH1u0CUGoiWvmFq fqyUvvOu3AdzhNQrE4GBksLGernPZcAMYt9HyFFqtYPngBuUg1K0Jyt7jaI8zj2w hMtk4RkjCZnoSX27F8xvqbe92XDNkSggDuO+d2uKhZnpZz+Hf9FudrqhPmnyAU2z 7/e4+9zUQIXIzlLfsY82xiCmsoOhDSNxDei40ttFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUj37HPVylQ4tWr1rOYubbQIMeIw4wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzJjZDNhODk1LTAxNzUtNGU0Mi1iNjFjLTMxMWE3OTcwZmM1Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAANSAwDQYJKoZIhvcNAQELBQADggEBAKB99g8Iql+zdcKhDMVVezbs 2Ue0sel6r8Q9u9ewovbn3RC2sknn3OnTZLTV3O1EA0jplzE1qIhq0L9XlMGaa8+E +KsHBDbw2Jo0AdS2HRWV6kH4KboQWUTSrcQvEipVqQmDfqRw2O1htIA8bqlypb45 EFsUa1vSjys8KKV0nRb1BfmpbNFGFXZKtouHSIPWlMhK23DNKfs7/A/Cpiu1a5BM 0Bv6+wUTXbW5hq5IJZoD1uIqT4A18dNBpw6ZFiCcq4Lg589IzIroBGsGRoMPQUM7 fWk2s3mK+N0O+yUxFRj5sDJ0/yKf3hhvfK5rOXxcjOZGM6A7QIdoZwa4rkduL24= -----END CERTIFICATE-----Generated at Wed May 13 01:24:22 2026 by rpki-client