$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/33aa5c81-ff94-44be-bcbd-500c3e5650c0.roa File: 33aa5c81-ff94-44be-bcbd-500c3e5650c0.roa (raw, json) Hash identifier: qAf4BK9COMsumpjb9GynFWH4alEs/HbWhaAEXzI6QGw= Subject key identifier: D1:D0:B3:F5:DB:79:86:5A:98:41:91:EA:AF:81:9A:CA:0D:6A:F3:89 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 5CA3DC48A8CBCD322570517530233BB1D6D9CFCD Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/33aa5c81-ff94-44be-bcbd-500c3e5650c0.roa Signing time: Mon 04 May 2026 10:11:33 +0000 ROA not before: Mon 04 May 2026 10:11:33 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:29b8::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:a3:dc:48:a8:cb:cd:32:25:70:51:75:30:23:3b:b1:d6:d9:cf:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: May 4 10:11:33 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=d8c8d37d37df99d4b481f7fabb12f03fd047249a653553cd05bdbadade19cd73, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3d:4a:36:86:bf:bc:47:da:8b:5e:cc:eb:c1: 46:11:29:59:e3:48:d9:6f:1f:a5:d2:fa:d7:35:31: a1:5c:24:22:53:78:46:72:53:f6:46:f2:ce:58:61: e9:25:37:19:05:12:a3:5c:ba:40:28:d1:b1:21:fa: 8c:66:74:b8:1b:3d:cc:55:d6:8c:8e:c6:36:1b:78: 0c:31:cf:f5:ec:16:7f:f4:7b:5b:da:56:f3:e4:2f: 71:3a:61:4c:8d:59:9a:50:bd:c7:5c:5d:ce:a2:a8: 3c:66:1f:b1:a3:29:14:52:74:c5:06:24:69:a5:b3: 05:11:dc:f7:e7:07:c2:5e:0e:f5:b7:1b:28:a0:f9: 2c:b4:32:10:14:d0:9e:ce:72:3a:20:4e:c3:d2:59: b3:98:e1:52:4b:7c:24:11:42:e3:9a:a3:5d:1e:bc: cd:86:89:b6:d8:1c:3b:9d:21:e1:3f:1e:ac:04:45: 26:0f:22:26:26:90:c0:52:f8:7b:83:82:16:4e:7f: 35:95:20:78:52:78:7d:e4:7d:f0:47:f7:b3:eb:30: 08:19:09:00:c5:b6:dc:0c:c8:1f:b4:0a:ba:9f:0c: ed:ea:b4:75:8e:d3:0b:47:36:9f:15:26:83:2f:18: c4:c7:2a:68:81:4e:fe:74:6f:ba:93:7b:ba:7c:1e: 30:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:D0:B3:F5:DB:79:86:5A:98:41:91:EA:AF:81:9A:CA:0D:6A:F3:89 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/33aa5c81-ff94-44be-bcbd-500c3e5650c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:29b8::/45 Signature Algorithm: sha256WithRSAEncryption 28:38:c9:06:7e:f3:c5:f5:ff:cc:0d:b1:34:19:0a:a5:bf:db: e3:22:9d:6b:3c:38:a2:13:4b:8f:ba:ab:bd:b5:b1:36:05:6c: 74:3f:69:64:34:56:ca:7f:3f:7b:ff:28:01:01:80:ed:4d:92: fa:55:90:e2:fb:9b:6a:28:ab:9b:e6:5d:aa:1e:e3:fa:4a:5f: 56:f5:01:20:1a:ef:e5:13:3e:f0:c0:f6:3b:88:76:29:dc:5a: 7b:ae:31:90:69:bf:22:8f:a6:9f:0a:37:4f:d0:36:03:35:03: a0:9f:a8:4b:52:02:e2:1f:da:88:b1:63:03:34:65:99:42:7e: bb:32:d0:80:54:02:fd:50:87:3b:f0:3e:b5:63:cd:75:c9:fe: a5:cc:14:5f:88:6e:16:bd:9f:ed:f6:73:57:f3:a7:10:67:b7: 2f:40:f6:b9:19:f4:63:fb:6f:32:a5:6d:50:52:01:29:30:11: 09:5c:4d:2b:c3:67:20:3a:c7:45:27:23:d9:c2:20:17:ef:8c: 56:6b:96:fe:43:2d:00:1c:ba:e0:98:87:6a:77:df:c2:3f:6b: e9:3c:f0:f9:16:0f:43:c3:d2:4e:3a:b2:3e:a1:e7:52:92:6c: b4:c8:2f:bc:2d:6f:4a:88:e4:e0:8b:87:56:80:6d:01:29:4a: 45:90:77:b4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXKPcSKjLzTIlcFF1MCM7sdbZz80wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MTAxMTMzWhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkOGM4ZDM3ZDM3ZGY5OWQ0YjQ4MWY3ZmFiYjEyZjAzZmQw NDcyNDlhNjUzNTUzY2QwNWJkYmFkYWRlMTljZDczMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEPUo2hr+8R9qLXszrwUYRKVnjSNlvH6XS+tc1MaFcJCJT eEZyU/ZG8s5YYeklNxkFEqNcukAo0bEh+oxmdLgbPcxV1oyOxjYbeAwxz/XsFn/0 e1vaVvPkL3E6YUyNWZpQvcdcXc6iqDxmH7GjKRRSdMUGJGmlswUR3PfnB8JeDvW3 Gyig+Sy0MhAU0J7OcjogTsPSWbOY4VJLfCQRQuOao10evM2GibbYHDudIeE/HqwE RSYPIiYmkMBS+HuDghZOfzWVIHhSeH3kffBH97PrMAgZCQDFttwMyB+0CrqfDO3q tHWO0wtHNp8VJoMvGMTHKmiBTv50b7qTe7p8HjB3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU0dCz9dt5hlqYQZHqr4Gayg1q84kwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzMzYWE1YzgxLWZmOTQtNDRiZS1iY2JkLTUwMGMzZTU2NTBjMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAAKbgwDQYJKoZIhvcNAQELBQADggEBACg4yQZ+88X1/8wNsTQZCqW/ 2+MinWs8OKITS4+6q721sTYFbHQ/aWQ0Vsp/P3v/KAEBgO1NkvpVkOL7m2ooq5vm Xaoe4/pKX1b1ASAa7+UTPvDA9juIdincWnuuMZBpvyKPpp8KN0/QNgM1A6CfqEtS AuIf2oixYwM0ZZlCfrsy0IBUAv1QhzvwPrVjzXXJ/qXMFF+Ibha9n+32c1fzpxBn ty9A9rkZ9GP7bzKlbVBSASkwEQlcTSvDZyA6x0UnI9nCIBfvjFZrlv5DLQAcuuCY h2p338I/a+k88PkWD0PD0k46sj6h51KSbLTIL7wtb0qI5OCLh1aAbQEpSkWQd7Q= -----END CERTIFICATE-----Generated at Wed May 13 02:31:28 2026 by rpki-client