$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/343fa514-4a29-4502-9249-63acc9e09746.roa File: 343fa514-4a29-4502-9249-63acc9e09746.roa (raw, json) Hash identifier: atTPNhxeWMQGqUaD4Vnxlnv1pJNPfPMZ9d1yi+QdduA= Subject key identifier: A6:5C:37:F2:9B:70:33:21:2E:3C:C8:7D:4B:08:92:B8:BD:84:2A:48 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 226597FE0D094B29715B11360F8B1D63F3ED0C51 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/343fa514-4a29-4502-9249-63acc9e09746.roa Signing time: Mon 04 May 2026 11:41:59 +0000 ROA not before: Mon 04 May 2026 11:41:59 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3b94::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:65:97:fe:0d:09:4b:29:71:5b:11:36:0f:8b:1d:63:f3:ed:0c:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: May 4 11:41:59 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=19faf94227b9b952a39ee3fb18636c5d7c6ad155a722a469df53606de0121136, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:73:a8:a6:cf:59:a6:7b:84:29:2f:a7:72:48: a6:02:58:87:e0:33:68:ea:a8:17:8b:41:f9:73:e6: 05:f9:f7:c1:a7:f0:07:63:ff:9c:40:03:24:bf:9e: 8c:75:7a:86:ed:70:5d:d9:02:d1:21:c8:1d:84:c6: 2d:77:ee:40:8f:2f:f0:0d:a1:f3:8f:88:db:5e:eb: cd:8e:24:38:4f:51:43:66:d8:42:f7:f8:6f:79:85: a2:af:32:ca:62:3e:5b:bd:ae:7d:4e:55:10:be:7b: 58:44:6f:a1:94:5a:28:07:5a:ae:c0:96:50:4d:63: f2:15:06:ee:c6:68:b4:82:3a:64:e9:23:28:eb:36: 3a:3a:2d:97:0b:f3:12:9c:8f:76:bf:e0:47:ec:8a: 6f:6a:3b:06:27:a1:5a:66:45:85:e6:7b:3f:35:7d: c8:d2:4c:e9:5f:a9:ff:c0:d6:f4:2c:6e:0a:87:06: d3:89:99:de:e1:1a:cf:1a:48:cd:36:00:b0:9c:fc: 6e:7a:69:98:32:86:55:c9:f0:81:3f:82:ca:50:60: c4:f6:7a:90:a7:08:7e:c5:3b:19:98:f3:6e:21:b9: d7:b9:0e:c1:a7:6f:3f:32:62:97:3f:e0:88:60:1b: 40:17:4d:1a:88:69:8e:0b:84:a6:b8:8e:75:b4:82: d5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:5C:37:F2:9B:70:33:21:2E:3C:C8:7D:4B:08:92:B8:BD:84:2A:48 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/343fa514-4a29-4502-9249-63acc9e09746.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3b94::/47 Signature Algorithm: sha256WithRSAEncryption 4b:0c:f2:a8:1a:83:52:ca:70:e2:19:01:df:58:8a:28:17:9d: 52:5a:59:9e:ad:e7:72:94:27:5a:47:b9:48:06:bc:0a:9a:21: 05:d7:8a:d9:53:54:bd:55:b8:7d:8a:83:79:0e:fd:8d:4a:6a: df:9e:04:f6:7b:0a:68:ac:13:6d:93:19:08:3c:0a:7c:a7:95: 31:44:88:0d:3f:a5:fb:dd:f6:51:43:0f:0e:c8:5e:77:b3:53: cf:26:ed:96:cb:f9:2a:3e:21:19:99:d0:7a:77:33:5d:1a:89: 7d:3a:e6:ec:bf:e2:0f:a1:51:41:bb:81:0f:52:f4:04:d7:92: 19:dc:a2:82:20:ed:c5:37:1f:47:dd:0f:51:08:6d:37:7b:21: 7c:31:31:c4:41:c9:a8:45:ad:c2:8f:66:f8:0b:b2:a0:64:b4: 0a:c2:a7:0d:24:d5:40:8f:b0:b2:93:7f:dd:df:4f:e1:9c:93: 8a:e9:2b:aa:33:6a:fd:c3:bf:f3:a4:ab:64:0a:d3:3e:71:cf: ab:d7:b3:93:1d:53:14:e2:af:2c:7f:64:ba:ef:94:23:3d:88: 10:14:93:99:db:ad:f1:98:7a:34:0d:09:48:89:8a:4b:64:7b: 14:76:2b:87:ae:ab:b2:83:88:12:f5:e0:4d:93:5e:f7:33:af: 6a:09:1c:ff -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUImWX/g0JSylxWxE2D4sdY/PtDFEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MTE0MTU5WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxOWZhZjk0MjI3YjliOTUyYTM5ZWUzZmIxODYzNmM1ZDdj NmFkMTU1YTcyMmE0NjlkZjUzNjA2ZGUwMTIxMTM2MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVc6imz1mme4QpL6dySKYCWIfgM2jqqBeLQflz5gX598Gn 8Adj/5xAAyS/nox1eobtcF3ZAtEhyB2Exi137kCPL/ANofOPiNte682OJDhPUUNm 2EL3+G95haKvMspiPlu9rn1OVRC+e1hEb6GUWigHWq7AllBNY/IVBu7GaLSCOmTp IyjrNjo6LZcL8xKcj3a/4Efsim9qOwYnoVpmRYXmez81fcjSTOlfqf/A1vQsbgqH BtOJmd7hGs8aSM02ALCc/G56aZgyhlXJ8IE/gspQYMT2epCnCH7FOxmY824hude5 DsGnbz8yYpc/4IhgG0AXTRqIaY4LhKa4jnW0gtXtAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUplw38ptwMyEuPMh9SwiSuL2EKkgwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzM0M2ZhNTE0LTRhMjktNDUwMi05MjQ5LTYzYWNjOWUwOTc0Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAO5QwDQYJKoZIhvcNAQELBQADggEBAEsM8qgag1LKcOIZAd9YiigX nVJaWZ6t53KUJ1pHuUgGvAqaIQXXitlTVL1VuH2Kg3kO/Y1Kat+eBPZ7CmisE22T GQg8CnynlTFEiA0/pfvd9lFDDw7IXnezU88m7ZbL+So+IRmZ0Hp3M10aiX065uy/ 4g+hUUG7gQ9S9ATXkhncooIg7cU3H0fdD1EIbTd7IXwxMcRByahFrcKPZvgLsqBk tArCpw0k1UCPsLKTf93fT+Gck4rpK6ozav3Dv/Okq2QK0z5xz6vXs5MdUxTiryx/ ZLrvlCM9iBAUk5nbrfGYejQNCUiJiktkexR2K4euq7KDiBL14E2TXvczr2oJHP8= -----END CERTIFICATE-----Generated at Wed May 13 00:37:16 2026 by rpki-client