$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3d22ae38-cf2a-4b55-8194-f1337a00a91a.roa File: 3d22ae38-cf2a-4b55-8194-f1337a00a91a.roa (raw, json) Hash identifier: ngkUzEVi9Ydf1WPcVX1xVvOUMl8sgSm3kvVAkm9TsRw= Subject key identifier: EB:84:29:7F:CC:29:5A:E7:B3:47:92:7C:E0:8E:96:77:8E:5E:AA:04 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 6065D78FD33D68B8175126E308456EF218D7B45F Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3d22ae38-cf2a-4b55-8194-f1337a00a91a.roa Signing time: Mon 04 May 2026 09:31:57 +0000 ROA not before: Mon 04 May 2026 09:31:57 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3880::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:65:d7:8f:d3:3d:68:b8:17:51:26:e3:08:45:6e:f2:18:d7:b4:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: May 4 09:31:57 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=b94235fb80cbbd059a33150d07b90633903872aa89aff05054fef72015f298ca, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:31:f9:cf:d2:e0:44:95:c1:15:86:f4:47:6f: 2c:1b:5a:ff:7b:41:3f:69:1f:9f:8c:8a:67:73:53: 54:63:ea:e8:ec:ec:4f:c4:34:c1:d1:17:3a:77:08: c4:cb:e9:10:8f:b8:18:bc:10:9c:b2:1c:a7:01:0b: 72:36:00:ba:ec:b5:2e:a8:47:07:3a:69:5c:44:19: 1d:58:89:8b:95:f2:8d:5f:36:12:a1:cb:15:36:20: e6:6b:2d:5f:07:26:0d:b0:0b:11:47:8b:39:fc:99: 19:9d:27:97:f2:2c:75:a9:0f:28:f2:ed:8f:79:01: 09:27:f7:dc:ea:14:d3:ac:d2:85:c0:7b:ec:8f:b8: f4:bf:fc:76:e4:b2:f4:00:18:58:84:6b:e9:97:b6: 66:6b:e2:c3:c0:3c:f7:e9:af:10:e2:64:82:15:65: eb:37:07:e8:0c:a4:a8:b2:e9:5d:81:f4:12:b3:4b: 0a:99:3e:f7:d8:bc:55:3c:99:66:ae:d9:7d:32:e8: 80:4b:3b:ed:0b:5d:b1:6c:3f:b5:57:a9:ab:46:42: c8:3c:c9:f0:70:ed:f0:1f:fb:b2:66:3a:19:1d:bf: 54:6d:62:0e:77:d2:16:a2:0d:d2:81:fc:75:0c:3e: 8e:01:69:a0:b9:af:b6:ba:fd:ac:aa:c9:7e:9b:24: 82:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:84:29:7F:CC:29:5A:E7:B3:47:92:7C:E0:8E:96:77:8E:5E:AA:04 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3d22ae38-cf2a-4b55-8194-f1337a00a91a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3880::/41 Signature Algorithm: sha256WithRSAEncryption 21:09:6e:4e:b9:d9:91:14:3a:ef:14:e4:fd:42:32:8c:cb:9e: 66:ee:5c:ad:48:01:79:ea:a1:28:46:3d:54:79:71:35:a4:e1: 33:e3:70:2e:f4:74:08:a7:1b:d5:a3:b0:db:38:ac:9f:de:62: b9:db:7c:c0:1a:e8:94:f0:f2:ac:26:45:f9:24:4d:30:74:a1: a5:c5:f9:1a:2b:c9:b7:b1:dc:f1:4e:1e:71:4f:ef:9f:85:b6: 8d:12:e5:3e:dc:8a:2a:af:06:65:1e:4d:f6:05:1a:c4:95:c9: ec:c2:bd:d3:d1:ec:a3:68:7f:63:29:bc:34:f2:4d:a8:3e:6a: 22:fe:be:fa:83:b2:27:30:6a:eb:08:92:03:36:31:a0:3c:d9: 88:aa:6d:b1:af:a1:60:bb:5d:ec:f5:f2:df:85:c1:17:91:31: 2f:b4:30:ea:0a:c9:95:ea:38:46:40:95:3e:24:14:4f:47:0a: 92:66:9a:56:d3:be:ad:cc:7c:2a:a2:82:79:ed:8c:d1:8c:67: e3:cb:f9:e7:47:ea:90:e2:be:65:a4:90:a7:d5:fd:29:c1:40: 70:8a:82:46:f0:cc:bf:77:dc:ee:7f:74:bd:49:c2:53:27:f9: 9a:9e:b6:6d:96:ae:a9:dd:1b:d0:60:b2:93:a8:f2:a9:1f:72: 3f:01:94:c3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUYGXXj9M9aLgXUSbjCEVu8hjXtF8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MDkzMTU3WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiOTQyMzVmYjgwY2JiZDA1OWEzMzE1MGQwN2I5MDYzMzkw Mzg3MmFhODlhZmYwNTA1NGZlZjcyMDE1ZjI5OGNhMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYMfnP0uBElcEVhvRHbywbWv97QT9pH5+MimdzU1Rj6ujs 7E/ENMHRFzp3CMTL6RCPuBi8EJyyHKcBC3I2ALrstS6oRwc6aVxEGR1YiYuV8o1f NhKhyxU2IOZrLV8HJg2wCxFHizn8mRmdJ5fyLHWpDyjy7Y95AQkn99zqFNOs0oXA e+yPuPS//HbksvQAGFiEa+mXtmZr4sPAPPfprxDiZIIVZes3B+gMpKiy6V2B9BKz SwqZPvfYvFU8mWau2X0y6IBLO+0LXbFsP7VXqatGQsg8yfBw7fAf+7JmOhkdv1Rt Yg530haiDdKB/HUMPo4BaaC5r7a6/ayqyX6bJIIZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU64Qpf8wpWuezR5J84I6Wd45eqgQwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzNkMjJhZTM4LWNmMmEtNGI1NS04MTk0LWYxMzM3YTAwYTkxYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwcmAJAAOIAwDQYJKoZIhvcNAQELBQADggEBACEJbk652ZEUOu8U5P1CMozL nmbuXK1IAXnqoShGPVR5cTWk4TPjcC70dAinG9WjsNs4rJ/eYrnbfMAa6JTw8qwm RfkkTTB0oaXF+Rorybex3PFOHnFP75+Fto0S5T7ciiqvBmUeTfYFGsSVyezCvdPR 7KNof2MpvDTyTag+aiL+vvqDsicwausIkgM2MaA82YiqbbGvoWC7Xez18t+FwReR MS+0MOoKyZXqOEZAlT4kFE9HCpJmmlbTvq3MfCqignntjNGMZ+PL+edH6pDivmWk kKfV/SnBQHCKgkbwzL933O5/dL1JwlMn+Zqetm2WrqndG9BgspOo8qkfcj8BlMM= -----END CERTIFICATE-----Generated at Wed May 13 02:31:17 2026 by rpki-client