$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4a217edb-be8e-4398-a95f-0bbbb87fd23c.roa File: 4a217edb-be8e-4398-a95f-0bbbb87fd23c.roa (raw, json) Hash identifier: B5ObAmZKVagsf3laDUdONsUqlpB7xm7rdtb4tjGAMcQ= Subject key identifier: 56:2D:5F:6A:4C:B6:26:D9:E9:3A:35:4B:96:4B:86:CD:4D:CE:D7:87 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 29385974E18236D3F6877612623085705770424D Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4a217edb-be8e-4398-a95f-0bbbb87fd23c.roa Signing time: Mon 04 May 2026 09:50:36 +0000 ROA not before: Mon 04 May 2026 09:50:36 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3fae::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:38:59:74:e1:82:36:d3:f6:87:76:12:62:30:85:70:57:70:42:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: May 4 09:50:36 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=9dcde4f83c47bf0f0cedbfb15efbed943c2b0146ecc879df4dcdd34c7de299f2, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:dd:41:f1:34:90:fb:dd:4c:ad:64:14:57:9a: 94:10:b2:96:e7:03:e4:40:bb:b9:ba:10:f5:c5:5f: ac:e5:e1:47:52:4e:1b:95:3b:ca:83:01:47:d7:3e: b1:7d:6f:f1:5b:d8:9a:aa:60:f4:39:3e:c4:57:73: eb:7f:84:59:f8:5a:e3:b7:67:5f:e7:a4:e3:53:c6: bd:3a:51:22:72:38:ef:b9:ee:c9:33:b1:d3:a8:e7: 3a:9f:b9:ea:84:6e:dd:3c:8f:45:cb:ea:42:1d:13: 60:90:02:ed:1c:70:84:1f:b8:62:89:cd:5e:10:70: c3:e3:69:6c:84:9d:ca:0f:c2:7e:39:8c:42:73:35: 16:39:f0:cb:21:bf:31:53:45:15:83:68:f4:49:77: d7:53:94:ab:36:82:c3:92:4c:a3:8d:40:b3:37:64: 18:43:a3:13:3f:30:82:01:ce:b8:19:53:f3:16:9a: dd:6e:51:a9:4d:ff:5b:c9:e0:a1:30:e0:21:95:bb: 43:8e:e3:f1:0c:b7:0c:a0:d6:bd:5b:5b:9b:cf:dc: ef:f2:03:7b:2a:6b:99:24:1e:fe:93:f9:11:fc:fd: 22:00:c4:d2:ef:82:fd:f4:61:62:11:3e:67:fd:b8: 05:68:d0:c0:a5:80:64:3c:aa:d9:ce:c4:82:8a:c8: 02:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:2D:5F:6A:4C:B6:26:D9:E9:3A:35:4B:96:4B:86:CD:4D:CE:D7:87 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4a217edb-be8e-4398-a95f-0bbbb87fd23c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3fae::/47 Signature Algorithm: sha256WithRSAEncryption 0f:77:f2:3a:b5:68:c8:17:6d:d7:78:23:0f:4e:04:cb:b5:ee: d7:51:ce:cc:55:32:3c:7b:14:77:62:80:57:fa:48:f1:03:73: b0:64:24:b9:70:b8:29:79:a9:c3:71:cc:21:c4:a5:0c:f7:58: 3f:9b:96:6e:92:c5:25:fa:6d:66:cc:41:47:c5:6c:4f:f3:d3: 0d:f1:05:e7:54:a8:95:da:b9:96:2f:a9:f0:69:86:d9:69:ec: b1:45:bd:0a:d3:65:33:17:87:12:e1:f1:f3:7d:95:86:4b:30: 52:8c:b1:5f:7e:61:4e:f7:fd:01:dc:a8:c2:da:c6:1e:f3:fc: 24:e1:04:24:f7:f3:3a:91:c4:64:22:47:42:d9:7b:8f:81:d0: 50:eb:98:07:36:e5:8c:87:bc:d0:a9:31:bf:b8:d5:43:f6:b7: ae:47:f1:5c:ac:d8:7d:a1:34:31:52:ec:be:8d:57:5f:f9:64: 65:97:f9:3f:35:c7:57:03:78:f6:8a:4d:01:10:e8:7b:43:60: a6:54:1a:6f:0c:34:37:1d:e9:d9:af:31:37:4a:84:f1:c8:4d: cf:6b:bc:48:b8:97:41:d7:bf:57:66:3d:7d:d9:56:f8:30:55: e6:5b:ab:1d:68:0a:9d:27:9b:b7:70:7c:01:fb:9f:e1:44:f0: 35:b0:c7:db -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKThZdOGCNtP2h3YSYjCFcFdwQk0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MDk1MDM2WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZGNkZTRmODNjNDdiZjBmMGNlZGJmYjE1ZWZiZWQ5NDNj MmIwMTQ2ZWNjODc5ZGY0ZGNkZDM0YzdkZTI5OWYyMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDL3UHxNJD73UytZBRXmpQQspbnA+RAu7m6EPXFX6zl4UdS ThuVO8qDAUfXPrF9b/Fb2JqqYPQ5PsRXc+t/hFn4WuO3Z1/npONTxr06USJyOO+5 7skzsdOo5zqfueqEbt08j0XL6kIdE2CQAu0ccIQfuGKJzV4QcMPjaWyEncoPwn45 jEJzNRY58MshvzFTRRWDaPRJd9dTlKs2gsOSTKONQLM3ZBhDoxM/MIIBzrgZU/MW mt1uUalN/1vJ4KEw4CGVu0OO4/EMtwyg1r1bW5vP3O/yA3sqa5kkHv6T+RH8/SIA xNLvgv30YWIRPmf9uAVo0MClgGQ8qtnOxIKKyAJ5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUVi1faky2JtnpOjVLlkuGzU3O14cwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzRhMjE3ZWRiLWJlOGUtNDM5OC1hOTVmLTBiYmJiODdmZDIzYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAP64wDQYJKoZIhvcNAQELBQADggEBAA938jq1aMgXbdd4Iw9OBMu1 7tdRzsxVMjx7FHdigFf6SPEDc7BkJLlwuCl5qcNxzCHEpQz3WD+blm6SxSX6bWbM QUfFbE/z0w3xBedUqJXauZYvqfBphtlp7LFFvQrTZTMXhxLh8fN9lYZLMFKMsV9+ YU73/QHcqMLaxh7z/CThBCT38zqRxGQiR0LZe4+B0FDrmAc25YyHvNCpMb+41UP2 t65H8Vys2H2hNDFS7L6NV1/5ZGWX+T81x1cDePaKTQEQ6HtDYKZUGm8MNDcd6dmv MTdKhPHITc9rvEi4l0HXv1dmPX3ZVvgwVeZbqx1oCp0nm7dwfAH7n+FE8DWwx9s= -----END CERTIFICATE-----Generated at Wed May 13 01:24:51 2026 by rpki-client