$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4b449260-c061-424a-8197-ff0c110f0008.roa File: 4b449260-c061-424a-8197-ff0c110f0008.roa (raw, json) Hash identifier: JhyCGkaDsCS9bOQEBdSfIlPT6TU3LMnrxuC0cngd0TA= Subject key identifier: EE:FE:F7:21:77:1D:4D:36:81:19:6E:F9:C2:6A:75:48:F0:B3:CD:A5 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 3B811A91DFF041DD1F789753583269E580748ECE Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4b449260-c061-424a-8197-ff0c110f0008.roa Signing time: Mon 04 May 2026 13:51:01 +0000 ROA not before: Mon 04 May 2026 13:51:01 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3f00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:81:1a:91:df:f0:41:dd:1f:78:97:53:58:32:69:e5:80:74:8e:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: May 4 13:51:01 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=df46d8dd0bfcd663c97b2900810aebfb80122593c54425413825a2d869aefe7e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3b:20:11:a5:ef:c8:87:84:22:a5:9b:15:a8: 88:96:2a:f2:2e:f0:17:e7:1c:5d:d3:1f:ba:1d:fc: 9d:86:82:02:7d:31:3d:da:28:8c:9f:41:18:1b:9b: 26:f8:24:35:6d:15:9b:5c:ca:aa:44:c3:ba:94:a3: b3:e3:6e:39:b5:cc:df:51:aa:0e:2a:ef:16:0c:f6: ad:ca:fd:b7:df:c9:75:ae:d8:27:d9:6e:9f:a8:2a: d0:8d:5d:2f:37:5f:f8:8d:93:6a:05:c6:27:ae:bc: 4b:2b:22:17:0a:cd:d9:30:96:c7:8f:47:5c:3e:ed: 49:bb:48:9f:d2:f8:30:99:01:bb:9a:5c:bf:fd:36: 6e:33:c9:94:60:b4:59:24:5e:93:8f:dc:cb:a9:96: ae:20:a3:cf:33:a9:ee:12:4a:d6:87:9e:24:64:7b: d8:73:25:2d:21:7d:fe:06:42:48:35:cf:f0:94:53: 33:76:25:4f:af:b7:ff:61:d3:01:9c:3e:d1:f5:e5: cc:0f:e2:fc:6f:1b:57:1a:80:97:60:c8:77:09:73: 36:6a:68:60:a2:52:33:dc:e5:61:fd:d3:aa:36:d1: 35:60:1a:47:5b:e5:53:99:07:e7:32:c6:41:08:ca: 4d:23:38:33:9b:52:e8:7b:85:80:57:67:91:4e:fc: 5a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:FE:F7:21:77:1D:4D:36:81:19:6E:F9:C2:6A:75:48:F0:B3:CD:A5 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4b449260-c061-424a-8197-ff0c110f0008.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3f00::/41 Signature Algorithm: sha256WithRSAEncryption 74:f2:fc:23:31:e6:81:ed:c3:e6:5a:c3:db:7a:09:78:ac:e3: c1:48:6d:22:15:53:3e:cd:9c:6f:bb:26:e1:50:4e:45:78:f6: b7:b9:be:b1:24:fe:18:d7:7a:c8:1b:bf:aa:54:78:24:4d:0f: 48:05:c5:42:2f:41:00:68:22:c4:ea:73:3a:e3:2c:f1:61:0e: 4e:48:c2:a1:d5:ee:86:62:2a:be:be:13:fe:20:02:75:1d:52: f4:bc:38:f4:73:dc:7c:56:53:85:d9:ed:6a:b7:28:05:7c:f8: 79:97:48:d9:bc:f7:69:c1:4a:d8:78:f3:b0:1d:31:e9:f6:9f: a9:d1:5a:d0:52:b9:69:3b:63:68:2a:18:d7:8e:88:9b:7e:b3: ab:58:a0:22:9c:bd:bb:d0:5a:8e:f1:9f:c1:5a:be:54:f2:42: e9:b6:f2:f3:bf:b7:83:28:d6:ac:6d:fc:3e:74:4b:7e:03:bf: 1e:b0:f4:f1:42:a5:dc:7a:62:9f:3e:1a:b4:dd:4f:10:ae:43: 72:b0:b2:89:33:26:46:8f:21:cd:3e:dd:86:33:1d:f5:b0:b4: 38:7e:15:78:45:40:85:eb:31:d3:dd:c2:a5:fb:5a:59:42:5a: c5:20:49:9e:d1:4c:1b:7e:26:55:c0:66:96:84:fe:71:62:dd: 44:89:25:e2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUO4Eakd/wQd0feJdTWDJp5YB0js4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MTM1MTAxWhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZjQ2ZDhkZDBiZmNkNjYzYzk3YjI5MDA4MTBhZWJmYjgw MTIyNTkzYzU0NDI1NDEzODI1YTJkODY5YWVmZTdlMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDOyARpe/Ih4QipZsVqIiWKvIu8BfnHF3TH7od/J2GggJ9 MT3aKIyfQRgbmyb4JDVtFZtcyqpEw7qUo7Pjbjm1zN9Rqg4q7xYM9q3K/bffyXWu 2CfZbp+oKtCNXS83X/iNk2oFxieuvEsrIhcKzdkwlsePR1w+7Um7SJ/S+DCZAbua XL/9Nm4zyZRgtFkkXpOP3Muplq4go88zqe4SStaHniRke9hzJS0hff4GQkg1z/CU UzN2JU+vt/9h0wGcPtH15cwP4vxvG1cagJdgyHcJczZqaGCiUjPc5WH906o20TVg Gkdb5VOZB+cyxkEIyk0jODObUuh7hYBXZ5FO/Fr5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU7v73IXcdTTaBGW75wmp1SPCzzaUwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzRiNDQ5MjYwLWMwNjEtNDI0YS04MTk3LWZmMGMxMTBmMDAwOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwcmAJAAPwAwDQYJKoZIhvcNAQELBQADggEBAHTy/CMx5oHtw+Zaw9t6CXis 48FIbSIVUz7NnG+7JuFQTkV49re5vrEk/hjXesgbv6pUeCRND0gFxUIvQQBoIsTq czrjLPFhDk5IwqHV7oZiKr6+E/4gAnUdUvS8OPRz3HxWU4XZ7Wq3KAV8+HmXSNm8 92nBSth487AdMen2n6nRWtBSuWk7Y2gqGNeOiJt+s6tYoCKcvbvQWo7xn8FavlTy Qum28vO/t4Mo1qxt/D50S34Dvx6w9PFCpdx6Yp8+GrTdTxCuQ3KwsokzJkaPIc0+ 3YYzHfWwtDh+FXhFQIXrMdPdwqX7WllCWsUgSZ7RTBt+JlXAZpaE/nFi3USJJeI= -----END CERTIFICATE-----Generated at Wed May 13 00:53:53 2026 by rpki-client