$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/530cd970-db97-4969-9439-a7e28f40f8ed.roa File: 530cd970-db97-4969-9439-a7e28f40f8ed.roa (raw, json) Hash identifier: BIyk0JdivKHOmwI/zfyIa4J0chzXQMZ/a8kj6rk7SAA= Subject key identifier: BC:C8:5B:83:FB:F3:20:8D:B0:90:5F:63:E8:EB:23:C2:5C:8B:77:DE Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 2AF0C03B02581AACF6AC04F9CE6120234700C6E2 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/530cd970-db97-4969-9439-a7e28f40f8ed.roa Signing time: Mon 04 May 2026 09:50:39 +0000 ROA not before: Mon 04 May 2026 09:50:39 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2fc0::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:f0:c0:3b:02:58:1a:ac:f6:ac:04:f9:ce:61:20:23:47:00:c6:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: May 4 09:50:39 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=3a1fe3c9e64d168838a255742b774d7408b3e2ec8c3861f88c6b20512f50c7af, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:00:6b:42:7c:6f:55:c8:a2:d3:63:a0:cf:d1: 00:48:ac:0a:f3:4c:bd:ed:5e:0f:3d:1e:00:8b:d7: 21:e5:72:41:58:33:1b:85:80:d2:ae:52:1d:2e:03: 30:ef:71:ab:35:e1:4e:40:66:e4:c2:6a:05:c9:4f: ab:08:b4:d3:b7:e5:f5:88:7b:5f:9a:81:fd:97:10: 1a:a0:81:06:11:e2:66:95:7f:f3:29:d0:5e:e4:73: db:18:c4:8e:59:b3:a0:0f:5c:0e:1e:2b:a4:71:14: 1e:86:8b:28:f2:08:cb:9d:d0:b1:4e:d1:15:1d:50: b2:02:59:68:f0:11:7d:97:c4:38:78:ac:0b:7b:e9: 81:3d:0d:1b:e4:74:06:86:bd:63:fc:5b:dd:45:32: 43:cc:23:ba:8e:78:61:a6:16:7d:e3:d8:a4:0f:1e: 5c:0c:69:1f:bc:bc:d8:54:42:c7:14:fb:44:94:78: 85:6f:d3:dc:b4:89:71:a4:6b:2d:b0:9f:03:76:37: 96:9f:4d:7b:2b:23:72:07:17:2b:01:c8:61:66:06: 2d:32:67:ba:da:89:63:10:d7:16:11:21:f5:1f:68: d3:78:c9:c3:89:6d:fb:e0:7a:ea:b4:53:97:46:c6: 4c:f9:c6:5e:c0:45:61:f4:65:99:63:60:9c:7f:9a: 61:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:C8:5B:83:FB:F3:20:8D:B0:90:5F:63:E8:EB:23:C2:5C:8B:77:DE X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/530cd970-db97-4969-9439-a7e28f40f8ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2fc0::/45 Signature Algorithm: sha256WithRSAEncryption 1a:06:45:9b:81:ca:0c:d1:29:7f:ab:97:0a:a3:4e:8d:4a:ae: 9f:2e:5c:3d:d4:e0:d1:0c:d9:e5:db:f9:03:44:f0:34:7b:6a: 22:44:df:f3:31:96:4d:5c:e0:4a:d4:b0:a3:33:8f:84:16:d4: 45:21:7a:fd:0d:47:3b:4f:c5:09:82:bc:7d:aa:11:4f:19:ec: 93:58:0a:90:31:b4:90:95:59:bc:8e:54:5b:76:71:b7:5f:13: 1b:ef:ec:1a:36:e1:e0:ca:1c:b9:01:69:53:81:02:8d:81:2f: b0:a3:de:ad:f2:99:f5:96:62:54:59:be:f2:fd:03:07:14:ed: 64:4c:40:5c:75:9b:aa:84:fc:93:aa:66:76:15:33:b8:bf:4d: fd:79:71:0f:38:f2:b8:92:0a:cb:69:8e:22:03:f3:2c:b1:9e: 1b:c4:e5:46:1a:ac:18:3a:5c:42:5b:27:ad:fc:c3:36:81:18: b8:c6:6c:9d:62:12:5c:ca:f7:28:6e:99:29:2f:9a:cd:00:42: 2d:78:0f:75:6f:3a:86:88:8a:de:1f:51:82:1d:00:31:18:d8: f8:4d:e2:b3:8e:23:1b:f5:bf:e3:50:e0:7e:b3:96:a8:5b:3a: 0e:28:ba:8a:b9:9e:74:47:95:22:c2:3a:10:4c:a7:6d:35:3b: 59:38:64:a9 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKvDAOwJYGqz2rAT5zmEgI0cAxuIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MDk1MDM5WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzYTFmZTNjOWU2NGQxNjg4MzhhMjU1NzQyYjc3NGQ3NDA4 YjNlMmVjOGMzODYxZjg4YzZiMjA1MTJmNTBjN2FmMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDxAGtCfG9VyKLTY6DP0QBIrArzTL3tXg89HgCL1yHlckFY MxuFgNKuUh0uAzDvcas14U5AZuTCagXJT6sItNO35fWIe1+agf2XEBqggQYR4maV f/Mp0F7kc9sYxI5Zs6APXA4eK6RxFB6GiyjyCMud0LFO0RUdULICWWjwEX2XxDh4 rAt76YE9DRvkdAaGvWP8W91FMkPMI7qOeGGmFn3j2KQPHlwMaR+8vNhUQscU+0SU eIVv09y0iXGkay2wnwN2N5afTXsrI3IHFysByGFmBi0yZ7raiWMQ1xYRIfUfaNN4 ycOJbfvgeuq0U5dGxkz5xl7ARWH0ZZljYJx/mmFxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUvMhbg/vzII2wkF9j6OsjwlyLd94wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzUzMGNkOTcwLWRiOTctNDk2OS05NDM5LWE3ZTI4ZjQwZjhlZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAAL8AwDQYJKoZIhvcNAQELBQADggEBABoGRZuBygzRKX+rlwqjTo1K rp8uXD3U4NEM2eXb+QNE8DR7aiJE3/Mxlk1c4ErUsKMzj4QW1EUhev0NRztPxQmC vH2qEU8Z7JNYCpAxtJCVWbyOVFt2cbdfExvv7Bo24eDKHLkBaVOBAo2BL7Cj3q3y mfWWYlRZvvL9AwcU7WRMQFx1m6qE/JOqZnYVM7i/Tf15cQ848riSCstpjiID8yyx nhvE5UYarBg6XEJbJ638wzaBGLjGbJ1iElzK9yhumSkvms0AQi14D3VvOoaIit4f UYIdADEY2PhN4rOOIxv1v+NQ4H6zlqhbOg4ouoq5nnRHlSLCOhBMp201O1k4ZKk= -----END CERTIFICATE-----Generated at Wed May 13 01:03:42 2026 by rpki-client