$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5a99d502-895d-4928-a31a-1c228e1f7e0f.roa File: 5a99d502-895d-4928-a31a-1c228e1f7e0f.roa (raw, json) Hash identifier: 7OFAISTc1Sy/zr4F/FrPDazXTJN9lzbPNN4bWTvCYbs= Subject key identifier: 41:4F:88:55:A3:EC:A9:49:EC:2D:CD:ED:1C:10:22:7B:1A:66:DD:41 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 647D8A835252A005495F544043AF1E3894C01790 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5a99d502-895d-4928-a31a-1c228e1f7e0f.roa Signing time: Fri 24 Apr 2026 00:00:10 +0000 ROA not before: Fri 24 Apr 2026 00:00:10 +0000 ROA not after: Thu 23 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1240::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:7d:8a:83:52:52:a0:05:49:5f:54:40:43:af:1e:38:94:c0:17:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Apr 24 00:00:10 2026 GMT Not After : Jul 23 23:59:59 2026 GMT Subject: serialNumber=a6119fac10f951ef3c291f5325e4804abc7d10cae783a91d28490c03c951cf26, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a3:fd:95:ed:02:23:0c:64:70:a8:37:9e:8c: 36:68:06:03:f4:84:f3:b9:88:d2:7f:70:db:0a:96: 58:0d:f5:55:fa:22:ae:e2:03:f0:c9:bb:2a:00:c3: 1a:1d:40:2e:1f:d4:12:70:98:61:e9:d8:ff:e9:4a: 8c:6e:56:4f:46:78:ff:c3:16:ba:dd:14:2b:3b:95: 00:88:14:c7:66:1a:09:cf:8c:94:3e:75:31:a9:bd: e8:10:04:08:af:1e:49:a0:4e:d5:82:55:16:c2:4c: fd:42:6f:69:09:1e:e8:c5:f5:b0:36:98:5e:21:f5: 17:60:68:39:6d:7e:df:c2:46:75:53:c2:33:cb:78: 38:81:ec:d2:15:80:93:75:04:d6:3c:85:00:06:83: c0:a4:73:58:b2:0f:a8:40:5d:19:fb:2b:3d:0c:03: a9:cf:0b:8d:29:53:05:10:66:3b:0d:4c:ef:45:dc: d8:09:98:54:65:c5:cf:c3:21:58:a9:f7:29:b5:84: d8:5a:c2:8c:e5:8b:e1:57:5b:d1:eb:8c:b8:1e:1f: 8d:75:fb:3f:d5:dd:02:df:0e:fb:48:ce:37:ef:30: 7a:25:7b:b1:e7:0b:fb:06:8a:ee:ee:79:f9:01:3f: e2:72:37:54:e0:08:19:57:b3:b8:53:fe:4f:e1:65: 92:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:4F:88:55:A3:EC:A9:49:EC:2D:CD:ED:1C:10:22:7B:1A:66:DD:41 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5a99d502-895d-4928-a31a-1c228e1f7e0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1240::/48 Signature Algorithm: sha256WithRSAEncryption b9:6f:a1:bf:71:7f:ff:4e:b4:fb:04:83:5c:9c:f8:90:da:48: ac:29:cc:9a:70:e3:69:6d:0b:91:30:9f:e3:9b:a9:e5:d8:c6: 52:27:e0:af:66:bf:9a:b7:6e:1c:c1:8c:2d:d8:f7:69:ec:91: 42:9a:d9:8f:44:c5:aa:ff:a3:ee:b0:b3:16:38:5e:5c:5b:ec: 48:b2:3b:38:a4:60:35:e6:90:e7:17:8c:98:c4:d0:9b:47:f5: 2c:2e:a0:44:9e:fd:36:7a:a7:e3:b3:6b:4d:73:61:02:a4:f5: e5:8a:67:88:5f:49:3f:54:60:9c:7d:1f:fb:36:a6:13:99:9c: c8:57:77:d4:3c:4f:e7:7c:b3:65:f0:c5:c8:6a:c4:ef:d3:bb: b6:81:44:7f:c8:05:bd:61:2b:a3:88:be:82:8e:5a:0c:ae:d1: 1b:3f:6d:27:4d:5e:7e:6f:67:ba:62:21:43:be:11:0d:ec:44: 9c:79:24:b4:05:14:71:e4:e9:7d:b1:ed:cc:57:36:f2:98:c1: 44:b5:e6:2a:90:08:11:84:79:70:df:ba:71:97:ee:79:df:59: d6:8e:fa:12:f2:d6:27:ab:8b:f5:db:f5:3a:a4:77:41:65:ef: 08:73:1c:b2:de:f9:f9:f9:8f:fc:a0:37:c6:25:ae:20:86:8f: 73:a3:1a:d2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZH2Kg1JSoAVJX1RAQ68eOJTAF5AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNDI0MDAwMDEwWhcNMjYwNzIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNjExOWZhYzEwZjk1MWVmM2MyOTFmNTMyNWU0ODA0YWJj N2QxMGNhZTc4M2E5MWQyODQ5MGMwM2M5NTFjZjI2MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3o/2V7QIjDGRwqDeejDZoBgP0hPO5iNJ/cNsKllgN9VX6 Iq7iA/DJuyoAwxodQC4f1BJwmGHp2P/pSoxuVk9GeP/DFrrdFCs7lQCIFMdmGgnP jJQ+dTGpvegQBAivHkmgTtWCVRbCTP1Cb2kJHujF9bA2mF4h9RdgaDltft/CRnVT wjPLeDiB7NIVgJN1BNY8hQAGg8Ckc1iyD6hAXRn7Kz0MA6nPC40pUwUQZjsNTO9F 3NgJmFRlxc/DIVip9ym1hNhawozli+FXW9HrjLgeH411+z/V3QLfDvtIzjfvMHol e7HnC/sGiu7uefkBP+JyN1TgCBlXs7hT/k/hZZJ1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUQU+IVaPsqUnsLc3tHBAiexpm3UEwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzVhOTlkNTAyLTg5NWQtNDkyOC1hMzFhLTFjMjI4ZTFmN2UwZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAJAAEkAwDQYJKoZIhvcNAQELBQADggEBALlvob9xf/9OtPsEg1yc+JDa SKwpzJpw42ltC5Ewn+ObqeXYxlIn4K9mv5q3bhzBjC3Y92nskUKa2Y9Exar/o+6w sxY4Xlxb7EiyOzikYDXmkOcXjJjE0JtH9SwuoESe/TZ6p+Oza01zYQKk9eWKZ4hf ST9UYJx9H/s2phOZnMhXd9Q8T+d8s2XwxchqxO/Tu7aBRH/IBb1hK6OIvoKOWgyu 0Rs/bSdNXn5vZ7piIUO+EQ3sRJx5JLQFFHHk6X2x7cxXNvKYwUS15iqQCBGEeXDf unGX7nnfWdaO+hLy1ieri/Xb9Tqkd0Fl7whzHLLe+fn5j/ygN8YlriCGj3OjGtI= -----END CERTIFICATE-----Generated at Wed May 13 00:46:40 2026 by rpki-client