$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5e08487e-3d33-4d65-a425-1a0a5149f84a.roa File: 5e08487e-3d33-4d65-a425-1a0a5149f84a.roa (raw, json) Hash identifier: dmQK8g9pXSgkuem+YBgv9HBXEPUuvTaDmxIXc1dec0Q= Subject key identifier: D3:C9:B2:13:C6:DA:B5:F3:E0:48:7E:D1:ED:19:56:14:73:DB:A5:BB Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 695A92D4AAD021ADDCDB0841514FBA66926D285B Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5e08487e-3d33-4d65-a425-1a0a5149f84a.roa Signing time: Mon 04 May 2026 13:11:27 +0000 ROA not before: Mon 04 May 2026 13:11:27 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3564::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:5a:92:d4:aa:d0:21:ad:dc:db:08:41:51:4f:ba:66:92:6d:28:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: May 4 13:11:27 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=626b7b24f183fe1b9b8fee3e5396a79f5956a6eaa032a642ba284304a4ff9683, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9b:c6:17:b6:3f:ab:03:75:a3:23:a7:92:68: 3f:c4:67:9b:01:c3:8d:47:62:66:b2:0d:2b:77:5d: fe:72:86:4e:36:a6:51:83:e1:06:d5:3b:36:fe:5e: b0:59:9c:d8:ed:51:03:aa:56:97:be:0a:ed:c2:4c: 69:17:88:7d:18:e6:87:20:a3:2d:8d:0b:c8:52:2a: a6:dd:03:6d:d4:41:3e:e6:8b:03:53:d4:f8:e5:57: 48:ea:f1:f1:43:f6:17:e7:c8:ed:c8:8b:69:d4:9e: 05:cb:1c:b4:65:17:13:ba:3f:d1:dd:ce:c3:6d:12: da:56:8f:82:8f:d8:3d:22:e3:df:ba:92:86:2d:cc: da:3b:9e:a0:b8:3a:24:7f:c6:5b:e3:84:80:2d:9c: 78:5b:c3:7c:a1:77:e5:6c:be:c9:bf:fb:ed:1f:92: 9e:db:53:2b:19:03:cc:0f:56:04:fd:e6:fc:1e:6b: cc:0b:db:73:1c:a7:b4:fd:20:e7:a1:a3:49:82:6d: 27:bc:4b:f4:09:04:4f:a2:2f:c9:c9:52:87:65:88: f1:ed:86:8c:2c:60:30:23:46:83:f6:dc:57:c6:8a: bb:52:2d:9e:a3:35:9b:ca:78:f0:ee:f9:77:23:04: 36:27:c3:b4:0a:a4:03:ed:d6:5b:a9:bd:a4:46:50: 6a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C9:B2:13:C6:DA:B5:F3:E0:48:7E:D1:ED:19:56:14:73:DB:A5:BB X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5e08487e-3d33-4d65-a425-1a0a5149f84a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3564::/47 Signature Algorithm: sha256WithRSAEncryption 99:a8:19:49:73:f9:cb:0e:e1:cb:39:04:66:70:b9:85:a1:2f: b7:a0:93:60:a7:d2:c9:d9:87:ba:fe:f3:7d:6d:1f:27:b5:a8: 5f:b6:c1:54:53:8f:56:4f:c6:94:81:d0:66:84:a7:8d:f1:7c: 3e:20:23:35:5f:0d:8c:01:40:94:ad:08:f2:20:1f:fb:c7:e3: 07:bf:0f:7c:e5:75:cf:60:0f:8f:ee:2a:24:5f:ec:47:c2:cd: fe:97:80:ef:41:8d:c4:9e:7a:08:bb:68:05:15:60:9e:f7:89: e9:19:12:1f:ea:84:17:8d:46:44:49:81:f9:43:8e:56:d5:9b: 7f:7d:f3:3c:43:e4:49:8e:62:25:0a:6a:fd:cf:f6:9d:a9:e7: e4:12:25:34:2b:3d:0d:13:b0:04:9c:3b:6c:e8:b6:ee:3e:95: 3d:9e:33:d2:98:ef:5c:24:bd:bd:80:4b:f5:39:3e:1c:1c:02: de:7a:17:04:68:cf:53:37:ba:63:5c:dc:2e:5e:1f:58:a9:8b: e9:00:b5:fd:fe:87:51:ce:56:08:b2:13:18:03:2d:18:d7:3a: 07:be:86:ea:32:c9:02:18:bf:0a:2f:10:0f:00:64:ad:27:12: 55:1e:26:f2:f2:6e:a9:7e:5e:7b:8f:f4:a4:9a:b1:77:d9:1e: 63:43:37:fb -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUaVqS1KrQIa3c2whBUU+6ZpJtKFswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MTMxMTI3WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MjZiN2IyNGYxODNmZTFiOWI4ZmVlM2U1Mzk2YTc5ZjU5 NTZhNmVhYTAzMmE2NDJiYTI4NDMwNGE0ZmY5NjgzMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzm8YXtj+rA3WjI6eSaD/EZ5sBw41HYmayDSt3Xf5yhk42 plGD4QbVOzb+XrBZnNjtUQOqVpe+Cu3CTGkXiH0Y5ocgoy2NC8hSKqbdA23UQT7m iwNT1PjlV0jq8fFD9hfnyO3Ii2nUngXLHLRlFxO6P9HdzsNtEtpWj4KP2D0i49+6 koYtzNo7nqC4OiR/xlvjhIAtnHhbw3yhd+Vsvsm/++0fkp7bUysZA8wPVgT95vwe a8wL23Mcp7T9IOeho0mCbSe8S/QJBE+iL8nJUodliPHthowsYDAjRoP23FfGirtS LZ6jNZvKePDu+XcjBDYnw7QKpAPt1lupvaRGUGpzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU08myE8batfPgSH7R7RlWFHPbpbswHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzVlMDg0ODdlLTNkMzMtNGQ2NS1hNDI1LTFhMGE1MTQ5Zjg0YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAANWQwDQYJKoZIhvcNAQELBQADggEBAJmoGUlz+csO4cs5BGZwuYWh L7egk2Cn0snZh7r+831tHye1qF+2wVRTj1ZPxpSB0GaEp43xfD4gIzVfDYwBQJSt CPIgH/vH4we/D3zldc9gD4/uKiRf7EfCzf6XgO9BjcSeegi7aAUVYJ73iekZEh/q hBeNRkRJgflDjlbVm3998zxD5EmOYiUKav3P9p2p5+QSJTQrPQ0TsAScO2zotu4+ lT2eM9KY71wkvb2AS/U5PhwcAt56FwRoz1M3umNc3C5eH1ipi+kAtf3+h1HOVgiy ExgDLRjXOge+huoyyQIYvwovEA8AZK0nElUeJvLybql+XnuP9KSasXfZHmNDN/s= -----END CERTIFICATE-----Generated at Wed May 13 00:41:07 2026 by rpki-client