$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8b5253c9-cc99-475d-9212-f65c65565c13.roa File: 8b5253c9-cc99-475d-9212-f65c65565c13.roa (raw, json) Hash identifier: QYi5IzDvgCcAn+yvwN5lXOM/LMP/8Wn1BwNoyMQkwjU= Subject key identifier: B2:CC:BE:8B:A4:7F:04:16:FC:F2:99:40:23:29:47:93:FA:CB:15:E3 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 4F99090FB5E0A29C4DBE4CFEF3555F17145C230F Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8b5253c9-cc99-475d-9212-f65c65565c13.roa Signing time: Mon 04 May 2026 05:30:57 +0000 ROA not before: Mon 04 May 2026 05:30:57 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3250::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:99:09:0f:b5:e0:a2:9c:4d:be:4c:fe:f3:55:5f:17:14:5c:23:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: May 4 05:30:57 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=3f9a64aafc47a79f344f58d94a4108ebcc40cb19d3da1494dfe8a3c2a9e9225d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cc:04:b3:90:26:7b:07:66:b6:e3:8b:46:80: 02:c1:27:c2:23:2c:63:2c:3a:24:6d:d8:49:65:af: 00:8a:5c:6d:11:dc:b3:22:a8:e8:a4:3e:04:7d:9e: 61:ae:06:54:1b:e6:b5:15:80:a5:77:fb:83:14:96: fa:86:20:17:da:73:e1:50:40:83:9c:f8:e2:4c:75: be:5a:f7:95:03:79:2d:64:6d:52:67:46:0e:7f:ad: bb:a0:f3:e9:30:f6:08:9f:83:7c:20:91:32:d4:b0: 94:31:db:c6:68:e4:bc:e0:50:cc:7f:6f:ce:cb:5e: a8:b4:cd:80:74:68:1a:8a:57:10:42:8f:c3:69:20: ce:c2:a6:8b:68:73:07:a9:87:98:9a:c5:b6:2a:fe: 47:97:9e:dd:ed:1d:83:9b:12:6e:f1:0d:88:f2:b4: 2d:14:9f:93:04:f7:c7:e6:cb:80:64:21:c8:c4:ca: d5:c3:ef:21:40:24:34:9a:6a:11:39:13:d3:89:a8: 7b:25:c6:49:7e:9f:0e:08:96:fb:23:c8:9a:c8:6b: 1a:e9:06:ee:67:7f:bd:d5:43:6e:68:9f:77:84:85: a6:00:fe:e5:0d:fe:b8:1c:31:32:17:51:6a:f7:0b: 96:40:cf:43:b8:6b:f8:4c:89:c7:22:29:5d:0f:78: d5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:CC:BE:8B:A4:7F:04:16:FC:F2:99:40:23:29:47:93:FA:CB:15:E3 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8b5253c9-cc99-475d-9212-f65c65565c13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3250::/46 Signature Algorithm: sha256WithRSAEncryption 68:e6:9e:30:86:e9:76:33:47:e5:9f:fe:26:4a:7f:17:11:d4: b6:31:2c:11:38:26:35:ed:41:77:3a:3e:b5:84:4b:f9:9a:e5: 21:20:9e:4c:24:59:f1:de:bf:31:c8:9b:09:da:2b:b1:50:32: 3e:fd:e6:11:de:f2:83:9b:af:5f:a5:1f:58:79:7e:c1:e7:ac: a5:30:2f:c6:03:60:9d:0b:1b:34:27:f3:d3:a7:43:06:87:f5: fc:ac:9d:52:ed:bd:c0:f6:36:6e:a4:fc:69:a4:63:4e:17:02: 70:13:74:4b:7d:5f:6e:44:52:a0:22:5c:85:65:bb:ca:65:f9: 72:79:b0:46:fa:0a:5b:f5:20:9c:18:11:48:d4:11:56:a1:63: fa:1f:e5:6e:a0:40:75:f6:54:32:88:7e:bf:dc:8e:36:7c:87: 18:6e:c9:67:bc:6b:8d:31:cb:5f:1c:8e:8b:8b:9a:8a:b8:20: b8:c1:9e:1c:98:2c:6e:d5:55:95:1c:22:a1:17:54:54:85:77: 90:b8:e1:df:4a:7d:1a:98:95:62:44:29:74:68:fa:25:cc:98: 62:9a:0e:7f:16:b1:68:29:96:64:66:28:06:df:63:68:5d:13: 0e:a7:f8:d6:d0:fc:46:dc:8e:5a:52:ff:0e:56:6c:fc:2a:66: f5:04:e4:a2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUT5kJD7XgopxNvkz+81VfFxRcIw8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MDUzMDU3WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzZjlhNjRhYWZjNDdhNzlmMzQ0ZjU4ZDk0YTQxMDhlYmNj NDBjYjE5ZDNkYTE0OTRkZmU4YTNjMmE5ZTkyMjVkMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEzASzkCZ7B2a244tGgALBJ8IjLGMsOiRt2EllrwCKXG0R 3LMiqOikPgR9nmGuBlQb5rUVgKV3+4MUlvqGIBfac+FQQIOc+OJMdb5a95UDeS1k bVJnRg5/rbug8+kw9gifg3wgkTLUsJQx28Zo5LzgUMx/b87LXqi0zYB0aBqKVxBC j8NpIM7Cpotocweph5iaxbYq/keXnt3tHYObEm7xDYjytC0Un5ME98fmy4BkIcjE ytXD7yFAJDSaahE5E9OJqHslxkl+nw4IlvsjyJrIaxrpBu5nf73VQ25on3eEhaYA /uUN/rgcMTIXUWr3C5ZAz0O4a/hMicciKV0PeNUpAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUssy+i6R/BBb88plAIylHk/rLFeMwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzhiNTI1M2M5LWNjOTktNDc1ZC05MjEyLWY2NWM2NTU2NWMxMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAMlAwDQYJKoZIhvcNAQELBQADggEBAGjmnjCG6XYzR+Wf/iZKfxcR 1LYxLBE4JjXtQXc6PrWES/ma5SEgnkwkWfHevzHImwnaK7FQMj795hHe8oObr1+l H1h5fsHnrKUwL8YDYJ0LGzQn89OnQwaH9fysnVLtvcD2Nm6k/GmkY04XAnATdEt9 X25EUqAiXIVlu8pl+XJ5sEb6Clv1IJwYEUjUEVahY/of5W6gQHX2VDKIfr/cjjZ8 hxhuyWe8a40xy18cjouLmoq4ILjBnhyYLG7VVZUcIqEXVFSFd5C44d9KfRqYlWJE KXRo+iXMmGKaDn8WsWgplmRmKAbfY2hdEw6n+NbQ/EbcjlpS/w5WbPwqZvUE5KI= -----END CERTIFICATE-----Generated at Wed May 13 04:07:04 2026 by rpki-client