$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8cff0f96-82b7-44dd-95cc-5bab9b132dce.roa File: 8cff0f96-82b7-44dd-95cc-5bab9b132dce.roa (raw, json) Hash identifier: IJiB3017cMSYi9haueDnrkmGUnguXJDE+XtbQVwb90E= Subject key identifier: FB:9A:45:87:A4:76:DE:13:72:93:A7:5B:79:4D:7B:84:68:D2:8E:D1 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 421C9695BAA2ED89C86BD46E054CD48B103DD9C7 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8cff0f96-82b7-44dd-95cc-5bab9b132dce.roa Signing time: Mon 04 May 2026 09:21:52 +0000 ROA not before: Mon 04 May 2026 09:21:52 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3f9e::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:1c:96:95:ba:a2:ed:89:c8:6b:d4:6e:05:4c:d4:8b:10:3d:d9:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: May 4 09:21:52 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=3e7f4c1f5781502aa4b1466ad1559a0937acc72c7c02f8e28ebd1de0bb80233b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ac:01:3b:65:e0:9f:a8:fd:f2:39:da:bb:ee: dc:f7:68:d1:5f:2b:74:22:31:b2:7b:a7:91:02:af: a0:e2:45:71:e1:51:8d:da:cf:28:06:da:8b:bb:a3: 07:29:2c:c9:63:32:09:cd:bb:02:f0:52:5a:a3:a5: c5:87:c8:58:bb:8c:1d:e2:a6:31:0e:60:ba:59:13: 12:3a:c2:b5:2b:25:56:2a:0f:49:56:10:ff:5e:1b: 6d:5e:ad:43:8a:ce:80:7a:03:47:5b:49:ba:65:3f: 0c:d0:eb:10:ca:94:8e:1d:92:fe:d3:8b:b2:f5:a7: 22:aa:dc:64:e7:13:b5:50:02:06:c4:cc:0f:7c:e1: 8d:c4:e1:3e:62:9f:fc:03:a8:03:23:7b:22:75:ba: d6:75:3b:5a:bc:74:7f:dd:ea:de:b4:f3:e3:14:3d: 94:d5:09:fe:6d:62:11:79:52:9b:cb:da:d1:fd:6e: 06:33:a5:fe:9f:0e:cb:11:a7:56:47:47:f6:51:5e: 41:a3:e8:86:22:22:3d:8c:e8:8e:b1:3f:e2:87:d0: 51:26:a2:d2:f7:e7:99:04:be:61:a2:49:51:65:28: cf:a1:72:78:81:6a:6a:c4:be:61:cb:f3:b3:28:dd: 73:cd:d0:04:0d:f4:03:d2:93:45:cb:b2:49:05:bf: ff:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:9A:45:87:A4:76:DE:13:72:93:A7:5B:79:4D:7B:84:68:D2:8E:D1 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8cff0f96-82b7-44dd-95cc-5bab9b132dce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3f9e::/47 Signature Algorithm: sha256WithRSAEncryption 69:73:52:c9:a9:05:61:05:5c:44:0a:b0:e3:96:44:b9:30:aa: cd:7b:bc:94:c6:9c:f5:02:0a:cf:5e:7d:c1:dd:79:d4:b8:bd: bb:b9:c2:88:39:35:31:90:ce:0c:27:4a:93:5d:31:1a:15:f1: 38:4b:98:64:84:08:0f:ba:f2:21:1f:3d:d2:ef:97:bf:97:ee: 81:11:c1:34:1f:02:4c:92:e5:e4:c9:81:64:69:44:d3:a1:07: 67:5e:63:e1:9b:6e:a4:2b:9c:45:46:62:b0:c2:1f:f7:9e:9d: ce:60:10:2d:f8:09:f3:67:20:c7:d9:c6:9d:f7:51:72:0c:29: c5:78:ae:1d:72:b5:59:ec:50:2d:60:89:e3:46:06:1d:c7:94: 00:16:69:dd:d0:b3:5a:e0:83:d0:2b:1e:53:dd:75:1e:e7:eb: 66:d8:bc:da:54:8b:c2:91:b0:95:bf:05:b5:f1:95:79:40:e8: 7d:4f:ac:1b:8e:e0:21:ca:04:d6:51:0d:7d:d2:ab:46:df:d9: 95:c3:60:9f:7f:07:1c:95:d1:3d:3e:57:39:ea:a6:01:01:4d: 4d:c5:68:60:af:14:9e:5e:4e:52:eb:0b:80:7f:da:f9:40:43: ae:b4:f8:4c:17:0d:b5:49:a9:fb:ed:39:79:f5:81:5b:f9:22: 2c:a4:6f:b2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQhyWlbqi7YnIa9RuBUzUixA92ccwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MDkyMTUyWhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzZTdmNGMxZjU3ODE1MDJhYTRiMTQ2NmFkMTU1OWEwOTM3 YWNjNzJjN2MwMmY4ZTI4ZWJkMWRlMGJiODAyMzNiMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqrAE7ZeCfqP3yOdq77tz3aNFfK3QiMbJ7p5ECr6DiRXHh UY3azygG2ou7owcpLMljMgnNuwLwUlqjpcWHyFi7jB3ipjEOYLpZExI6wrUrJVYq D0lWEP9eG21erUOKzoB6A0dbSbplPwzQ6xDKlI4dkv7Ti7L1pyKq3GTnE7VQAgbE zA984Y3E4T5in/wDqAMjeyJ1utZ1O1q8dH/d6t608+MUPZTVCf5tYhF5UpvL2tH9 bgYzpf6fDssRp1ZHR/ZRXkGj6IYiIj2M6I6xP+KH0FEmotL355kEvmGiSVFlKM+h cniBamrEvmHL87Mo3XPN0AQN9APSk0XLskkFv//nAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU+5pFh6R23hNyk6dbeU17hGjSjtEwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzhjZmYwZjk2LTgyYjctNDRkZC05NWNjLTViYWI5YjEzMmRjZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAP54wDQYJKoZIhvcNAQELBQADggEBAGlzUsmpBWEFXEQKsOOWRLkw qs17vJTGnPUCCs9efcHdedS4vbu5wog5NTGQzgwnSpNdMRoV8ThLmGSECA+68iEf PdLvl7+X7oERwTQfAkyS5eTJgWRpRNOhB2deY+GbbqQrnEVGYrDCH/eenc5gEC34 CfNnIMfZxp33UXIMKcV4rh1ytVnsUC1gieNGBh3HlAAWad3Qs1rgg9ArHlPddR7n 62bYvNpUi8KRsJW/BbXxlXlA6H1PrBuO4CHKBNZRDX3Sq0bf2ZXDYJ9/BxyV0T0+ VznqpgEBTU3FaGCvFJ5eTlLrC4B/2vlAQ660+EwXDbVJqfvtOXn1gVv5Iiykb7I= -----END CERTIFICATE-----Generated at Wed May 13 00:47:16 2026 by rpki-client