$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/900ea25a-910d-4f58-92ca-6327e668f70a.roa File: 900ea25a-910d-4f58-92ca-6327e668f70a.roa (raw, json) Hash identifier: xQfqUIzhZkM327IFISETy/gDq7JLNOpsNU2jhyWvU3Y= Subject key identifier: 5A:59:0A:E8:14:75:7E:5B:3F:35:DE:47:44:AC:5D:65:7C:02:51:4E Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 24CA847E764020FC866E797F6907FE24556270B3 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/900ea25a-910d-4f58-92ca-6327e668f70a.roa Signing time: Mon 04 May 2026 09:40:53 +0000 ROA not before: Mon 04 May 2026 09:40:53 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3708::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:ca:84:7e:76:40:20:fc:86:6e:79:7f:69:07:fe:24:55:62:70:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: May 4 09:40:53 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=75e5cc7df5fc870b9d5460d4d451abe79f0dadabbfcaa0a425a7de7ab839a76f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b4:08:20:4a:3c:54:36:e9:2c:bb:93:cc:12: 2a:d2:53:6a:b7:c9:d2:44:cf:ff:fb:72:06:cd:4a: ac:e4:4c:4e:f6:43:cc:36:6e:f5:a5:55:3e:ba:a9: e1:47:af:b2:92:ec:c0:02:55:ac:d3:dd:af:90:31: 36:33:03:36:cd:15:83:69:95:a2:c9:82:d0:23:b1: 89:45:e3:ed:b1:4f:a7:c8:12:cc:78:fa:ef:2a:6b: 1e:87:b3:3c:f5:7b:a7:6b:17:51:c9:23:3a:17:d5: 23:e9:8c:77:19:74:6a:29:9c:a8:f1:50:05:f8:2f: bc:a8:be:fc:78:69:cb:43:e7:09:3d:d0:a8:e7:40: 08:91:57:3b:e3:f9:2d:b1:8b:74:ec:26:c2:08:b9: 40:6d:ba:6d:76:d6:45:db:35:10:ce:65:a6:c6:8f: 14:d2:2c:6c:c5:d2:3e:26:bd:f7:b9:b3:1d:6f:76: 6d:2a:4b:f7:27:d9:3e:23:fa:cc:82:59:13:1e:04: eb:99:22:65:0e:63:6f:30:56:95:c8:a4:b4:63:67: 78:d7:47:d7:64:4b:ff:fa:97:16:fb:eb:a2:48:71: d5:69:73:56:88:a5:43:14:7e:b6:db:70:d9:f6:77: 63:2b:f0:db:1a:f0:bf:57:1f:4a:a5:95:5b:68:52: ea:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:59:0A:E8:14:75:7E:5B:3F:35:DE:47:44:AC:5D:65:7C:02:51:4E X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/900ea25a-910d-4f58-92ca-6327e668f70a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3708::/45 Signature Algorithm: sha256WithRSAEncryption 2a:20:fe:18:71:2f:db:d8:9f:f0:0a:05:f6:86:f6:68:f9:87: b6:6f:1f:0c:04:62:da:45:d0:31:48:1e:5c:4b:5a:df:d0:6c: e6:66:39:f4:50:cd:f9:2d:91:20:6c:24:c1:f9:bb:80:fa:50: 3b:63:ab:ed:1e:c0:bf:82:e0:fc:c0:5c:e4:b2:47:c6:bd:6e: a7:bd:05:0d:8a:13:13:3a:31:a6:76:17:da:83:ad:bb:d5:94: 3c:da:8e:f7:98:b8:0d:e8:22:46:4c:6e:00:8e:8e:c0:95:40: 70:05:90:b7:29:4b:a3:7f:c5:90:6b:9e:c0:22:8b:35:85:cc: 74:9b:22:86:66:d5:20:2d:e1:82:81:09:0e:b1:20:33:40:3c: 02:82:73:10:91:a6:bb:17:79:70:6e:dc:06:ae:ae:49:0f:fc: 13:3b:be:a5:c0:7b:04:6f:41:55:45:35:ef:bf:c0:f8:da:b0: fe:96:69:ae:d3:08:dc:a7:ec:60:b8:4c:8e:b0:d2:d1:fd:3a: 96:e1:69:a6:80:eb:1e:94:36:7d:df:b1:14:df:f6:1f:3e:bf: a5:a7:5c:42:2a:a2:6a:02:e1:60:b0:06:e6:f4:af:ef:6c:98: 71:ee:e8:18:bc:7b:81:19:09:92:23:4c:6f:57:73:d0:68:4d: ba:74:60:f4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJMqEfnZAIPyGbnl/aQf+JFVicLMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MDk0MDUzWhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NWU1Y2M3ZGY1ZmM4NzBiOWQ1NDYwZDRkNDUxYWJlNzlm MGRhZGFiYmZjYWEwYTQyNWE3ZGU3YWI4MzlhNzZmMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCytAggSjxUNuksu5PMEirSU2q3ydJEz//7cgbNSqzkTE72 Q8w2bvWlVT66qeFHr7KS7MACVazT3a+QMTYzAzbNFYNplaLJgtAjsYlF4+2xT6fI Esx4+u8qax6Hszz1e6drF1HJIzoX1SPpjHcZdGopnKjxUAX4L7yovvx4actD5wk9 0KjnQAiRVzvj+S2xi3TsJsIIuUBtum121kXbNRDOZabGjxTSLGzF0j4mvfe5sx1v dm0qS/cn2T4j+syCWRMeBOuZImUOY28wVpXIpLRjZ3jXR9dkS//6lxb766JIcdVp c1aIpUMUfrbbcNn2d2Mr8Nsa8L9XH0qllVtoUup5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUWlkK6BR1fls/Nd5HRKxdZXwCUU4wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzkwMGVhMjVhLTkxMGQtNGY1OC05MmNhLTYzMjdlNjY4ZjcwYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAANwgwDQYJKoZIhvcNAQELBQADggEBACog/hhxL9vYn/AKBfaG9mj5 h7ZvHwwEYtpF0DFIHlxLWt/QbOZmOfRQzfktkSBsJMH5u4D6UDtjq+0ewL+C4PzA XOSyR8a9bqe9BQ2KExM6MaZ2F9qDrbvVlDzajveYuA3oIkZMbgCOjsCVQHAFkLcp S6N/xZBrnsAiizWFzHSbIoZm1SAt4YKBCQ6xIDNAPAKCcxCRprsXeXBu3AaurkkP /BM7vqXAewRvQVVFNe+/wPjasP6Waa7TCNyn7GC4TI6w0tH9OpbhaaaA6x6UNn3f sRTf9h8+v6WnXEIqomoC4WCwBub0r+9smHHu6Bi8e4EZCZIjTG9Xc9BoTbp0YPQ= -----END CERTIFICATE-----Generated at Wed May 13 01:32:10 2026 by rpki-client