$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/949dd728-632b-42f5-a108-6557eb513671.roa File: 949dd728-632b-42f5-a108-6557eb513671.roa (raw, json) Hash identifier: p+4WlAAR69GxBZAraA+vNdj1Qc4W9HHXy/0842ZIx8k= Subject key identifier: EC:A2:C0:A6:8E:88:FA:B1:C1:9E:1A:4C:7B:18:E9:B5:D5:5A:5F:28 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 1105B9C724E5A25AF0D9D3E5390468D407F9CDC1 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/949dd728-632b-42f5-a108-6557eb513671.roa Signing time: Mon 04 May 2026 04:10:12 +0000 ROA not before: Mon 04 May 2026 04:10:12 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3b54::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:05:b9:c7:24:e5:a2:5a:f0:d9:d3:e5:39:04:68:d4:07:f9:cd:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: May 4 04:10:12 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=bb4a711bf9aaa676010c01a991eb591102fc8467963579ccbcb15e37dc92eb49, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:43:69:08:2e:4f:bc:db:a0:d8:f5:38:95:15: 09:4a:15:09:41:67:dc:de:bf:d7:8f:37:8a:60:91: 7f:9f:21:6f:33:36:8a:9e:45:6c:75:e7:95:11:9b: f0:54:d9:99:55:00:3b:b7:b1:28:0e:8e:72:24:53: 23:dd:fe:97:10:b2:33:7e:c7:17:61:f6:fb:38:ca: 1c:87:0e:67:1e:b8:3c:22:f8:04:42:b1:10:25:fe: da:48:18:6d:16:ce:c7:64:3d:29:01:aa:f9:da:ad: 47:2e:97:0e:1c:81:78:37:14:0f:10:32:f7:bd:a9: 2e:a9:84:f5:52:be:31:9e:16:71:64:49:b3:f0:ea: be:ed:e0:5b:a7:e4:86:55:73:c2:e6:d0:9e:0f:76: 36:c8:12:9f:02:bc:0c:12:c9:62:7e:4b:e6:2a:4e: 70:71:a3:0c:74:82:58:6c:f7:40:a0:a8:69:b0:69: 52:2c:9c:ef:7c:37:23:d2:3d:e9:44:71:5f:7d:88: 9f:da:47:39:77:8d:78:61:82:c6:44:e0:57:fd:78: d7:88:96:64:06:bb:e1:1e:31:57:4e:09:4c:d2:05: 73:81:01:09:e6:e7:57:bb:06:bf:3a:ac:77:01:49: 44:cd:d2:22:74:e0:58:b8:89:9c:c6:63:9a:ca:46: 7a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:A2:C0:A6:8E:88:FA:B1:C1:9E:1A:4C:7B:18:E9:B5:D5:5A:5F:28 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/949dd728-632b-42f5-a108-6557eb513671.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3b54::/47 Signature Algorithm: sha256WithRSAEncryption a5:49:37:fc:bc:7b:68:92:35:ff:bd:c6:eb:20:64:24:0a:0b: d3:90:5d:84:db:c1:68:24:31:39:07:43:1b:cc:c2:13:62:c6: e1:39:7f:6a:36:9b:9f:ec:b4:80:75:0f:14:c7:7a:73:bd:8c: c3:cb:9d:d9:34:fa:b0:ea:8b:36:95:03:b6:35:ae:1a:4d:72: 75:a4:25:70:a3:bb:29:2a:84:41:2f:eb:f3:73:ec:c3:e2:58: 9d:93:74:64:05:87:2a:52:30:c0:77:af:13:d6:af:18:97:74: fa:31:aa:10:7b:44:2c:56:b1:6d:a4:36:ec:53:d1:75:20:6b: 8c:42:40:3c:7b:04:21:5e:0d:40:54:bf:cd:53:12:59:00:69: 28:73:ef:32:93:0b:57:7e:36:c7:4d:66:3c:73:d7:5d:b2:ac: 24:4a:7f:d4:0a:ed:67:c9:b3:e1:23:f3:79:46:ca:cf:ad:03: 88:14:68:55:df:85:bb:d3:3c:81:e7:4f:22:00:6c:08:a9:d4: f1:72:e8:cc:71:95:d7:2e:36:73:d8:71:63:d4:98:e5:f9:6d: 2b:ab:f0:d9:bd:f9:f2:8f:aa:59:4f:12:55:8e:85:f2:63:f4: 82:34:2b:0c:f1:53:4f:63:64:e9:23:1f:d9:f9:8e:3f:33:d2: 92:44:a1:d4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEQW5xyTlolrw2dPlOQRo1Af5zcEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MDQxMDEyWhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiYjRhNzExYmY5YWFhNjc2MDEwYzAxYTk5MWViNTkxMTAy ZmM4NDY3OTYzNTc5Y2NiY2IxNWUzN2RjOTJlYjQ5MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDhQ2kILk+826DY9TiVFQlKFQlBZ9zev9ePN4pgkX+fIW8z NoqeRWx155URm/BU2ZlVADu3sSgOjnIkUyPd/pcQsjN+xxdh9vs4yhyHDmceuDwi +ARCsRAl/tpIGG0WzsdkPSkBqvnarUculw4cgXg3FA8QMve9qS6phPVSvjGeFnFk SbPw6r7t4Fun5IZVc8Lm0J4PdjbIEp8CvAwSyWJ+S+YqTnBxowx0glhs90CgqGmw aVIsnO98NyPSPelEcV99iJ/aRzl3jXhhgsZE4Ff9eNeIlmQGu+EeMVdOCUzSBXOB AQnm51e7Br86rHcBSUTN0iJ04Fi4iZzGY5rKRnoPAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU7KLApo6I+rHBnhpMexjptdVaXygwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1Lzk0OWRkNzI4LTYzMmItNDJmNS1hMTA4LTY1NTdlYjUxMzY3MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAO1QwDQYJKoZIhvcNAQELBQADggEBAKVJN/y8e2iSNf+9xusgZCQK C9OQXYTbwWgkMTkHQxvMwhNixuE5f2o2m5/stIB1DxTHenO9jMPLndk0+rDqizaV A7Y1rhpNcnWkJXCjuykqhEEv6/Nz7MPiWJ2TdGQFhypSMMB3rxPWrxiXdPoxqhB7 RCxWsW2kNuxT0XUga4xCQDx7BCFeDUBUv81TElkAaShz7zKTC1d+NsdNZjxz112y rCRKf9QK7WfJs+Ej83lGys+tA4gUaFXfhbvTPIHnTyIAbAip1PFy6MxxldcuNnPY cWPUmOX5bSur8Nm9+fKPqllPElWOhfJj9II0KwzxU09jZOkjH9n5jj8z0pJEodQ= -----END CERTIFICATE-----Generated at Wed May 13 01:09:06 2026 by rpki-client