$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a25aac3a-4e03-45c8-918d-c0fb872db6ae.roa File: a25aac3a-4e03-45c8-918d-c0fb872db6ae.roa (raw, json) Hash identifier: aATtd+Xk210/rgNo/vynUybqNy9Z7/YYql0omOiS4Pg= Subject key identifier: CA:E9:25:30:94:91:07:8E:32:3B:D1:64:2D:C0:86:0C:28:7B:F9:43 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 0FA1B70836E8E1C5EA86D79E6A088A263D899A6C Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a25aac3a-4e03-45c8-918d-c0fb872db6ae.roa Signing time: Mon 04 May 2026 12:51:07 +0000 ROA not before: Mon 04 May 2026 12:51:07 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3630::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:a1:b7:08:36:e8:e1:c5:ea:86:d7:9e:6a:08:8a:26:3d:89:9a:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: May 4 12:51:07 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=aa710992cf6a2dc7d2eaba58646e706679087f6402cd156b5f646c980dd6e29c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:63:33:e3:c1:fc:11:e1:e5:8a:04:63:ee:3b: 55:76:9a:5b:95:44:c7:54:c5:78:92:fa:73:76:0b: 4d:22:b5:8f:1c:75:75:84:b5:76:a9:4a:4c:1c:89: 3d:31:c7:fc:52:f9:50:65:cc:38:5a:c8:94:6b:22: dd:6f:17:0b:66:52:34:fb:5c:13:31:7e:60:99:33: 9c:26:e5:c6:3f:72:4d:83:f4:ce:3d:5a:42:91:09: 9e:94:13:3f:b4:93:28:7d:58:d8:a9:11:07:9f:07: 9a:f9:c5:8b:d0:e8:eb:da:06:22:f4:b3:cf:db:89: 14:fe:54:21:59:0a:a7:c4:af:7b:86:5c:93:7d:dd: 72:58:64:b4:a1:fa:8f:0a:1b:59:8b:c5:d6:84:44: 38:3a:05:ff:2f:c5:48:60:ea:79:c3:37:7a:5e:a6: 3d:94:9b:a1:bd:e0:36:2d:59:d9:7f:79:4f:5b:02: 32:0d:71:b7:1a:a5:67:cc:35:cf:48:c0:7b:c8:43: 99:fc:21:96:ac:cc:12:96:c8:de:d4:8e:8f:fc:aa: 94:94:86:b8:04:d4:a8:53:ed:b5:78:39:f0:55:56: 5f:ee:ce:82:b4:92:64:e2:0e:88:b1:30:7f:37:c0: 7d:04:b2:96:f2:8b:38:60:7b:31:36:dd:1f:a5:9e: 74:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E9:25:30:94:91:07:8E:32:3B:D1:64:2D:C0:86:0C:28:7B:F9:43 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a25aac3a-4e03-45c8-918d-c0fb872db6ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3630::/44 Signature Algorithm: sha256WithRSAEncryption 6d:ae:bc:5a:9e:a4:e9:1d:48:ce:34:00:e6:42:9e:7f:c2:02: 24:93:97:14:99:ac:c3:87:e9:9e:67:79:6a:2b:3d:ba:0a:d4: bf:cd:ef:e5:9c:61:5b:de:46:0c:84:cc:72:9c:9f:7e:47:4a: 83:5b:de:38:1e:4a:e3:ec:ef:d7:33:d8:f4:d3:c1:a8:03:ec: bc:f4:be:67:93:4f:2d:8a:ec:3f:b5:59:d7:42:60:5d:24:ed: c2:1e:e1:cd:6b:54:0c:47:73:81:cc:0a:ce:df:63:6d:ba:0f: ac:27:e7:7f:b8:6e:34:05:a2:24:c8:3e:ce:f2:de:64:ed:3b: 6a:84:ce:a7:29:b4:7a:7c:11:14:27:9b:99:b2:39:2b:1b:8b: 29:4c:b5:a6:6e:ed:9c:41:23:c7:b6:9b:64:06:76:78:87:3f: 4a:d0:94:96:d5:7a:0d:30:28:45:5d:9e:09:84:2d:a6:90:2a: 32:da:b4:4e:6c:90:0b:4a:c6:5f:0c:d9:aa:7d:31:ad:2a:72: e3:4a:59:51:50:f7:bc:3a:46:d6:23:07:b0:1b:56:ed:79:fb: fa:df:bc:bd:49:29:a6:4e:c0:b0:29:64:c3:e0:a1:a5:ac:9e: 41:66:de:0b:7c:8e:c0:e1:7d:a3:bf:4e:32:31:9b:d0:b0:b3: 74:1b:08:80 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUD6G3CDbo4cXqhteeagiKJj2JmmwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MTI1MTA3WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhYTcxMDk5MmNmNmEyZGM3ZDJlYWJhNTg2NDZlNzA2Njc5 MDg3ZjY0MDJjZDE1NmI1ZjY0NmM5ODBkZDZlMjljMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9YzPjwfwR4eWKBGPuO1V2mluVRMdUxXiS+nN2C00itY8c dXWEtXapSkwciT0xx/xS+VBlzDhayJRrIt1vFwtmUjT7XBMxfmCZM5wm5cY/ck2D 9M49WkKRCZ6UEz+0kyh9WNipEQefB5r5xYvQ6OvaBiL0s8/biRT+VCFZCqfEr3uG XJN93XJYZLSh+o8KG1mLxdaERDg6Bf8vxUhg6nnDN3pepj2Um6G94DYtWdl/eU9b AjINcbcapWfMNc9IwHvIQ5n8IZaszBKWyN7Ujo/8qpSUhrgE1KhT7bV4OfBVVl/u zoK0kmTiDoixMH83wH0EspbyizhgezE23R+lnnRhAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUyuklMJSRB44yO9FkLcCGDCh7+UMwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2EyNWFhYzNhLTRlMDMtNDVjOC05MThkLWMwZmI4NzJkYjZhZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAJAANjAwDQYJKoZIhvcNAQELBQADggEBAG2uvFqepOkdSM40AOZCnn/C AiSTlxSZrMOH6Z5neWorPboK1L/N7+WcYVveRgyEzHKcn35HSoNb3jgeSuPs79cz 2PTTwagD7Lz0vmeTTy2K7D+1WddCYF0k7cIe4c1rVAxHc4HMCs7fY226D6wn53+4 bjQFoiTIPs7y3mTtO2qEzqcptHp8ERQnm5myOSsbiylMtaZu7ZxBI8e2m2QGdniH P0rQlJbVeg0wKEVdngmELaaQKjLatE5skAtKxl8M2ap9Ma0qcuNKWVFQ97w6RtYj B7AbVu15+/rfvL1JKaZOwLApZMPgoaWsnkFm3gt8jsDhfaO/TjIxm9Cws3QbCIA= -----END CERTIFICATE-----Generated at Wed May 13 01:24:19 2026 by rpki-client