$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a2cde97e-8d93-4ad4-a7e7-5d8567617906.roa File: a2cde97e-8d93-4ad4-a7e7-5d8567617906.roa (raw, json) Hash identifier: 0wR2zagME2SjiVDHgE2MP7Xbvmfg+sh8P5xP5WmBSLY= Subject key identifier: CB:38:58:B9:EF:39:16:9E:22:D3:DE:6D:6F:F6:7B:2E:3D:A2:F4:C3 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 4ED6555BF9BD4119E45B34B5DED4597C708C87B8 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a2cde97e-8d93-4ad4-a7e7-5d8567617906.roa Signing time: Mon 04 May 2026 09:11:34 +0000 ROA not before: Mon 04 May 2026 09:11:34 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3a40::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:d6:55:5b:f9:bd:41:19:e4:5b:34:b5:de:d4:59:7c:70:8c:87:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: May 4 09:11:34 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=b1b8a25817fc2ce5e845860964db5e08cd85995ef5a42f18e44b1a10d2996a60, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:03:9b:02:fe:90:7d:00:66:fe:76:78:0c:96: 2c:e4:eb:bf:45:64:72:6d:cc:e6:e7:5a:f8:14:ea: be:ac:a4:0b:8c:ec:97:12:d4:0d:80:cd:94:1e:63: 0f:5a:3e:d4:8d:d8:71:42:ce:b4:a1:24:cb:98:71: 0f:45:72:df:f4:df:a0:80:6f:9c:e7:dd:98:54:33: b9:34:50:12:b4:78:4a:89:b6:62:a6:56:b7:46:7b: 51:80:66:56:55:ac:c1:c0:33:6e:cf:e7:8a:29:27: e5:ad:21:eb:d8:c4:7f:bc:fa:98:6c:0a:1e:1b:b9: 33:ec:73:2a:9d:45:a9:e7:24:e6:dc:a7:88:45:86: 3b:fb:0e:ef:d5:a8:a5:40:b7:5d:84:53:82:10:85: cc:de:9c:c8:c9:5c:9e:74:ef:4f:74:c4:af:85:60: 77:99:25:29:a8:57:e0:5b:ed:04:5f:63:e7:d6:96: e2:99:15:52:bf:8e:ca:7e:08:49:b1:1c:2b:82:c3: 1e:31:df:6d:e9:9b:7a:6f:c9:90:b3:8a:b1:4c:90: 6d:e2:13:66:3a:c0:35:db:70:01:73:17:0d:5c:8a: ae:2e:70:4b:35:77:4f:97:cb:09:a6:a8:2d:fc:65: 8e:da:8e:ad:fe:90:2f:c2:38:81:5a:1f:49:ba:38: 45:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:38:58:B9:EF:39:16:9E:22:D3:DE:6D:6F:F6:7B:2E:3D:A2:F4:C3 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a2cde97e-8d93-4ad4-a7e7-5d8567617906.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3a40::/43 Signature Algorithm: sha256WithRSAEncryption c3:89:55:9b:e1:ba:10:1b:3a:f3:23:72:48:a7:89:a8:9f:26: 5b:75:d2:88:f0:86:f2:15:53:29:ee:97:da:32:87:da:a2:ba: d1:ce:d5:89:33:07:e0:82:f4:97:17:ac:3d:7b:c9:59:19:42: 55:b4:20:63:29:c4:b5:7d:76:07:80:33:8f:87:72:66:ec:91: e3:6c:49:ec:af:d3:40:de:68:c1:b6:41:06:90:b6:74:a5:28: 28:a3:30:8c:6b:d0:f7:78:83:7f:15:a8:9b:db:60:88:61:70: d7:f2:69:d3:60:c9:52:a0:fa:ee:54:65:60:b2:cf:c8:11:30: 2f:35:09:2b:95:77:d9:10:87:17:b7:38:7b:3c:4a:03:06:c1: 09:c7:28:fa:9d:5b:97:d7:67:df:eb:2a:0c:2d:f9:66:44:ec: 10:8a:6a:f5:77:25:78:22:3a:1d:c3:cb:1a:12:08:f1:ea:f0: b1:c8:4f:a1:08:44:f9:a4:db:b5:1e:a9:ba:22:29:c4:a9:0b: 76:e7:eb:f0:f3:b0:20:46:95:1a:69:cc:17:86:7d:a5:bd:b9: a2:b9:af:60:da:46:6f:51:b2:95:dd:d5:77:13:60:f8:7a:da: 7f:cd:79:8f:76:74:3f:78:17:3d:c2:23:f0:d4:b7:28:82:cf: 4a:bb:51:5c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTtZVW/m9QRnkWzS13tRZfHCMh7gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MDkxMTM0WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMWI4YTI1ODE3ZmMyY2U1ZTg0NTg2MDk2NGRiNWUwOGNk ODU5OTVlZjVhNDJmMThlNDRiMWExMGQyOTk2YTYwMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5A5sC/pB9AGb+dngMlizk679FZHJtzObnWvgU6r6spAuM 7JcS1A2AzZQeYw9aPtSN2HFCzrShJMuYcQ9Fct/036CAb5zn3ZhUM7k0UBK0eEqJ tmKmVrdGe1GAZlZVrMHAM27P54opJ+WtIevYxH+8+phsCh4buTPscyqdRannJObc p4hFhjv7Du/VqKVAt12EU4IQhczenMjJXJ507090xK+FYHeZJSmoV+Bb7QRfY+fW luKZFVK/jsp+CEmxHCuCwx4x323pm3pvyZCzirFMkG3iE2Y6wDXbcAFzFw1ciq4u cEs1d0+XywmmqC38ZY7ajq3+kC/COIFaH0m6OEXPAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUyzhYue85Fp4i095tb/Z7Lj2i9MMwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2EyY2RlOTdlLThkOTMtNGFkNC1hN2U3LTVkODU2NzYxNzkwNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwUmAJAAOkAwDQYJKoZIhvcNAQELBQADggEBAMOJVZvhuhAbOvMjckiniaif Jlt10ojwhvIVUynul9oyh9qiutHO1YkzB+CC9JcXrD17yVkZQlW0IGMpxLV9dgeA M4+HcmbskeNsSeyv00DeaMG2QQaQtnSlKCijMIxr0Pd4g38VqJvbYIhhcNfyadNg yVKg+u5UZWCyz8gRMC81CSuVd9kQhxe3OHs8SgMGwQnHKPqdW5fXZ9/rKgwt+WZE 7BCKavV3JXgiOh3DyxoSCPHq8LHIT6EIRPmk27UeqboiKcSpC3bn6/DzsCBGlRpp zBeGfaW9uaK5r2DaRm9RspXd1XcTYPh62n/NeY92dD94Fz3CI/DUtyiCz0q7UVw= -----END CERTIFICATE-----Generated at Wed May 13 01:32:07 2026 by rpki-client