$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a37e595f-3e6c-4723-a46f-6fef79f091c4.roa File: a37e595f-3e6c-4723-a46f-6fef79f091c4.roa (raw, json) Hash identifier: Pksu3+kFXvjr38AUOfBWCz7dDyZCi3vHO304gS8PLT8= Subject key identifier: 42:13:4E:82:F1:DC:D3:84:91:ED:8F:24:B8:94:2F:73:9E:70:BD:5A Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 16E1384734D0BDBC1FB8EB78D06C14B179D46862 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a37e595f-3e6c-4723-a46f-6fef79f091c4.roa Signing time: Mon 04 May 2026 11:41:22 +0000 ROA not before: Mon 04 May 2026 11:41:22 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3364::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:e1:38:47:34:d0:bd:bc:1f:b8:eb:78:d0:6c:14:b1:79:d4:68:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: May 4 11:41:22 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=6d775f4272e449d0d36be4efae0ed48a805f57960f9c10cdd1adc2f017df198c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:97:70:83:d3:a6:50:66:72:0b:07:b5:2e:5d: 99:80:a0:d8:86:c3:ad:ec:c7:b0:8f:42:3c:49:44: b8:0f:c6:5e:c8:ed:08:ac:57:04:56:1a:ea:27:23: 89:c7:55:9f:6b:69:47:44:53:f2:ba:68:dd:02:43: 4b:ce:21:9b:ed:89:4c:4d:63:cd:7d:e0:67:2f:c6: 77:16:3c:73:de:df:df:4c:5b:62:3d:d3:af:9b:54: 4a:29:34:a6:3b:2d:65:2e:47:fa:43:c4:72:86:d5: ad:83:07:8c:40:bb:a5:86:b1:16:43:a0:82:1a:cf: dd:25:c1:2d:f4:a4:a1:8b:25:6b:96:1e:dd:6c:56: 06:9f:1a:c1:82:ec:0c:d1:83:4f:02:cc:72:8a:ac: d4:cc:51:f6:76:79:3f:12:33:3b:a8:ee:85:bc:a8: 22:ec:57:ed:b7:83:64:69:eb:4d:3c:aa:d0:f1:40: 16:d8:36:f4:3c:dd:d2:6d:72:35:62:ae:28:45:97: ab:f8:66:39:28:e7:a6:0e:d9:cb:34:11:0d:85:53: d8:0f:0c:5a:3d:fd:d8:c2:87:a8:3a:33:64:bd:7f: c0:b2:0f:d4:10:d2:f4:7c:c0:a8:01:be:e7:c0:98: df:94:e3:a1:8e:99:d5:2e:93:96:e9:23:c6:f1:5b: 39:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:13:4E:82:F1:DC:D3:84:91:ED:8F:24:B8:94:2F:73:9E:70:BD:5A X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a37e595f-3e6c-4723-a46f-6fef79f091c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3364::/47 Signature Algorithm: sha256WithRSAEncryption 12:66:05:1e:e7:6c:de:fc:f8:c1:97:d6:08:57:cc:6e:57:c1: 36:fa:51:a0:a2:f6:6e:4f:18:b5:23:2e:54:fe:4c:90:48:41: f7:4a:5d:12:a1:98:fb:2f:07:68:34:2c:9e:e5:86:ed:34:c0: 50:47:a9:4d:df:9a:ad:c8:ae:ad:3b:db:4d:2c:0c:16:eb:e8: 8f:67:4a:89:da:7a:a0:5a:de:b8:e2:fb:c6:e0:91:a6:50:c3: c2:4c:d5:49:5d:ec:3a:8a:4a:6e:8a:b8:65:e6:81:31:08:52: 0a:d8:6d:c5:ce:b0:55:92:7d:a3:07:e5:af:ca:88:94:00:7c: 8f:b1:9a:25:74:f9:bf:16:a0:16:d5:55:37:d4:25:52:1c:07: 65:d7:d1:e1:f4:fb:9a:3b:62:40:3a:b9:c4:44:2e:c6:fe:9d: 58:5f:20:27:1b:f7:6a:04:78:9f:9e:9d:17:53:c7:e5:30:84: 04:d8:f2:77:96:d4:7f:ad:64:9d:5f:eb:3b:bf:19:af:36:77: 4e:14:a9:71:1e:f8:67:db:47:42:03:7c:43:f3:a2:5b:4b:c7: 74:fa:b3:cb:ec:ef:4c:8c:68:77:8c:af:73:03:53:eb:89:a8: 7c:6b:02:c1:71:b5:8d:18:a3:52:b7:87:2b:5d:3b:ac:7f:5d: b2:41:49:40 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUFuE4RzTQvbwfuOt40GwUsXnUaGIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MTE0MTIyWhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZDc3NWY0MjcyZTQ0OWQwZDM2YmU0ZWZhZTBlZDQ4YTgw NWY1Nzk2MGY5YzEwY2RkMWFkYzJmMDE3ZGYxOThjMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyl3CD06ZQZnILB7UuXZmAoNiGw63sx7CPQjxJRLgPxl7I 7QisVwRWGuonI4nHVZ9raUdEU/K6aN0CQ0vOIZvtiUxNY8194GcvxncWPHPe399M W2I906+bVEopNKY7LWUuR/pDxHKG1a2DB4xAu6WGsRZDoIIaz90lwS30pKGLJWuW Ht1sVgafGsGC7AzRg08CzHKKrNTMUfZ2eT8SMzuo7oW8qCLsV+23g2Rp6008qtDx QBbYNvQ83dJtcjVirihFl6v4Zjko56YO2cs0EQ2FU9gPDFo9/djCh6g6M2S9f8Cy D9QQ0vR8wKgBvufAmN+U46GOmdUuk5bpI8bxWzlBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUQhNOgvHc04SR7Y8kuJQvc55wvVowHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2EzN2U1OTVmLTNlNmMtNDcyMy1hNDZmLTZmZWY3OWYwOTFjNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAM2QwDQYJKoZIhvcNAQELBQADggEBABJmBR7nbN78+MGX1ghXzG5X wTb6UaCi9m5PGLUjLlT+TJBIQfdKXRKhmPsvB2g0LJ7lhu00wFBHqU3fmq3Irq07 200sDBbr6I9nSonaeqBa3rji+8bgkaZQw8JM1Uld7DqKSm6KuGXmgTEIUgrYbcXO sFWSfaMH5a/KiJQAfI+xmiV0+b8WoBbVVTfUJVIcB2XX0eH0+5o7YkA6ucRELsb+ nVhfICcb92oEeJ+enRdTx+UwhATY8neW1H+tZJ1f6zu/Ga82d04UqXEe+GfbR0ID fEPzoltLx3T6s8vs70yMaHeMr3MDU+uJqHxrAsFxtY0Yo1K3hytdO6x/XbJBSUA= -----END CERTIFICATE-----Generated at Wed May 13 02:23:19 2026 by rpki-client