$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a4f20e79-5993-44b8-ba45-0893a3b61d05.roa File: a4f20e79-5993-44b8-ba45-0893a3b61d05.roa (raw, json) Hash identifier: nkfpHhGJeEBP1JkL+UwBM82CfxrYcLlU06JN0T2N8tM= Subject key identifier: B0:8E:A4:18:95:40:D5:A6:BD:64:B2:60:BD:FE:69:DD:C1:74:13:C0 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 0AAAD3271CCDBA12B49270ED3303288B18853C Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a4f20e79-5993-44b8-ba45-0893a3b61d05.roa Signing time: Mon 04 May 2026 04:00:04 +0000 ROA not before: Mon 04 May 2026 04:00:04 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3598::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:aa:d3:27:1c:cd:ba:12:b4:92:70:ed:33:03:28:8b:18:85:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: May 4 04:00:04 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=ff8526cc21d3a4010917515b9a7bdc940f211c329191a26d6b0d8ea4f8b4377b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:03:2c:bc:2d:bf:38:f9:65:0f:4e:88:eb:99: 13:f7:77:bc:f9:59:db:8a:6e:9a:d3:d7:38:22:d3: fe:fd:45:f0:ba:a4:e4:6c:c5:db:2e:7b:f9:78:71: 6c:4b:af:8c:99:57:ee:2e:bb:86:e2:ab:20:3c:94: 0e:59:22:26:a6:61:ea:10:b5:25:6b:6a:4e:48:74: d0:e1:d4:d3:63:16:e4:ae:d4:ce:97:5b:1e:d3:a6: d7:f9:bd:d1:e0:db:54:bf:3f:93:29:4b:90:11:ae: ee:1a:9b:60:8b:0f:47:a6:5c:27:a9:94:54:84:f9: bf:5a:56:99:07:de:0b:fa:27:9b:52:6c:9a:ea:37: 24:a6:07:f1:c6:56:11:a0:24:54:fd:5f:90:5a:c0: f5:f7:99:49:49:7f:0d:85:eb:5a:7f:1b:fb:40:cd: de:27:e9:61:e7:64:32:03:16:7f:cb:2d:45:d2:5f: f1:82:3c:e8:0b:4e:a8:4f:e3:f1:1c:09:55:51:01: 05:7b:72:92:ab:35:2c:5d:e5:f6:2b:7c:e0:cb:e0: 43:1c:7c:67:0f:b8:bd:57:58:1c:01:e3:5a:33:37: 8f:d5:db:b7:c8:72:7a:4e:ac:81:18:2d:9a:92:f8: 9c:d1:02:8d:5c:f8:60:73:ee:16:22:60:3d:c0:da: 71:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:8E:A4:18:95:40:D5:A6:BD:64:B2:60:BD:FE:69:DD:C1:74:13:C0 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a4f20e79-5993-44b8-ba45-0893a3b61d05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3598::/45 Signature Algorithm: sha256WithRSAEncryption 8a:e4:b0:e3:85:2e:34:e1:04:10:04:d9:17:49:7a:c8:9d:58: 73:34:ce:0d:8e:bf:cd:22:97:1b:cb:09:3b:77:96:04:c6:3e: cd:70:72:27:d2:ba:1f:db:7b:17:87:8a:0a:18:b4:28:bf:fe: 15:85:45:8a:ec:d3:16:17:f0:f3:6f:5a:87:c4:5b:af:34:c2: 8a:88:17:66:ab:1d:f6:a3:11:9f:bd:58:86:7c:f2:e3:7c:4f: 06:19:0f:59:2d:a4:e7:23:4d:0f:cb:69:16:47:4c:d4:e2:90: c4:44:86:ad:16:5e:f9:c3:ee:ae:e6:91:4e:11:78:a8:29:b4: d0:3c:4b:2e:40:f9:70:b9:c6:74:6c:f7:df:30:e6:3d:12:17: c3:cf:25:13:94:68:df:cf:83:22:70:ed:19:38:84:dd:f8:73: a5:87:80:d8:76:26:c4:d8:f4:fe:f9:7e:00:e3:00:15:3a:2f: a9:7a:c2:37:72:27:80:2e:31:d3:45:c9:9f:84:2f:d3:8e:91: 77:c0:b6:a1:a7:2a:c8:0a:36:d4:8e:14:cd:cc:e6:fe:fc:3d: b2:1d:22:26:68:44:ac:a1:27:4a:e3:06:b6:51:b3:8c:55:00: 52:df:5d:b1:fe:cc:9e:77:73:25:03:04:ec:0d:54:78:a2:95: 69:47:0e:9d -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgITCqrTJxzNuhK0knDtMwMoixiFPDANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI1NTEyMDkwMjdmNWU3YWQ1NGUwNGYwNDJlNGFjMGU5ZTY1 YzU2ZTU1Yzc3NDc4ZDJjZTAeFw0yNjA1MDQwNDAwMDRaFw0yNjA4MDIyMzU5NTla MHoxSTBHBgNVBAUTQGZmODUyNmNjMjFkM2E0MDEwOTE3NTE1YjlhN2JkYzk0MGYy MTFjMzI5MTkxYTI2ZDZiMGQ4ZWE0ZjhiNDM3N2IxLTArBgNVBAMTJDlmMjMwZmE5 LWFhMmYtNDAyMC1hZTJhLTFhNjAzNzQwODRiODCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAIsDLLwtvzj5ZQ9OiOuZE/d3vPlZ24pumtPXOCLT/v1F8Lqk 5GzF2y57+XhxbEuvjJlX7i67huKrIDyUDlkiJqZh6hC1JWtqTkh00OHU02MW5K7U zpdbHtOm1/m90eDbVL8/kylLkBGu7hqbYIsPR6ZcJ6mUVIT5v1pWmQfeC/onm1Js muo3JKYH8cZWEaAkVP1fkFrA9feZSUl/DYXrWn8b+0DN3ifpYedkMgMWf8stRdJf 8YI86AtOqE/j8RwJVVEBBXtykqs1LF3l9it84MvgQxx8Zw+4vVdYHAHjWjM3j9Xb t8hyek6sgRgtmpL4nNECjVz4YHPuFiJgPcDacd0CAwEAAaOCArQwggKwMB0GA1Ud DgQWBBSwjqQYlUDVpr1ksmC9/mndwXQTwDAfBgNVHSMEGDAWgBTo88Ug4g7yXTq3 oha7FAQxajc48TAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv ZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzk5ZjhmZWQyLTI5 MmItNDcyMi1iOTI4LWZlZTdiZjBhNTkxMC81NTEyMDkwMjdmNWU3YWQ1NGUwNGYw NDJlNGFjMGU5ZTY1YzU2ZTU1Yzc3NDc4ZDJjZS5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9lNzUxOGFmNS1hMzQzLTQyOGQtYmY3OC1mOTgy YjZlNjA1MDUvYTRmMjBlNzktNTk5My00NGI4LWJhNDUtMDg5M2EzYjYxZDA1LnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgt Zjk4MmI2ZTYwNTA1L1huclZUZ1R3UXVTc0RwNWx4VzVWeDNSNDBzNC5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHAyYAkAA1mDANBgkqhkiG9w0BAQsFAAOCAQEAiuSw44UuNOEEEATZF0l6yJ1Y czTODY6/zSKXG8sJO3eWBMY+zXByJ9K6H9t7F4eKChi0KL/+FYVFiuzTFhfw829a h8RbrzTCiogXZqsd9qMRn71Yhnzy43xPBhkPWS2k5yNND8tpFkdM1OKQxESGrRZe +cPuruaRThF4qCm00DxLLkD5cLnGdGz33zDmPRIXw88lE5Ro38+DInDtGTiE3fhz pYeA2HYmxNj0/vl+AOMAFTovqXrCN3IngC4x00XJn4Qv046Rd8C2oacqyAo21I4U zczm/vw9sh0iJmhErKEnSuMGtlGzjFUAUt9dsf7MnndzJQME7A1UeKKVaUcOnQ== -----END CERTIFICATE-----Generated at Wed May 13 00:46:52 2026 by rpki-client