$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ad70a217-71ea-4b80-86f1-9f66497ddfa9.roa File: ad70a217-71ea-4b80-86f1-9f66497ddfa9.roa (raw, json) Hash identifier: GD+hxoW6igfI2WNPv4/kRVBkAL+2N15Nt5I5UdSP1/E= Subject key identifier: B2:A3:A3:E5:BD:08:D6:15:78:F2:70:29:C2:DE:63:43:69:A5:AF:E7 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 4D866BFF09CE899A2E0AA3C0945D813FC738564D Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ad70a217-71ea-4b80-86f1-9f66497ddfa9.roa Signing time: Mon 04 May 2026 01:30:15 +0000 ROA not before: Mon 04 May 2026 01:30:15 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:32ba::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:86:6b:ff:09:ce:89:9a:2e:0a:a3:c0:94:5d:81:3f:c7:38:56:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: May 4 01:30:15 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=7b94bbddb3690f7704dbc73cc4e48b8d9f6ced7da27f6d1e526c9a2bb3247ce5, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6e:80:dd:68:ca:66:82:9b:38:ce:49:51:55: f4:16:d3:9e:b4:51:31:e2:15:29:d6:21:94:4c:59: df:bf:11:83:f3:4c:27:42:59:69:4e:3e:25:84:73: c2:3f:8c:5b:da:ff:3f:95:9e:7d:e6:a6:27:b2:5d: 32:b0:20:80:64:45:ed:92:d3:1c:bd:ce:4d:b7:ee: 6d:0c:72:a1:22:e5:a3:0f:1a:c5:78:39:db:d8:3f: b4:3b:98:c6:f6:3b:78:2a:76:28:e3:fd:9d:c2:ac: 05:99:c6:a9:cd:d7:e6:e3:f6:c2:d6:c1:3c:8f:47: 0a:11:62:ce:fa:09:0b:c5:d2:b8:7e:78:ee:19:8c: 50:89:bd:e0:ec:67:e4:34:56:8f:95:4a:48:e6:19: bd:7a:d2:20:8d:e5:cd:1a:59:7d:77:39:58:a1:25: 25:c6:86:29:03:37:81:25:39:60:b8:d7:88:be:65: 94:d4:8d:91:d3:9c:6b:9c:c4:a4:c9:45:38:ee:34: 28:76:f3:04:8b:95:b5:19:e7:9b:56:a4:85:0d:fc: b1:ca:1b:05:81:24:ea:c7:ff:cd:cd:9f:1d:2d:7c: 51:70:13:5b:30:de:93:14:fe:88:55:aa:01:77:ed: 63:d5:cb:1d:7a:ea:d7:5e:8b:6c:45:8c:0a:52:27: f9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A3:A3:E5:BD:08:D6:15:78:F2:70:29:C2:DE:63:43:69:A5:AF:E7 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ad70a217-71ea-4b80-86f1-9f66497ddfa9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:32ba::/47 Signature Algorithm: sha256WithRSAEncryption 86:79:10:7a:8b:fc:7e:a8:c9:de:d5:81:2c:00:36:2f:54:2e: 91:aa:7b:84:bc:5c:73:32:8b:d3:b1:a8:2f:4b:75:a9:06:9c: dc:33:1a:cb:fc:3b:a2:f3:8d:8c:77:c8:e1:e3:76:a4:ae:9b: 50:89:3c:d4:82:19:06:20:9e:92:71:a6:bd:d7:a4:b7:da:24: 0e:a8:22:7f:d7:6d:d3:05:0b:49:48:0f:50:6c:27:58:69:95: c8:82:60:8f:2c:3d:63:dc:0b:1d:19:f3:a0:6e:1f:62:b5:3b: 68:c9:e3:e4:bc:db:25:36:67:0a:5e:6b:10:dd:61:0d:c8:6c: 57:84:a3:0a:41:f8:13:0b:89:fe:94:85:d1:18:83:25:f5:b6: de:fd:b2:50:5c:f9:2a:07:e6:a7:77:26:41:90:5f:15:7a:f6: 63:36:4d:d4:d4:ea:a0:4c:2f:32:a1:ef:bf:48:16:d7:cf:bf: 82:36:e0:54:72:e0:6e:00:f1:60:14:23:5d:82:ae:b3:0b:6e: 0a:58:ff:b4:66:48:1b:e0:5e:5d:ab:13:79:96:da:a8:c7:67: 47:31:d5:53:fc:de:26:66:15:b2:d9:fc:93:e0:aa:ab:7d:50: e4:d2:56:e5:50:3b:f3:a2:13:46:0d:f8:c7:3c:af:fc:00:10: 92:61:d2:fb -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTYZr/wnOiZouCqPAlF2BP8c4Vk0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MDEzMDE1WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3Yjk0YmJkZGIzNjkwZjc3MDRkYmM3M2NjNGU0OGI4ZDlm NmNlZDdkYTI3ZjZkMWU1MjZjOWEyYmIzMjQ3Y2U1MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSboDdaMpmgps4zklRVfQW0560UTHiFSnWIZRMWd+/EYPz TCdCWWlOPiWEc8I/jFva/z+Vnn3mpieyXTKwIIBkRe2S0xy9zk237m0McqEi5aMP GsV4OdvYP7Q7mMb2O3gqdijj/Z3CrAWZxqnN1+bj9sLWwTyPRwoRYs76CQvF0rh+ eO4ZjFCJveDsZ+Q0Vo+VSkjmGb160iCN5c0aWX13OVihJSXGhikDN4ElOWC414i+ ZZTUjZHTnGucxKTJRTjuNCh28wSLlbUZ55tWpIUN/LHKGwWBJOrH/83Nnx0tfFFw E1sw3pMU/ohVqgF37WPVyx166tdei2xFjApSJ/lHAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUsqOj5b0I1hV48nApwt5jQ2mlr+cwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2FkNzBhMjE3LTcxZWEtNGI4MC04NmYxLTlmNjY0OTdkZGZhOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAMrowDQYJKoZIhvcNAQELBQADggEBAIZ5EHqL/H6oyd7VgSwANi9U LpGqe4S8XHMyi9OxqC9LdakGnNwzGsv8O6LzjYx3yOHjdqSum1CJPNSCGQYgnpJx pr3XpLfaJA6oIn/XbdMFC0lID1BsJ1hplciCYI8sPWPcCx0Z86BuH2K1O2jJ4+S8 2yU2ZwpeaxDdYQ3IbFeEowpB+BMLif6UhdEYgyX1tt79slBc+SoH5qd3JkGQXxV6 9mM2TdTU6qBMLzKh779IFtfPv4I24FRy4G4A8WAUI12CrrMLbgpY/7RmSBvgXl2r E3mW2qjHZ0cx1VP83iZmFbLZ/JPgqqt9UOTSVuVQO/OiE0YN+Mc8r/wAEJJh0vs= -----END CERTIFICATE-----Generated at Wed May 13 01:31:23 2026 by rpki-client