$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ae1cbf59-995e-469f-887a-0ec9f2af2ab3.roa File: ae1cbf59-995e-469f-887a-0ec9f2af2ab3.roa (raw, json) Hash identifier: 0MI15sZroytVF9Tokdjw8kC9VYpOQqHCrsNJJRljHHU= Subject key identifier: 2B:65:13:19:28:96:91:93:89:29:DB:34:4A:18:DC:F9:C6:3D:3C:81 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 206026985461DF0B60A5D2E03858D5F5C30E6966 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ae1cbf59-995e-469f-887a-0ec9f2af2ab3.roa Signing time: Mon 04 May 2026 02:30:41 +0000 ROA not before: Mon 04 May 2026 02:30:41 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:39a0::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:60:26:98:54:61:df:0b:60:a5:d2:e0:38:58:d5:f5:c3:0e:69:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: May 4 02:30:41 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=0296b7e9447f4f498a94ec80f117270e2f74fb2f74db53b59412d5b32a041206, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4d:e1:cf:f8:60:31:f5:ed:f3:8a:3f:12:77: 1c:e7:ae:c7:1e:e0:0b:7b:87:db:4f:dc:d4:74:07: a3:66:26:66:e0:54:79:03:03:28:87:2c:0d:6c:53: 79:f5:dd:cf:70:59:c2:0a:96:c7:16:89:d2:a7:2a: cf:93:f3:4f:46:5d:2c:bb:04:42:bb:b2:65:ad:ba: a0:7d:d1:ff:c3:6f:e7:6b:a9:8a:0a:83:72:ef:9e: a6:9d:ad:e1:f5:17:54:dc:87:d4:b0:37:35:b2:1e: 38:9d:6e:b3:1e:f6:bf:a7:b2:79:63:e5:19:99:a6: 59:9c:74:7f:f4:9f:ce:4c:65:a4:f0:35:34:9c:32: 60:47:0f:cc:27:5a:88:f3:76:78:99:30:74:11:bb: fe:e7:da:0f:0b:b5:26:ed:45:56:f2:53:eb:b1:67: 30:83:b9:b1:b8:eb:b2:59:b9:16:df:85:ca:06:1e: 50:82:ba:4a:69:2b:aa:64:1e:72:2c:da:d3:45:38: ed:10:63:73:37:8c:8b:34:0a:1c:b6:3d:92:09:8a: 0f:dc:50:f0:4c:d3:bd:cf:d4:61:ea:60:cc:93:3a: fa:15:92:9a:05:e5:52:f1:f7:37:c7:e5:be:ac:09: e1:50:55:fb:bf:27:68:05:5c:76:35:7e:34:80:69: ed:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:65:13:19:28:96:91:93:89:29:DB:34:4A:18:DC:F9:C6:3D:3C:81 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ae1cbf59-995e-469f-887a-0ec9f2af2ab3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:39a0::/46 Signature Algorithm: sha256WithRSAEncryption b7:43:08:d0:b2:f8:da:df:2e:c0:ff:04:64:fb:6f:2e:b0:a4: d4:3c:f2:30:7b:fc:eb:63:c5:e7:fc:8b:30:ed:54:42:e1:2f: 44:23:95:7c:50:67:c0:5d:f7:27:e6:c9:62:fc:53:0d:26:6f: e4:cf:a4:84:12:43:7d:94:fa:17:1b:2b:b5:2e:a9:dd:ee:0e: 37:11:17:ff:72:60:06:1a:f2:37:2d:bb:48:c1:3a:f6:fa:c3: ea:5a:81:16:1c:bb:7a:e7:31:f1:ca:33:3b:cd:32:d4:33:7a: 62:0e:3c:d6:bb:4f:8d:0b:ab:f2:f3:77:bb:2d:3b:4d:c5:72: 31:18:57:b2:1e:1a:71:65:0d:6a:78:bd:7d:2a:90:73:39:b5: e9:9f:5b:66:f3:6f:5e:95:98:6e:66:9b:fe:d1:31:73:d2:45: bd:60:54:69:ec:0d:c4:49:28:98:a7:69:58:6b:97:5e:8c:d9: 9d:f7:ee:29:43:3f:30:b6:9b:a7:88:9a:02:b2:bb:9e:41:33: 35:78:df:80:62:b6:82:75:c1:14:16:0c:f1:8e:a8:d2:58:3d: d0:ba:72:7d:2d:64:bc:e7:94:ed:87:6d:0a:c8:69:50:48:39: bd:7f:07:76:17:7e:34:78:16:ff:86:c2:d1:94:4e:5d:42:e1: 58:dd:f0:af -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUIGAmmFRh3wtgpdLgOFjV9cMOaWYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MDIzMDQxWhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMjk2YjdlOTQ0N2Y0ZjQ5OGE5NGVjODBmMTE3MjcwZTJm NzRmYjJmNzRkYjUzYjU5NDEyZDViMzJhMDQxMjA2MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDETeHP+GAx9e3zij8Sdxznrsce4At7h9tP3NR0B6NmJmbg VHkDAyiHLA1sU3n13c9wWcIKlscWidKnKs+T809GXSy7BEK7smWtuqB90f/Db+dr qYoKg3LvnqadreH1F1Tch9SwNzWyHjidbrMe9r+nsnlj5RmZplmcdH/0n85MZaTw NTScMmBHD8wnWojzdniZMHQRu/7n2g8LtSbtRVbyU+uxZzCDubG467JZuRbfhcoG HlCCukppK6pkHnIs2tNFOO0QY3M3jIs0Chy2PZIJig/cUPBM073P1GHqYMyTOvoV kpoF5VLx9zfH5b6sCeFQVfu/J2gFXHY1fjSAae2XAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUK2UTGSiWkZOJKds0Shjc+cY9PIEwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2FlMWNiZjU5LTk5NWUtNDY5Zi04ODdhLTBlYzlmMmFmMmFiMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAOaAwDQYJKoZIhvcNAQELBQADggEBALdDCNCy+NrfLsD/BGT7by6w pNQ88jB7/Otjxef8izDtVELhL0QjlXxQZ8Bd9yfmyWL8Uw0mb+TPpIQSQ32U+hcb K7Uuqd3uDjcRF/9yYAYa8jctu0jBOvb6w+pagRYcu3rnMfHKMzvNMtQzemIOPNa7 T40Lq/Lzd7stO03FcjEYV7IeGnFlDWp4vX0qkHM5temfW2bzb16VmG5mm/7RMXPS Rb1gVGnsDcRJKJinaVhrl16M2Z337ilDPzC2m6eImgKyu55BMzV434BitoJ1wRQW DPGOqNJYPdC6cn0tZLznlO2HbQrIaVBIOb1/B3YXfjR4Fv+GwtGUTl1C4Vjd8K8= -----END CERTIFICATE-----Generated at Wed May 13 02:23:13 2026 by rpki-client