$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/af1b57f9-d78d-4d02-b570-e635d8fd912a.roa File: af1b57f9-d78d-4d02-b570-e635d8fd912a.roa (raw, json) Hash identifier: 24K/XEI2HFyyjGkBYKOfu99y6LNvY8erAdgwMWoFHwk= Subject key identifier: 7F:77:92:C1:52:AD:09:0B:02:D1:23:C8:F6:6C:F7:D3:E8:02:A6:DC Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 42A938024C3BA9DBBCD4CBF32F87F80B0736DF5B Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/af1b57f9-d78d-4d02-b570-e635d8fd912a.roa Signing time: Mon 04 May 2026 08:50:10 +0000 ROA not before: Mon 04 May 2026 08:50:10 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3e98::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:a9:38:02:4c:3b:a9:db:bc:d4:cb:f3:2f:87:f8:0b:07:36:df:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: May 4 08:50:10 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=2088badd32624dcd395031fcaffaad34fec1021586664b125eb9ed479d230a3b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:63:ab:cf:4e:e8:ff:c8:cf:14:bd:9f:90:ec: ec:ee:e2:66:86:98:6a:98:15:eb:5f:e6:fe:aa:17: 50:53:0f:a7:6f:07:d6:7f:0f:50:02:71:b2:cf:56: 07:8b:ef:43:b6:8c:47:3c:17:1f:88:50:b9:bc:c1: 10:80:90:67:eb:9c:56:70:25:e9:36:78:12:fb:42: b1:4b:43:5e:3d:49:b2:71:33:5d:8f:b2:10:7c:0c: 1f:8d:46:da:e1:58:61:a3:18:7e:c3:a5:29:da:ec: 96:91:ec:65:6f:97:fc:b9:6b:26:8e:42:ca:f0:b8: b8:02:76:dc:80:61:dd:9a:dd:f8:15:e5:98:e7:be: c5:dd:de:ba:81:17:40:ad:4a:56:e3:e4:46:40:d8: 08:41:c9:b5:59:b8:34:36:85:9e:10:6c:2c:9f:f3: 9b:1d:1d:ae:76:d5:da:b6:a5:96:25:e9:02:1f:bf: 53:0d:ec:06:3e:fb:e3:1b:d8:8a:5d:c3:52:29:72: 47:b7:7b:a9:4c:eb:1b:00:2b:91:28:d0:2c:bb:19: 68:cb:ec:5f:9b:17:78:05:de:fd:ff:8e:6f:97:df: 07:74:60:92:71:91:07:00:67:fa:b3:45:d8:ac:c4: 0f:7c:ae:44:90:60:f0:71:31:f6:16:2f:b5:c3:9d: 30:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:77:92:C1:52:AD:09:0B:02:D1:23:C8:F6:6C:F7:D3:E8:02:A6:DC X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/af1b57f9-d78d-4d02-b570-e635d8fd912a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3e98::/47 Signature Algorithm: sha256WithRSAEncryption 2c:01:77:90:26:73:57:17:b2:15:8e:18:a7:d7:67:54:6f:5c: 97:55:09:10:11:33:d0:b2:6e:83:63:48:7b:d6:09:00:24:e8: c1:bb:82:8d:14:32:c6:bf:7b:29:00:15:93:4a:6f:da:a4:dc: 97:31:45:35:48:98:23:3a:49:46:40:88:11:dd:7d:9d:d5:a7: 55:64:56:0d:1c:d2:d1:e1:96:dc:e9:ef:9d:92:45:43:db:d3: da:9a:55:8b:2a:cd:b8:77:eb:b7:00:0a:fa:bd:fb:ce:48:90: 16:a0:b7:39:44:09:2d:9e:bd:78:fc:87:e6:67:37:a3:01:af: ac:52:6c:ff:bd:37:9e:a4:ef:55:b3:1e:75:2e:7e:52:b1:f4: 49:56:90:47:79:67:a7:40:f5:f1:84:21:dc:99:00:7d:b3:ce: 00:35:87:21:1b:b8:e0:b5:71:ce:06:a0:46:89:b0:67:9a:d0: a3:a1:26:72:38:ef:c3:2f:39:81:59:1a:1f:3a:b0:4f:83:3d: 1b:1a:21:a7:98:e8:88:7c:5a:1c:cb:34:31:1e:24:b1:0c:83: 53:0c:2b:fb:5a:26:bf:a4:63:b1:f7:18:a5:a8:3a:f6:57:38: fa:e7:2c:f2:9b:8d:ab:3f:ce:4b:0d:7b:ea:0b:49:bf:d1:f2: e2:28:95:28 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQqk4Akw7qdu81MvzL4f4Cwc231swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MDg1MDEwWhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMDg4YmFkZDMyNjI0ZGNkMzk1MDMxZmNhZmZhYWQzNGZl YzEwMjE1ODY2NjRiMTI1ZWI5ZWQ0NzlkMjMwYTNiMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDvY6vPTuj/yM8UvZ+Q7Ozu4maGmGqYFetf5v6qF1BTD6dv B9Z/D1ACcbLPVgeL70O2jEc8Fx+IULm8wRCAkGfrnFZwJek2eBL7QrFLQ149SbJx M12PshB8DB+NRtrhWGGjGH7DpSna7JaR7GVvl/y5ayaOQsrwuLgCdtyAYd2a3fgV 5ZjnvsXd3rqBF0CtSlbj5EZA2AhBybVZuDQ2hZ4QbCyf85sdHa521dq2pZYl6QIf v1MN7AY+++Mb2Ipdw1Ipcke3e6lM6xsAK5Eo0Cy7GWjL7F+bF3gF3v3/jm+X3wd0 YJJxkQcAZ/qzRdisxA98rkSQYPBxMfYWL7XDnTDHAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUf3eSwVKtCQsC0SPI9mz30+gCptwwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2FmMWI1N2Y5LWQ3OGQtNGQwMi1iNTcwLWU2MzVkOGZkOTEyYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAPpgwDQYJKoZIhvcNAQELBQADggEBACwBd5Amc1cXshWOGKfXZ1Rv XJdVCRARM9CyboNjSHvWCQAk6MG7go0UMsa/eykAFZNKb9qk3JcxRTVImCM6SUZA iBHdfZ3Vp1VkVg0c0tHhltzp752SRUPb09qaVYsqzbh367cACvq9+85IkBagtzlE CS2evXj8h+ZnN6MBr6xSbP+9N56k71WzHnUuflKx9ElWkEd5Z6dA9fGEIdyZAH2z zgA1hyEbuOC1cc4GoEaJsGea0KOhJnI478MvOYFZGh86sE+DPRsaIaeY6Ih8WhzL NDEeJLEMg1MMK/taJr+kY7H3GKWoOvZXOPrnLPKbjas/zksNe+oLSb/R8uIolSg= -----END CERTIFICATE-----Generated at Wed May 13 00:32:46 2026 by rpki-client