$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/af6ac580-ddd4-4782-878b-bdfd83f8f028.roa File: af6ac580-ddd4-4782-878b-bdfd83f8f028.roa (raw, json) Hash identifier: IDOVpq4RRJxVTNBqd1KGFKADfEcem3mY7tYMqjN/W38= Subject key identifier: 29:89:D2:8F:0B:43:EA:A0:CC:E9:9C:E2:16:08:B5:E7:7A:05:41:8A Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 7418E78BF813647C3C1A1568A6C837B78D946FA8 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/af6ac580-ddd4-4782-878b-bdfd83f8f028.roa Signing time: Mon 04 May 2026 13:11:20 +0000 ROA not before: Mon 04 May 2026 13:11:20 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3e56::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:18:e7:8b:f8:13:64:7c:3c:1a:15:68:a6:c8:37:b7:8d:94:6f:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: May 4 13:11:20 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=a97fb769501ecb6a4377e29a34bc185c212fc0298e7001780ab617e7711c16c8, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4c:30:a3:e7:97:43:be:d0:02:88:4f:00:d1: e0:98:ea:ef:07:b8:17:ad:3d:3f:20:47:e1:71:f3: a8:f6:9c:a5:db:14:56:90:6b:9d:ca:27:08:5b:af: f0:79:b6:b3:9a:4f:9e:a7:1f:39:3d:cb:4e:4c:26: dd:7e:77:7f:25:5e:54:92:94:57:61:a9:33:14:f8: 84:d5:76:f8:4e:40:bd:97:07:81:55:49:e0:44:9d: e8:92:79:d2:cb:20:51:f6:b7:26:79:20:7a:12:23: ca:58:6c:8f:51:c9:41:37:54:04:23:f6:4d:81:41: 97:1e:da:3c:c4:5d:38:0e:79:dc:60:89:81:39:59: cb:92:4f:4b:f2:91:76:98:5a:48:d3:32:49:f7:f7: 72:6e:16:a1:3f:a4:f9:d9:18:9d:b6:b5:4e:c4:3e: f2:5b:7c:56:0e:03:d0:4e:36:a7:77:9a:a9:de:3e: 4c:34:eb:58:09:90:da:5f:27:5d:59:4f:70:ed:a4: 03:fe:bd:e3:03:74:96:d3:60:60:5b:ba:5d:8f:8e: 9f:fa:85:2c:b3:be:bf:1d:67:44:e6:b1:7b:5d:95: 99:33:3b:cb:ce:1b:de:2f:8a:e2:0a:9b:95:e7:37: d6:5f:4a:fe:ce:7b:32:d2:5b:73:fd:59:74:be:32: e8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:89:D2:8F:0B:43:EA:A0:CC:E9:9C:E2:16:08:B5:E7:7A:05:41:8A X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/af6ac580-ddd4-4782-878b-bdfd83f8f028.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3e56::/47 Signature Algorithm: sha256WithRSAEncryption 01:2a:88:37:5e:64:3a:e6:9f:69:08:4a:e0:00:18:62:d6:d7: e2:e7:9b:90:05:7a:af:a6:b9:e4:f1:00:b3:66:55:1a:5a:5f: e5:84:a6:0a:e0:12:f1:4f:7d:05:9f:43:0c:55:49:82:71:83: 5c:a2:06:03:af:3c:57:73:0e:4f:65:b0:98:66:27:eb:f9:f0: 4a:94:a1:c8:d2:02:3d:d8:15:8a:19:3c:f1:82:32:a9:06:1c: 8e:7e:cb:88:74:19:17:4f:da:55:48:b3:59:4f:35:40:b0:31: 70:32:92:de:b2:d9:7b:58:1d:8c:73:81:9c:e9:ca:cb:26:d2: bd:4d:72:f6:3b:81:0f:4b:00:4c:65:79:cb:80:6f:bc:08:84: 02:46:f2:b9:74:cb:6a:37:55:bf:3f:32:3d:e0:a4:71:23:cf: ba:9e:fd:18:21:40:c2:ff:ca:8e:82:55:0a:44:3f:2c:9b:36: 0c:0f:19:bf:65:38:54:f0:89:ca:73:88:bd:b4:d4:15:17:be: c1:0c:71:c9:24:1b:60:e5:07:4f:ef:2b:05:2b:8c:e8:99:44: 9b:8b:91:94:5f:7f:f0:23:15:d1:ee:e1:af:0f:86:fc:de:b2: 9f:bd:f5:31:a1:29:c4:47:ad:89:19:15:a9:b8:39:ac:b7:d1: 8b:16:7f:a3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdBjni/gTZHw8GhVopsg3t42Ub6gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MTMxMTIwWhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhOTdmYjc2OTUwMWVjYjZhNDM3N2UyOWEzNGJjMTg1YzIx MmZjMDI5OGU3MDAxNzgwYWI2MTdlNzcxMWMxNmM4MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7TDCj55dDvtACiE8A0eCY6u8HuBetPT8gR+Fx86j2nKXb FFaQa53KJwhbr/B5trOaT56nHzk9y05MJt1+d38lXlSSlFdhqTMU+ITVdvhOQL2X B4FVSeBEneiSedLLIFH2tyZ5IHoSI8pYbI9RyUE3VAQj9k2BQZce2jzEXTgOedxg iYE5WcuST0vykXaYWkjTMkn393JuFqE/pPnZGJ22tU7EPvJbfFYOA9BONqd3mqne Pkw061gJkNpfJ11ZT3DtpAP+veMDdJbTYGBbul2Pjp/6hSyzvr8dZ0TmsXtdlZkz O8vOG94viuIKm5XnN9ZfSv7OezLSW3P9WXS+MuiFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUKYnSjwtD6qDM6ZziFgi153oFQYowHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2FmNmFjNTgwLWRkZDQtNDc4Mi04NzhiLWJkZmQ4M2Y4ZjAyOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAPlYwDQYJKoZIhvcNAQELBQADggEBAAEqiDdeZDrmn2kISuAAGGLW 1+Lnm5AFeq+mueTxALNmVRpaX+WEpgrgEvFPfQWfQwxVSYJxg1yiBgOvPFdzDk9l sJhmJ+v58EqUocjSAj3YFYoZPPGCMqkGHI5+y4h0GRdP2lVIs1lPNUCwMXAykt6y 2XtYHYxzgZzpyssm0r1NcvY7gQ9LAExlecuAb7wIhAJG8rl0y2o3Vb8/Mj3gpHEj z7qe/RghQML/yo6CVQpEPyybNgwPGb9lOFTwicpziL201BUXvsEMcckkG2DlB0/v KwUrjOiZRJuLkZRff/AjFdHu4a8Phvzesp+99TGhKcRHrYkZFam4Oay30YsWf6M= -----END CERTIFICATE-----Generated at Wed May 13 01:24:43 2026 by rpki-client