$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b06fa14a-ad24-4938-aa6a-12b73e6be05e.roa File: b06fa14a-ad24-4938-aa6a-12b73e6be05e.roa (raw, json) Hash identifier: Iwk59xbs2zLPnvzS3+zYEUOpaoz5dovN5X6SY5gla8A= Subject key identifier: 9C:AC:56:BE:15:78:E8:55:AC:7B:60:35:5C:E9:0D:96:9F:B9:E6:22 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 0A7A8B58812D267EE392B928DEA8051D7E69FFA5 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b06fa14a-ad24-4938-aa6a-12b73e6be05e.roa Signing time: Mon 04 May 2026 07:20:06 +0000 ROA not before: Mon 04 May 2026 07:20:06 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2b78::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:7a:8b:58:81:2d:26:7e:e3:92:b9:28:de:a8:05:1d:7e:69:ff:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: May 4 07:20:06 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=f49f2aff326b47e695e4fcf6d5a0f95abfd2ca106b7fbcbe877a00b8e6c15304, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7e:4a:18:75:70:2c:ae:92:ea:90:b8:a3:63: cf:d4:c5:7d:42:ae:bb:bf:40:40:56:e3:df:83:d2: 7b:49:cb:3b:d0:aa:f4:12:f3:ea:ac:1e:e2:7f:c9: dd:a6:54:c7:8f:a0:67:39:8e:49:09:ea:95:cd:83: 6f:a8:99:f8:3c:9e:b4:dc:87:0d:53:4c:f8:e2:4b: 74:a6:e4:ae:83:d2:da:e5:d7:ea:f7:42:09:d0:f1: db:e1:ed:60:b9:4e:96:83:eb:d5:61:9c:8d:e3:9e: a5:39:9b:be:51:e2:ac:7e:6b:d2:37:4c:b8:0d:ad: 65:d3:98:75:04:a7:a2:26:1d:ee:20:a1:a8:a7:02: f6:ab:fa:15:3a:55:8f:c2:13:88:b2:38:99:d8:29: d2:3c:ef:dc:e2:d6:97:95:11:54:0f:6c:06:ba:fe: ac:b6:38:7e:24:c2:82:bd:09:b0:36:f0:88:73:2b: f0:d9:4a:52:50:f5:30:73:e4:01:dd:fc:eb:d8:67: 03:23:b2:70:b5:f4:b0:b6:dc:3d:bd:97:44:02:32: 94:2e:7d:71:be:56:d7:b0:d8:94:16:5b:71:41:99: 98:36:f1:a0:79:9b:2c:0d:37:e2:61:fa:e3:26:75: 22:aa:9a:0d:e9:f7:12:01:3b:45:81:b8:c0:18:ed: 88:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:AC:56:BE:15:78:E8:55:AC:7B:60:35:5C:E9:0D:96:9F:B9:E6:22 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b06fa14a-ad24-4938-aa6a-12b73e6be05e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2b78::/46 Signature Algorithm: sha256WithRSAEncryption 1f:29:cb:a8:fc:5b:61:9a:26:6f:2d:61:8b:a8:72:28:79:a1: 8e:3b:09:61:d9:63:00:cf:b9:26:fa:b2:f6:66:91:67:37:3f: de:1f:dd:23:42:b8:84:ec:a8:eb:7e:2e:65:e2:3e:31:a5:4f: 22:4f:c4:bd:db:a8:fa:51:8a:f2:3f:b6:5a:bd:d2:67:5b:04: 6c:8d:47:dd:59:5a:ac:26:3c:1c:0b:91:94:bf:64:a1:95:e1: e9:07:27:a2:ac:a2:e4:dc:3f:82:64:5d:fe:3b:c1:1d:71:61: 66:46:b7:6c:2a:67:25:ea:44:64:94:3d:f0:74:7d:b2:a1:07: a3:2f:34:0e:48:31:22:0d:95:a6:de:d1:59:b3:57:4a:94:9a: 7a:ae:c7:05:89:49:c8:bd:02:99:f1:bc:85:87:34:ec:2a:a1: 40:02:67:0b:d3:1b:7c:0d:0c:f8:f8:87:15:00:62:ab:85:15: 44:ac:fc:c2:16:9c:d0:1e:33:af:ae:a4:82:d1:c8:a2:05:ea: d8:cc:7e:c5:83:d0:fb:8d:c9:0d:97:6a:86:46:15:2d:19:2b: 04:36:09:b7:86:42:99:6c:60:40:67:5e:c3:3a:26:0d:fb:a8: 98:31:2b:7e:5b:71:de:b5:b3:bd:34:15:c4:71:1b:50:38:10: 95:2d:81:d1 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCnqLWIEtJn7jkrko3qgFHX5p/6UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MDcyMDA2WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNDlmMmFmZjMyNmI0N2U2OTVlNGZjZjZkNWEwZjk1YWJm ZDJjYTEwNmI3ZmJjYmU4NzdhMDBiOGU2YzE1MzA0MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZfkoYdXAsrpLqkLijY8/UxX1Crru/QEBW49+D0ntJyzvQ qvQS8+qsHuJ/yd2mVMePoGc5jkkJ6pXNg2+omfg8nrTchw1TTPjiS3Sm5K6D0trl 1+r3QgnQ8dvh7WC5TpaD69VhnI3jnqU5m75R4qx+a9I3TLgNrWXTmHUEp6ImHe4g oainAvar+hU6VY/CE4iyOJnYKdI879zi1peVEVQPbAa6/qy2OH4kwoK9CbA28Ihz K/DZSlJQ9TBz5AHd/OvYZwMjsnC19LC23D29l0QCMpQufXG+Vtew2JQWW3FBmZg2 8aB5mywNN+Jh+uMmdSKqmg3p9xIBO0WBuMAY7YiRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUnKxWvhV46FWse2A1XOkNlp+55iIwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2IwNmZhMTRhLWFkMjQtNDkzOC1hYTZhLTEyYjczZTZiZTA1ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAK3gwDQYJKoZIhvcNAQELBQADggEBAB8py6j8W2GaJm8tYYuocih5 oY47CWHZYwDPuSb6svZmkWc3P94f3SNCuITsqOt+LmXiPjGlTyJPxL3bqPpRivI/ tlq90mdbBGyNR91ZWqwmPBwLkZS/ZKGV4ekHJ6KsouTcP4JkXf47wR1xYWZGt2wq ZyXqRGSUPfB0fbKhB6MvNA5IMSINlabe0VmzV0qUmnquxwWJSci9ApnxvIWHNOwq oUACZwvTG3wNDPj4hxUAYquFFUSs/MIWnNAeM6+upILRyKIF6tjMfsWD0PuNyQ2X aoZGFS0ZKwQ2CbeGQplsYEBnXsM6Jg37qJgxK35bcd61s700FcRxG1A4EJUtgdE= -----END CERTIFICATE-----Generated at Wed May 13 02:23:07 2026 by rpki-client