$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b26ca5e7-00a0-4769-826b-9a8002d047cb.roa File: b26ca5e7-00a0-4769-826b-9a8002d047cb.roa (raw, json) Hash identifier: qu7PdhZCkyJ3c3li4Dymim54/SDW/v+w8YivY5Jw0js= Subject key identifier: 89:BA:CE:A0:05:E4:56:F7:B6:C0:57:00:C4:E8:8D:86:01:F8:A6:89 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 644DCEF308B65FF616761325F945057F218BF9AB Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b26ca5e7-00a0-4769-826b-9a8002d047cb.roa Signing time: Mon 04 May 2026 12:00:58 +0000 ROA not before: Mon 04 May 2026 12:00:58 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3a20::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:4d:ce:f3:08:b6:5f:f6:16:76:13:25:f9:45:05:7f:21:8b:f9:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: May 4 12:00:58 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=81a7437cba9bd0c2ed9ce7a2d28c5c61a215bc804e3427f112650d8cfea60b89, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9a:ea:f6:32:1f:b4:b3:53:d0:c8:3a:16:97: 9d:f3:bc:91:4e:8b:09:c1:20:66:77:e9:bd:34:17: c2:51:8f:d8:ba:e5:f5:9b:20:51:4a:0e:0a:21:07: d7:95:2f:61:a5:e6:a1:11:dd:0a:b4:c8:d2:7b:b3: 46:b4:e6:80:92:c9:72:36:78:80:19:8f:15:e9:27: 99:ad:07:b5:86:40:83:ab:17:d5:8e:73:1c:65:ee: 77:0f:9c:fa:54:ef:f2:4c:87:d4:51:6d:51:d7:72: bc:7c:22:f4:69:1b:89:2e:dc:80:3c:94:b8:70:60: d4:e0:87:e0:1d:47:8e:aa:d1:c0:c2:2b:88:c3:6f: ff:c9:1e:fe:eb:83:3d:85:d1:40:15:8d:21:9c:1e: f1:91:ff:72:5b:96:fa:87:7c:6d:2a:e0:e7:10:4f: e2:ec:6c:d4:40:0f:70:13:68:99:75:27:df:c0:db: e9:2e:45:4f:23:b0:85:4d:ac:7a:38:ca:e9:bc:d9: f3:51:d3:36:75:d3:b6:7e:dc:45:f9:8d:44:3c:8b: 48:d1:5f:ef:db:39:50:65:f5:2d:4b:a9:0e:da:00: 22:30:1b:2a:69:58:3a:8d:ed:ed:01:be:f0:5e:05: be:5f:95:29:33:e5:43:95:c0:5c:81:7c:c8:5c:2e: a5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:BA:CE:A0:05:E4:56:F7:B6:C0:57:00:C4:E8:8D:86:01:F8:A6:89 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b26ca5e7-00a0-4769-826b-9a8002d047cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3a20::/47 Signature Algorithm: sha256WithRSAEncryption 15:95:72:2e:80:ae:02:9b:88:6a:2b:c7:f9:85:f4:a5:2b:36: 4e:4a:29:e8:20:82:ea:43:d4:8f:d3:d4:4f:cc:69:df:27:f9: e2:cc:2e:88:f4:a2:e7:30:ca:c3:52:e0:47:a8:d9:c2:3b:90: 50:31:d0:a0:3b:d7:95:e2:b5:92:48:62:44:b9:5d:4e:93:3b: d1:1c:e3:ae:4a:f4:bd:a2:d6:4f:c3:03:a3:9d:0b:62:40:4f: 34:dc:26:7f:58:11:14:1a:fe:5d:fa:0b:e1:c6:4d:aa:50:bf: 74:a9:8d:30:8f:7b:ea:c5:a5:0e:63:18:b3:26:34:e0:35:45: f3:87:19:f0:9b:b5:98:76:b5:8a:e1:4d:7d:a8:62:57:c1:71: 0f:69:ba:ee:9c:36:db:50:d0:b1:ce:ce:78:8b:bd:8c:0b:87: b1:06:78:0c:b2:f1:46:74:5b:b1:0b:ea:a7:d2:c5:a0:46:7d: d2:a4:b1:1e:06:3a:3d:fa:2c:bb:d9:c4:38:73:d8:ce:38:8a: 14:c2:a8:98:6f:95:55:10:27:af:ed:d6:fd:a8:87:83:f2:6e: 76:9c:be:30:05:10:8c:65:0b:ab:66:ba:ff:35:56:34:22:8b: e6:38:3b:69:f1:ef:64:d4:d0:de:33:8d:6a:dc:24:61:07:e8: 96:07:60:65 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZE3O8wi2X/YWdhMl+UUFfyGL+aswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MTIwMDU4WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MWE3NDM3Y2JhOWJkMGMyZWQ5Y2U3YTJkMjhjNWM2MWEy MTViYzgwNGUzNDI3ZjExMjY1MGQ4Y2ZlYTYwYjg5MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmmur2Mh+0s1PQyDoWl53zvJFOiwnBIGZ36b00F8JRj9i6 5fWbIFFKDgohB9eVL2Gl5qER3Qq0yNJ7s0a05oCSyXI2eIAZjxXpJ5mtB7WGQIOr F9WOcxxl7ncPnPpU7/JMh9RRbVHXcrx8IvRpG4ku3IA8lLhwYNTgh+AdR46q0cDC K4jDb//JHv7rgz2F0UAVjSGcHvGR/3JblvqHfG0q4OcQT+LsbNRAD3ATaJl1J9/A 2+kuRU8jsIVNrHo4yum82fNR0zZ107Z+3EX5jUQ8i0jRX+/bOVBl9S1LqQ7aACIw GyppWDqN7e0BvvBeBb5flSkz5UOVwFyBfMhcLqVfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUibrOoAXkVve2wFcAxOiNhgH4pokwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2IyNmNhNWU3LTAwYTAtNDc2OS04MjZiLTlhODAwMmQwNDdjYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAOiAwDQYJKoZIhvcNAQELBQADggEBABWVci6ArgKbiGorx/mF9KUr Nk5KKegggupD1I/T1E/Mad8n+eLMLoj0oucwysNS4Eeo2cI7kFAx0KA715XitZJI YkS5XU6TO9Ec465K9L2i1k/DA6OdC2JATzTcJn9YERQa/l36C+HGTapQv3SpjTCP e+rFpQ5jGLMmNOA1RfOHGfCbtZh2tYrhTX2oYlfBcQ9puu6cNttQ0LHOzniLvYwL h7EGeAyy8UZ0W7EL6qfSxaBGfdKksR4GOj36LLvZxDhz2M44ihTCqJhvlVUQJ6/t 1v2oh4PybnacvjAFEIxlC6tmuv81VjQii+Y4O2nx72TU0N4zjWrcJGEH6JYHYGU= -----END CERTIFICATE-----Generated at Wed May 13 00:59:19 2026 by rpki-client