$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b453548e-d252-468f-82a5-37b3e6587010.roa File: b453548e-d252-468f-82a5-37b3e6587010.roa (raw, json) Hash identifier: Pklbe+Ka1iIYNuu2EWyvf4eu3iQW0uCSvWg4wApFc6A= Subject key identifier: 35:89:EB:C5:9E:A2:60:39:C9:79:4D:9A:17:42:C9:8B:61:5A:9D:86 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 29BBF2E0B2AD6820A236101BD51EC09B87802149 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b453548e-d252-468f-82a5-37b3e6587010.roa Signing time: Mon 04 May 2026 08:12:09 +0000 ROA not before: Mon 04 May 2026 08:12:09 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2ed8::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:bb:f2:e0:b2:ad:68:20:a2:36:10:1b:d5:1e:c0:9b:87:80:21:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: May 4 08:12:09 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=80db4f09ff55fd312cb7ff54aa7e5f0984b87395adbf919c9ee1f7c67da72a08, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:14:e5:4a:2e:c2:4f:c2:90:b2:64:44:cd:c3: 24:1c:b8:6e:65:ab:2b:82:b2:d8:38:64:29:0c:db: ae:d6:71:34:6e:83:53:26:aa:f8:ac:d5:b0:d1:74: 2d:21:85:99:16:ae:86:00:f2:23:3c:ec:bf:e5:dd: 7b:64:73:43:df:85:cc:23:d8:59:a2:91:bd:dd:ad: 4d:3e:52:26:00:45:d0:c2:8a:f3:cc:a8:a3:e2:05: 67:55:2a:68:77:dd:f9:a3:ba:ed:23:05:29:92:5d: 8d:32:d0:f1:9a:41:87:fe:d7:c1:58:8d:d1:39:67: 06:38:27:67:75:36:b7:66:7c:21:eb:24:4d:9e:47: 06:d6:bd:ec:1d:9f:b2:ee:79:3e:ac:c5:d6:e1:e8: cb:d2:65:90:70:6a:78:fb:b3:6d:36:48:c4:d5:f6: be:94:46:52:8e:23:00:12:a1:c8:eb:55:01:06:80: 0a:29:d7:d8:61:44:b9:f3:f3:8d:50:0e:35:54:7f: aa:1f:e9:8f:dc:63:97:4e:99:2d:a9:df:44:39:8c: b6:55:e5:d6:db:57:8f:0f:56:51:ad:77:68:a3:2b: 35:65:b3:75:12:a0:d8:b3:9c:91:6a:41:e4:36:d4: aa:61:34:4a:8e:fe:65:13:86:ab:b1:91:56:24:6b: d3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:89:EB:C5:9E:A2:60:39:C9:79:4D:9A:17:42:C9:8B:61:5A:9D:86 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b453548e-d252-468f-82a5-37b3e6587010.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2ed8::/46 Signature Algorithm: sha256WithRSAEncryption 9f:d4:9e:8d:67:07:ca:7e:01:91:a0:ac:02:e1:e7:25:8b:54: f9:4c:2b:26:da:7b:92:3c:82:f5:26:17:64:6f:73:56:9d:e6: a2:57:d6:c2:17:69:eb:1d:9f:99:5b:9c:75:cd:ed:a3:1b:c8: 11:63:8e:97:e8:28:9d:4d:66:83:db:c4:62:04:9c:c3:92:bb: 4c:eb:76:3b:7e:df:7a:9f:ad:1a:a4:48:db:d9:2f:9d:9c:c3: 0a:2c:10:fc:e2:12:ac:f7:63:a0:2c:25:27:d5:c9:b2:98:db: d1:bc:cb:ba:b0:e9:9f:d5:50:90:89:04:e8:bf:31:a9:45:a9: c4:f7:b1:80:34:c8:6d:f5:4a:5e:07:fa:b0:5b:42:2c:1d:6c: fb:6f:79:c1:a8:3e:8c:37:9b:b0:7f:f6:20:2c:5d:d2:db:80: 54:5c:fa:46:48:4b:6a:b6:10:2a:34:61:fc:d2:04:a8:20:68: 0b:de:a8:99:88:90:22:01:ce:ab:91:33:10:f9:81:8c:1c:b2: e5:49:82:1c:de:53:7c:83:8d:78:cc:d7:40:f7:df:0b:91:7b: 30:6c:82:07:82:d9:7b:55:05:6c:e2:6d:e1:d3:20:02:78:f5: 17:80:12:26:82:cf:f9:3c:8b:c5:bc:5b:ae:de:4a:95:6e:8e: ae:cb:66:20 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKbvy4LKtaCCiNhAb1R7Am4eAIUkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MDgxMjA5WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MGRiNGYwOWZmNTVmZDMxMmNiN2ZmNTRhYTdlNWYwOTg0 Yjg3Mzk1YWRiZjkxOWM5ZWUxZjdjNjdkYTcyYTA4MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChFOVKLsJPwpCyZETNwyQcuG5lqyuCstg4ZCkM267WcTRu g1Mmqvis1bDRdC0hhZkWroYA8iM87L/l3Xtkc0Pfhcwj2Fmikb3drU0+UiYARdDC ivPMqKPiBWdVKmh33fmjuu0jBSmSXY0y0PGaQYf+18FYjdE5ZwY4J2d1NrdmfCHr JE2eRwbWvewdn7LueT6sxdbh6MvSZZBwanj7s202SMTV9r6URlKOIwASocjrVQEG gAop19hhRLnz841QDjVUf6of6Y/cY5dOmS2p30Q5jLZV5dbbV48PVlGtd2ijKzVl s3USoNiznJFqQeQ21KphNEqO/mUThquxkVYka9ONAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUNYnrxZ6iYDnJeU2aF0LJi2FanYYwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2I0NTM1NDhlLWQyNTItNDY4Zi04MmE1LTM3YjNlNjU4NzAxMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAALtgwDQYJKoZIhvcNAQELBQADggEBAJ/Uno1nB8p+AZGgrALh5yWL VPlMKybae5I8gvUmF2Rvc1ad5qJX1sIXaesdn5lbnHXN7aMbyBFjjpfoKJ1NZoPb xGIEnMOSu0zrdjt+33qfrRqkSNvZL52cwwosEPziEqz3Y6AsJSfVybKY29G8y7qw 6Z/VUJCJBOi/MalFqcT3sYA0yG31Sl4H+rBbQiwdbPtvecGoPow3m7B/9iAsXdLb gFRc+kZIS2q2ECo0YfzSBKggaAveqJmIkCIBzquRMxD5gYwcsuVJghzeU3yDjXjM 10D33wuRezBsggeC2XtVBWzibeHTIAJ49ReAEiaCz/k8i8W8W67eSpVujq7LZiA= -----END CERTIFICATE-----Generated at Wed May 13 03:11:22 2026 by rpki-client