$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b7fab107-3681-488f-91ac-f88f019c6582.roa File: b7fab107-3681-488f-91ac-f88f019c6582.roa (raw, json) Hash identifier: w6/u/U+5huAeNf5e88R8edsLLdZYhVYYKXbjbNEopRs= Subject key identifier: 09:DE:CA:88:BF:16:06:2F:4E:74:5D:E8:9F:1E:AA:D2:7E:1E:A1:DE Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 6DF06A8509AD2CCA32E914B95178A4B5987BAE48 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b7fab107-3681-488f-91ac-f88f019c6582.roa Signing time: Mon 04 May 2026 02:20:42 +0000 ROA not before: Mon 04 May 2026 02:20:42 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:33a0::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:f0:6a:85:09:ad:2c:ca:32:e9:14:b9:51:78:a4:b5:98:7b:ae:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: May 4 02:20:42 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=539460c7cf872ddcae7cfbdfefa61c9c26d25d2929d7aed7819a378290b855e5, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b4:34:d3:10:f5:f0:fb:cb:a3:2c:b8:79:5c: 84:e9:1c:7f:bd:5b:72:7d:78:ed:94:60:d7:b0:91: ef:ca:25:f7:23:2c:c3:6d:f9:ad:18:50:be:68:02: 2d:45:70:f1:3e:cd:f8:f7:73:67:b6:ce:b3:3a:3a: 1a:7e:f8:fb:33:b3:24:19:c7:c5:55:39:31:9f:66: 0c:94:36:f4:52:6e:e0:bc:90:e5:1d:e1:74:d1:5f: dc:08:38:36:cd:65:58:aa:9a:92:e6:7b:c8:d8:e3: 23:3b:56:1c:1d:6c:7f:fe:29:c0:bf:73:bf:48:85: 32:7b:8e:4f:78:95:80:87:5a:3f:0a:5f:79:53:67: 8b:cb:b6:95:e8:fd:a0:8a:5b:3e:7c:c1:c2:e9:da: b3:2f:3f:e4:9b:fa:0f:c6:f3:3b:e4:fa:f4:f3:3e: 7b:23:ba:60:af:ce:21:9d:3a:b1:fb:cf:99:01:2a: e6:42:c7:87:54:fe:b9:5f:91:ca:3a:bc:4a:f1:2f: 62:5b:96:5c:41:b2:3d:99:8a:f7:cc:d9:81:86:4d: 86:fd:e9:f2:72:01:06:17:bf:4c:68:eb:c8:ea:9f: af:a1:86:4e:90:ee:f5:83:8e:a1:14:95:e3:5e:d6: 40:0b:2f:fa:66:5d:00:e5:dd:c8:c9:36:1d:a8:09: 4b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:DE:CA:88:BF:16:06:2F:4E:74:5D:E8:9F:1E:AA:D2:7E:1E:A1:DE X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b7fab107-3681-488f-91ac-f88f019c6582.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:33a0::/46 Signature Algorithm: sha256WithRSAEncryption 51:4d:39:b6:9e:90:dc:8c:f1:18:5a:a6:66:ba:16:94:43:62: 7b:80:05:8d:91:58:be:1f:96:0d:fc:c0:dc:8c:be:18:9c:27: 80:17:8c:39:5e:b1:c1:40:89:2c:7f:58:50:24:fb:7a:6d:13: 22:06:ef:5d:87:88:f4:5b:f4:06:af:8d:a0:1c:de:4b:b7:32: fa:2e:26:04:29:ce:5f:3a:39:ab:3f:26:0c:23:b7:c8:70:f7: fe:a4:93:bb:55:fd:72:ba:36:ce:a0:3b:7f:e6:d1:f8:ae:68: 07:02:df:76:17:33:c3:20:33:d6:34:5e:72:08:8a:c4:51:78: 09:98:a6:d1:94:ed:1f:76:09:e7:6b:67:fb:0d:20:25:4b:3f: 7b:8b:d1:4f:cd:3e:cf:e8:b9:ef:3b:f7:91:18:0e:0b:bb:03: fe:06:8d:bc:6f:29:9d:4b:cd:67:ef:e4:8f:e2:d9:f5:74:46: 7e:b5:cb:fb:9d:d3:02:09:06:1b:55:46:bf:33:81:ec:a9:e8: b8:0e:33:2e:1f:14:d5:ea:67:19:e7:61:0d:f1:1d:28:e8:04: 23:a5:47:73:69:94:61:30:1b:5e:6d:55:af:d6:34:79:8b:99: f7:dd:74:d5:55:3d:75:ca:10:16:2b:95:2d:ca:c3:00:5f:bb: 1d:97:c3:8a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUbfBqhQmtLMoy6RS5UXiktZh7rkgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MDIyMDQyWhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1Mzk0NjBjN2NmODcyZGRjYWU3Y2ZiZGZlZmE2MWM5YzI2 ZDI1ZDI5MjlkN2FlZDc4MTlhMzc4MjkwYjg1NWU1MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4tDTTEPXw+8ujLLh5XITpHH+9W3J9eO2UYNewke/KJfcj LMNt+a0YUL5oAi1FcPE+zfj3c2e2zrM6Ohp++PszsyQZx8VVOTGfZgyUNvRSbuC8 kOUd4XTRX9wIODbNZViqmpLme8jY4yM7VhwdbH/+KcC/c79IhTJ7jk94lYCHWj8K X3lTZ4vLtpXo/aCKWz58wcLp2rMvP+Sb+g/G8zvk+vTzPnsjumCvziGdOrH7z5kB KuZCx4dU/rlfkco6vErxL2JbllxBsj2ZivfM2YGGTYb96fJyAQYXv0xo68jqn6+h hk6Q7vWDjqEUleNe1kALL/pmXQDl3cjJNh2oCUtfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUCd7KiL8WBi9OdF3onx6q0n4eod4wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2I3ZmFiMTA3LTM2ODEtNDg4Zi05MWFjLWY4OGYwMTljNjU4Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAM6AwDQYJKoZIhvcNAQELBQADggEBAFFNObaekNyM8Rhapma6FpRD YnuABY2RWL4flg38wNyMvhicJ4AXjDlescFAiSx/WFAk+3ptEyIG712HiPRb9Aav jaAc3ku3MvouJgQpzl86Oas/Jgwjt8hw9/6kk7tV/XK6Ns6gO3/m0fiuaAcC33YX M8MgM9Y0XnIIisRReAmYptGU7R92CedrZ/sNICVLP3uL0U/NPs/oue8795EYDgu7 A/4GjbxvKZ1LzWfv5I/i2fV0Rn61y/ud0wIJBhtVRr8zgeyp6LgOMy4fFNXqZxnn YQ3xHSjoBCOlR3NplGEwG15tVa/WNHmLmffddNVVPXXKEBYrlS3KwwBfux2Xw4o= -----END CERTIFICATE-----Generated at Wed May 13 04:52:19 2026 by rpki-client