$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ba0145e5-61bb-4033-bd59-80ce1fa81d2c.roa File: ba0145e5-61bb-4033-bd59-80ce1fa81d2c.roa (raw, json) Hash identifier: DCAfTkFFUDoYs93Dy45aOLQlk4vl5/LNQXutcRIxix4= Subject key identifier: ED:E7:87:90:D7:46:B9:79:A3:4D:DF:42:95:87:B5:98:54:54:26:DC Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 49E59F6AB3FF8944C09F6EF2BE4158DF8C2A34D4 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ba0145e5-61bb-4033-bd59-80ce1fa81d2c.roa Signing time: Mon 04 May 2026 07:00:08 +0000 ROA not before: Mon 04 May 2026 07:00:08 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2ba4::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:e5:9f:6a:b3:ff:89:44:c0:9f:6e:f2:be:41:58:df:8c:2a:34:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: May 4 07:00:08 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=66da19cff27ab88a539815f36c02d8a8d8a3965959b6ae9faa58270563ea2cf5, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5f:35:4b:b6:ff:f5:0d:49:ae:11:a7:14:b2: d4:0f:64:6d:06:c4:8a:5a:0b:fe:cd:dd:e6:e1:34: 14:e0:d3:0a:a7:13:ec:cc:09:bb:ac:77:b2:3a:c6: 4a:c0:c0:a9:7d:2e:10:b0:fa:14:5b:74:48:d0:66: 53:e5:5b:50:5a:d5:29:08:64:18:cd:94:e5:2e:2b: be:30:c0:f0:8d:87:a5:5b:97:4f:2b:0c:ff:5c:50: aa:78:41:64:7d:6f:ef:51:56:be:96:d2:b2:99:43: 42:32:b1:dd:90:bd:c2:b0:0c:41:32:49:0e:08:ae: 23:4d:a9:ac:99:a2:9e:46:10:ec:3e:f2:5d:e3:bf: a8:a2:86:43:86:09:25:61:63:53:fd:3a:94:9f:2e: a4:73:25:f0:13:69:de:05:6c:ad:51:d5:13:51:02: c9:17:bb:25:ab:a7:ed:13:d0:62:50:31:1b:11:8d: 21:28:af:46:45:02:01:a9:8e:26:82:6b:e4:5e:ad: cb:21:09:85:d9:1e:18:2a:51:4e:6a:5b:d3:9e:d9: 25:78:cd:a0:18:44:3a:29:2b:23:35:65:77:b7:07: b9:ed:01:32:58:fa:14:60:e9:88:22:c5:a3:97:8f: 77:59:b0:f2:2c:ca:0f:7d:79:cd:fe:7e:76:7a:b3: 84:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:E7:87:90:D7:46:B9:79:A3:4D:DF:42:95:87:B5:98:54:54:26:DC X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ba0145e5-61bb-4033-bd59-80ce1fa81d2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2ba4::/46 Signature Algorithm: sha256WithRSAEncryption 1b:e4:9f:5d:9e:a3:c8:2a:b5:d3:d0:ca:44:95:c7:5e:e9:3a: 1d:38:81:80:7b:3f:1c:20:80:15:56:3e:c4:61:9a:ba:cc:da: 2c:3b:6a:1a:5c:32:c5:7d:cf:f4:3d:ca:4b:c0:4b:d3:29:1e: d7:8c:4a:3d:99:be:7f:98:c8:a7:8b:b0:c8:da:d7:65:ec:9e: 1e:0a:49:83:e4:03:02:91:c4:89:9c:3a:59:0c:d4:9a:36:a4: 8d:a1:11:4d:32:81:fd:7e:8d:50:28:80:fa:47:8a:e1:69:a9: 8b:63:9e:95:5d:fa:c0:c0:fb:38:cc:50:39:c9:11:b6:6f:c6: 0d:76:84:f0:fc:f4:f6:90:27:c6:4d:67:5a:da:11:7e:12:74: 34:8e:9b:af:4b:d4:60:9a:85:51:bd:51:55:6a:bf:3a:9c:12: bf:fa:63:82:86:c7:f5:1b:ef:f1:80:28:a4:3d:0e:ca:cb:aa: 8d:97:8e:b7:6a:c0:8c:fa:38:3b:3e:58:ae:86:7d:0a:d5:49: 96:e5:c7:73:83:c1:f5:b0:92:70:49:bf:4b:fc:af:41:e0:a4: 37:7b:08:fe:d2:c4:e5:4a:b7:6d:c1:0c:1b:1c:8f:0c:85:32: f9:fa:8d:fd:9d:c6:c7:03:4b:14:e5:e2:78:0e:ce:2f:46:a9: dd:ac:ef:2c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSeWfarP/iUTAn27yvkFY34wqNNQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MDcwMDA4WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NmRhMTljZmYyN2FiODhhNTM5ODE1ZjM2YzAyZDhhOGQ4 YTM5NjU5NTliNmFlOWZhYTU4MjcwNTYzZWEyY2Y1MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzXzVLtv/1DUmuEacUstQPZG0GxIpaC/7N3ebhNBTg0wqn E+zMCbusd7I6xkrAwKl9LhCw+hRbdEjQZlPlW1Ba1SkIZBjNlOUuK74wwPCNh6Vb l08rDP9cUKp4QWR9b+9RVr6W0rKZQ0Iysd2QvcKwDEEySQ4IriNNqayZop5GEOw+ 8l3jv6iihkOGCSVhY1P9OpSfLqRzJfATad4FbK1R1RNRAskXuyWrp+0T0GJQMRsR jSEor0ZFAgGpjiaCa+RercshCYXZHhgqUU5qW9Oe2SV4zaAYRDopKyM1ZXe3B7nt ATJY+hRg6YgixaOXj3dZsPIsyg99ec3+fnZ6s4RVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU7eeHkNdGuXmjTd9ClYe1mFRUJtwwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2JhMDE0NWU1LTYxYmItNDAzMy1iZDU5LTgwY2UxZmE4MWQyYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAK6QwDQYJKoZIhvcNAQELBQADggEBABvkn12eo8gqtdPQykSVx17p Oh04gYB7PxwggBVWPsRhmrrM2iw7ahpcMsV9z/Q9ykvAS9MpHteMSj2Zvn+YyKeL sMja12Xsnh4KSYPkAwKRxImcOlkM1Jo2pI2hEU0ygf1+jVAogPpHiuFpqYtjnpVd +sDA+zjMUDnJEbZvxg12hPD89PaQJ8ZNZ1raEX4SdDSOm69L1GCahVG9UVVqvzqc Er/6Y4KGx/Ub7/GAKKQ9DsrLqo2XjrdqwIz6ODs+WK6GfQrVSZblx3ODwfWwknBJ v0v8r0HgpDd7CP7SxOVKt23BDBscjwyFMvn6jf2dxscDSxTl4ngOzi9Gqd2s7yw= -----END CERTIFICATE-----Generated at Wed May 13 01:25:03 2026 by rpki-client