$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ba4ea8dc-e488-417f-af08-daf6ad6362c1.roa File: ba4ea8dc-e488-417f-af08-daf6ad6362c1.roa (raw, json) Hash identifier: JWmYKonorE/eYkkzX63JM7VCYB9OSbem6fNHBAabrGQ= Subject key identifier: F3:ED:64:F2:89:4B:D3:9A:FD:E7:D1:48:75:89:A7:18:40:88:A2:84 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 5695D72C6DB28419F4C50DFC8E62C158643F0BB6 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ba4ea8dc-e488-417f-af08-daf6ad6362c1.roa Signing time: Mon 04 May 2026 07:10:08 +0000 ROA not before: Mon 04 May 2026 07:10:08 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:37f2::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:95:d7:2c:6d:b2:84:19:f4:c5:0d:fc:8e:62:c1:58:64:3f:0b:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: May 4 07:10:08 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=9e7e3e03d554dec880c7adfcc753f15071e7cb8cb0d7a5c1abd4fbb83163d36e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:72:7f:bb:8f:88:65:07:3d:f6:74:79:58:61: 77:34:e4:85:46:5f:71:ac:89:e8:44:a0:2a:e5:6b: 47:a0:ba:05:23:7a:c0:f5:69:50:b3:70:4f:18:d6: bf:e4:38:6f:81:94:d4:e8:ff:03:a7:f3:30:6f:e4: 02:8f:e2:e8:0e:0a:b1:0f:cb:7d:6f:c5:a5:3e:6c: 27:8b:0f:e4:0c:f8:16:54:50:10:33:26:d7:39:ad: 9e:b3:b5:a2:22:d4:93:94:88:3e:d0:ca:31:c6:52: 32:b7:e2:ed:8e:49:6f:59:df:14:c2:b2:f9:b8:1b: ae:5d:7e:38:39:09:88:ac:4f:c0:dd:f5:80:dd:9f: 2e:47:3f:7b:df:1b:01:d7:b2:dd:6d:5e:77:f1:f4: a5:15:f6:ea:13:50:b9:ad:1a:7c:4b:24:30:b6:ab: 5e:1d:8b:79:f4:93:5a:70:10:3d:25:58:73:8d:e9: d2:b5:a6:3e:9b:9f:7c:79:a6:f7:1a:c6:9a:71:56: ee:20:4e:93:5c:c7:46:e6:5b:26:b8:88:04:1e:d7: 25:ad:f3:14:ac:79:70:2f:b6:e6:a9:e0:33:29:3e: c4:79:c2:9c:43:5c:ce:12:3b:10:fa:24:6e:9e:68: db:1c:0f:f2:3e:56:bc:f4:d0:8f:66:36:7f:0d:fe: 48:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:ED:64:F2:89:4B:D3:9A:FD:E7:D1:48:75:89:A7:18:40:88:A2:84 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ba4ea8dc-e488-417f-af08-daf6ad6362c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:37f2::/47 Signature Algorithm: sha256WithRSAEncryption 2d:11:32:7b:ce:4d:5d:12:64:9a:d1:55:ce:e8:7d:c0:c6:1f: 00:96:13:00:07:34:79:04:fa:ab:4b:9a:2e:26:24:76:d9:c8: 73:48:59:c1:54:8d:15:2a:10:19:97:f5:89:43:45:b1:52:64: ea:c7:c9:88:84:e7:b1:06:77:a0:cb:e8:b6:b7:7d:8a:cc:d0: f8:a4:44:05:45:66:f0:cf:36:39:d6:b1:95:6e:fd:50:dd:6e: 40:bf:81:54:fa:74:a1:8e:2d:d6:d4:fe:03:f4:0f:4f:d1:74: 0f:80:58:de:6a:36:9d:f6:f2:bd:ba:74:b8:fc:41:85:fa:b3: c2:a1:0a:1c:65:fc:f4:03:8a:f7:c7:29:93:e2:ef:e8:6f:80: 77:df:e9:15:2b:4b:04:63:d7:0c:5b:80:72:c5:0d:25:27:6e: 5f:38:1b:44:92:cb:98:f7:2f:45:0e:14:c3:0e:09:30:e7:12: 27:5b:67:53:19:78:7a:b3:79:f3:fb:01:8f:69:5f:c8:c4:96: 8e:fd:b3:c1:7c:81:12:82:19:b2:e9:16:e7:67:03:8c:80:f2: d9:bd:32:60:10:61:67:56:9f:23:db:b7:41:84:07:e9:f1:69: 4d:60:17:79:4a:0a:b6:f6:93:3f:3b:f7:e0:7c:1e:5c:84:44: e2:6b:ab:3c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUVpXXLG2yhBn0xQ38jmLBWGQ/C7YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MDcxMDA4WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZTdlM2UwM2Q1NTRkZWM4ODBjN2FkZmNjNzUzZjE1MDcx ZTdjYjhjYjBkN2E1YzFhYmQ0ZmJiODMxNjNkMzZlMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPcn+7j4hlBz32dHlYYXc05IVGX3GsiehEoCrla0egugUj esD1aVCzcE8Y1r/kOG+BlNTo/wOn8zBv5AKP4ugOCrEPy31vxaU+bCeLD+QM+BZU UBAzJtc5rZ6ztaIi1JOUiD7QyjHGUjK34u2OSW9Z3xTCsvm4G65dfjg5CYisT8Dd 9YDdny5HP3vfGwHXst1tXnfx9KUV9uoTULmtGnxLJDC2q14di3n0k1pwED0lWHON 6dK1pj6bn3x5pvcaxppxVu4gTpNcx0bmWya4iAQe1yWt8xSseXAvtuap4DMpPsR5 wpxDXM4SOxD6JG6eaNscD/I+Vrz00I9mNn8N/kiRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU8+1k8olL05r959FIdYmnGECIooQwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2JhNGVhOGRjLWU0ODgtNDE3Zi1hZjA4LWRhZjZhZDYzNjJjMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAN/IwDQYJKoZIhvcNAQELBQADggEBAC0RMnvOTV0SZJrRVc7ofcDG HwCWEwAHNHkE+qtLmi4mJHbZyHNIWcFUjRUqEBmX9YlDRbFSZOrHyYiE57EGd6DL 6La3fYrM0PikRAVFZvDPNjnWsZVu/VDdbkC/gVT6dKGOLdbU/gP0D0/RdA+AWN5q Np328r26dLj8QYX6s8KhChxl/PQDivfHKZPi7+hvgHff6RUrSwRj1wxbgHLFDSUn bl84G0SSy5j3L0UOFMMOCTDnEidbZ1MZeHqzefP7AY9pX8jElo79s8F8gRKCGbLp FudnA4yA8tm9MmAQYWdWnyPbt0GEB+nxaU1gF3lKCrb2kz879+B8HlyEROJrqzw= -----END CERTIFICATE-----Generated at Wed May 13 01:22:04 2026 by rpki-client