$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bbfe378a-02c7-4e75-9fb5-21b60ad181c8.roa File: bbfe378a-02c7-4e75-9fb5-21b60ad181c8.roa (raw, json) Hash identifier: 9MvRSzbJ5ISHomNwIvKo2f5Z1kbMxUgmF7SnXsU6UJ4= Subject key identifier: 8D:56:B2:CB:DF:26:C3:4F:7D:94:08:C6:05:F0:23:58:BB:22:AE:32 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 61DC75D7AF06AC05405EC5A72337F682B10F85 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bbfe378a-02c7-4e75-9fb5-21b60ad181c8.roa Signing time: Mon 04 May 2026 07:12:04 +0000 ROA not before: Mon 04 May 2026 07:12:04 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3344::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:dc:75:d7:af:06:ac:05:40:5e:c5:a7:23:37:f6:82:b1:0f:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: May 4 07:12:04 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=ca6f54b8cac3e9dc9985c520e7447e597d01c19e4e44b1f157141beee5c6287d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fa:fd:74:bd:b1:38:21:3b:1d:75:c1:fa:58: ef:76:61:7d:fe:f6:93:c6:fc:88:79:79:ff:2a:8a: 92:2c:08:9f:2d:dd:c5:71:cf:8f:c9:38:aa:8a:aa: 68:1c:39:7d:31:ff:3d:2b:99:65:38:48:c3:3c:04: e2:51:69:fc:f5:97:52:a1:a0:36:5a:9a:1d:81:7c: 52:05:78:e8:34:18:3a:68:2d:45:5c:9b:89:c5:b5: d4:f6:66:ba:ae:13:60:9e:6f:2e:c1:c2:6b:e9:3f: 2d:93:13:06:1c:e1:0d:04:91:ad:c7:3c:0b:67:dd: f9:45:b0:15:05:ea:87:68:9c:0f:ac:ab:b3:71:0e: 5d:4a:e3:38:35:50:b9:b7:4e:23:50:fb:95:ab:f1: 3f:a4:6f:66:6e:02:38:05:b2:a4:05:19:9a:6c:ed: bf:d4:6f:74:6d:ee:0c:b0:d1:78:e1:23:d1:e1:c2: 66:43:88:d3:69:7c:ec:0b:24:92:04:19:df:af:91: 68:02:d7:cc:f5:9f:06:54:eb:f2:30:d2:a4:2a:9d: 9a:16:28:3c:65:40:fd:dc:e4:47:d8:18:cc:9c:3f: 4c:ac:8d:a4:68:b0:93:cd:e0:90:f7:3e:9e:14:b6: c8:c8:bf:82:6b:a8:24:93:06:d0:d8:65:00:5d:a1: 9f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:56:B2:CB:DF:26:C3:4F:7D:94:08:C6:05:F0:23:58:BB:22:AE:32 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bbfe378a-02c7-4e75-9fb5-21b60ad181c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3344::/47 Signature Algorithm: sha256WithRSAEncryption 40:ab:da:c8:2a:80:51:5c:f3:29:c0:12:6a:7e:0c:6a:20:e4: d5:35:f4:9a:c6:ff:b1:60:b1:c2:e1:95:4b:0a:23:90:2d:c0: 0c:4f:b6:da:d7:b5:64:6b:c3:b6:87:4d:b2:3f:cd:54:c5:6c: ee:5a:f4:89:63:89:84:44:58:22:52:7e:c1:47:0b:eb:62:ab: 9f:ae:36:a6:29:d0:ee:bc:d6:a1:e5:39:f7:52:85:7d:f4:46: 99:e9:ba:0a:9c:54:7f:c4:41:ac:03:5a:a2:18:3c:07:58:46: b8:71:3d:96:7d:12:79:93:29:ba:d4:bb:03:aa:8f:57:e9:5e: 5c:95:5c:b2:5c:f4:4d:e1:d3:87:6b:9f:18:b0:a2:73:36:53: c3:6d:f9:e2:23:c1:f4:06:08:c7:48:a5:67:85:3d:ff:0e:8c: 2b:32:08:9e:ad:c4:3b:8f:d6:d1:92:fe:c0:44:c8:c4:4d:f8: a0:53:53:c9:9a:a9:49:ab:f1:28:75:4f:d2:2d:f6:db:b9:8c: 17:7a:87:2a:3a:d0:a0:79:c6:4e:cd:02:0f:2b:73:02:b8:25: a3:e1:8f:16:55:1a:f8:05:62:1d:ff:58:60:e0:a3:ed:2e:4d: 99:8c:f0:8c:e5:65:94:10:f1:fc:e3:30:11:5a:34:4e:01:cc: 49:f5:37:bb -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgITYdx1168GrAVAXsWnIzf2grEPhTANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI1NTEyMDkwMjdmNWU3YWQ1NGUwNGYwNDJlNGFjMGU5ZTY1 YzU2ZTU1Yzc3NDc4ZDJjZTAeFw0yNjA1MDQwNzEyMDRaFw0yNjA4MDIyMzU5NTla MHoxSTBHBgNVBAUTQGNhNmY1NGI4Y2FjM2U5ZGM5OTg1YzUyMGU3NDQ3ZTU5N2Qw MWMxOWU0ZTQ0YjFmMTU3MTQxYmVlZTVjNjI4N2QxLTArBgNVBAMTJDlmMjMwZmE5 LWFhMmYtNDAyMC1hZTJhLTFhNjAzNzQwODRiODCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAL76/XS9sTghOx11wfpY73Zhff72k8b8iHl5/yqKkiwIny3d xXHPj8k4qoqqaBw5fTH/PSuZZThIwzwE4lFp/PWXUqGgNlqaHYF8UgV46DQYOmgt RVybicW11PZmuq4TYJ5vLsHCa+k/LZMTBhzhDQSRrcc8C2fd+UWwFQXqh2icD6yr s3EOXUrjODVQubdOI1D7lavxP6RvZm4COAWypAUZmmztv9RvdG3uDLDReOEj0eHC ZkOI02l87AskkgQZ36+RaALXzPWfBlTr8jDSpCqdmhYoPGVA/dzkR9gYzJw/TKyN pGiwk83gkPc+nhS2yMi/gmuoJJMG0NhlAF2hn7sCAwEAAaOCArQwggKwMB0GA1Ud DgQWBBSNVrLL3ybDT32UCMYF8CNYuyKuMjAfBgNVHSMEGDAWgBTo88Ug4g7yXTq3 oha7FAQxajc48TAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv ZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzk5ZjhmZWQyLTI5 MmItNDcyMi1iOTI4LWZlZTdiZjBhNTkxMC81NTEyMDkwMjdmNWU3YWQ1NGUwNGYw NDJlNGFjMGU5ZTY1YzU2ZTU1Yzc3NDc4ZDJjZS5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9lNzUxOGFmNS1hMzQzLTQyOGQtYmY3OC1mOTgy YjZlNjA1MDUvYmJmZTM3OGEtMDJjNy00ZTc1LTlmYjUtMjFiNjBhZDE4MWM4LnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgt Zjk4MmI2ZTYwNTA1L1huclZUZ1R3UXVTc0RwNWx4VzVWeDNSNDBzNC5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHASYAkAAzRDANBgkqhkiG9w0BAQsFAAOCAQEAQKvayCqAUVzzKcASan4MaiDk 1TX0msb/sWCxwuGVSwojkC3ADE+22te1ZGvDtodNsj/NVMVs7lr0iWOJhERYIlJ+ wUcL62Krn642pinQ7rzWoeU591KFffRGmem6CpxUf8RBrANaohg8B1hGuHE9ln0S eZMputS7A6qPV+leXJVcslz0TeHTh2ufGLCiczZTw2354iPB9AYIx0ilZ4U9/w6M KzIInq3EO4/W0ZL+wETIxE34oFNTyZqpSavxKHVP0i3227mMF3qHKjrQoHnGTs0C DytzArglo+GPFlUa+AViHf9YYOCj7S5NmYzwjOVllBDx/OMwEVo0TgHMSfU3uw== -----END CERTIFICATE-----Generated at Wed May 13 00:59:11 2026 by rpki-client