$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/be8c9832-5123-4435-af83-d3adfe284b87.roa File: be8c9832-5123-4435-af83-d3adfe284b87.roa (raw, json) Hash identifier: LOvf1L265WNdgZR97PWvd5EzOV9cNMbOMUngak88Q0E= Subject key identifier: D7:E9:B8:24:27:7F:30:74:36:C1:76:8F:B8:43:72:A2:40:0A:2F:0B Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 7C5834E529DABB1683E5917F86735085CCCA676C Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/be8c9832-5123-4435-af83-d3adfe284b87.roa Signing time: Mon 04 May 2026 11:20:45 +0000 ROA not before: Mon 04 May 2026 11:20:45 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2bd0::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:58:34:e5:29:da:bb:16:83:e5:91:7f:86:73:50:85:cc:ca:67:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: May 4 11:20:45 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=32a1da781cb382c6933f98b510c9272659a20db4f4bbba9f8e02d39111635a8f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:03:e0:24:60:9b:78:50:ef:5b:23:d3:fe:96: 1e:10:2f:d3:5a:14:2c:02:f8:a4:12:2c:11:2e:17: 05:1b:2f:59:e5:0e:15:46:b2:b9:56:6a:78:4a:01: a0:0d:af:19:9e:47:09:f9:03:3e:e2:4d:7b:03:ee: 34:89:dc:85:0b:65:c6:16:7f:d0:20:57:bf:f9:18: 08:53:1f:1c:81:ca:af:cf:f6:12:70:fa:1a:58:c0: ee:35:d0:49:f8:d8:fb:b4:63:30:5f:56:bb:cc:96: 78:fd:bf:c6:91:1b:4a:d5:ff:4c:81:31:08:a3:df: 4b:e3:74:04:9b:f8:c5:81:08:b0:7f:a1:46:42:0a: eb:32:35:71:91:ff:68:e8:87:9b:25:64:04:f3:d1: b9:5d:0f:d8:eb:ed:08:36:a2:27:47:dd:fd:6f:84: ce:65:04:16:da:cc:03:e9:28:ee:79:13:0f:96:24: be:5c:b6:94:ca:a1:a6:d2:fa:4d:85:91:a9:72:e6: 45:21:98:7b:45:1d:da:59:20:07:3c:f6:7e:cf:e4: 2e:b5:0d:2e:92:ea:d9:ce:f8:63:76:21:08:00:4a: 50:88:80:b9:20:bb:4a:76:db:f7:40:67:bd:f9:06: 59:f3:2a:ec:ac:a4:a4:e8:6b:df:4a:ed:0c:70:1d: b8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:E9:B8:24:27:7F:30:74:36:C1:76:8F:B8:43:72:A2:40:0A:2F:0B X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/be8c9832-5123-4435-af83-d3adfe284b87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2bd0::/45 Signature Algorithm: sha256WithRSAEncryption 17:d0:66:48:1a:24:33:c9:1d:21:4f:26:2e:68:60:80:ef:26: cb:a6:2c:14:9f:d2:cc:43:9a:22:70:94:54:cc:5f:73:17:90: 8a:a4:61:49:1d:dd:22:cd:2a:43:fe:5b:09:c2:c8:77:65:53: bc:b9:02:fa:ac:5b:ab:c8:57:48:8f:32:39:23:91:ad:84:79: c8:ce:25:5e:6d:39:fd:51:8c:cd:64:8e:98:3e:a9:18:76:58: 37:dd:c8:d6:4c:0d:f0:8a:e3:3f:61:f9:98:44:2c:b7:c5:4f: 9b:d0:b3:d1:c0:72:c3:d2:02:38:bf:2d:f8:93:7b:50:09:0c: b9:ea:1e:26:1f:3b:07:3a:b1:b2:dc:c6:52:64:d9:85:05:39: 74:42:32:39:0e:11:27:c2:e5:6c:67:15:cf:a5:f1:47:ff:eb: 2a:b2:cd:9a:b0:80:94:9a:e5:c7:92:70:45:32:10:fc:ac:54: 16:b7:d5:f1:4d:37:22:3d:33:5d:90:98:cd:e5:a7:4f:ae:51: ba:b4:23:df:63:f1:10:ff:ff:62:45:16:02:c7:7d:99:78:9e: 05:8a:92:e7:8f:dc:d1:a6:f6:fd:e4:b1:19:23:d0:51:ce:2d: fc:2c:85:2c:da:85:10:6e:4f:8a:56:c1:13:91:fe:8d:78:86: f5:ca:91:cb -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfFg05SnauxaD5ZF/hnNQhczKZ2wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTA0MTEyMDQ1WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMmExZGE3ODFjYjM4MmM2OTMzZjk4YjUxMGM5MjcyNjU5 YTIwZGI0ZjRiYmJhOWY4ZTAyZDM5MTExNjM1YThmMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVA+AkYJt4UO9bI9P+lh4QL9NaFCwC+KQSLBEuFwUbL1nl DhVGsrlWanhKAaANrxmeRwn5Az7iTXsD7jSJ3IULZcYWf9AgV7/5GAhTHxyByq/P 9hJw+hpYwO410En42Pu0YzBfVrvMlnj9v8aRG0rV/0yBMQij30vjdASb+MWBCLB/ oUZCCusyNXGR/2joh5slZATz0bldD9jr7Qg2oidH3f1vhM5lBBbazAPpKO55Ew+W JL5ctpTKoabS+k2Fkaly5kUhmHtFHdpZIAc89n7P5C61DS6S6tnO+GN2IQgASlCI gLkgu0p22/dAZ735BlnzKuyspKToa99K7QxwHbiHAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU1+m4JCd/MHQ2wXaPuENyokAKLwswHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2JlOGM5ODMyLTUxMjMtNDQzNS1hZjgzLWQzYWRmZTI4NGI4Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAAK9AwDQYJKoZIhvcNAQELBQADggEBABfQZkgaJDPJHSFPJi5oYIDv JsumLBSf0sxDmiJwlFTMX3MXkIqkYUkd3SLNKkP+WwnCyHdlU7y5AvqsW6vIV0iP Mjkjka2EecjOJV5tOf1RjM1kjpg+qRh2WDfdyNZMDfCK4z9h+ZhELLfFT5vQs9HA csPSAji/LfiTe1AJDLnqHiYfOwc6sbLcxlJk2YUFOXRCMjkOESfC5WxnFc+l8Uf/ 6yqyzZqwgJSa5ceScEUyEPysVBa31fFNNyI9M12QmM3lp0+uUbq0I99j8RD//2JF FgLHfZl4ngWKkueP3NGm9v3ksRkj0FHOLfwshSzahRBuT4pWwROR/o14hvXKkcs= -----END CERTIFICATE-----Generated at Wed May 13 00:56:21 2026 by rpki-client