$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/054abd1c-7d20-4864-b816-13c018964b06.roa File: 054abd1c-7d20-4864-b816-13c018964b06.roa (raw, json) Hash identifier: he9RErAHJQc/DigIYORuK2nQTXfiDvF67jHarDDbFSk= Subject key identifier: CB:78:08:DA:C4:93:FB:34:09:2D:A5:6D:48:33:A9:7D:D3:46:D7:85 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 25D84ED896066FAC21A561B2B71C933E5D925CF8 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/054abd1c-7d20-4864-b816-13c018964b06.roa Signing time: Fri 03 Apr 2026 01:20:06 +0000 ROA not before: Fri 03 Apr 2026 01:20:06 +0000 ROA not after: Thu 02 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1e95::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:d8:4e:d8:96:06:6f:ac:21:a5:61:b2:b7:1c:93:3e:5d:92:5c:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Apr 3 01:20:06 2026 GMT Not After : Jul 2 23:59:59 2026 GMT Subject: serialNumber=052874f1772eb5173ea76f01c6ef78e65ac61ff6d1ca73ade3f676d28685073a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:2c:4d:5f:2b:ba:5c:ca:78:69:3a:ed:b7:ba: ed:cf:28:86:05:b1:c5:d9:47:c0:73:86:7c:82:f3: 7e:a7:27:5d:87:21:41:a9:2d:15:39:54:79:fc:42: 24:6c:d6:c6:fe:cd:2a:8b:10:5a:46:01:23:ab:93: e2:a5:d5:f6:db:d3:7f:6f:d8:08:d5:a2:3f:4f:4f: ec:f4:76:39:36:2c:94:ad:f8:30:4d:e2:5b:f1:51: a9:aa:7d:01:0a:f7:52:ea:5f:12:1a:bd:c6:98:2c: 8a:f9:ee:33:0f:e9:b4:86:04:4b:9a:eb:ed:7b:64: 0f:a8:c6:e0:2e:dd:e7:76:01:3d:cd:2d:98:fe:6d: 44:32:f6:19:a1:b6:f6:d2:fe:e5:50:28:c9:d1:ee: 82:18:0e:fa:4a:eb:a8:98:2a:d9:13:fb:de:f3:d5: 7a:bf:e4:37:fa:35:ef:3a:90:d6:24:ac:35:ff:f5: f0:f1:6e:d2:1e:d2:e1:d3:9a:a6:3c:af:33:5b:60: 6f:16:ab:76:bb:26:84:35:e6:2a:04:50:a5:cd:01: 4b:c4:15:b6:ff:16:cd:6d:e0:8f:24:b7:e0:58:b1: 64:60:40:09:2e:d1:d8:cb:2f:32:69:d0:54:80:95: e9:88:05:b3:76:d6:f8:12:29:a7:c1:b3:de:af:f5: 7c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:78:08:DA:C4:93:FB:34:09:2D:A5:6D:48:33:A9:7D:D3:46:D7:85 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/054abd1c-7d20-4864-b816-13c018964b06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1e95::/48 Signature Algorithm: sha256WithRSAEncryption a4:a9:02:d7:d1:d6:e1:22:87:c5:77:3d:c6:e3:d2:ad:ba:a8: a5:56:29:7d:4b:30:18:70:a4:65:02:f3:1a:44:35:48:4d:1a: a5:e9:24:99:80:63:f5:03:de:51:26:9f:27:1c:b5:f0:0f:b7: 3e:b1:98:bf:1c:71:1e:2b:48:d5:3c:f1:b8:04:2d:30:84:3b: cf:01:23:a9:42:4d:e5:cd:b3:58:e8:c1:c5:89:f9:12:6a:0e: 27:2f:37:e5:63:48:14:ce:c8:0d:0d:1a:e1:de:c7:8f:de:9d: b5:1b:51:81:b5:2a:9b:2a:79:0c:e8:6a:92:17:2d:bd:a9:45: 02:6c:c5:28:4e:67:7d:e5:aa:79:f2:a5:91:26:bc:a8:8f:5b: e0:a2:e3:34:cd:82:91:a1:d3:5c:5c:5a:87:5c:0c:e0:46:49: 98:31:05:63:09:0c:f9:4f:02:68:fb:31:36:c2:74:17:53:8b: f9:4e:0c:f9:d9:f2:66:43:46:c4:46:20:c7:21:20:51:11:38: 01:52:f0:75:9e:53:73:a0:ff:31:9e:bc:b6:8f:61:01:05:71: 81:0f:59:7e:9a:b4:d4:84:02:83:a9:02:e8:50:08:b0:20:79: ea:5b:a4:85:c1:71:44:6e:25:02:16:df:84:58:a2:a1:cc:30: 06:f2:f0:aa -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJdhO2JYGb6whpWGytxyTPl2SXPgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNDAzMDEyMDA2WhcNMjYwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNTI4NzRmMTc3MmViNTE3M2VhNzZmMDFjNmVmNzhlNjVh YzYxZmY2ZDFjYTczYWRlM2Y2NzZkMjg2ODUwNzNhMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDhLE1fK7pcynhpOu23uu3PKIYFscXZR8BzhnyC836nJ12H IUGpLRU5VHn8QiRs1sb+zSqLEFpGASOrk+Kl1fbb039v2AjVoj9PT+z0djk2LJSt +DBN4lvxUamqfQEK91LqXxIavcaYLIr57jMP6bSGBEua6+17ZA+oxuAu3ed2AT3N LZj+bUQy9hmhtvbS/uVQKMnR7oIYDvpK66iYKtkT+97z1Xq/5Df6Ne86kNYkrDX/ 9fDxbtIe0uHTmqY8rzNbYG8Wq3a7JoQ15ioEUKXNAUvEFbb/Fs1t4I8kt+BYsWRg QAku0djLLzJp0FSAlemIBbN21vgSKafBs96v9XwNAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUy3gI2sST+zQJLaVtSDOpfdNG14UwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzA1NGFiZDFjLTdkMjAtNDg2NC1iODE2LTEzYzAxODk2NGIwNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAJAAHpUwDQYJKoZIhvcNAQELBQADggEBAKSpAtfR1uEih8V3Pcbj0q26 qKVWKX1LMBhwpGUC8xpENUhNGqXpJJmAY/UD3lEmnycctfAPtz6xmL8ccR4rSNU8 8bgELTCEO88BI6lCTeXNs1jowcWJ+RJqDicvN+VjSBTOyA0NGuHex4/enbUbUYG1 KpsqeQzoapIXLb2pRQJsxShOZ33lqnnypZEmvKiPW+Ci4zTNgpGh01xcWodcDOBG SZgxBWMJDPlPAmj7MTbCdBdTi/lODPnZ8mZDRsRGIMchIFEROAFS8HWeU3Og/zGe vLaPYQEFcYEPWX6atNSEAoOpAuhQCLAgeepbpIXBcURuJQIW34RYoqHMMAby8Ko= -----END CERTIFICATE-----Generated at Fri Apr 17 09:24:15 2026 by rpki-client