$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0fd73235-2c5a-454b-86c7-1bba88420322.roa File: 0fd73235-2c5a-454b-86c7-1bba88420322.roa (raw, json) Hash identifier: f+gSjlVlM26m43T63Tly7+q+s1cK6hB+iUPz2rUN+Dw= Subject key identifier: CC:22:CE:B0:81:FB:EE:06:B6:77:79:72:02:65:39:E9:3E:76:D5:EB Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 6BAA0D58BCDD2CA6240F1CEF1745E77929EA48B0 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0fd73235-2c5a-454b-86c7-1bba88420322.roa Signing time: Fri 03 Apr 2026 01:01:33 +0000 ROA not before: Fri 03 Apr 2026 01:01:33 +0000 ROA not after: Thu 02 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1207::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:aa:0d:58:bc:dd:2c:a6:24:0f:1c:ef:17:45:e7:79:29:ea:48:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Apr 3 01:01:33 2026 GMT Not After : Jul 2 23:59:59 2026 GMT Subject: serialNumber=783c0e3403407022f982c9a21cb0298810a04859836a4e06da627eeab7e4159f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3f:90:de:70:a0:e7:1e:9c:fe:71:92:02:bb: 71:e0:4e:ed:78:d8:2f:a5:d4:ee:2a:64:95:22:a5: a1:fd:cf:a8:bc:37:57:de:93:9d:6b:9b:d1:a2:21: a9:57:d5:35:7c:e8:ae:58:71:be:d5:63:f0:ef:fd: 98:a5:64:fd:3c:44:7c:6f:98:1a:3c:f9:f0:93:85: e8:8d:70:e3:01:b4:25:28:21:7e:e8:44:96:a3:1c: 0e:2c:8d:32:e7:ac:52:63:9b:6b:ee:e8:5c:3d:c2: bf:d8:2f:28:3e:11:36:29:db:7e:d8:52:b0:b4:e1: 75:73:4a:78:92:d6:45:36:c9:55:c1:e0:21:d1:f1: 95:86:5e:35:eb:f8:06:af:03:ab:50:64:ea:f3:8b: e6:ab:91:62:16:d4:90:e0:c3:4e:8d:e4:3e:49:29: 3f:7a:23:86:bf:53:af:ef:0b:5b:f1:33:17:38:77: 2c:3a:a6:4e:2d:c1:1d:4f:00:d9:59:75:8a:ec:e5: a3:5f:6b:25:41:1f:2b:13:10:b1:a1:1c:51:85:87: c1:53:57:33:23:4e:be:43:02:a7:da:88:c9:4e:f6: 92:1a:a6:d7:2b:9c:a7:a2:d1:47:31:52:40:7d:5c: 9d:9a:e7:1a:d2:df:de:97:da:c6:a1:b7:16:c6:5f: 49:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:22:CE:B0:81:FB:EE:06:B6:77:79:72:02:65:39:E9:3E:76:D5:EB X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0fd73235-2c5a-454b-86c7-1bba88420322.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1207::/48 Signature Algorithm: sha256WithRSAEncryption 2f:23:8d:fa:9e:c9:c7:40:3a:ce:ef:dc:91:d6:ee:55:f4:4a: 8c:3c:11:81:9f:cb:5a:21:dc:36:da:e7:76:cc:1c:74:ab:4f: 01:ac:c6:5a:38:ca:72:bd:e7:0e:da:ad:2d:ec:30:fc:49:fa: eb:8b:e2:7a:1f:4f:42:d4:89:a5:a5:04:b9:cb:b6:da:19:f0: 93:71:54:e7:1e:68:36:67:98:0b:c3:b1:20:63:70:61:08:d6: 49:c7:dc:a0:70:48:b6:4d:b9:dd:93:7b:58:69:ca:1d:72:b0: 0c:01:a1:33:16:ea:24:11:1b:44:9d:e1:f4:33:22:bc:5f:4c: e7:27:f3:5b:9b:bc:43:5d:fd:94:b4:a3:a4:72:3d:a0:7f:56: 8a:01:8e:64:54:d1:56:c5:7f:79:a8:92:0c:11:82:68:f0:82: 33:ea:58:5d:72:c9:22:06:66:f1:78:e5:a1:bd:da:47:5d:4c: 30:91:e5:78:4f:b3:fe:f8:67:d1:2e:05:76:15:fe:9d:09:c8: 05:c1:e7:75:0a:68:b2:ac:7e:fc:e3:59:62:42:da:51:ed:fa: bc:56:ca:5d:09:52:48:ee:07:2c:d1:61:6c:e0:ed:10:fb:8e: 7c:9a:f0:f2:6e:0d:72:1f:38:b1:a3:b0:e0:79:b0:dd:3e:53: af:7d:fd:bf -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUa6oNWLzdLKYkDxzvF0XneSnqSLAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNDAzMDEwMTMzWhcNMjYwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ODNjMGUzNDAzNDA3MDIyZjk4MmM5YTIxY2IwMjk4ODEw YTA0ODU5ODM2YTRlMDZkYTYyN2VlYWI3ZTQxNTlmMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1P5DecKDnHpz+cZICu3HgTu142C+l1O4qZJUipaH9z6i8 N1fek51rm9GiIalX1TV86K5Ycb7VY/Dv/ZilZP08RHxvmBo8+fCTheiNcOMBtCUo IX7oRJajHA4sjTLnrFJjm2vu6Fw9wr/YLyg+ETYp237YUrC04XVzSniS1kU2yVXB 4CHR8ZWGXjXr+AavA6tQZOrzi+arkWIW1JDgw06N5D5JKT96I4a/U6/vC1vxMxc4 dyw6pk4twR1PANlZdYrs5aNfayVBHysTELGhHFGFh8FTVzMjTr5DAqfaiMlO9pIa ptcrnKei0UcxUkB9XJ2a5xrS396X2sahtxbGX0mjAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUzCLOsIH77ga2d3lyAmU56T521eswHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzBmZDczMjM1LTJjNWEtNDU0Yi04NmM3LTFiYmE4ODQyMDMyMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAJAAEgcwDQYJKoZIhvcNAQELBQADggEBAC8jjfqeycdAOs7v3JHW7lX0 Sow8EYGfy1oh3Dba53bMHHSrTwGsxlo4ynK95w7arS3sMPxJ+uuL4nofT0LUiaWl BLnLttoZ8JNxVOceaDZnmAvDsSBjcGEI1knH3KBwSLZNud2Te1hpyh1ysAwBoTMW 6iQRG0Sd4fQzIrxfTOcn81ubvENd/ZS0o6RyPaB/VooBjmRU0VbFf3mokgwRgmjw gjPqWF1yySIGZvF45aG92kddTDCR5XhPs/74Z9EuBXYV/p0JyAXB53UKaLKsfvzj WWJC2lHt+rxWyl0JUkjuByzRYWzg7RD7jnya8PJuDXIfOLGjsOB5sN0+U699/b8= -----END CERTIFICATE-----Generated at Fri Apr 17 08:03:26 2026 by rpki-client