$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2568587f-3fdf-4ede-9804-0f4a19af727b.roa File: 2568587f-3fdf-4ede-9804-0f4a19af727b.roa (raw, json) Hash identifier: AKnn0roO1BKAGMq04VVlbrFpNHlAl1vD/rMYcwHI5Fk= Subject key identifier: C0:C3:19:6E:0F:01:8F:33:98:D2:0D:0A:05:04:B1:FE:E7:1B:92:07 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 6404CCF46A390E8EDCD86D37CDC2BA2A52C31C9A Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2568587f-3fdf-4ede-9804-0f4a19af727b.roa Signing time: Fri 03 Apr 2026 00:20:03 +0000 ROA not before: Fri 03 Apr 2026 00:20:03 +0000 ROA not after: Thu 02 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:11b3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:04:cc:f4:6a:39:0e:8e:dc:d8:6d:37:cd:c2:ba:2a:52:c3:1c:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Apr 3 00:20:03 2026 GMT Not After : Jul 2 23:59:59 2026 GMT Subject: serialNumber=df4353a48f330d2507adac67b78af9436c81acddec6c79c47a880025d6bffaeb, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:36:ef:df:16:c2:6a:62:c8:a7:a1:4b:6a:bd: c2:74:2a:52:fb:be:66:c1:ab:c7:fc:7c:e0:1e:92: 8b:1d:a0:15:eb:20:91:22:6a:40:7b:8a:d4:20:35: 91:43:1f:67:2f:2c:3f:bd:0a:50:8b:81:38:be:10: bf:e6:66:9c:f5:ef:86:50:42:a2:fe:e5:33:45:fb: 1d:48:a9:0d:1f:21:8e:5d:75:46:0c:1c:2d:ef:d6: 3c:ec:0d:f1:53:16:42:97:fa:69:99:1a:77:fe:8e: 1f:5f:ee:4f:b1:b5:56:93:bb:5d:d2:a0:b4:94:93: 0d:ed:4a:cb:eb:a3:f1:e0:42:df:3c:2f:6c:6a:f3: 47:a6:dc:85:bc:ba:d2:16:20:11:54:28:f2:a2:ce: e4:ab:3a:b8:8b:68:73:17:8b:45:87:2d:a2:9f:bd: 34:2a:07:ac:fd:9f:0e:7d:ea:56:08:7d:10:8a:73: 2a:da:36:2f:4f:fe:03:c6:04:16:3f:e2:3e:80:da: 93:a8:5d:dc:7a:f6:47:3b:b3:cc:dd:fe:8f:3b:48: 15:cf:97:b2:d7:b4:b1:f0:98:30:00:3f:57:ef:d8: f9:65:08:1e:12:94:9b:4d:40:a1:46:c8:36:30:e7: 71:bf:88:3b:7e:7f:25:b1:98:70:b2:62:4c:b8:9e: 0b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:C3:19:6E:0F:01:8F:33:98:D2:0D:0A:05:04:B1:FE:E7:1B:92:07 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2568587f-3fdf-4ede-9804-0f4a19af727b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:11b3::/48 Signature Algorithm: sha256WithRSAEncryption 55:85:15:81:42:9b:d4:a1:66:22:f1:82:b2:73:7d:c1:26:73: 3f:a7:97:c6:12:e0:dc:f2:8d:e7:0e:d7:48:54:13:ea:40:d1: 15:48:5d:1e:28:b6:7a:0e:3e:18:0f:eb:b9:70:b3:ae:92:4e: c2:87:a2:0f:58:48:c5:c1:5d:e6:1f:ce:9e:db:7e:24:9c:df: f2:da:27:8b:2f:4b:be:dd:a7:dc:20:85:5f:37:08:4b:b8:9f: 17:1d:32:85:65:19:e6:e3:49:13:e8:64:a1:60:1d:95:a6:73: 1e:49:61:70:cb:67:52:6a:8a:4c:73:fb:5e:09:a8:5b:d6:d8: 21:00:12:78:cd:64:fe:9e:c0:b3:c9:82:10:cd:6b:06:d6:65: 84:bc:67:08:99:f0:66:14:9c:5c:3f:a3:84:03:d5:02:07:1d: e2:95:05:d1:2e:34:3e:c9:b9:bb:d6:b6:86:07:29:1e:7a:e3: 5b:28:b7:e8:fe:8f:e4:63:60:7c:0b:a2:91:9a:6c:29:e5:10: 52:76:28:4f:7c:28:57:3f:76:f0:e9:db:97:80:95:98:5d:0c: 9f:99:c7:27:36:65:26:9e:5b:ca:b5:0f:5d:95:55:b1:c1:dd: 66:41:bd:d8:8b:1f:e1:60:b2:b2:20:97:a2:d4:5e:8f:85:de: 5e:45:27:78 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZATM9Go5Do7c2G03zcK6KlLDHJowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNDAzMDAyMDAzWhcNMjYwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZjQzNTNhNDhmMzMwZDI1MDdhZGFjNjdiNzhhZjk0MzZj ODFhY2RkZWM2Yzc5YzQ3YTg4MDAyNWQ2YmZmYWViMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuNu/fFsJqYsinoUtqvcJ0KlL7vmbBq8f8fOAekosdoBXr IJEiakB7itQgNZFDH2cvLD+9ClCLgTi+EL/mZpz174ZQQqL+5TNF+x1IqQ0fIY5d dUYMHC3v1jzsDfFTFkKX+mmZGnf+jh9f7k+xtVaTu13SoLSUkw3tSsvro/HgQt88 L2xq80em3IW8utIWIBFUKPKizuSrOriLaHMXi0WHLaKfvTQqB6z9nw596lYIfRCK cyraNi9P/gPGBBY/4j6A2pOoXdx69kc7s8zd/o87SBXPl7LXtLHwmDAAP1fv2Pll CB4SlJtNQKFGyDYw53G/iDt+fyWxmHCyYky4ngtDAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUwMMZbg8BjzOY0g0KBQSx/ucbkgcwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzI1Njg1ODdmLTNmZGYtNGVkZS05ODA0LTBmNGExOWFmNzI3Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAJAAEbMwDQYJKoZIhvcNAQELBQADggEBAFWFFYFCm9ShZiLxgrJzfcEm cz+nl8YS4NzyjecO10hUE+pA0RVIXR4otnoOPhgP67lws66STsKHog9YSMXBXeYf zp7bfiSc3/LaJ4svS77dp9wghV83CEu4nxcdMoVlGebjSRPoZKFgHZWmcx5JYXDL Z1Jqikxz+14JqFvW2CEAEnjNZP6ewLPJghDNawbWZYS8ZwiZ8GYUnFw/o4QD1QIH HeKVBdEuND7JubvWtoYHKR5641sot+j+j+RjYHwLopGabCnlEFJ2KE98KFc/dvDp 25eAlZhdDJ+Zxyc2ZSaeW8q1D12VVbHB3WZBvdiLH+FgsrIgl6LUXo+F3l5FJ3g= -----END CERTIFICATE-----Generated at Fri Apr 17 09:23:29 2026 by rpki-client