$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/43656081-3e46-4a66-821e-e6b610a4ce43.roa File: 43656081-3e46-4a66-821e-e6b610a4ce43.roa (raw, json) Hash identifier: /TPryoBPzCWQwyMe/G4KOCL39iXX8mzf5DNLiFG4OrE= Subject key identifier: 29:B7:2F:9D:57:44:D9:08:C4:54:EC:3A:3C:44:24:1C:6C:41:57:51 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 368ACB98D6408116B5D1EB451321F095F4F57909 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/43656081-3e46-4a66-821e-e6b610a4ce43.roa Signing time: Fri 03 Apr 2026 00:30:54 +0000 ROA not before: Fri 03 Apr 2026 00:30:54 +0000 ROA not after: Thu 02 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:10ff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:8a:cb:98:d6:40:81:16:b5:d1:eb:45:13:21:f0:95:f4:f5:79:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Apr 3 00:30:54 2026 GMT Not After : Jul 2 23:59:59 2026 GMT Subject: serialNumber=4643959d6914d2c229f5687519b0101ebf3af52e46ffbc76cd64f94aa8f1d407, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bb:42:5d:a4:97:1d:b8:b3:2e:40:00:a2:09: 0a:87:ed:d8:87:1b:2e:ef:b3:d7:39:f6:f8:9f:93: 32:a0:dd:80:ec:e3:ce:99:e7:f1:0f:31:7f:dd:fd: 41:1d:13:0e:ae:d8:76:f9:63:8c:a1:26:8e:ff:8a: 63:82:17:16:9f:30:4c:6a:63:e1:51:94:b5:a9:f4: ca:7c:eb:23:31:14:83:73:1d:6f:20:29:23:1e:93: 18:c4:99:b0:6d:3b:6e:a4:60:c5:c6:af:25:0b:25: c2:10:37:a5:4a:c0:80:ed:86:e6:2d:8d:62:a8:0a: 46:5d:4d:c6:cb:ef:2e:28:ac:6a:7d:cf:b7:a3:d8: 36:ee:6c:f5:a3:21:de:c8:7d:af:9b:94:fd:e8:0c: 97:aa:f5:3c:c1:30:dd:fe:13:1b:80:7a:af:5f:d5: 06:c5:e9:4f:30:7a:50:a8:fc:8d:ad:c8:55:72:94: 3d:f6:17:e4:73:ff:17:37:43:c5:d4:e9:87:ef:66: bb:e8:20:de:94:c9:4b:c4:eb:67:85:f0:bf:be:4e: 64:97:d2:41:1a:f4:b8:49:d4:77:5f:c1:31:9b:46: 18:2f:b4:ea:e9:e3:ca:84:c6:15:78:b8:e6:51:0d: 9b:19:85:6f:d7:fa:18:8d:21:32:d9:fd:62:45:99: 67:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:B7:2F:9D:57:44:D9:08:C4:54:EC:3A:3C:44:24:1C:6C:41:57:51 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/43656081-3e46-4a66-821e-e6b610a4ce43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:10ff::/48 Signature Algorithm: sha256WithRSAEncryption 10:15:81:73:d6:af:10:d0:75:e6:1c:67:e7:31:f6:47:d0:78: 4d:f2:2a:d2:73:c7:bd:31:e8:4d:de:f0:42:e5:60:31:74:2c: 7a:4d:82:c8:99:2c:e0:05:5d:4a:aa:a9:67:c4:b0:1c:52:5d: 9f:e1:3b:a4:cc:33:70:9c:17:76:d2:e2:1f:9e:88:e9:f9:a6: fe:a0:e4:18:6d:91:9b:db:ec:25:18:d8:58:b2:8f:19:5d:5c: ce:5c:c3:24:10:c5:0a:fc:73:21:04:81:0c:a4:0a:34:cb:a9: e2:1e:85:fa:ef:e7:ba:a6:94:48:68:8f:5a:02:1d:16:b6:5a: ab:49:6c:10:b5:1c:48:2b:34:14:00:86:f1:f3:8e:aa:a7:fb: ea:70:07:68:ce:2a:0d:cc:dd:10:85:56:6d:6f:cc:22:81:3c: 21:9d:06:c4:35:7e:e3:e7:3c:49:1a:3b:fb:a7:a8:ae:d1:da: 7b:f9:25:ee:c9:69:60:55:01:0c:56:65:50:8e:57:a8:cb:9c: a6:a4:54:65:2a:14:5c:51:14:d6:1e:54:c7:cb:cf:cc:85:9a: 82:36:09:88:41:ac:40:71:0e:9a:d7:3a:1e:ee:05:14:41:b1: 4b:76:65:45:d5:21:74:be:70:b7:a9:ae:6b:4b:78:dc:d2:e0: 34:b2:e6:bd -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUNorLmNZAgRa10etFEyHwlfT1eQkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNDAzMDAzMDU0WhcNMjYwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0NjQzOTU5ZDY5MTRkMmMyMjlmNTY4NzUxOWIwMTAxZWJm M2FmNTJlNDZmZmJjNzZjZDY0Zjk0YWE4ZjFkNDA3MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLu0JdpJcduLMuQACiCQqH7diHGy7vs9c59vifkzKg3YDs 486Z5/EPMX/d/UEdEw6u2Hb5Y4yhJo7/imOCFxafMExqY+FRlLWp9Mp86yMxFINz HW8gKSMekxjEmbBtO26kYMXGryULJcIQN6VKwIDthuYtjWKoCkZdTcbL7y4orGp9 z7ej2DbubPWjId7Ifa+blP3oDJeq9TzBMN3+ExuAeq9f1QbF6U8welCo/I2tyFVy lD32F+Rz/xc3Q8XU6YfvZrvoIN6UyUvE62eF8L++TmSX0kEa9LhJ1HdfwTGbRhgv tOrp48qExhV4uOZRDZsZhW/X+hiNITLZ/WJFmWdfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUKbcvnVdE2QjEVOw6PEQkHGxBV1EwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzQzNjU2MDgxLTNlNDYtNGE2Ni04MjFlLWU2YjYxMGE0Y2U0My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAJAAEP8wDQYJKoZIhvcNAQELBQADggEBABAVgXPWrxDQdeYcZ+cx9kfQ eE3yKtJzx70x6E3e8ELlYDF0LHpNgsiZLOAFXUqqqWfEsBxSXZ/hO6TMM3CcF3bS 4h+eiOn5pv6g5BhtkZvb7CUY2FiyjxldXM5cwyQQxQr8cyEEgQykCjTLqeIehfrv 57qmlEhoj1oCHRa2WqtJbBC1HEgrNBQAhvHzjqqn++pwB2jOKg3M3RCFVm1vzCKB PCGdBsQ1fuPnPEkaO/unqK7R2nv5Je7JaWBVAQxWZVCOV6jLnKakVGUqFFxRFNYe VMfLz8yFmoI2CYhBrEBxDprXOh7uBRRBsUt2ZUXVIXS+cLeprmtLeNzS4DSy5r0= -----END CERTIFICATE-----Generated at Sun Apr 19 08:20:52 2026 by rpki-client