$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5420c22e-a68a-43a5-b116-8e2996ddb188.roa File: 5420c22e-a68a-43a5-b116-8e2996ddb188.roa (raw, json) Hash identifier: d2Cmk8MVQ0zV9kAK16g2TKEh8ydbpGbSx4iyc6xb/b8= Subject key identifier: 16:EB:B2:5C:6B:1A:4F:47:BA:5E:7F:61:C3:03:2B:50:F2:13:49:7D Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 6935A50F6C1D219870EDA08949533A0C6C17E913 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5420c22e-a68a-43a5-b116-8e2996ddb188.roa Signing time: Fri 03 Apr 2026 01:50:50 +0000 ROA not before: Fri 03 Apr 2026 01:50:50 +0000 ROA not after: Thu 02 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1e98::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:35:a5:0f:6c:1d:21:98:70:ed:a0:89:49:53:3a:0c:6c:17:e9:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Apr 3 01:50:50 2026 GMT Not After : Jul 2 23:59:59 2026 GMT Subject: serialNumber=13acb88624a0d4b91786a2c2882c2fc1fc2320c437ff95aa8de1e6c7c6f98e6d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:7c:67:1c:11:49:80:3a:d3:1b:37:7c:80:b7: 7d:04:0d:e9:33:c0:38:29:85:bf:81:9f:4b:22:13: fc:ef:17:50:fa:db:7e:08:86:96:45:d1:4c:22:9d: 0e:9b:e7:ec:fd:ff:93:9a:9a:27:f6:63:69:b5:d0: 67:8d:05:ce:0a:2c:b0:b5:5e:e2:82:7e:6f:e9:ae: e6:91:67:30:75:b2:51:62:9a:44:3b:40:54:8b:a3: 5c:6c:cd:9c:db:ba:c4:55:dc:ed:7d:4a:5e:84:ba: 06:bc:57:ac:c2:9b:1d:6b:a6:1c:35:17:29:91:39: 8c:61:e1:26:55:0b:62:c1:8b:05:a1:19:87:d2:eb: b2:f0:1d:ea:1b:0f:c6:74:d4:aa:58:9b:88:87:62: 5c:71:ba:bb:d1:99:f1:35:a8:34:3e:07:bf:f7:9c: 04:de:7d:ba:f2:d6:81:55:13:37:79:b2:d2:48:53: 12:26:da:3a:f9:9f:22:79:18:31:a7:f4:54:c9:f9: f8:b6:95:3d:fc:a2:0e:9b:e8:29:69:37:ad:65:a0: 22:4f:cf:79:87:7f:50:e6:6c:53:8f:40:50:cc:ec: 90:6b:86:bf:e8:34:7f:a5:76:74:28:40:a2:93:ee: c9:94:4c:bb:b2:91:f5:c6:50:0e:64:f9:87:c2:28: 43:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:EB:B2:5C:6B:1A:4F:47:BA:5E:7F:61:C3:03:2B:50:F2:13:49:7D X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5420c22e-a68a-43a5-b116-8e2996ddb188.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1e98::/48 Signature Algorithm: sha256WithRSAEncryption 78:f4:65:79:11:73:9e:ea:57:70:2b:93:23:e6:8e:f2:0c:dc: dd:5d:b2:d1:bb:03:3a:ac:ce:6e:1c:34:2e:a4:56:64:b6:c6: 0b:d2:7c:fc:e9:6d:cb:a7:b3:05:88:0e:73:30:1b:b0:bc:d2: 7e:27:ae:42:1f:b0:37:58:9e:2c:22:be:d2:f1:3a:c6:cd:cb: 5a:f5:21:44:f7:27:4c:9a:03:67:63:62:e9:15:b9:46:da:c8: 80:71:96:27:4f:07:65:f1:73:01:97:55:9a:50:8d:77:8e:54: 2f:5a:a7:b1:dd:8c:79:c4:9e:d4:dd:cb:32:5a:5f:5a:bd:2b: 71:d1:55:ab:74:4e:57:8c:3a:d2:53:ae:17:1b:27:c5:52:6d: 3f:64:38:d8:19:e3:83:be:a9:06:36:0f:bc:d4:ce:95:3c:ef: 31:e0:71:e1:41:e2:e3:6a:bf:f9:60:dc:5f:35:69:f4:77:0a: ee:22:23:fe:8b:31:53:b2:7f:b7:89:9b:e7:2d:ac:1f:8c:6e: 5f:12:57:cf:78:2c:a9:67:dc:d5:c0:87:41:dc:a4:55:43:19: 39:23:29:05:c6:3f:35:48:a4:4d:49:3e:80:ce:3b:8d:aa:3f: 5a:2f:29:53:55:6d:4f:49:c2:c0:aa:99:c8:74:f6:79:2a:fb: f1:e6:a1:3f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUaTWlD2wdIZhw7aCJSVM6DGwX6RMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNDAzMDE1MDUwWhcNMjYwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxM2FjYjg4NjI0YTBkNGI5MTc4NmEyYzI4ODJjMmZjMWZj MjMyMGM0MzdmZjk1YWE4ZGUxZTZjN2M2Zjk4ZTZkMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDmfGccEUmAOtMbN3yAt30EDekzwDgphb+Bn0siE/zvF1D6 234IhpZF0UwinQ6b5+z9/5Oamif2Y2m10GeNBc4KLLC1XuKCfm/pruaRZzB1slFi mkQ7QFSLo1xszZzbusRV3O19Sl6Euga8V6zCmx1rphw1FymROYxh4SZVC2LBiwWh GYfS67LwHeobD8Z01KpYm4iHYlxxurvRmfE1qDQ+B7/3nATefbry1oFVEzd5stJI UxIm2jr5nyJ5GDGn9FTJ+fi2lT38og6b6ClpN61loCJPz3mHf1DmbFOPQFDM7JBr hr/oNH+ldnQoQKKT7smUTLuykfXGUA5k+YfCKEO1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUFuuyXGsaT0e6Xn9hwwMrUPITSX0wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzU0MjBjMjJlLWE2OGEtNDNhNS1iMTE2LThlMjk5NmRkYjE4OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAJAAHpgwDQYJKoZIhvcNAQELBQADggEBAHj0ZXkRc57qV3ArkyPmjvIM 3N1dstG7Azqszm4cNC6kVmS2xgvSfPzpbcunswWIDnMwG7C80n4nrkIfsDdYniwi vtLxOsbNy1r1IUT3J0yaA2djYukVuUbayIBxlidPB2XxcwGXVZpQjXeOVC9ap7Hd jHnEntTdyzJaX1q9K3HRVat0TleMOtJTrhcbJ8VSbT9kONgZ44O+qQY2D7zUzpU8 7zHgceFB4uNqv/lg3F81afR3Cu4iI/6LMVOyf7eJm+ctrB+Mbl8SV894LKln3NXA h0HcpFVDGTkjKQXGPzVIpE1JPoDOO42qP1ovKVNVbU9JwsCqmch09nkq+/HmoT8= -----END CERTIFICATE-----Generated at Fri Apr 17 07:46:01 2026 by rpki-client