$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/657d06b3-676a-4fec-a91e-a9eded488151.roa File: 657d06b3-676a-4fec-a91e-a9eded488151.roa (raw, json) Hash identifier: TnI+mZSKYeqcrmVPVATQyV3ADpNuEXqaa68F9oT0bGI= Subject key identifier: E4:91:AC:CF:8D:65:A1:85:A1:A5:AD:B6:E1:25:E2:20:1A:B9:81:54 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 15629ACC517E6A0B04B5D8A25F708311F79483F4 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/657d06b3-676a-4fec-a91e-a9eded488151.roa Signing time: Fri 03 Apr 2026 01:11:50 +0000 ROA not before: Fri 03 Apr 2026 01:11:50 +0000 ROA not after: Thu 02 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1eae::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:62:9a:cc:51:7e:6a:0b:04:b5:d8:a2:5f:70:83:11:f7:94:83:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Apr 3 01:11:50 2026 GMT Not After : Jul 2 23:59:59 2026 GMT Subject: serialNumber=3272cf598399f780464030dc6232f7fc9ff7627d689eb49f5cbad7f4bd294540, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:10:16:91:5f:12:97:e9:65:0e:a5:03:e8:a0: f7:e9:44:62:44:f3:8a:c3:2c:bb:40:cd:aa:63:d9: 46:ee:cb:50:43:cf:21:86:26:c2:a4:86:ce:bc:b5: a3:5d:b5:fe:d0:9d:16:7e:50:87:05:ed:b5:a7:e9: 44:6e:7a:93:ed:7a:01:de:61:71:38:91:8f:79:08: 70:1e:e4:75:93:db:a4:19:7f:6a:be:d9:d8:a4:ba: 96:49:f6:01:fc:44:86:bd:ec:02:77:a4:58:48:0c: c1:5d:0e:ad:61:c1:4c:6d:90:ea:1d:79:34:25:e5: 5d:b0:fe:c8:d2:05:19:67:8a:3b:f5:e6:ee:ac:11: 14:b2:63:bc:5e:81:e7:f0:ba:81:d0:30:19:ba:2e: aa:a2:c6:41:7b:9b:00:31:de:a1:f7:5d:9c:6e:40: cd:44:ca:c3:d0:5f:b3:4e:c1:47:f6:a4:90:13:8d: 32:2a:ef:11:93:db:0c:5e:a2:0f:ea:5c:cb:c1:27: ad:d0:ad:ab:f6:8c:92:1d:ea:84:17:e7:66:f0:58: 87:79:57:af:90:4d:38:3f:7d:4e:5d:57:d2:10:bf: fa:b6:30:89:4a:99:cd:46:cd:a0:df:f4:61:0b:1d: fc:f0:17:d5:fc:34:11:9c:ab:c7:94:47:60:db:34: ee:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:91:AC:CF:8D:65:A1:85:A1:A5:AD:B6:E1:25:E2:20:1A:B9:81:54 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/657d06b3-676a-4fec-a91e-a9eded488151.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1eae::/48 Signature Algorithm: sha256WithRSAEncryption b7:59:89:36:8d:e0:85:c2:b5:4e:47:cb:b7:94:2e:28:83:63: b1:88:77:44:04:68:98:13:0b:7d:28:15:29:d0:4f:9c:4f:d6: 48:19:c3:c4:a6:29:88:e7:96:00:dc:0d:12:46:84:c3:b0:f8: 1f:9e:54:dc:c0:58:b3:c9:50:62:e4:3b:a8:5a:27:8e:02:c3: 5b:e6:51:86:1a:02:82:36:af:b6:8c:76:8c:17:f1:34:3c:96: ef:b8:ca:3c:27:b9:03:d7:ed:a0:af:22:52:6c:aa:93:8b:a9: 51:0b:47:8c:7b:f7:93:5e:ce:21:44:25:06:6d:41:e4:88:2b: b5:fb:f6:e1:53:e1:76:13:bd:02:75:b7:d7:9e:30:ad:dd:fd: cc:00:bf:bf:06:9b:26:4c:50:ed:23:bb:bb:7b:e3:e4:1d:b8: 27:55:f2:2d:8b:1d:28:1e:a6:be:94:24:4e:8e:95:5d:97:41: 22:e0:cf:86:0e:f0:8d:aa:d1:b5:53:40:cf:fe:aa:8c:e8:f2: 9e:eb:7c:dc:d0:a1:0f:b9:e0:b8:63:99:4a:00:0c:1a:02:66: e6:8a:36:7c:d8:c7:3a:3e:bc:0b:4d:c7:b8:c9:4a:6c:ea:be: 57:59:83:da:2a:e9:b8:0c:ba:7c:2a:0c:31:6f:76:86:39:2b: a6:67:db:b3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUFWKazFF+agsEtdiiX3CDEfeUg/QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNDAzMDExMTUwWhcNMjYwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMjcyY2Y1OTgzOTlmNzgwNDY0MDMwZGM2MjMyZjdmYzlm Zjc2MjdkNjg5ZWI0OWY1Y2JhZDdmNGJkMjk0NTQwMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbEBaRXxKX6WUOpQPooPfpRGJE84rDLLtAzapj2Ubuy1BD zyGGJsKkhs68taNdtf7QnRZ+UIcF7bWn6URuepPtegHeYXE4kY95CHAe5HWT26QZ f2q+2dikupZJ9gH8RIa97AJ3pFhIDMFdDq1hwUxtkOodeTQl5V2w/sjSBRlnijv1 5u6sERSyY7xegefwuoHQMBm6LqqixkF7mwAx3qH3XZxuQM1EysPQX7NOwUf2pJAT jTIq7xGT2wxeog/qXMvBJ63Qrav2jJId6oQX52bwWId5V6+QTTg/fU5dV9IQv/q2 MIlKmc1GzaDf9GELHfzwF9X8NBGcq8eUR2DbNO59AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU5JGsz41loYWhpa224SXiIBq5gVQwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzY1N2QwNmIzLTY3NmEtNGZlYy1hOTFlLWE5ZWRlZDQ4ODE1MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAJAAHq4wDQYJKoZIhvcNAQELBQADggEBALdZiTaN4IXCtU5Hy7eULiiD Y7GId0QEaJgTC30oFSnQT5xP1kgZw8SmKYjnlgDcDRJGhMOw+B+eVNzAWLPJUGLk O6haJ44Cw1vmUYYaAoI2r7aMdowX8TQ8lu+4yjwnuQPX7aCvIlJsqpOLqVELR4x7 95NeziFEJQZtQeSIK7X79uFT4XYTvQJ1t9eeMK3d/cwAv78GmyZMUO0ju7t74+Qd uCdV8i2LHSgepr6UJE6OlV2XQSLgz4YO8I2q0bVTQM/+qozo8p7rfNzQoQ+54Lhj mUoADBoCZuaKNnzYxzo+vAtNx7jJSmzqvldZg9oq6bgMunwqDDFvdoY5K6Zn27M= -----END CERTIFICATE-----Generated at Fri Apr 17 06:00:17 2026 by rpki-client