$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7ac2e977-e468-4c66-936a-778b04414792.roa File: 7ac2e977-e468-4c66-936a-778b04414792.roa (raw, json) Hash identifier: /hMFvux7FOLqKumUX0VzYqMBQAJg1yDHJs+0sPgOKAA= Subject key identifier: 61:EA:5F:83:3C:17:C1:6C:0D:24:92:D0:E2:36:F8:83:B6:CB:2F:76 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 2F32F9F1287374BDFBE6A343A1DA1C094BF0CF5D Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7ac2e977-e468-4c66-936a-778b04414792.roa Signing time: Fri 03 Apr 2026 01:50:04 +0000 ROA not before: Fri 03 Apr 2026 01:50:04 +0000 ROA not after: Thu 02 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1037::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:32:f9:f1:28:73:74:bd:fb:e6:a3:43:a1:da:1c:09:4b:f0:cf:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Apr 3 01:50:04 2026 GMT Not After : Jul 2 23:59:59 2026 GMT Subject: serialNumber=1f86c477efcc8359616a02116f0d0b61e30735064065ab67b5997d2aab3e0acc, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a3:e6:71:94:f9:d6:45:67:19:8b:77:5f:72: 43:0f:df:3e:7b:99:2a:a7:09:10:71:a9:c0:e7:ac: 99:98:6a:05:bf:f7:6b:20:fc:3d:0f:5c:b4:9e:47: f3:f9:fe:0d:71:ce:9b:36:14:a6:82:f1:d5:38:1e: 96:90:05:fe:79:ad:42:ae:a6:7c:6b:ec:05:61:63: 20:7a:bc:89:17:ab:77:de:a5:45:32:29:d1:b2:4d: 02:58:eb:13:db:96:2b:58:59:45:46:c5:3d:38:4f: a6:2d:33:e1:ac:ad:50:2d:b3:24:ca:20:3c:79:c1: a1:54:cc:2d:48:bc:0c:69:8d:24:2a:20:cb:c2:31: 2d:ce:89:ae:7e:73:f2:73:dc:10:3b:27:dc:0b:23: f5:19:b0:83:de:de:23:5d:48:26:40:14:0f:e1:dc: 4e:b9:0e:b0:19:89:2b:fb:17:93:0b:34:62:67:fa: 67:0b:b4:36:70:f8:1b:d4:b1:b3:97:47:62:dd:eb: e4:84:75:7a:ca:bb:28:6a:9a:27:c5:23:b8:ac:0b: e6:08:f2:d8:5e:94:df:fe:4d:1b:b4:25:97:5c:86: 49:61:96:0d:e0:42:f3:eb:41:2a:a7:d2:58:34:fa: 16:87:b0:45:dd:9c:fb:68:dd:33:71:10:6e:1f:30: 7c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:EA:5F:83:3C:17:C1:6C:0D:24:92:D0:E2:36:F8:83:B6:CB:2F:76 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7ac2e977-e468-4c66-936a-778b04414792.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1037::/48 Signature Algorithm: sha256WithRSAEncryption a0:c5:40:ae:d8:96:1c:c2:ba:a2:17:8d:ff:e4:a8:2d:15:d7: 9d:43:eb:2c:c2:e7:8c:a4:29:a8:37:52:a5:59:41:4f:9d:5d: ea:e3:ab:5e:d9:87:70:27:8e:0f:39:47:06:16:4e:96:ae:f9: f2:95:6b:9e:0f:c5:58:d4:bd:db:5e:83:29:72:23:09:4c:88: 6c:e1:bc:3f:2b:5c:ec:5f:a2:83:12:fb:58:35:8f:c7:09:d4: 71:77:bc:08:8f:5a:94:d4:73:6a:e8:75:1f:66:d3:a0:ef:3a: 17:4e:40:13:8a:b2:27:ae:60:6f:54:1f:3f:34:53:1f:e0:dc: 38:c2:55:29:74:cc:bc:e6:a4:ae:4c:0e:90:ea:c8:b4:4c:32: 4a:a0:cc:f5:56:89:44:6f:af:a9:14:b9:0f:7f:0c:5b:8f:d3: 40:a6:58:7d:0c:f3:14:08:e6:f1:ab:6d:5c:6e:03:8f:88:e5: bf:69:1e:d7:98:6d:07:0d:fb:97:db:c4:d2:80:d7:07:dd:29: 41:02:f1:e2:b2:d6:da:e7:06:1c:15:bc:81:d1:fb:d7:c6:ee: e3:cc:1a:7b:3f:81:09:f2:01:3f:a5:d8:6d:14:1c:32:3f:a3: 24:11:a5:d0:75:48:f3:d1:20:48:6d:91:7c:f5:91:fb:cd:c1: 75:9f:8b:42 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIULzL58ShzdL375qNDodocCUvwz10wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNDAzMDE1MDA0WhcNMjYwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxZjg2YzQ3N2VmY2M4MzU5NjE2YTAyMTE2ZjBkMGI2MWUz MDczNTA2NDA2NWFiNjdiNTk5N2QyYWFiM2UwYWNjMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKo+ZxlPnWRWcZi3dfckMP3z57mSqnCRBxqcDnrJmYagW/ 92sg/D0PXLSeR/P5/g1xzps2FKaC8dU4HpaQBf55rUKupnxr7AVhYyB6vIkXq3fe pUUyKdGyTQJY6xPblitYWUVGxT04T6YtM+GsrVAtsyTKIDx5waFUzC1IvAxpjSQq IMvCMS3Oia5+c/Jz3BA7J9wLI/UZsIPe3iNdSCZAFA/h3E65DrAZiSv7F5MLNGJn +mcLtDZw+BvUsbOXR2Ld6+SEdXrKuyhqmifFI7isC+YI8thelN/+TRu0JZdchklh lg3gQvPrQSqn0lg0+haHsEXdnPto3TNxEG4fMHx5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUYepfgzwXwWwNJJLQ4jb4g7bLL3YwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzdhYzJlOTc3LWU0NjgtNGM2Ni05MzZhLTc3OGIwNDQxNDc5Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAJAAEDcwDQYJKoZIhvcNAQELBQADggEBAKDFQK7YlhzCuqIXjf/kqC0V 151D6yzC54ykKag3UqVZQU+dXerjq17Zh3Anjg85RwYWTpau+fKVa54PxVjUvdte gylyIwlMiGzhvD8rXOxfooMS+1g1j8cJ1HF3vAiPWpTUc2rodR9m06DvOhdOQBOK sieuYG9UHz80Ux/g3DjCVSl0zLzmpK5MDpDqyLRMMkqgzPVWiURvr6kUuQ9/DFuP 00CmWH0M8xQI5vGrbVxuA4+I5b9pHteYbQcN+5fbxNKA1wfdKUEC8eKy1trnBhwV vIHR+9fG7uPMGns/gQnyAT+l2G0UHDI/oyQRpdB1SPPRIEhtkXz1kfvNwXWfi0I= -----END CERTIFICATE-----Generated at Fri Apr 17 06:59:48 2026 by rpki-client