$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/85deb819-eeec-4ff7-94c0-51079618b009.roa File: 85deb819-eeec-4ff7-94c0-51079618b009.roa (raw, json) Hash identifier: yJ3vM99XaSTYR/oyKNJXXv6AyjLCE+C/VdNts277OeE= Subject key identifier: 86:45:9C:07:D5:D2:C1:D0:E1:5D:26:E1:DC:EA:62:DC:79:48:33:6A Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 4340B7CDAEEC8F782C0335C9A907CE2949628B65 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/85deb819-eeec-4ff7-94c0-51079618b009.roa Signing time: Fri 03 Apr 2026 01:30:12 +0000 ROA not before: Fri 03 Apr 2026 01:30:12 +0000 ROA not after: Thu 02 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:10a7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:40:b7:cd:ae:ec:8f:78:2c:03:35:c9:a9:07:ce:29:49:62:8b:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Apr 3 01:30:12 2026 GMT Not After : Jul 2 23:59:59 2026 GMT Subject: serialNumber=4f83c256972d0c226e50d17f5bfe2fc4b2fe39cdbfb5bbb542bb0cb524ee65f8, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:97:4e:7c:11:40:06:80:62:c0:09:c8:94:0f: b7:61:a9:06:18:23:14:8f:71:cb:82:ee:8a:c3:40: ce:81:5f:ce:0d:e1:c6:fe:fc:e2:f3:7e:be:22:6e: 05:bb:d4:32:ac:1e:88:b2:0b:70:f4:c4:da:38:fd: c1:67:69:3b:93:87:86:cb:69:9f:e5:fd:c4:ff:19: 25:e2:cd:2f:66:28:35:1e:2d:73:ac:93:1a:f4:ab: e5:7e:5d:66:1e:7d:eb:db:dd:80:56:b9:f2:b7:6a: c3:2c:78:ed:c1:fa:e7:8f:17:45:f5:c7:bf:6f:15: 0c:34:32:6c:2d:a5:ae:69:62:24:f1:f2:08:0f:aa: f0:34:22:c9:db:af:72:2c:5a:74:84:26:c3:3b:70: 83:8a:f7:56:0d:ea:4a:4f:e0:18:3b:0f:0c:a6:7a: 9e:66:f1:78:8b:7e:12:1d:c8:36:1d:8c:3c:8d:aa: 36:ec:52:da:fe:6e:2e:c0:b6:bb:fb:9e:80:da:1c: 22:a1:e3:18:37:18:48:71:6f:2a:80:bd:9f:20:51: c2:48:7b:7a:5b:7c:21:13:42:e4:c5:e7:53:88:7b: e1:9e:c3:32:10:99:59:35:7a:b1:82:44:4b:f7:bb: 60:7e:53:13:c1:86:2f:da:29:b0:69:c6:72:6e:d1: fe:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:45:9C:07:D5:D2:C1:D0:E1:5D:26:E1:DC:EA:62:DC:79:48:33:6A X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/85deb819-eeec-4ff7-94c0-51079618b009.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:10a7::/48 Signature Algorithm: sha256WithRSAEncryption 99:e9:1f:3e:9c:7c:28:92:23:19:e5:5b:97:f5:15:0a:81:76: 6a:bf:b8:78:51:52:4c:e9:cc:f2:e5:e0:03:b5:69:17:d5:89: d6:26:1e:dc:88:bc:0b:75:4e:b3:b2:f9:69:3d:1b:80:bd:6e: b9:f2:47:4e:e4:2b:d4:89:19:94:a9:34:55:de:c9:7d:81:82: 58:80:b3:3c:70:2d:55:bb:0d:dc:35:5c:6f:60:f1:dd:3a:64: 45:83:15:31:b0:87:b4:3a:d4:ed:b6:74:4e:03:94:26:5c:81: 66:e6:f6:eb:f0:98:56:74:ac:ad:d7:d5:77:69:f5:69:67:34: f9:4e:ac:be:6e:27:7a:95:c6:7d:42:48:37:ec:6a:7b:e0:1c: 38:17:bd:fa:03:72:be:2f:f6:b8:67:ad:bf:fb:a8:98:cd:32: e1:df:b9:d2:bc:60:f0:fd:4a:54:a8:24:7e:52:19:2c:44:fd: 8f:ed:9c:76:24:8d:5a:d4:ac:0c:89:5d:0d:72:35:fb:c0:bd: fc:c2:f0:0e:bf:dc:3e:c8:4c:03:f5:10:5a:a7:90:54:1a:ce: 53:10:83:b7:b0:7f:cb:7a:f8:5a:88:35:10:c6:3d:a6:a4:ab: 23:f4:ce:60:3c:c6:5c:3b:96:af:b7:a8:cc:82:96:f4:a0:59: 5d:d2:b4:2f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQ0C3za7sj3gsAzXJqQfOKUlii2UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNDAzMDEzMDEyWhcNMjYwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZjgzYzI1Njk3MmQwYzIyNmU1MGQxN2Y1YmZlMmZjNGIy ZmUzOWNkYmZiNWJiYjU0MmJiMGNiNTI0ZWU2NWY4MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDsl058EUAGgGLACciUD7dhqQYYIxSPccuC7orDQM6BX84N 4cb+/OLzfr4ibgW71DKsHoiyC3D0xNo4/cFnaTuTh4bLaZ/l/cT/GSXizS9mKDUe LXOskxr0q+V+XWYefevb3YBWufK3asMseO3B+uePF0X1x79vFQw0Mmwtpa5pYiTx 8ggPqvA0Isnbr3IsWnSEJsM7cIOK91YN6kpP4Bg7Dwymep5m8XiLfhIdyDYdjDyN qjbsUtr+bi7Atrv7noDaHCKh4xg3GEhxbyqAvZ8gUcJIe3pbfCETQuTF51OIe+Ge wzIQmVk1erGCREv3u2B+UxPBhi/aKbBpxnJu0f5tAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUhkWcB9XSwdDhXSbh3Opi3HlIM2owHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1Lzg1ZGViODE5LWVlZWMtNGZmNy05NGMwLTUxMDc5NjE4YjAwOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAJAAEKcwDQYJKoZIhvcNAQELBQADggEBAJnpHz6cfCiSIxnlW5f1FQqB dmq/uHhRUkzpzPLl4AO1aRfVidYmHtyIvAt1TrOy+Wk9G4C9brnyR07kK9SJGZSp NFXeyX2BgliAszxwLVW7Ddw1XG9g8d06ZEWDFTGwh7Q61O22dE4DlCZcgWbm9uvw mFZ0rK3X1Xdp9WlnNPlOrL5uJ3qVxn1CSDfsanvgHDgXvfoDcr4v9rhnrb/7qJjN MuHfudK8YPD9SlSoJH5SGSxE/Y/tnHYkjVrUrAyJXQ1yNfvAvfzC8A6/3D7ITAP1 EFqnkFQazlMQg7ewf8t6+FqINRDGPaakqyP0zmA8xlw7lq+3qMyClvSgWV3StC8= -----END CERTIFICATE-----Generated at Fri Apr 17 06:35:54 2026 by rpki-client