$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/86e1d685-6659-4df5-9d29-05c026fd4324.roa File: 86e1d685-6659-4df5-9d29-05c026fd4324.roa (raw, json) Hash identifier: kX4iBzI/C5yKfvOFnEdIQdzdpV8Qrp2uOcBz/QStR34= Subject key identifier: F3:48:4C:DC:A1:2D:50:DA:C3:06:7B:42:EB:30:C7:9E:EC:A6:B9:4E Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 090C08131F9EE4496C47A614CD8B673BF9BB9FD0 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/86e1d685-6659-4df5-9d29-05c026fd4324.roa Signing time: Fri 03 Apr 2026 02:11:40 +0000 ROA not before: Fri 03 Apr 2026 02:11:40 +0000 ROA not after: Thu 02 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1031::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:0c:08:13:1f:9e:e4:49:6c:47:a6:14:cd:8b:67:3b:f9:bb:9f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Apr 3 02:11:40 2026 GMT Not After : Jul 2 23:59:59 2026 GMT Subject: serialNumber=759666bb798da76106bd4d78a7eb0d83c01f585b01b355d53786c0bc659ec1d4, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:14:0c:d2:84:10:e5:01:d6:0c:aa:37:40:51: 1d:19:40:52:c8:89:eb:7f:b9:6f:b8:36:04:f8:10: 47:96:b8:46:fe:95:8f:89:05:88:44:4d:72:99:cc: 36:99:da:d2:5e:78:a4:4a:a8:b4:be:97:fe:78:96: 5b:1a:ec:3a:93:55:47:0b:9e:02:ad:82:13:fd:e7: 9e:a0:29:ad:44:45:a0:61:0d:b4:9b:08:4e:97:d6: 5d:39:d9:9f:fe:97:51:36:82:2f:36:78:e5:34:b5: c1:cb:02:e8:8e:3b:93:6a:c0:be:dc:47:c2:d0:53: 94:41:34:2d:c3:2b:53:f3:4b:18:19:08:27:96:f1: 91:50:b9:86:b4:e0:41:60:ab:c8:b3:de:28:f4:2f: 90:a5:4e:f6:54:b4:02:b7:b3:43:35:3a:4c:57:ba: 49:2a:49:c8:25:8f:be:48:a2:aa:3a:a6:f0:6f:59: 75:4e:9d:66:19:40:e8:85:5c:0b:c0:48:b6:a7:4f: b0:d5:6d:f3:5f:9c:6e:c8:dd:64:92:ce:d3:00:52: 68:8e:af:b4:12:bc:22:15:7d:85:17:9c:90:49:16: e1:5a:4c:78:a3:9d:7b:48:55:2d:db:32:39:e4:5f: f0:e1:12:f9:75:16:e2:c4:8b:9c:c9:c0:ac:23:0b: 28:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:48:4C:DC:A1:2D:50:DA:C3:06:7B:42:EB:30:C7:9E:EC:A6:B9:4E X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/86e1d685-6659-4df5-9d29-05c026fd4324.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1031::/48 Signature Algorithm: sha256WithRSAEncryption 68:2e:99:3c:4d:9c:17:65:1c:8d:ed:97:dc:e5:2d:28:d5:0b: f3:fc:fa:aa:bf:3e:26:21:18:57:4e:b5:a3:0f:65:66:18:d7: b1:3d:2a:e3:57:66:72:0f:79:50:d2:e5:9c:90:6f:6d:d6:51: 34:b0:70:1c:79:04:7e:31:3d:ed:d4:3c:f5:a4:20:7b:8b:ae: a6:0c:00:ba:3a:86:e1:84:70:1f:b5:7b:e9:bf:5c:0f:1e:4e: 51:98:1e:c3:5e:34:ea:12:7d:8d:68:d7:e8:92:4d:d2:80:9f: ac:d7:fb:e2:90:83:a0:41:6a:a3:e5:b5:b2:7f:bb:9f:07:6b: 73:1a:c6:8f:35:da:7e:5e:bb:ab:a9:70:37:86:1e:8c:4c:fa: b6:69:18:aa:47:fe:0d:65:0a:08:15:78:9a:16:0f:d2:6a:73: a4:5e:fc:33:19:da:7b:d3:88:02:d7:90:39:12:56:ba:92:00: e3:73:38:0f:23:57:9e:ad:2d:70:6a:44:92:68:27:b3:af:f0: 2b:c9:f2:22:92:b0:92:d4:74:e6:8f:19:0a:19:93:68:e7:a6: f4:52:89:33:b5:87:d8:d8:71:e5:26:7d:e0:8c:d0:b7:a2:4d: d2:86:13:10:dc:31:7c:6a:ac:fc:6d:fa:9b:2f:ab:41:fa:28: cc:22:f5:81 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCQwIEx+e5ElsR6YUzYtnO/m7n9AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNDAzMDIxMTQwWhcNMjYwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NTk2NjZiYjc5OGRhNzYxMDZiZDRkNzhhN2ViMGQ4M2Mw MWY1ODViMDFiMzU1ZDUzNzg2YzBiYzY1OWVjMWQ0MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD3FAzShBDlAdYMqjdAUR0ZQFLIiet/uW+4NgT4EEeWuEb+ lY+JBYhETXKZzDaZ2tJeeKRKqLS+l/54llsa7DqTVUcLngKtghP9556gKa1ERaBh DbSbCE6X1l052Z/+l1E2gi82eOU0tcHLAuiOO5NqwL7cR8LQU5RBNC3DK1PzSxgZ CCeW8ZFQuYa04EFgq8iz3ij0L5ClTvZUtAK3s0M1OkxXukkqScglj75Ioqo6pvBv WXVOnWYZQOiFXAvASLanT7DVbfNfnG7I3WSSztMAUmiOr7QSvCIVfYUXnJBJFuFa THijnXtIVS3bMjnkX/DhEvl1FuLEi5zJwKwjCyjpAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU80hM3KEtUNrDBntC6zDHnuymuU4wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1Lzg2ZTFkNjg1LTY2NTktNGRmNS05ZDI5LTA1YzAyNmZkNDMyNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAJAAEDEwDQYJKoZIhvcNAQELBQADggEBAGgumTxNnBdlHI3tl9zlLSjV C/P8+qq/PiYhGFdOtaMPZWYY17E9KuNXZnIPeVDS5ZyQb23WUTSwcBx5BH4xPe3U PPWkIHuLrqYMALo6huGEcB+1e+m/XA8eTlGYHsNeNOoSfY1o1+iSTdKAn6zX++KQ g6BBaqPltbJ/u58Ha3Maxo812n5eu6upcDeGHoxM+rZpGKpH/g1lCggVeJoWD9Jq c6Re/DMZ2nvTiALXkDkSVrqSAONzOA8jV56tLXBqRJJoJ7Ov8CvJ8iKSsJLUdOaP GQoZk2jnpvRSiTO1h9jYceUmfeCM0LeiTdKGExDcMXxqrPxt+psvq0H6KMwi9YE= -----END CERTIFICATE-----Generated at Sun Apr 19 11:02:56 2026 by rpki-client