$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8a94b987-bbe1-4802-a967-e7a812415f7c.roa File: 8a94b987-bbe1-4802-a967-e7a812415f7c.roa (raw, json) Hash identifier: 1pgltNMiu1+LTwLp1IgmvtdeeymaOPlnLNXgtbpiZ5s= Subject key identifier: FA:71:CC:CB:2A:18:E7:C0:B8:8F:88:96:F5:50:9A:62:6D:7D:CD:57 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 477B290FCECD95C635FD689EBDB4F2FCFA4AE89B Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8a94b987-bbe1-4802-a967-e7a812415f7c.roa Signing time: Fri 03 Apr 2026 01:11:55 +0000 ROA not before: Fri 03 Apr 2026 01:11:55 +0000 ROA not after: Thu 02 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:10e7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:7b:29:0f:ce:cd:95:c6:35:fd:68:9e:bd:b4:f2:fc:fa:4a:e8:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Apr 3 01:11:55 2026 GMT Not After : Jul 2 23:59:59 2026 GMT Subject: serialNumber=00745a65220fec18f627d406fc108140f797baecee40460ef5b2bdc5cdd2d449, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7c:2f:14:50:f4:a9:b2:90:67:89:1f:0c:97: 11:32:45:b8:fd:2d:20:21:d2:48:df:cd:be:6f:6f: ca:d7:18:42:d1:f2:5a:3f:92:9c:33:c0:33:d2:c6: 2f:48:12:9d:8c:3d:6a:3e:65:63:b1:20:e7:7d:db: a0:8a:2d:c2:af:8a:19:47:04:f0:6c:0d:ba:d3:0b: d7:e8:21:b9:86:ce:de:7e:55:39:d1:13:65:5f:f2: 22:a4:a6:1e:06:3a:0b:22:66:1b:3e:df:63:51:9c: 54:16:ea:cd:72:08:a4:7b:b5:a2:9d:0e:a6:c1:12: a7:7c:b7:67:73:79:8d:f4:31:9a:a1:42:40:8c:b9: 6e:c4:1f:c5:21:5f:90:f5:23:b5:a9:b4:ce:63:3e: 5f:88:cd:1c:35:9f:be:86:b7:dc:16:a5:70:20:04: cc:fc:ce:3c:10:a0:18:46:a9:8f:fa:fc:d3:83:fd: 84:b1:66:48:01:66:d3:d8:2d:e1:ee:fb:68:3e:53: 3e:d7:0b:28:e6:f5:c1:d9:3f:2e:97:44:8d:cc:7d: 08:1b:d0:76:17:89:64:5b:d8:55:c8:b3:d4:5a:93: 1a:0a:1a:5f:7d:17:06:0a:3d:15:18:a5:eb:ce:82: eb:85:7e:6a:c8:f3:85:d9:b4:c9:63:39:af:cd:24: a4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:71:CC:CB:2A:18:E7:C0:B8:8F:88:96:F5:50:9A:62:6D:7D:CD:57 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8a94b987-bbe1-4802-a967-e7a812415f7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:10e7::/48 Signature Algorithm: sha256WithRSAEncryption 3d:34:63:5a:44:ed:fe:9a:d4:e0:fa:00:02:50:fd:d1:eb:fa: 12:31:06:f9:ae:6a:aa:f8:40:32:0f:bc:74:c0:c9:2b:d1:7d: de:53:07:4d:90:ba:aa:56:1d:0c:90:da:2f:dd:90:c8:01:f2: 8f:27:b4:b5:b4:29:d7:da:bd:94:b1:40:98:95:24:08:ac:b9: 4a:97:74:b6:07:1c:f1:9b:a9:18:e9:3a:d9:a7:af:c3:cb:8a: 38:7d:8a:10:5c:90:1f:45:54:5a:e0:18:94:04:a7:1c:51:2a: aa:0d:93:83:c1:9b:06:d4:2b:73:c9:39:6e:4e:d3:11:4b:5b: cc:a9:10:15:1e:e7:64:f7:d0:75:ce:80:77:68:58:0f:f5:f3: a9:01:04:0a:07:e7:ab:61:dd:1a:f0:a6:ea:43:32:76:91:7e: f6:73:27:3b:de:b4:c6:0d:71:7c:8a:1b:40:81:fe:7b:8b:ff: 93:35:5d:6a:ae:10:41:1f:dc:1a:a6:0a:04:9d:00:54:c2:50: 15:9e:88:1e:a4:20:40:e0:99:ec:8a:5d:e5:03:95:3e:62:c0: b9:cb:4a:da:e4:04:c7:20:cf:e2:f8:a4:57:f5:ff:1c:03:32: 9f:6c:ad:b3:8b:95:d4:6b:35:88:65:a0:a8:52:01:96:21:3f: 76:95:8b:31 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUR3spD87NlcY1/WievbTy/PpK6JswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNDAzMDExMTU1WhcNMjYwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMDc0NWE2NTIyMGZlYzE4ZjYyN2Q0MDZmYzEwODE0MGY3 OTdiYWVjZWU0MDQ2MGVmNWIyYmRjNWNkZDJkNDQ5MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+fC8UUPSpspBniR8MlxEyRbj9LSAh0kjfzb5vb8rXGELR 8lo/kpwzwDPSxi9IEp2MPWo+ZWOxIOd926CKLcKvihlHBPBsDbrTC9foIbmGzt5+ VTnRE2Vf8iKkph4GOgsiZhs+32NRnFQW6s1yCKR7taKdDqbBEqd8t2dzeY30MZqh QkCMuW7EH8UhX5D1I7WptM5jPl+IzRw1n76Gt9wWpXAgBMz8zjwQoBhGqY/6/NOD /YSxZkgBZtPYLeHu+2g+Uz7XCyjm9cHZPy6XRI3MfQgb0HYXiWRb2FXIs9RakxoK Gl99FwYKPRUYpevOguuFfmrI84XZtMljOa/NJKStAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU+nHMyyoY58C4j4iW9VCaYm19zVcwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzhhOTRiOTg3LWJiZTEtNDgwMi1hOTY3LWU3YTgxMjQxNWY3Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAJAAEOcwDQYJKoZIhvcNAQELBQADggEBAD00Y1pE7f6a1OD6AAJQ/dHr +hIxBvmuaqr4QDIPvHTAySvRfd5TB02QuqpWHQyQ2i/dkMgB8o8ntLW0KdfavZSx QJiVJAisuUqXdLYHHPGbqRjpOtmnr8PLijh9ihBckB9FVFrgGJQEpxxRKqoNk4PB mwbUK3PJOW5O0xFLW8ypEBUe52T30HXOgHdoWA/186kBBAoH56th3RrwpupDMnaR fvZzJzvetMYNcXyKG0CB/nuL/5M1XWquEEEf3BqmCgSdAFTCUBWeiB6kIEDgmeyK XeUDlT5iwLnLStrkBMcgz+L4pFf1/xwDMp9srbOLldRrNYhloKhSAZYhP3aVizE= -----END CERTIFICATE-----Generated at Fri Apr 17 08:19:34 2026 by rpki-client