$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8fb715ad-62ed-479d-8f3e-e4ed86ea390a.roa File: 8fb715ad-62ed-479d-8f3e-e4ed86ea390a.roa (raw, json) Hash identifier: oOD/arMeCKR4VxoeCIk8GfHSAiTu+JuaWN9JzEm8J1A= Subject key identifier: BA:E4:FB:25:FA:0E:48:2F:9D:45:1F:5E:B0:0E:E3:76:E7:11:5F:90 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 596645C29A0F134294AD9B8854B61E1AA9569B Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8fb715ad-62ed-479d-8f3e-e4ed86ea390a.roa Signing time: Fri 03 Apr 2026 02:12:03 +0000 ROA not before: Fri 03 Apr 2026 02:12:03 +0000 ROA not after: Thu 02 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1221::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:66:45:c2:9a:0f:13:42:94:ad:9b:88:54:b6:1e:1a:a9:56:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Apr 3 02:12:03 2026 GMT Not After : Jul 2 23:59:59 2026 GMT Subject: serialNumber=929e81c4456fe8cf0dcbe0a529211eebb6e135d403e8a4631a3034ce3efc1268, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f9:3c:c5:6a:d4:43:0a:a6:3b:a1:8e:ed:3d: 7a:7f:ef:7c:dc:47:9c:d3:80:d6:b7:6f:02:c8:37: 0e:8d:4f:90:29:bd:e6:42:ef:fd:52:de:f9:97:c6: 96:f1:96:23:65:b9:ac:0a:2b:c6:c6:05:fa:b6:bb: d2:28:43:c2:c8:60:c9:e1:3e:1e:95:2c:09:f1:b3: b9:7f:e3:86:2f:9c:0b:89:16:81:75:a3:b4:e6:34: 2e:73:ac:ae:0d:d8:e4:68:bd:a7:9d:f1:02:c3:6e: 53:9d:c4:75:f6:58:56:33:20:45:d3:9d:84:8a:1a: d6:3f:dd:cb:76:ab:99:4c:6c:13:d2:de:e8:a2:12: dd:a9:3f:4d:9c:6e:10:a1:86:83:68:dc:1c:f1:f1: 38:6c:4c:63:94:41:eb:09:0d:0f:42:34:90:08:36: cb:3e:37:5d:4e:a0:0c:5b:b7:86:d1:02:86:30:50: ed:2f:ca:8b:bf:82:e6:09:41:b6:86:6a:4c:21:5e: dd:2c:4d:19:3c:b0:26:3d:27:0b:a3:69:e7:36:24: e4:58:c0:6d:db:17:f0:45:52:7e:e8:37:66:81:13: e7:93:e1:d4:50:22:65:04:f4:f0:8c:66:6f:1c:93: 32:c0:5a:52:ce:b8:eb:76:8c:93:3f:0e:71:9c:f1: 74:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E4:FB:25:FA:0E:48:2F:9D:45:1F:5E:B0:0E:E3:76:E7:11:5F:90 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8fb715ad-62ed-479d-8f3e-e4ed86ea390a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1221::/48 Signature Algorithm: sha256WithRSAEncryption 27:ef:26:1d:6e:0a:ac:cb:d6:01:3a:bd:1b:5f:8b:e3:f7:00: b9:c0:69:5e:a6:89:84:86:7d:c1:5e:51:99:f7:83:1c:eb:3a: db:af:01:6a:6c:68:75:d8:16:43:46:09:f1:8a:b9:17:c7:64: c8:24:ad:52:bc:09:2d:e0:55:9e:9d:8c:65:df:c0:ab:86:c1: 9d:fd:a2:d5:6c:1d:81:e3:0a:1b:36:a4:b5:ff:65:15:8e:ab: ec:23:c0:3b:bb:aa:89:1b:04:45:84:e8:2f:01:0c:de:6b:33: cb:e4:31:a0:84:d4:7e:3b:bb:3d:d0:9a:ae:2d:da:78:d5:ae: 53:a1:0c:10:14:79:d8:ec:70:7b:d4:67:7e:40:ac:c7:68:87: e3:e5:c3:5a:10:24:b9:fe:4b:2e:c1:ff:3e:95:ea:ad:53:c7: df:be:c2:8b:15:d6:4c:66:f5:5d:ee:10:ea:80:33:80:d3:3f: 74:70:f9:20:a9:b8:f2:f0:4c:10:66:6f:66:04:f9:1b:95:ee: 88:09:5f:72:08:f0:e1:98:0d:3b:f0:3a:7b:31:aa:f1:d5:8b: 03:45:03:8a:ed:5f:eb:b2:c3:84:9b:cf:8e:5d:0a:c9:94:4a: 51:10:8d:e6:dc:18:cb:c1:be:b1:5e:bc:15:1f:76:ac:5e:61: ef:51:84:79 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgITWWZFwpoPE0KUrZuIVLYeGqlWmzANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI1NTEyMDkwMjdmNWU3YWQ1NGUwNGYwNDJlNGFjMGU5ZTY1 YzU2ZTU1Yzc3NDc4ZDJjZTAeFw0yNjA0MDMwMjEyMDNaFw0yNjA3MDIyMzU5NTla MHoxSTBHBgNVBAUTQDkyOWU4MWM0NDU2ZmU4Y2YwZGNiZTBhNTI5MjExZWViYjZl MTM1ZDQwM2U4YTQ2MzFhMzAzNGNlM2VmYzEyNjgxLTArBgNVBAMTJDlmMjMwZmE5 LWFhMmYtNDAyMC1hZTJhLTFhNjAzNzQwODRiODCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAK/5PMVq1EMKpjuhju09en/vfNxHnNOA1rdvAsg3Do1PkCm9 5kLv/VLe+ZfGlvGWI2W5rAorxsYF+ra70ihDwshgyeE+HpUsCfGzuX/jhi+cC4kW gXWjtOY0LnOsrg3Y5Gi9p53xAsNuU53EdfZYVjMgRdOdhIoa1j/dy3armUxsE9Le 6KIS3ak/TZxuEKGGg2jcHPHxOGxMY5RB6wkND0I0kAg2yz43XU6gDFu3htEChjBQ 7S/Ki7+C5glBtoZqTCFe3SxNGTywJj0nC6Np5zYk5FjAbdsX8EVSfug3ZoET55Ph 1FAiZQT08IxmbxyTMsBaUs6463aMkz8OcZzxdG8CAwEAAaOCArQwggKwMB0GA1Ud DgQWBBS65Psl+g5IL51FH16wDuN25xFfkDAfBgNVHSMEGDAWgBTo88Ug4g7yXTq3 oha7FAQxajc48TAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv ZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzk5ZjhmZWQyLTI5 MmItNDcyMi1iOTI4LWZlZTdiZjBhNTkxMC81NTEyMDkwMjdmNWU3YWQ1NGUwNGYw NDJlNGFjMGU5ZTY1YzU2ZTU1Yzc3NDc4ZDJjZS5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9lNzUxOGFmNS1hMzQzLTQyOGQtYmY3OC1mOTgy YjZlNjA1MDUvOGZiNzE1YWQtNjJlZC00NzlkLThmM2UtZTRlZDg2ZWEzOTBhLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgt Zjk4MmI2ZTYwNTA1L1huclZUZ1R3UXVTc0RwNWx4VzVWeDNSNDBzNC5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHACYAkAASITANBgkqhkiG9w0BAQsFAAOCAQEAJ+8mHW4KrMvWATq9G1+L4/cA ucBpXqaJhIZ9wV5RmfeDHOs6268BamxoddgWQ0YJ8Yq5F8dkyCStUrwJLeBVnp2M Zd/Aq4bBnf2i1WwdgeMKGzaktf9lFY6r7CPAO7uqiRsERYToLwEM3mszy+QxoITU fju7PdCari3aeNWuU6EMEBR52Oxwe9RnfkCsx2iH4+XDWhAkuf5LLsH/PpXqrVPH 377CixXWTGb1Xe4Q6oAzgNM/dHD5IKm48vBMEGZvZgT5G5XuiAlfcgjw4ZgNO/A6 ezGq8dWLA0UDiu1f67LDhJvPjl0KyZRKURCN5twYy8G+sV68FR92rF5h71GEeQ== -----END CERTIFICATE-----Generated at Fri Apr 17 09:33:04 2026 by rpki-client