$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/97a899fd-f2c9-4ad0-9251-213508975229.roa File: 97a899fd-f2c9-4ad0-9251-213508975229.roa (raw, json) Hash identifier: EE8KHQ5mz3h0wc1cXtYbDVCE7fZu4QGxm9+fuOFIWDc= Subject key identifier: 16:CC:14:84:CB:09:E4:BD:B4:89:75:80:BD:EF:AD:F7:22:18:B0:ED Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 6AB46702D252799E2EF7F1285B2939346B92AC1A Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/97a899fd-f2c9-4ad0-9251-213508975229.roa Signing time: Fri 03 Apr 2026 00:30:54 +0000 ROA not before: Fri 03 Apr 2026 00:30:54 +0000 ROA not after: Thu 02 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1036::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:b4:67:02:d2:52:79:9e:2e:f7:f1:28:5b:29:39:34:6b:92:ac:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Apr 3 00:30:54 2026 GMT Not After : Jul 2 23:59:59 2026 GMT Subject: serialNumber=e20b0f0c61dd11049132410b841cc8366d0e4fc74bae92973763ddbfa9ec2201, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:99:a2:a0:18:07:07:59:68:c3:a4:f4:44:35: 6a:1d:21:c6:91:ff:78:dd:a8:af:bb:98:b8:9c:f0: c8:0b:38:54:d3:e9:e5:6b:00:e6:a8:2a:7d:dd:fd: f4:f7:c9:76:03:9c:4f:c2:22:f5:9f:50:ee:79:75: 7a:a8:f7:22:a6:60:9d:e9:30:ca:c2:40:5b:90:23: dd:40:fb:a5:bf:9a:bc:b4:52:5c:c6:a5:f5:eb:06: 80:d3:d0:01:5f:bb:65:3f:25:05:b4:b0:4d:25:0c: 15:35:e0:55:31:07:04:3c:64:8b:98:8d:aa:1f:68: 5e:59:09:3e:d0:82:5a:00:71:da:04:94:7a:56:34: ae:52:17:f0:e4:c2:57:64:61:29:22:39:f6:96:14: 7f:60:1e:f2:6f:19:d1:44:da:ab:5a:63:0d:79:f9: df:e8:13:74:5b:fe:ef:7a:38:31:74:76:bd:da:68: 92:79:36:7f:fd:17:d4:67:86:b2:58:be:65:e3:76: 76:eb:74:c9:d3:e3:78:ee:b5:77:14:1e:dd:04:49: 86:9b:d1:a0:4c:92:cf:72:29:69:15:b6:6a:85:cc: 82:c0:bd:bc:00:d2:3c:0f:89:3f:f8:ab:66:60:4d: 7b:30:c8:a3:05:b2:f4:39:14:c5:5e:db:d6:ab:29: 01:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:CC:14:84:CB:09:E4:BD:B4:89:75:80:BD:EF:AD:F7:22:18:B0:ED X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/97a899fd-f2c9-4ad0-9251-213508975229.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1036::/48 Signature Algorithm: sha256WithRSAEncryption 5a:58:eb:37:f7:45:7b:e3:bf:ac:58:63:02:9b:a6:95:ba:d8: c2:94:21:f0:65:96:c8:c6:a7:df:5d:b0:c5:e9:a5:87:79:72: ed:e5:2c:94:b1:87:59:b4:2d:d0:92:0b:b0:03:85:be:3a:6d: c2:4f:44:79:4f:0c:95:eb:a6:60:db:00:0c:c7:5d:d4:1b:6d: b4:10:3b:e3:21:ad:6b:4f:8e:4f:1f:55:6b:ef:60:29:02:d0: 75:fb:4a:02:2d:92:20:23:ae:8c:0d:19:4f:58:03:d4:48:34: 5e:4d:4e:ec:e0:ea:d0:f3:de:83:d4:4b:1a:06:64:1e:86:76: 59:ff:58:53:a7:49:94:c5:1a:0e:62:0b:38:cf:21:2a:bf:ff: 21:5c:68:57:6a:39:35:47:8f:f3:9f:1e:cd:ec:98:61:42:76: e1:2c:59:5d:63:70:c0:21:73:9b:3d:f1:48:e4:e6:7a:e6:c8: 8d:fa:c1:99:42:55:ab:bf:13:6c:19:0a:9f:6e:6e:fb:69:c5: 4a:fd:3b:32:9e:35:8c:fd:2f:1f:43:f4:4b:38:60:e7:8c:1a: 46:5d:a7:5a:c2:e8:fc:fb:d0:5b:74:5d:83:c1:b8:d3:83:88: 55:a6:79:db:c5:17:15:a3:a2:be:cd:3d:c9:5f:89:8c:fe:55: 85:b4:26:22 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUarRnAtJSeZ4u9/EoWyk5NGuSrBowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNDAzMDAzMDU0WhcNMjYwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMjBiMGYwYzYxZGQxMTA0OTEzMjQxMGI4NDFjYzgzNjZk MGU0ZmM3NGJhZTkyOTczNzYzZGRiZmE5ZWMyMjAxMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0maKgGAcHWWjDpPRENWodIcaR/3jdqK+7mLic8MgLOFTT 6eVrAOaoKn3d/fT3yXYDnE/CIvWfUO55dXqo9yKmYJ3pMMrCQFuQI91A+6W/mry0 UlzGpfXrBoDT0AFfu2U/JQW0sE0lDBU14FUxBwQ8ZIuYjaofaF5ZCT7QgloAcdoE lHpWNK5SF/DkwldkYSkiOfaWFH9gHvJvGdFE2qtaYw15+d/oE3Rb/u96ODF0dr3a aJJ5Nn/9F9RnhrJYvmXjdnbrdMnT43jutXcUHt0ESYab0aBMks9yKWkVtmqFzILA vbwA0jwPiT/4q2ZgTXswyKMFsvQ5FMVe29arKQGxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUFswUhMsJ5L20iXWAve+t9yIYsO0wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1Lzk3YTg5OWZkLWYyYzktNGFkMC05MjUxLTIxMzUwODk3NTIyOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAJAAEDYwDQYJKoZIhvcNAQELBQADggEBAFpY6zf3RXvjv6xYYwKbppW6 2MKUIfBllsjGp99dsMXppYd5cu3lLJSxh1m0LdCSC7ADhb46bcJPRHlPDJXrpmDb AAzHXdQbbbQQO+MhrWtPjk8fVWvvYCkC0HX7SgItkiAjrowNGU9YA9RINF5NTuzg 6tDz3oPUSxoGZB6Gdln/WFOnSZTFGg5iCzjPISq//yFcaFdqOTVHj/OfHs3smGFC duEsWV1jcMAhc5s98Ujk5nrmyI36wZlCVau/E2wZCp9ubvtpxUr9OzKeNYz9Lx9D 9Es4YOeMGkZdp1rC6Pz70Ft0XYPBuNODiFWmedvFFxWjor7NPclfiYz+VYW0JiI= -----END CERTIFICATE-----Generated at Fri Apr 17 11:43:20 2026 by rpki-client