$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c04cf2f1-5ba3-4a78-b088-37724d66236d.roa File: c04cf2f1-5ba3-4a78-b088-37724d66236d.roa (raw, json) Hash identifier: +VQNjfoGsYkG9PUiM2pwwEo1bpl6UP7GFDe7j+1SPME= Subject key identifier: 02:6E:4C:CC:32:8C:81:DC:0A:FC:9D:1D:9B:27:A7:50:DF:7D:64:D5 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 7187D8CBEBD918076335C7B949D7E943571885AA Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c04cf2f1-5ba3-4a78-b088-37724d66236d.roa Signing time: Fri 03 Apr 2026 01:41:41 +0000 ROA not before: Fri 03 Apr 2026 01:41:41 +0000 ROA not after: Thu 02 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:11e5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:87:d8:cb:eb:d9:18:07:63:35:c7:b9:49:d7:e9:43:57:18:85:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Apr 3 01:41:41 2026 GMT Not After : Jul 2 23:59:59 2026 GMT Subject: serialNumber=cca4dc71a7b2be05c31f169eaec27fe71dcb7714976391f6b51a40294726f8e6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fb:8a:a8:f0:96:b0:3d:b5:97:84:28:9c:ef: a2:5e:5c:57:12:32:6d:d8:3f:ec:d2:ff:10:dc:0f: 19:16:87:de:3f:f4:03:87:3e:18:26:d9:1d:2e:12: fd:17:e0:66:5a:2c:b4:3e:ba:a6:2e:99:e5:09:2a: 02:00:90:15:14:29:df:95:35:11:ce:0e:d3:f7:53: 84:ea:17:91:df:f9:c3:e0:24:cf:09:a2:77:24:7c: f6:74:6f:1d:29:25:21:68:94:4a:25:5e:58:cc:67: 56:e0:79:77:2e:15:e1:ca:23:a7:de:85:d1:e6:fb: 17:8e:55:2c:54:65:95:f4:1d:98:a9:39:90:90:03: e6:0a:e3:25:c3:fc:c3:0a:eb:90:9d:30:56:51:07: 80:21:1a:7d:88:60:55:67:34:93:b0:e2:43:56:84: 06:40:e6:c5:86:71:2f:bd:d5:ad:fc:72:99:66:6a: 0d:2f:c9:c5:9b:ff:99:b9:d8:82:f4:c2:05:47:9b: a4:3a:be:17:52:de:44:31:6a:7c:d7:ee:18:96:dd: 06:ee:cc:66:c4:2c:d0:bf:e4:52:0d:e4:25:df:de: 7e:bb:d7:a9:79:da:98:64:d5:86:ee:0f:e5:29:bf: e9:d2:4b:15:95:c6:5c:7c:71:1e:99:5c:6a:6b:08: 1b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:6E:4C:CC:32:8C:81:DC:0A:FC:9D:1D:9B:27:A7:50:DF:7D:64:D5 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c04cf2f1-5ba3-4a78-b088-37724d66236d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:11e5::/48 Signature Algorithm: sha256WithRSAEncryption 83:f2:6a:00:b9:49:b2:37:7f:3c:cb:9e:77:d6:ff:1f:3a:55: d1:0d:ca:31:ad:c5:7c:a5:e1:79:d1:a3:49:df:ae:61:8f:6e: 5a:d5:14:b4:d1:13:d3:d3:34:f6:c7:80:f1:38:a4:af:0d:26: 49:5c:1e:64:26:ee:89:f1:07:c7:40:80:44:d0:2b:11:e0:c1: 01:f6:62:cd:2c:6d:79:2c:cd:90:a4:34:75:d1:a6:ba:6a:1b: b3:1a:13:24:8f:01:eb:af:13:a7:93:3b:a0:8e:47:2e:1d:a3: e7:32:72:ff:82:37:f2:58:ad:d1:37:95:ce:51:88:a6:4a:eb: ef:c4:ba:57:36:d1:a7:d3:5a:00:98:6c:3c:d3:5b:dd:93:12: ea:28:30:f2:6c:e7:93:07:1a:cc:0e:06:58:79:7d:8a:2c:29: d3:d5:9c:49:fb:b7:97:d1:64:b1:6a:d4:3b:22:8f:c1:f2:56: ba:b0:4b:27:87:6b:01:a9:68:11:ff:37:9c:ff:cf:c3:7f:14: 4d:dd:68:8b:8d:38:d3:10:60:41:e3:f7:0b:52:58:a7:a2:fe: 93:a4:fb:3a:c6:9f:f5:6e:b9:c4:36:26:72:28:cf:a8:31:b9: 78:bc:9e:60:03:15:e6:b9:f1:b2:86:63:3a:cc:6f:38:2c:85: 77:82:88:c1 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcYfYy+vZGAdjNce5SdfpQ1cYhaowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNDAzMDE0MTQxWhcNMjYwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjY2E0ZGM3MWE3YjJiZTA1YzMxZjE2OWVhZWMyN2ZlNzFk Y2I3NzE0OTc2MzkxZjZiNTFhNDAyOTQ3MjZmOGU2MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDC+4qo8JawPbWXhCic76JeXFcSMm3YP+zS/xDcDxkWh94/ 9AOHPhgm2R0uEv0X4GZaLLQ+uqYumeUJKgIAkBUUKd+VNRHODtP3U4TqF5Hf+cPg JM8JonckfPZ0bx0pJSFolEolXljMZ1bgeXcuFeHKI6fehdHm+xeOVSxUZZX0HZip OZCQA+YK4yXD/MMK65CdMFZRB4AhGn2IYFVnNJOw4kNWhAZA5sWGcS+91a38cplm ag0vycWb/5m52IL0wgVHm6Q6vhdS3kQxanzX7hiW3QbuzGbELNC/5FIN5CXf3n67 16l52phk1YbuD+Upv+nSSxWVxlx8cR6ZXGprCBtXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUAm5MzDKMgdwK/J0dmyenUN99ZNUwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2MwNGNmMmYxLTViYTMtNGE3OC1iMDg4LTM3NzI0ZDY2MjM2ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAJAAEeUwDQYJKoZIhvcNAQELBQADggEBAIPyagC5SbI3fzzLnnfW/x86 VdENyjGtxXyl4XnRo0nfrmGPblrVFLTRE9PTNPbHgPE4pK8NJklcHmQm7onxB8dA gETQKxHgwQH2Ys0sbXkszZCkNHXRprpqG7MaEySPAeuvE6eTO6CORy4do+cycv+C N/JYrdE3lc5RiKZK6+/Eulc20afTWgCYbDzTW92TEuooMPJs55MHGswOBlh5fYos KdPVnEn7t5fRZLFq1Dsij8HyVrqwSyeHawGpaBH/N5z/z8N/FE3daIuNONMQYEHj 9wtSWKei/pOk+zrGn/VuucQ2JnIoz6gxuXi8nmADFea58bKGYzrMbzgshXeCiME= -----END CERTIFICATE-----Generated at Fri Apr 17 07:46:35 2026 by rpki-client