$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/caf2f419-ba39-4a65-adaf-2617b4c3e530.roa File: caf2f419-ba39-4a65-adaf-2617b4c3e530.roa (raw, json) Hash identifier: iaobBL5eesHccgcy3F5vWDrgR0QjvPIGoCufqgJbCUs= Subject key identifier: EA:BC:75:EA:27:E0:53:A2:D0:0C:9E:E2:20:C2:50:A4:B5:41:52:54 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 106285CEEFF8A2706E28E816AB5D67075319E290 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/caf2f419-ba39-4a65-adaf-2617b4c3e530.roa Signing time: Fri 03 Apr 2026 01:10:11 +0000 ROA not before: Fri 03 Apr 2026 01:10:11 +0000 ROA not after: Thu 02 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1174::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:62:85:ce:ef:f8:a2:70:6e:28:e8:16:ab:5d:67:07:53:19:e2:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Apr 3 01:10:11 2026 GMT Not After : Jul 2 23:59:59 2026 GMT Subject: serialNumber=966e4e07e300ecc934366444aca26ca5cb1ba99d6d50388adbb8de67f2c044ab, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a2:2f:ce:4b:0b:88:82:ef:1a:60:aa:a1:b7: 01:17:29:36:27:c3:5e:d7:3f:85:d7:39:9d:e0:de: fe:7a:b7:bf:4b:32:10:5d:98:2c:65:75:cc:34:fc: 02:f6:47:6d:91:5f:23:f0:1a:76:af:40:2a:c3:23: 8c:9d:65:80:52:1b:db:01:f5:e5:c1:9f:9f:06:05: 90:cc:97:59:2a:f3:43:47:dc:3d:10:ed:eb:88:5e: e5:f0:11:0e:8c:90:73:e6:0e:61:a7:0b:e7:c0:e9: 26:8f:4e:c6:cb:b5:f6:1b:8e:19:2e:5b:a0:25:2b: b1:c4:25:a5:9f:7f:89:ef:f2:03:9d:8d:90:8d:7e: e2:36:d6:20:09:54:c6:55:a4:8f:9c:92:35:91:3a: 5e:bc:23:35:2c:c4:45:d3:5e:fc:eb:b4:35:db:41: 33:c4:2a:11:2e:3d:44:26:c2:b6:4a:ef:fd:c4:cc: 60:53:9e:7b:75:fc:8d:66:e9:52:4c:03:c7:58:6a: ca:80:e5:96:a6:27:b0:45:c1:c9:0c:18:5b:ee:75: 23:8f:71:a4:37:7b:eb:79:c2:28:a1:6c:d4:3b:05: 03:a7:0b:c8:a8:7d:74:e9:fb:83:6a:6b:de:93:fc: c9:ee:51:58:b6:cf:9f:11:80:0c:4a:4b:e3:2e:56: a1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:BC:75:EA:27:E0:53:A2:D0:0C:9E:E2:20:C2:50:A4:B5:41:52:54 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/caf2f419-ba39-4a65-adaf-2617b4c3e530.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1174::/48 Signature Algorithm: sha256WithRSAEncryption 51:da:61:17:40:9e:08:98:ae:aa:0a:f6:39:69:68:d1:78:5b: e0:ac:b3:e9:31:d8:ec:2f:c1:63:0f:b0:5c:08:87:27:9c:0c: 8e:60:56:e3:e3:e3:7e:14:d7:63:9a:fd:4b:21:9e:bc:c0:c6: bf:40:f2:ae:7b:de:a7:f4:9e:98:06:fe:0b:47:57:4e:aa:c3: 4a:4d:a5:f7:40:cf:ca:53:10:19:73:42:df:ec:66:89:a5:75: a8:56:b7:ba:7c:9d:2c:2e:4c:63:41:d7:9b:20:ad:b3:b8:92: bc:35:79:b3:13:7b:2f:77:6f:1b:9b:23:c8:59:d1:98:96:2b: a8:1a:5c:16:75:bc:86:76:da:26:92:eb:52:5f:c8:03:e7:0b: ad:e7:8d:26:e9:57:56:5f:dd:74:52:12:68:c7:9c:6d:18:04: d6:34:cc:2a:83:82:65:ce:b5:17:3d:5e:1a:a8:0c:50:a2:2c: e8:0f:8f:5d:db:17:fe:16:ff:6c:3b:8a:ea:ec:15:1e:ef:a4: 57:3a:06:1f:0f:71:4c:f3:1a:c3:06:2c:5a:d7:40:b4:23:59: 88:57:b1:ad:25:09:58:f2:5e:65:94:2e:85:97:67:57:32:e4: d2:d3:32:8f:93:30:59:24:49:39:c5:78:51:b7:e1:6a:d5:00: ed:23:06:bd -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEGKFzu/4onBuKOgWq11nB1MZ4pAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNDAzMDExMDExWhcNMjYwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NjZlNGUwN2UzMDBlY2M5MzQzNjY0NDRhY2EyNmNhNWNi MWJhOTlkNmQ1MDM4OGFkYmI4ZGU2N2YyYzA0NGFiMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyoi/OSwuIgu8aYKqhtwEXKTYnw17XP4XXOZ3g3v56t79L MhBdmCxldcw0/AL2R22RXyPwGnavQCrDI4ydZYBSG9sB9eXBn58GBZDMl1kq80NH 3D0Q7euIXuXwEQ6MkHPmDmGnC+fA6SaPTsbLtfYbjhkuW6AlK7HEJaWff4nv8gOd jZCNfuI21iAJVMZVpI+ckjWROl68IzUsxEXTXvzrtDXbQTPEKhEuPUQmwrZK7/3E zGBTnnt1/I1m6VJMA8dYasqA5ZamJ7BFwckMGFvudSOPcaQ3e+t5wiihbNQ7BQOn C8iofXTp+4Nqa96T/MnuUVi2z58RgAxKS+MuVqHHAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU6rx16ifgU6LQDJ7iIMJQpLVBUlQwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2NhZjJmNDE5LWJhMzktNGE2NS1hZGFmLTI2MTdiNGMzZTUzMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAJAAEXQwDQYJKoZIhvcNAQELBQADggEBAFHaYRdAngiYrqoK9jlpaNF4 W+Css+kx2OwvwWMPsFwIhyecDI5gVuPj434U12Oa/UshnrzAxr9A8q573qf0npgG /gtHV06qw0pNpfdAz8pTEBlzQt/sZomldahWt7p8nSwuTGNB15sgrbO4krw1ebMT ey93bxubI8hZ0ZiWK6gaXBZ1vIZ22iaS61JfyAPnC63njSbpV1Zf3XRSEmjHnG0Y BNY0zCqDgmXOtRc9XhqoDFCiLOgPj13bF/4W/2w7iursFR7vpFc6Bh8PcUzzGsMG LFrXQLQjWYhXsa0lCVjyXmWULoWXZ1cy5NLTMo+TMFkkSTnFeFG34WrVAO0jBr0= -----END CERTIFICATE-----Generated at Fri Apr 17 10:36:59 2026 by rpki-client