$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ddd28e03-af48-4c67-9a59-f7749e754a31.roa File: ddd28e03-af48-4c67-9a59-f7749e754a31.roa (raw, json) Hash identifier: bRMTBRATyJn9Yc/pczcVFshDrG2qLUJthZXdc9h2JGc= Subject key identifier: 77:70:F8:09:25:1C:72:C4:CD:DA:38:B9:72:C9:90:3B:6B:09:E6:AD Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 7E838E818C4493E11F269E477F8FFFF0B414CED4 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ddd28e03-af48-4c67-9a59-f7749e754a31.roa Signing time: Fri 03 Apr 2026 02:20:09 +0000 ROA not before: Fri 03 Apr 2026 02:20:09 +0000 ROA not after: Thu 02 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:117d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:83:8e:81:8c:44:93:e1:1f:26:9e:47:7f:8f:ff:f0:b4:14:ce:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Apr 3 02:20:09 2026 GMT Not After : Jul 2 23:59:59 2026 GMT Subject: serialNumber=8393641d63edfd68c46f92bfdedd54e59e69948de2e209f3f9a22e98ec47d1c8, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:08:b8:e1:46:b3:fa:a2:9c:97:41:f4:61:f3: 21:45:9c:50:c4:7e:b0:4a:d4:8a:2a:4d:77:d2:ff: 4a:f5:39:4f:cc:3b:54:7c:de:63:72:52:a1:92:1e: 30:8c:0d:5b:aa:00:d0:04:fe:cf:dd:c3:72:dc:a6: a5:a3:ec:bc:5e:22:af:b8:cf:12:cb:3f:87:e7:50: b7:05:3c:8c:7a:d7:ad:85:69:87:4d:56:20:36:48: 0e:11:b6:45:6c:80:cb:f1:33:04:ee:56:5c:ff:e8: 1d:50:6c:38:9b:cf:ac:f8:3f:a6:45:62:a4:f9:f5: 22:e1:8b:03:44:c0:6e:69:bc:3b:72:fb:06:8d:64: 39:44:e9:a5:6e:80:63:68:0d:50:37:1a:40:09:a6: 01:cb:a5:34:3b:f1:ec:6a:46:31:dc:15:d6:c5:b8: f3:b4:95:d5:8b:9c:c7:4f:a6:7c:eb:22:4f:50:71: d1:bd:e9:6a:43:5f:73:3b:86:53:16:10:90:35:ef: b5:ce:ac:b8:e5:a2:4e:b5:36:23:2e:3f:93:42:60: 96:cf:3d:9e:da:c5:6f:00:f2:21:39:14:ac:71:1d: c4:91:a5:e0:1d:25:32:02:23:22:ab:26:46:ec:e2: 34:88:a6:a3:1f:21:ea:8a:e5:c6:0b:91:f3:94:03: 0a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:70:F8:09:25:1C:72:C4:CD:DA:38:B9:72:C9:90:3B:6B:09:E6:AD X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ddd28e03-af48-4c67-9a59-f7749e754a31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:117d::/48 Signature Algorithm: sha256WithRSAEncryption 46:c0:04:c3:9c:e6:b2:90:71:7a:ff:aa:96:b0:0a:55:4a:c2: be:84:a8:df:1e:7b:09:94:2b:2b:15:43:99:14:71:c0:39:dc: 6b:73:7c:90:ba:db:8b:78:ba:bf:46:77:f7:6c:f7:55:8c:19: 2c:9a:61:b1:d7:8d:cc:6e:f4:7a:99:a7:f9:0f:2f:85:6a:52: 48:b6:89:f9:3f:cc:42:ac:45:a7:e3:94:1b:80:91:32:4a:44: 1e:3d:0d:17:2c:00:cd:2e:13:6c:79:f5:52:ef:ce:ae:1f:8e: 8d:db:37:68:2c:bd:f4:78:22:3d:9d:5a:e0:ed:e1:72:3b:4c: d1:a1:f4:09:c4:c0:e1:69:d5:17:37:12:90:a3:bb:76:88:cb: 13:bf:ac:90:90:07:b1:d7:08:17:3a:e1:82:e1:6c:00:d5:a1: 77:66:84:79:67:e3:3f:1c:b9:18:4e:b6:c8:a2:f0:37:0e:4c: 78:ea:3e:f1:cb:8e:2b:df:e5:e2:f1:f1:c3:8a:aa:96:50:fb: 7d:7c:10:41:91:32:af:8b:69:40:6f:e1:c9:a9:10:a8:64:83: 3d:66:cf:7b:10:b0:69:30:c3:e6:8e:05:6f:14:09:ce:20:d9: fb:c0:2c:78:fa:5a:e0:42:fe:81:9c:78:7c:a5:ff:3e:cf:25: 13:4f:95:56 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfoOOgYxEk+EfJp5Hf4//8LQUztQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNDAzMDIyMDA5WhcNMjYwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MzkzNjQxZDYzZWRmZDY4YzQ2ZjkyYmZkZWRkNTRlNTll Njk5NDhkZTJlMjA5ZjNmOWEyMmU5OGVjNDdkMWM4MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9CLjhRrP6opyXQfRh8yFFnFDEfrBK1IoqTXfS/0r1OU/M O1R83mNyUqGSHjCMDVuqANAE/s/dw3LcpqWj7LxeIq+4zxLLP4fnULcFPIx6162F aYdNViA2SA4RtkVsgMvxMwTuVlz/6B1QbDibz6z4P6ZFYqT59SLhiwNEwG5pvDty +waNZDlE6aVugGNoDVA3GkAJpgHLpTQ78exqRjHcFdbFuPO0ldWLnMdPpnzrIk9Q cdG96WpDX3M7hlMWEJA177XOrLjlok61NiMuP5NCYJbPPZ7axW8A8iE5FKxxHcSR peAdJTICIyKrJkbs4jSIpqMfIeqK5cYLkfOUAwpBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUd3D4CSUccsTN2ji5csmQO2sJ5q0wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2RkZDI4ZTAzLWFmNDgtNGM2Ny05YTU5LWY3NzQ5ZTc1NGEzMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAJAAEX0wDQYJKoZIhvcNAQELBQADggEBAEbABMOc5rKQcXr/qpawClVK wr6EqN8eewmUKysVQ5kUccA53GtzfJC624t4ur9Gd/ds91WMGSyaYbHXjcxu9HqZ p/kPL4VqUki2ifk/zEKsRafjlBuAkTJKRB49DRcsAM0uE2x59VLvzq4fjo3bN2gs vfR4Ij2dWuDt4XI7TNGh9AnEwOFp1Rc3EpCju3aIyxO/rJCQB7HXCBc64YLhbADV oXdmhHln4z8cuRhOtsii8DcOTHjqPvHLjivf5eLx8cOKqpZQ+318EEGRMq+LaUBv 4cmpEKhkgz1mz3sQsGkww+aOBW8UCc4g2fvALHj6WuBC/oGceHyl/z7PJRNPlVY= -----END CERTIFICATE-----Generated at Fri Apr 17 03:40:37 2026 by rpki-client