$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0206bcbf-68e6-46f7-aa96-3de6aefaadda.roa File: 0206bcbf-68e6-46f7-aa96-3de6aefaadda.roa (raw, json) Hash identifier: CciJQpZr3vpjKe06+IGjjyTL9et/dS4CBnaNLo/lD/E= Subject key identifier: 19:54:55:F1:DE:28:FA:53:DA:DA:38:70:A2:E7:D5:9A:51:2F:C1:07 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 7C88DED78786D2B35CF2E86B143CC06F45FFC377 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0206bcbf-68e6-46f7-aa96-3de6aefaadda.roa Signing time: Sun 03 May 2026 00:21:06 +0000 ROA not before: Sun 03 May 2026 00:21:06 +0000 ROA not after: Sat 01 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2968::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:88:de:d7:87:86:d2:b3:5c:f2:e8:6b:14:3c:c0:6f:45:ff:c3:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: May 3 00:21:06 2026 GMT Not After : Aug 1 23:59:59 2026 GMT Subject: serialNumber=c645c2f0948e31ad8d6f1a1363b66c93a8d3cb882e6daf13287348cf9eb0adba, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:f2:bd:1a:94:87:9c:1a:e5:f3:e1:9c:ef:ad: 4f:e5:e0:ee:24:39:fe:6e:31:d5:29:35:b2:f1:31: c8:a9:7c:36:a3:21:23:99:b1:7c:ed:ca:19:2c:5e: c6:8c:36:ea:e2:11:52:9b:ec:14:ab:8d:17:0a:54: 2a:2c:8a:b4:06:e6:c2:f3:48:fc:13:ed:84:ab:54: eb:af:22:95:a6:34:f6:5d:26:72:9e:3e:01:ed:0e: 96:fb:8d:4a:05:03:f4:26:fd:d6:9b:45:a0:92:c8: b4:fc:88:a1:49:12:33:3f:a5:50:e2:2a:d9:71:b1: 29:df:87:e1:62:46:73:6e:e6:cf:18:d0:24:b8:6c: 89:1a:5b:04:a2:d9:3d:9d:6e:be:ab:fa:a6:78:62: 9f:22:98:da:c8:05:c5:99:d1:3e:92:a5:b9:c2:f5: 05:38:cb:2d:3f:16:f1:67:06:bf:f0:d6:1f:36:1b: 15:cf:05:bf:4b:db:a3:38:1c:2e:35:2b:9d:3e:e6: d8:58:51:20:b4:9e:22:4c:a9:46:a0:94:a0:5c:b1: 58:81:29:a8:8f:11:f3:e1:e4:46:2d:a0:8e:8b:b6: 22:6e:15:5e:6b:7f:f4:6a:5b:8a:72:83:bf:ee:de: fe:8b:97:9e:e8:94:f4:66:11:64:5c:d8:98:57:db: 05:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:54:55:F1:DE:28:FA:53:DA:DA:38:70:A2:E7:D5:9A:51:2F:C1:07 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0206bcbf-68e6-46f7-aa96-3de6aefaadda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2968::/47 Signature Algorithm: sha256WithRSAEncryption 39:6d:df:79:53:a4:28:ba:c9:d9:1d:20:27:4d:28:ae:62:ea: 6e:f3:d7:6d:c8:a9:35:d5:36:5c:ae:55:f7:bd:f7:e4:38:a5: c2:13:ab:12:f5:bc:ea:70:ed:02:68:ec:04:28:0c:24:50:f6: 48:4b:e8:95:26:6b:d9:74:9f:19:9a:e6:4f:6d:f8:18:05:eb: 95:ad:3c:21:ce:05:66:5a:a8:c2:cf:91:1f:b7:85:e2:3f:37: 52:9b:62:37:3c:57:45:f3:e6:da:4d:f0:3c:f3:81:35:c7:80: 59:b6:2b:71:9e:e2:a3:5a:e9:97:c9:b9:bb:d1:70:c2:ad:10: 1c:f3:d6:85:3d:69:d5:3e:28:b0:d4:85:5d:bd:c5:26:50:87: f7:33:d0:52:fe:cb:cf:6c:fa:b5:9d:b1:fa:2e:93:16:d0:6a: 8e:4d:68:89:9f:28:9f:f8:51:42:bb:68:5c:ca:5b:d8:bd:58: 52:42:f8:17:b1:c0:17:c2:6c:80:42:fd:21:ca:d6:25:a6:41: 33:81:ba:ff:98:3c:41:7f:25:3a:c1:0b:ce:3f:ba:fe:49:77: 17:82:1e:6b:6a:94:0d:b4:b6:86:a1:b0:18:4f:e4:ce:70:e3: 0e:7e:17:2c:31:f6:c9:ff:d9:fe:5b:38:e8:33:84:c2:33:52: 3b:a0:54:d2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfIje14eG0rNc8uhrFDzAb0X/w3cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTAzMDAyMTA2WhcNMjYwODAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNjQ1YzJmMDk0OGUzMWFkOGQ2ZjFhMTM2M2I2NmM5M2E4 ZDNjYjg4MmU2ZGFmMTMyODczNDhjZjllYjBhZGJhMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD48r0alIecGuXz4ZzvrU/l4O4kOf5uMdUpNbLxMcipfDaj ISOZsXztyhksXsaMNuriEVKb7BSrjRcKVCosirQG5sLzSPwT7YSrVOuvIpWmNPZd JnKePgHtDpb7jUoFA/Qm/dabRaCSyLT8iKFJEjM/pVDiKtlxsSnfh+FiRnNu5s8Y 0CS4bIkaWwSi2T2dbr6r+qZ4Yp8imNrIBcWZ0T6SpbnC9QU4yy0/FvFnBr/w1h82 GxXPBb9L26M4HC41K50+5thYUSC0niJMqUaglKBcsViBKaiPEfPh5EYtoI6LtiJu FV5rf/RqW4pyg7/u3v6Ll57olPRmEWRc2JhX2wXxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUGVRV8d4o+lPa2jhwoufVmlEvwQcwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzAyMDZiY2JmLTY4ZTYtNDZmNy1hYTk2LTNkZTZhZWZhYWRkYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAKWgwDQYJKoZIhvcNAQELBQADggEBADlt33lTpCi6ydkdICdNKK5i 6m7z123IqTXVNlyuVfe99+Q4pcITqxL1vOpw7QJo7AQoDCRQ9khL6JUma9l0nxma 5k9t+BgF65WtPCHOBWZaqMLPkR+3heI/N1KbYjc8V0Xz5tpN8DzzgTXHgFm2K3Ge 4qNa6ZfJubvRcMKtEBzz1oU9adU+KLDUhV29xSZQh/cz0FL+y89s+rWdsfoukxbQ ao5NaImfKJ/4UUK7aFzKW9i9WFJC+BexwBfCbIBC/SHK1iWmQTOBuv+YPEF/JTrB C84/uv5JdxeCHmtqlA20toahsBhP5M5w4w5+Fywx9sn/2f5bOOgzhMIzUjugVNI= -----END CERTIFICATE-----Generated at Sun May 3 15:26:17 2026 by rpki-client