$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/14eed9e6-b27e-4bf3-951d-6bd5c3ed5ac1.roa File: 14eed9e6-b27e-4bf3-951d-6bd5c3ed5ac1.roa (raw, json) Hash identifier: eo39SEj99lhRY3d0hDLU1UoI8TfiYJOickEMCIEomME= Subject key identifier: A9:C6:8C:0E:7A:F6:B4:51:D7:96:4D:A2:88:17:D0:A7:39:70:A9:DC Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 3A4BAB9369801F1C654B3CC7043A08637E61FC67 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/14eed9e6-b27e-4bf3-951d-6bd5c3ed5ac1.roa Signing time: Sun 03 May 2026 02:40:29 +0000 ROA not before: Sun 03 May 2026 02:40:29 +0000 ROA not after: Sat 01 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2490::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:4b:ab:93:69:80:1f:1c:65:4b:3c:c7:04:3a:08:63:7e:61:fc:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: May 3 02:40:29 2026 GMT Not After : Aug 1 23:59:59 2026 GMT Subject: serialNumber=744002d10450928d323aa8c4065c794468c28ec51717134bbd325852208c396b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:29:7c:b0:a6:f9:2d:e7:6a:c4:99:12:e1:48: 61:dd:78:cc:4b:c7:0d:c5:e3:15:34:a4:fe:ac:69: e2:78:3c:45:fc:65:08:3f:00:07:f3:35:f9:54:db: 0d:f9:27:9c:e3:e3:97:76:15:66:d6:05:45:9d:78: 8e:22:e4:46:74:65:ea:f0:44:25:fd:30:22:58:60: 5b:d5:01:75:cf:fc:a5:a9:bf:f0:64:73:c4:f5:46: af:db:7d:e1:68:07:97:53:6e:e8:25:be:ac:b9:00: a3:6a:aa:ad:ee:c9:ce:4d:17:bc:4d:b9:5b:0c:6d: f4:d1:75:50:00:1e:77:68:48:e7:b4:87:54:ad:bf: a9:99:6d:0b:db:47:82:7f:3c:08:2b:c7:b0:c3:4e: 82:ab:15:5f:37:22:9c:c2:8b:25:6e:78:15:8d:be: 65:bb:f6:df:80:f6:b8:f1:e5:a9:33:28:ac:01:80: 23:f3:b1:90:8b:a2:49:a9:e1:7c:ed:f9:af:92:36: d8:a2:32:2b:06:c3:d4:51:d2:57:96:94:c9:97:ee: 21:e4:e3:70:d5:e3:9c:cf:72:62:84:84:17:84:d4: 8f:d8:c9:e8:27:05:b7:90:92:e2:7f:45:5f:dd:e9: b8:38:5e:64:f7:95:3d:36:20:89:08:ca:3e:f3:61: 06:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C6:8C:0E:7A:F6:B4:51:D7:96:4D:A2:88:17:D0:A7:39:70:A9:DC X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/14eed9e6-b27e-4bf3-951d-6bd5c3ed5ac1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2490::/44 Signature Algorithm: sha256WithRSAEncryption 71:b0:24:8d:b8:4b:bf:c5:22:e1:53:ad:7d:18:34:94:4c:7e: 65:f2:69:f7:c2:b7:e8:7a:93:a5:5e:a9:8f:bc:c5:b3:f8:e3: dc:fa:68:b2:3d:0d:4d:01:b2:53:11:d7:a4:91:93:e5:21:cf: e4:b3:f1:d5:93:c0:87:96:72:1d:b9:c6:6d:8a:e8:39:8b:3c: be:1a:49:be:33:5f:d8:f7:f4:ff:7e:c9:eb:f4:2a:b3:a4:60: e3:d7:a2:3b:45:75:aa:0a:77:2d:93:50:4f:d4:ce:3c:0c:76: 3b:ad:e7:86:d5:93:77:4d:33:92:b1:53:d8:e7:ff:40:f4:98: 72:9e:82:22:a3:95:a3:5c:1a:95:1b:fb:40:1e:b4:a6:ae:a4: d4:6d:11:2b:07:af:0d:83:e2:db:65:f5:69:ed:31:50:88:3a: 69:48:57:82:9f:85:ce:f0:cc:bb:a1:14:c1:c7:19:5e:c9:5d: 33:17:e5:10:9a:10:c7:74:3c:3e:ac:26:35:1c:90:f3:29:7c: 55:84:db:ce:48:6b:44:68:df:7d:30:73:53:a9:42:d6:e4:7d: a6:ae:3f:a3:6b:c1:da:dd:e0:51:a6:f3:17:0f:55:11:a6:8b: 70:5d:f8:07:c3:f1:60:f9:c0:da:7d:ab:99:23:05:3e:09:0b: e6:c5:b8:a9 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUOkurk2mAHxxlSzzHBDoIY35h/GcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTAzMDI0MDI5WhcNMjYwODAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NDQwMDJkMTA0NTA5MjhkMzIzYWE4YzQwNjVjNzk0NDY4 YzI4ZWM1MTcxNzEzNGJiZDMyNTg1MjIwOGMzOTZiMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpKXywpvkt52rEmRLhSGHdeMxLxw3F4xU0pP6saeJ4PEX8 ZQg/AAfzNflU2w35J5zj45d2FWbWBUWdeI4i5EZ0ZerwRCX9MCJYYFvVAXXP/KWp v/Bkc8T1Rq/bfeFoB5dTbuglvqy5AKNqqq3uyc5NF7xNuVsMbfTRdVAAHndoSOe0 h1Stv6mZbQvbR4J/PAgrx7DDToKrFV83IpzCiyVueBWNvmW79t+A9rjx5akzKKwB gCPzsZCLokmp4Xzt+a+SNtiiMisGw9RR0leWlMmX7iHk43DV45zPcmKEhBeE1I/Y yegnBbeQkuJ/RV/d6bg4XmT3lT02IIkIyj7zYQaxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUqcaMDnr2tFHXlk2iiBfQpzlwqdwwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzE0ZWVkOWU2LWIyN2UtNGJmMy05NTFkLTZiZDVjM2VkNWFjMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAJAAJJAwDQYJKoZIhvcNAQELBQADggEBAHGwJI24S7/FIuFTrX0YNJRM fmXyaffCt+h6k6VeqY+8xbP449z6aLI9DU0BslMR16SRk+Uhz+Sz8dWTwIeWch25 xm2K6DmLPL4aSb4zX9j39P9+yev0KrOkYOPXojtFdaoKdy2TUE/UzjwMdjut54bV k3dNM5KxU9jn/0D0mHKegiKjlaNcGpUb+0AetKaupNRtESsHrw2D4ttl9WntMVCI OmlIV4Kfhc7wzLuhFMHHGV7JXTMX5RCaEMd0PD6sJjUckPMpfFWE285Ia0Ro330w c1OpQtbkfaauP6Nrwdrd4FGm8xcPVRGmi3Bd+AfD8WD5wNp9q5kjBT4JC+bFuKk= -----END CERTIFICATE-----Generated at Sun May 3 14:49:45 2026 by rpki-client