$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/20579be9-a956-4446-b753-4dcadaeef75f.roa File: 20579be9-a956-4446-b753-4dcadaeef75f.roa (raw, json) Hash identifier: kZirUbyM3dqV7r8Tp8MuP3ZM2YSXToKdrRCnMWFpybk= Subject key identifier: BA:4C:AF:B5:09:7B:AF:D6:42:6F:07:47:2E:2C:96:E4:30:E7:72:0F Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 2EFBF3AB0F6FC2D3E791D42E01A5F045C2B01C13 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/20579be9-a956-4446-b753-4dcadaeef75f.roa Signing time: Sun 03 May 2026 01:32:03 +0000 ROA not before: Sun 03 May 2026 01:32:03 +0000 ROA not after: Sat 01 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:328c::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:fb:f3:ab:0f:6f:c2:d3:e7:91:d4:2e:01:a5:f0:45:c2:b0:1c:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: May 3 01:32:03 2026 GMT Not After : Aug 1 23:59:59 2026 GMT Subject: serialNumber=c39ed3d58e6b3ebd3fb63d126c949e9eda5d8a7f013dfeb1c5005cdfd3322566, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:70:f5:22:34:4a:10:c5:21:9d:92:9d:75:d1: d7:fa:fc:fe:c8:8f:58:73:4d:6d:28:48:81:55:8a: 1e:65:1c:3b:88:7f:ed:f9:58:84:64:95:d2:63:67: ca:f7:cd:53:37:28:2a:54:3a:fa:6d:fe:ec:d1:e5: 1a:05:1e:ff:17:39:49:56:6f:8e:a7:c7:d4:ea:d4: 03:1f:f4:34:c8:19:e4:e1:63:ea:5c:e3:a5:35:b1: fa:8b:98:fe:20:43:f8:60:43:d3:86:0a:44:7b:ed: a6:b7:88:04:4d:4f:a5:54:7f:13:08:6e:56:4b:df: 76:f6:5d:9f:1b:96:82:b2:11:a3:31:01:c0:4c:85: 66:d2:2f:48:41:ef:c0:e6:b0:43:b3:18:63:99:19: eb:d5:cd:fd:fd:72:72:a4:9b:8e:70:a2:01:d2:8e: 5c:65:e2:ea:42:4c:6b:15:1c:c5:53:38:18:e2:46: 12:ea:47:69:d6:b1:6b:4c:70:0e:80:33:1d:08:84: fe:08:cb:66:ec:4a:f5:12:7b:de:b6:05:c5:e6:31: 29:e8:38:7e:a9:7a:f8:d9:b7:ff:77:46:66:47:e6: 09:d0:ac:d1:10:9d:9c:84:af:c2:4c:2d:7d:7f:c3: 13:49:a9:35:3a:4c:3c:00:31:20:82:91:8a:50:47: 7e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:4C:AF:B5:09:7B:AF:D6:42:6F:07:47:2E:2C:96:E4:30:E7:72:0F X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/20579be9-a956-4446-b753-4dcadaeef75f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:328c::/47 Signature Algorithm: sha256WithRSAEncryption 08:a7:71:50:db:40:71:e7:3d:c3:e8:a2:f7:45:01:bc:38:02: 1f:ab:9a:b4:6a:10:7b:c5:70:02:0d:69:a1:54:3a:7c:c4:21: 1f:1c:32:a0:9e:5e:69:e0:f1:59:62:eb:e9:30:58:23:44:e5: 27:4b:44:de:d4:6d:a9:d7:23:97:b3:9d:12:6a:18:5a:89:56: cf:38:e0:ab:c1:c1:c2:95:c8:2f:c4:b9:94:34:b3:76:42:34: a0:1f:db:79:62:e1:96:9d:e6:ad:a8:af:4d:3a:82:82:23:54: ee:a9:a9:a9:74:36:06:b7:c9:6d:bd:16:38:ff:2f:f0:ae:c9: a2:13:41:9c:d7:94:c3:a6:b0:d3:4a:34:53:e9:b4:79:c3:62: 44:14:11:13:ee:d8:c0:28:31:cc:04:d3:c5:c0:0f:e6:cd:f2: f3:ae:a1:1d:cb:9e:86:54:70:11:9c:e0:f0:46:f3:01:37:5d: 5d:96:88:d5:21:ad:95:c2:52:ca:32:73:4f:26:55:4f:6f:f9: e7:24:fb:a9:a1:f8:9f:0f:f0:9f:e4:8d:d4:e9:18:7f:2b:66: e9:61:bc:88:51:5d:b0:13:94:33:86:a7:67:ea:be:fb:99:b5: d8:3d:4f:e6:fb:31:5d:81:61:4e:07:4f:55:e4:08:72:75:70: 7d:51:2b:4e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIULvvzqw9vwtPnkdQuAaXwRcKwHBMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTAzMDEzMjAzWhcNMjYwODAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BjMzllZDNkNThlNmIzZWJkM2ZiNjNkMTI2Yzk0OWU5ZWRh NWQ4YTdmMDEzZGZlYjFjNTAwNWNkZmQzMzIyNTY2MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqcPUiNEoQxSGdkp110df6/P7Ij1hzTW0oSIFVih5lHDuI f+35WIRkldJjZ8r3zVM3KCpUOvpt/uzR5RoFHv8XOUlWb46nx9Tq1AMf9DTIGeTh Y+pc46U1sfqLmP4gQ/hgQ9OGCkR77aa3iARNT6VUfxMIblZL33b2XZ8bloKyEaMx AcBMhWbSL0hB78DmsEOzGGOZGevVzf39cnKkm45wogHSjlxl4upCTGsVHMVTOBji RhLqR2nWsWtMcA6AMx0IhP4Iy2bsSvUSe962BcXmMSnoOH6pevjZt/93RmZH5gnQ rNEQnZyEr8JMLX1/wxNJqTU6TDwAMSCCkYpQR37pAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUukyvtQl7r9ZCbwdHLiyW5DDncg8wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzIwNTc5YmU5LWE5NTYtNDQ0Ni1iNzUzLTRkY2FkYWVlZjc1Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAMowwDQYJKoZIhvcNAQELBQADggEBAAincVDbQHHnPcPoovdFAbw4 Ah+rmrRqEHvFcAINaaFUOnzEIR8cMqCeXmng8Vli6+kwWCNE5SdLRN7UbanXI5ez nRJqGFqJVs844KvBwcKVyC/EuZQ0s3ZCNKAf23li4Zad5q2or006goIjVO6pqal0 Nga3yW29Fjj/L/CuyaITQZzXlMOmsNNKNFPptHnDYkQUERPu2MAoMcwE08XAD+bN 8vOuoR3LnoZUcBGc4PBG8wE3XV2WiNUhrZXCUsoyc08mVU9v+eck+6mh+J8P8J/k jdTpGH8rZulhvIhRXbATlDOGp2fqvvuZtdg9T+b7MV2BYU4HT1XkCHJ1cH1RK04= -----END CERTIFICATE-----Generated at Sun May 3 16:13:58 2026 by rpki-client