$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/21e527ef-a207-46e1-92f5-b65881390244.roa File: 21e527ef-a207-46e1-92f5-b65881390244.roa (raw, json) Hash identifier: tF23aEmFKaqHfBhRwZ8kb4W5PByaNbFr9+yHCHaMufE= Subject key identifier: 33:82:25:A8:2C:65:F8:40:EC:0C:92:24:00:F2:66:B9:D7:60:FA:AD Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 0871B4CBEEAA87DCDA04AE91AA31F9A0F2E92441 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/21e527ef-a207-46e1-92f5-b65881390244.roa Signing time: Sun 03 May 2026 01:50:56 +0000 ROA not before: Sun 03 May 2026 01:50:56 +0000 ROA not after: Sat 01 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2ea8::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:71:b4:cb:ee:aa:87:dc:da:04:ae:91:aa:31:f9:a0:f2:e9:24:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: May 3 01:50:56 2026 GMT Not After : Aug 1 23:59:59 2026 GMT Subject: serialNumber=d4e5ed59fa9c4b9d655e2d4bf0d6cdf1c77784deea4623b0c399512936e89579, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5e:bf:c7:80:fc:ac:91:61:b3:fa:79:97:8b: ef:4c:bb:54:2d:50:57:0b:85:5b:a2:cf:47:d6:cf: b5:27:c4:e3:43:76:de:96:4e:58:87:9c:9b:07:73: 28:11:be:48:22:39:02:c9:62:62:f1:f7:37:d7:03: 19:a5:2e:06:3f:6c:88:3c:f8:dd:61:af:8f:c8:86: e4:a8:78:06:a3:02:52:95:d8:0b:ce:38:63:f8:65: cb:ce:08:cb:78:8a:33:3d:23:58:6c:19:76:b7:a3: c3:7d:b8:c7:8e:d1:68:a8:2a:fc:6d:78:a0:c9:83: d3:04:31:48:1a:66:a9:79:9a:e1:f9:9a:3f:57:05: 59:06:97:ab:33:23:8e:90:4e:d0:1b:0b:bb:72:ca: 1b:57:fc:bd:f7:ba:ba:34:24:71:10:f0:40:13:9b: 34:0f:58:0a:c8:7a:67:fd:8f:58:d7:3f:13:ef:bd: 56:07:98:0b:cc:91:d0:34:64:9f:e8:24:33:f2:c9: 32:51:69:92:d7:b9:da:c2:5f:83:40:7f:a9:ad:86: a4:29:12:5b:3f:ba:2d:c9:26:e1:47:31:54:f8:b6: 51:6f:0b:f2:2e:07:1f:ab:17:8b:2f:22:17:98:4c: e3:7e:63:d7:e4:91:77:bd:27:be:cf:69:09:b6:29: 7d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:82:25:A8:2C:65:F8:40:EC:0C:92:24:00:F2:66:B9:D7:60:FA:AD X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/21e527ef-a207-46e1-92f5-b65881390244.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2ea8::/47 Signature Algorithm: sha256WithRSAEncryption 07:10:c9:13:ef:b2:90:80:b1:36:83:b8:50:c2:0f:c0:3a:df: ed:f2:2e:e7:29:0b:ec:42:b3:26:3f:6b:7e:ac:1b:9c:09:23: 38:0c:68:4e:58:0e:e5:4d:31:33:4f:bf:16:d9:3b:fa:78:d1: 92:dc:81:39:28:4c:5b:10:91:76:c1:28:a6:f3:05:a0:7d:80: 26:ca:e8:a8:c7:0a:b1:f5:8c:cd:3c:6f:d2:ce:ee:06:3f:a3: 87:5e:04:84:2e:8c:9d:f5:d8:b5:f0:5f:f1:a0:2a:92:0c:d8: 95:3c:2f:b9:80:f3:e0:0b:a2:0d:0a:dc:18:6d:b2:6e:6d:19: 93:9b:10:d3:90:d1:17:db:e3:e9:d2:5d:27:db:ec:96:86:20: dd:20:59:70:3e:a6:34:b6:36:c2:1f:27:0d:e8:31:10:45:b6: 6a:a7:4a:63:25:d0:f5:c9:71:4b:ab:ca:a2:e4:93:38:da:8c: bf:08:a0:84:cf:a4:30:89:57:cf:ae:a3:c1:dd:ec:c6:87:22: cf:8f:6e:a0:55:67:23:ae:6d:8b:a8:7b:1b:7c:0c:0d:2c:32: 63:db:98:c7:56:e3:77:16:5d:52:9a:b9:f7:0c:b7:f8:bd:9e: 82:f0:ca:3b:fc:3d:82:e8:1e:27:e9:47:03:0a:9d:4a:c4:95: 07:53:a5:b6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCHG0y+6qh9zaBK6RqjH5oPLpJEEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTAzMDE1MDU2WhcNMjYwODAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNGU1ZWQ1OWZhOWM0YjlkNjU1ZTJkNGJmMGQ2Y2RmMWM3 Nzc4NGRlZWE0NjIzYjBjMzk5NTEyOTM2ZTg5NTc5MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwXr/HgPyskWGz+nmXi+9Mu1QtUFcLhVuiz0fWz7UnxOND dt6WTliHnJsHcygRvkgiOQLJYmLx9zfXAxmlLgY/bIg8+N1hr4/IhuSoeAajAlKV 2AvOOGP4ZcvOCMt4ijM9I1hsGXa3o8N9uMeO0WioKvxteKDJg9MEMUgaZql5muH5 mj9XBVkGl6szI46QTtAbC7tyyhtX/L33uro0JHEQ8EATmzQPWArIemf9j1jXPxPv vVYHmAvMkdA0ZJ/oJDPyyTJRaZLXudrCX4NAf6mthqQpEls/ui3JJuFHMVT4tlFv C/IuBx+rF4svIheYTON+Y9fkkXe9J77PaQm2KX0HAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUM4IlqCxl+EDsDJIkAPJmuddg+q0wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzIxZTUyN2VmLWEyMDctNDZlMS05MmY1LWI2NTg4MTM5MDI0NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAALqgwDQYJKoZIhvcNAQELBQADggEBAAcQyRPvspCAsTaDuFDCD8A6 3+3yLucpC+xCsyY/a36sG5wJIzgMaE5YDuVNMTNPvxbZO/p40ZLcgTkoTFsQkXbB KKbzBaB9gCbK6KjHCrH1jM08b9LO7gY/o4deBIQujJ312LXwX/GgKpIM2JU8L7mA 8+ALog0K3Bhtsm5tGZObENOQ0Rfb4+nSXSfb7JaGIN0gWXA+pjS2NsIfJw3oMRBF tmqnSmMl0PXJcUuryqLkkzjajL8IoITPpDCJV8+uo8Hd7MaHIs+PbqBVZyOubYuo ext8DA0sMmPbmMdW43cWXVKaufcMt/i9noLwyjv8PYLoHifpRwMKnUrElQdTpbY= -----END CERTIFICATE-----Generated at Sun May 3 16:14:58 2026 by rpki-client