$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3d6bd779-a1ec-4820-bd90-f3d3f59627f0.roa File: 3d6bd779-a1ec-4820-bd90-f3d3f59627f0.roa (raw, json) Hash identifier: ngzEtHPUMLpL+EVos7A5WfOB7OEeTIozTE3uI5SV3DI= Subject key identifier: F4:01:43:60:CC:56:C6:EF:EE:A6:AD:C1:9E:EC:87:95:C5:95:13:8F Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 7997CFE75B20180C6108E0EACB551EF631FFBF83 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3d6bd779-a1ec-4820-bd90-f3d3f59627f0.roa Signing time: Sun 03 May 2026 02:11:52 +0000 ROA not before: Sun 03 May 2026 02:11:52 +0000 ROA not after: Sat 01 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2870::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:97:cf:e7:5b:20:18:0c:61:08:e0:ea:cb:55:1e:f6:31:ff:bf:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: May 3 02:11:52 2026 GMT Not After : Aug 1 23:59:59 2026 GMT Subject: serialNumber=2f145664817004f8fd7f14686bcf5ff712342ef94424dabd1068badda31c9d60, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:36:db:85:29:0b:b1:08:07:46:94:ba:de:f1: da:d6:42:e4:66:e7:d4:d6:6a:7e:8c:51:41:f7:5c: cd:13:f8:e9:10:cc:6c:35:b3:fb:dc:fd:b5:ae:11: 8f:59:31:8f:bc:24:d5:f1:64:ee:12:ed:07:87:9e: ba:74:c1:8d:e0:a0:e1:96:c6:a0:23:98:b0:45:a1: ca:0b:8b:5b:c0:c1:86:95:d1:67:6f:f1:b0:f5:2e: b2:1b:72:d7:35:40:d0:57:83:22:43:83:2f:e0:39: 68:a6:0f:49:8b:1f:28:81:0f:67:c2:8b:55:3f:02: 3c:35:f4:52:ed:1e:46:79:86:dd:d5:84:19:56:4f: 48:bb:04:a6:41:e6:88:da:68:97:6c:c3:bd:ab:fd: 13:81:85:75:a4:ec:16:26:81:52:60:0b:26:64:da: 75:e8:44:23:62:ae:85:9f:3a:7d:d8:1c:4a:e8:2b: 35:33:97:99:c7:b9:24:e8:96:b6:13:c3:30:3e:6d: e2:56:71:52:19:42:8a:5e:b1:6b:b5:59:b6:c0:33: d5:ce:ec:65:90:70:5b:79:81:67:34:3d:c6:11:5b: 99:15:9e:21:ca:6f:08:76:b1:f9:4e:0e:1a:99:44: 40:ff:33:a3:62:68:50:cd:02:06:88:8c:6f:ec:78: f9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:01:43:60:CC:56:C6:EF:EE:A6:AD:C1:9E:EC:87:95:C5:95:13:8F X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3d6bd779-a1ec-4820-bd90-f3d3f59627f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2870::/44 Signature Algorithm: sha256WithRSAEncryption 1d:43:46:88:a3:e3:c7:a9:18:56:ce:71:f6:bd:16:b0:a2:63: e1:56:db:cf:20:24:a5:61:31:d4:ef:b4:f5:0f:f1:89:4d:5e: 7d:c1:60:45:b2:54:4e:cd:f1:7e:86:23:f2:43:37:e2:42:29: aa:f4:7a:aa:ae:47:20:c3:e3:f3:37:97:12:7f:83:5d:7c:f6: d9:6e:2d:66:c6:3e:12:30:ac:02:93:72:f4:71:43:94:70:18: 08:0b:6c:84:eb:e8:7f:58:e5:2c:be:61:7f:df:e8:00:64:f8: b7:37:8e:aa:9a:30:be:cf:be:57:7c:8d:50:d9:2c:44:f6:46: ac:1d:13:9e:76:5e:ce:a5:81:fb:e4:2c:a6:ad:1f:90:98:46: 02:7a:28:e0:45:e8:72:6e:be:29:3d:9a:45:d2:1a:0f:6b:a7: f4:a4:7e:dc:a9:8b:9a:75:9e:f6:df:7e:15:d6:ba:67:c3:a6: ce:48:de:c4:42:cb:f9:a8:94:a8:d6:08:5e:a4:47:85:ea:a6: 32:64:b0:1b:01:d4:e9:01:f4:73:7c:f1:e2:b5:e5:4d:4f:e8: f5:55:8f:bb:4d:26:29:60:24:87:03:27:c6:7a:38:15:16:8a: 2d:4c:67:84:af:01:85:e3:c6:49:49:49:6e:c4:06:9b:77:a7: 8b:3e:7c:c0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUeZfP51sgGAxhCODqy1Ue9jH/v4MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTAzMDIxMTUyWhcNMjYwODAxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyZjE0NTY2NDgxNzAwNGY4ZmQ3ZjE0Njg2YmNmNWZmNzEy MzQyZWY5NDQyNGRhYmQxMDY4YmFkZGEzMWM5ZDYwMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiNtuFKQuxCAdGlLre8drWQuRm59TWan6MUUH3XM0T+OkQ zGw1s/vc/bWuEY9ZMY+8JNXxZO4S7QeHnrp0wY3goOGWxqAjmLBFocoLi1vAwYaV 0Wdv8bD1LrIbctc1QNBXgyJDgy/gOWimD0mLHyiBD2fCi1U/Ajw19FLtHkZ5ht3V hBlWT0i7BKZB5ojaaJdsw72r/ROBhXWk7BYmgVJgCyZk2nXoRCNiroWfOn3YHEro KzUzl5nHuSTolrYTwzA+beJWcVIZQopesWu1WbbAM9XO7GWQcFt5gWc0PcYRW5kV niHKbwh2sflODhqZRED/M6NiaFDNAgaIjG/sePkrAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU9AFDYMxWxu/upq3BnuyHlcWVE48wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzNkNmJkNzc5LWExZWMtNDgyMC1iZDkwLWYzZDNmNTk2MjdmMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAJAAKHAwDQYJKoZIhvcNAQELBQADggEBAB1DRoij48epGFbOcfa9FrCi Y+FW288gJKVhMdTvtPUP8YlNXn3BYEWyVE7N8X6GI/JDN+JCKar0eqquRyDD4/M3 lxJ/g1189tluLWbGPhIwrAKTcvRxQ5RwGAgLbITr6H9Y5Sy+YX/f6ABk+Lc3jqqa ML7Pvld8jVDZLET2RqwdE552Xs6lgfvkLKatH5CYRgJ6KOBF6HJuvik9mkXSGg9r p/Skftypi5p1nvbffhXWumfDps5I3sRCy/molKjWCF6kR4XqpjJksBsB1OkB9HN8 8eK15U1P6PVVj7tNJilgJIcDJ8Z6OBUWii1MZ4SvAYXjxklJSW7EBpt3p4s+fMA= -----END CERTIFICATE-----Generated at Sun May 3 17:05:08 2026 by rpki-client