$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4d52ad58-ed68-42a4-8308-e70a9fb20514.roa File: 4d52ad58-ed68-42a4-8308-e70a9fb20514.roa (raw, json) Hash identifier: 0vnlGKVC26ibt83JY7l3H/NWTp5AYZoZdye1nGRBeBo= Subject key identifier: B4:23:FE:0E:04:56:34:E6:41:0E:0B:85:6E:B6:9D:65:96:02:8E:19 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 289CC71311FD122B4389E8A19FB4A631A56FCB63 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4d52ad58-ed68-42a4-8308-e70a9fb20514.roa Signing time: Sun 03 May 2026 02:00:45 +0000 ROA not before: Sun 03 May 2026 02:00:45 +0000 ROA not after: Sat 01 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3298::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:9c:c7:13:11:fd:12:2b:43:89:e8:a1:9f:b4:a6:31:a5:6f:cb:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: May 3 02:00:45 2026 GMT Not After : Aug 1 23:59:59 2026 GMT Subject: serialNumber=e8e8cda81f8af70aa74f9a49140c34b04a8699f682d449d746cda686f6e5bf64, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8e:78:b1:29:b7:2c:82:63:14:6d:75:bb:26: b5:78:9e:fc:b8:f9:08:f3:27:fa:1e:08:77:1d:93: 50:1c:48:e8:e6:39:fa:00:cf:38:32:06:74:c6:b1: 53:30:c0:42:2d:74:ec:da:38:75:fe:89:f8:1a:13: 87:c7:55:e3:1e:3c:a3:97:fc:71:09:e7:ba:ee:28: 7f:10:61:e7:ae:a2:c0:10:b9:85:ac:22:42:a6:75: ca:64:95:c8:76:d6:c7:5a:0d:73:63:52:48:44:91: 3b:69:fc:96:89:c5:52:d8:03:39:10:bb:3e:a6:18: 8f:bc:43:04:2b:3e:5a:22:a9:c0:e2:3c:c4:a3:ad: 88:c1:23:78:ee:35:11:da:9c:63:d2:c3:19:6e:72: 33:5e:7d:62:43:be:ee:1b:a0:d9:36:e8:25:84:3e: d7:ee:2c:48:ff:9e:dc:18:c8:a0:94:1d:a9:74:70: 6e:86:b6:c5:7c:75:fa:45:ae:99:b1:9e:eb:6e:34: aa:e6:b3:b6:b2:bf:6c:39:0e:21:1b:2b:93:05:54: e1:24:9f:9b:92:a5:5f:2f:6a:f4:c6:36:16:89:9f: 32:a0:47:d7:c6:41:a3:c7:7a:2f:a8:bb:90:f1:91: 35:4b:a0:3a:21:78:12:73:55:7e:ee:35:20:9a:20: 11:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:23:FE:0E:04:56:34:E6:41:0E:0B:85:6E:B6:9D:65:96:02:8E:19 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4d52ad58-ed68-42a4-8308-e70a9fb20514.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3298::/47 Signature Algorithm: sha256WithRSAEncryption 49:2e:2b:3c:1f:fb:26:fa:90:91:4f:8e:85:f2:de:11:b0:32: 7a:13:93:46:80:20:59:38:2c:ad:22:f0:d5:8f:15:01:ee:0c: 47:5d:ba:3f:52:bd:d1:02:ca:53:57:30:db:b0:32:79:68:e0: ee:b6:cf:91:04:25:be:b0:4e:5a:7b:12:40:e5:e1:95:a2:4e: 0b:06:12:ca:c7:c8:6c:91:d1:b9:21:9e:bf:be:cd:b8:02:a4: 33:cb:03:d3:dc:e6:73:8e:a3:f5:d8:51:88:73:c0:d8:3f:ea: b7:5a:d7:7b:e1:16:f9:6c:87:c7:53:29:a4:7c:0a:1c:c1:88: dd:36:ed:ff:87:87:68:b5:39:61:2b:6d:ef:8b:de:d6:fb:ef: db:95:61:52:e7:27:13:d9:6a:76:3a:fa:34:31:f1:42:a0:23: d0:06:39:dc:54:5e:86:2f:f4:4e:be:4c:6a:77:0f:84:73:37: 11:92:b3:be:31:50:2e:0a:61:18:ac:88:cd:c6:ee:0a:f4:13: 37:06:39:ae:3e:b1:63:75:5b:87:f3:e7:e0:60:7f:c2:30:5b: c2:0f:d5:5a:53:d5:d9:60:6a:6e:75:7b:9a:b6:cf:f6:d1:7a: 3b:1c:fc:d3:b8:9e:85:d2:e1:e0:7b:a6:fc:66:82:52:f8:db: 79:96:a1:3b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKJzHExH9EitDieihn7SmMaVvy2MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTAzMDIwMDQ1WhcNMjYwODAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BlOGU4Y2RhODFmOGFmNzBhYTc0ZjlhNDkxNDBjMzRiMDRh ODY5OWY2ODJkNDQ5ZDc0NmNkYTY4NmY2ZTViZjY0MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIjnixKbcsgmMUbXW7JrV4nvy4+QjzJ/oeCHcdk1AcSOjm OfoAzzgyBnTGsVMwwEItdOzaOHX+ifgaE4fHVeMePKOX/HEJ57ruKH8QYeeuosAQ uYWsIkKmdcpklch21sdaDXNjUkhEkTtp/JaJxVLYAzkQuz6mGI+8QwQrPloiqcDi PMSjrYjBI3juNRHanGPSwxlucjNefWJDvu4boNk26CWEPtfuLEj/ntwYyKCUHal0 cG6GtsV8dfpFrpmxnutuNKrms7ayv2w5DiEbK5MFVOEkn5uSpV8vavTGNhaJnzKg R9fGQaPHei+ou5DxkTVLoDoheBJzVX7uNSCaIBFPAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUtCP+DgRWNOZBDguFbradZZYCjhkwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzRkNTJhZDU4LWVkNjgtNDJhNC04MzA4LWU3MGE5ZmIyMDUxNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAMpgwDQYJKoZIhvcNAQELBQADggEBAEkuKzwf+yb6kJFPjoXy3hGw MnoTk0aAIFk4LK0i8NWPFQHuDEdduj9SvdECylNXMNuwMnlo4O62z5EEJb6wTlp7 EkDl4ZWiTgsGEsrHyGyR0bkhnr++zbgCpDPLA9Pc5nOOo/XYUYhzwNg/6rda13vh Fvlsh8dTKaR8ChzBiN027f+Hh2i1OWErbe+L3tb779uVYVLnJxPZanY6+jQx8UKg I9AGOdxUXoYv9E6+TGp3D4RzNxGSs74xUC4KYRisiM3G7gr0EzcGOa4+sWN1W4fz 5+Bgf8IwW8IP1VpT1dlgam51e5q2z/bRejsc/NO4noXS4eB7pvxmglL423mWoTs= -----END CERTIFICATE-----Generated at Sun May 3 16:59:06 2026 by rpki-client