$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8905ce03-dcfe-4f0b-88d5-3338d4ae56e6.roa File: 8905ce03-dcfe-4f0b-88d5-3338d4ae56e6.roa (raw, json) Hash identifier: 0+mDRxmheEOYdDhcWcqqpP+j3fkm29WwLgh4A7ua4Jo= Subject key identifier: 3B:45:49:08:56:06:54:47:B1:15:68:8C:A2:12:DD:CD:DB:6D:79:CB Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 5C83AB652D0E76E183FFC3B844BB69B999DB6A8C Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8905ce03-dcfe-4f0b-88d5-3338d4ae56e6.roa Signing time: Sun 03 May 2026 00:20:11 +0000 ROA not before: Sun 03 May 2026 00:20:11 +0000 ROA not after: Sat 01 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:29d0::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:83:ab:65:2d:0e:76:e1:83:ff:c3:b8:44:bb:69:b9:99:db:6a:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: May 3 00:20:11 2026 GMT Not After : Aug 1 23:59:59 2026 GMT Subject: serialNumber=c86741a45ef13af3e3375c7e10b64efbf8fb6a9125e454c87fcff22f4aab22c0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e1:f4:e4:de:8e:07:3f:16:21:32:79:6d:20: 6a:57:a6:ec:a4:6c:6b:ed:17:e8:b3:58:c2:87:c4: f5:a2:be:05:82:03:43:6a:f2:ef:6a:56:da:a1:d2: 52:72:c9:e1:cc:13:16:88:85:d1:53:3d:ed:43:b7: 08:6f:1c:2e:25:53:ba:83:28:2e:d5:a9:5f:9b:19: 2c:de:8c:71:90:18:c6:87:f7:0e:f9:fc:e2:2a:b8: 30:5c:4b:44:42:3f:0d:41:dd:1b:f5:13:7c:8d:53: 89:70:22:09:27:e2:c9:e1:28:3d:d0:bc:a4:c3:7e: f9:63:98:de:da:c2:92:40:94:68:e0:29:07:c3:e9: e7:fb:e8:05:a1:06:8e:b9:15:be:e7:73:8c:2c:b9: 6b:20:a1:9e:f9:e6:32:a3:1f:9b:8c:55:d5:eb:af: 0d:f4:88:d0:76:2f:6c:f8:b7:81:73:de:66:2a:10: 86:a2:7e:81:68:aa:ae:aa:18:ce:05:5d:7e:82:9c: a0:88:e4:f8:14:65:d9:65:2f:ac:fc:0f:8a:b5:85: 7c:38:44:d8:c8:ca:63:f2:86:2e:c8:49:6b:f6:5f: 11:98:9e:c3:e2:dd:ef:b3:72:5e:c1:53:ab:9e:c3: 47:85:bd:2a:8a:cf:5b:03:ec:9b:af:33:25:15:0b: 35:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:45:49:08:56:06:54:47:B1:15:68:8C:A2:12:DD:CD:DB:6D:79:CB X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8905ce03-dcfe-4f0b-88d5-3338d4ae56e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:29d0::/47 Signature Algorithm: sha256WithRSAEncryption a6:21:7e:68:e7:da:a9:1e:14:14:a8:e3:53:ce:7c:73:3e:01: d4:0f:b9:f9:f4:e4:c9:29:3d:1a:6f:07:d2:56:10:7c:57:52: 2b:a1:98:22:08:0b:b0:d3:ef:2b:ca:de:16:8e:ba:5b:7a:7f: f1:e1:da:53:2c:62:2e:f6:7c:bd:76:23:01:08:cd:99:02:b6: b6:03:d1:a2:47:69:92:56:e5:2c:aa:76:8e:45:6f:d6:22:c9: 81:75:a4:6f:1c:a4:fd:20:2c:1e:ce:33:61:f2:71:66:ff:cd: bd:12:99:6e:ce:27:32:33:6e:d6:f3:04:8f:b4:d0:5c:41:d5: 03:fe:0e:ad:65:51:5f:b3:4f:e8:b2:a6:a5:26:da:c1:0a:7a: 7c:0c:3c:f3:52:4e:da:70:b8:2f:4e:7b:12:66:b3:5a:9c:b4: 68:98:f0:69:59:ed:96:d9:0a:51:8f:91:3f:c2:a7:03:8b:83: 08:fb:05:08:36:b5:6c:15:58:89:60:4c:c2:f7:fc:67:a9:d8: 72:b2:c5:e2:df:e6:ac:50:49:53:65:aa:44:8e:62:ad:aa:8f: b6:99:ce:c8:e3:73:9c:3b:f1:0b:88:df:6b:a0:08:87:08:7c: 68:66:f4:9c:00:49:40:2b:2b:c5:f9:ca:81:44:64:26:84:65: df:93:e8:04 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXIOrZS0OduGD/8O4RLtpuZnbaowwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTAzMDAyMDExWhcNMjYwODAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BjODY3NDFhNDVlZjEzYWYzZTMzNzVjN2UxMGI2NGVmYmY4 ZmI2YTkxMjVlNDU0Yzg3ZmNmZjIyZjRhYWIyMmMwMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCH4fTk3o4HPxYhMnltIGpXpuykbGvtF+izWMKHxPWivgWC A0Nq8u9qVtqh0lJyyeHMExaIhdFTPe1DtwhvHC4lU7qDKC7VqV+bGSzejHGQGMaH 9w75/OIquDBcS0RCPw1B3Rv1E3yNU4lwIgkn4snhKD3QvKTDfvljmN7awpJAlGjg KQfD6ef76AWhBo65Fb7nc4wsuWsgoZ755jKjH5uMVdXrrw30iNB2L2z4t4Fz3mYq EIaifoFoqq6qGM4FXX6CnKCI5PgUZdllL6z8D4q1hXw4RNjIymPyhi7ISWv2XxGY nsPi3e+zcl7BU6uew0eFvSqKz1sD7JuvMyUVCzXzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUO0VJCFYGVEexFWiMohLdzdttecswHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1Lzg5MDVjZTAzLWRjZmUtNGYwYi04OGQ1LTMzMzhkNGFlNTZlNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAKdAwDQYJKoZIhvcNAQELBQADggEBAKYhfmjn2qkeFBSo41POfHM+ AdQPufn05MkpPRpvB9JWEHxXUiuhmCIIC7DT7yvK3haOult6f/Hh2lMsYi72fL12 IwEIzZkCtrYD0aJHaZJW5Syqdo5Fb9YiyYF1pG8cpP0gLB7OM2HycWb/zb0SmW7O JzIzbtbzBI+00FxB1QP+Dq1lUV+zT+iypqUm2sEKenwMPPNSTtpwuC9OexJms1qc tGiY8GlZ7ZbZClGPkT/CpwOLgwj7BQg2tWwVWIlgTML3/Gep2HKyxeLf5qxQSVNl qkSOYq2qj7aZzsjjc5w78QuI32ugCIcIfGhm9JwASUArK8X5yoFEZCaEZd+T6AQ= -----END CERTIFICATE-----Generated at Sun May 3 15:29:11 2026 by rpki-client