$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a5bf57ea-3dd9-4f08-89f7-280bbf87fb42.roa File: a5bf57ea-3dd9-4f08-89f7-280bbf87fb42.roa (raw, json) Hash identifier: +9Pnei2y/hLrO2X4/tXHtTw3DEzLwey3EZF3rKYvMkg= Subject key identifier: 50:5A:1A:7E:6F:1E:14:47:CE:BE:D7:7E:7E:B6:6F:2D:03:09:D5:17 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 43836061F308AD45BC95BBF70C910B7A9BA39263 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a5bf57ea-3dd9-4f08-89f7-280bbf87fb42.roa Signing time: Sun 03 May 2026 02:20:08 +0000 ROA not before: Sun 03 May 2026 02:20:08 +0000 ROA not after: Sat 01 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2c46::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:83:60:61:f3:08:ad:45:bc:95:bb:f7:0c:91:0b:7a:9b:a3:92:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: May 3 02:20:08 2026 GMT Not After : Aug 1 23:59:59 2026 GMT Subject: serialNumber=1ecb352b91ef259aac22f5ff15dc5e4a182e224512c8922e5307a8f74a51c779, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:69:0b:2a:23:26:e2:bb:92:2e:14:48:c5:b5: cb:0e:ce:fa:a0:71:83:ea:ef:1b:c0:1a:42:98:ac: 43:4b:e1:9d:8c:9b:f2:67:1c:82:7d:7c:68:5a:b4: f5:47:40:8f:4c:f4:af:61:37:37:50:00:b6:9f:a0: b4:4d:a1:23:43:fd:2b:e3:90:aa:83:3f:90:45:2e: b5:6c:7f:77:ba:fb:ae:76:71:f2:6e:30:52:cf:7f: 4b:df:9a:c3:40:13:0f:a8:ba:2f:93:25:0c:12:e1: ab:b5:f5:26:2b:4b:8d:4c:6d:ac:11:5b:b8:15:93: d9:58:45:dc:ee:7a:59:20:03:9a:6b:b8:1f:9e:82: cb:11:42:81:80:81:5b:45:8c:08:ab:83:3c:8d:06: 75:1f:80:41:d4:8f:62:d0:5c:aa:34:dd:80:f6:40: 85:14:b5:c6:20:fa:f0:90:fd:4e:6e:54:74:79:18: 0a:2e:b2:3d:ed:f6:e1:11:c3:f0:d9:56:24:ce:5e: f3:c1:22:34:00:83:a0:c1:b1:f1:ef:29:29:93:4f: 80:6f:87:08:bf:62:a9:12:40:42:f5:85:73:85:f4: 66:f6:65:df:5e:45:14:33:88:b6:c2:17:a3:e4:27: 30:21:e3:99:6f:59:9a:b4:30:fb:fa:3d:2c:b8:49: f9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:5A:1A:7E:6F:1E:14:47:CE:BE:D7:7E:7E:B6:6F:2D:03:09:D5:17 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a5bf57ea-3dd9-4f08-89f7-280bbf87fb42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2c46::/47 Signature Algorithm: sha256WithRSAEncryption 24:5b:72:cc:04:e9:9c:d7:74:95:0b:6e:ab:61:05:4a:5e:7c: f1:07:4e:ba:8c:d7:cd:17:6a:40:f2:70:50:3a:d3:20:08:a7: f9:b5:17:8d:48:93:85:fd:ba:18:b9:59:90:86:a1:98:0c:94: 53:94:4a:fe:b1:bd:6f:00:83:ee:65:e4:6e:a0:fd:38:57:78: de:9e:d2:c7:64:c3:22:bd:b2:7a:1b:5b:cb:d1:98:27:5e:0c: 1c:30:b3:49:36:cc:2b:ad:73:25:51:1b:f2:a0:3e:d2:b2:2d: d4:27:14:06:d1:55:ee:9b:63:f7:ae:1d:df:15:99:90:e8:4a: 62:28:9b:b8:b4:12:28:82:dd:0f:3c:18:88:5e:6e:fd:5d:e6: 35:5a:a9:7f:86:ba:19:5f:1f:fa:05:00:7d:4b:c3:38:fb:ec: 78:52:c2:9a:fc:d7:3d:57:00:a1:0f:6f:fe:b5:fe:c4:a8:57: 05:2f:21:fc:ce:65:f2:83:a8:22:28:72:d0:d4:bd:eb:c6:2a: f7:8b:0f:65:59:94:ad:25:a0:4c:2c:3d:72:07:ae:f3:15:23: be:0b:d6:64:08:de:f8:8b:15:4b:6d:b5:b0:4d:27:58:b3:8f: b9:50:92:f0:62:84:8e:1a:fa:5f:75:14:91:01:12:73:e5:e9: e6:03:b5:50 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQ4NgYfMIrUW8lbv3DJELepujkmMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTAzMDIyMDA4WhcNMjYwODAxMjM1OTU5 WjB6MUkwRwYDVQQFE0AxZWNiMzUyYjkxZWYyNTlhYWMyMmY1ZmYxNWRjNWU0YTE4 MmUyMjQ1MTJjODkyMmU1MzA3YThmNzRhNTFjNzc5MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZaQsqIybiu5IuFEjFtcsOzvqgcYPq7xvAGkKYrENL4Z2M m/JnHIJ9fGhatPVHQI9M9K9hNzdQALafoLRNoSND/SvjkKqDP5BFLrVsf3e6+652 cfJuMFLPf0vfmsNAEw+oui+TJQwS4au19SYrS41MbawRW7gVk9lYRdzuelkgA5pr uB+egssRQoGAgVtFjAirgzyNBnUfgEHUj2LQXKo03YD2QIUUtcYg+vCQ/U5uVHR5 GAousj3t9uERw/DZViTOXvPBIjQAg6DBsfHvKSmTT4Bvhwi/YqkSQEL1hXOF9Gb2 Zd9eRRQziLbCF6PkJzAh45lvWZq0MPv6PSy4SfkVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUUFoafm8eFEfOvtd+frZvLQMJ1RcwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2E1YmY1N2VhLTNkZDktNGYwOC04OWY3LTI4MGJiZjg3ZmI0Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAALEYwDQYJKoZIhvcNAQELBQADggEBACRbcswE6ZzXdJULbqthBUpe fPEHTrqM180XakDycFA60yAIp/m1F41Ik4X9uhi5WZCGoZgMlFOUSv6xvW8Ag+5l 5G6g/ThXeN6e0sdkwyK9snobW8vRmCdeDBwws0k2zCutcyVRG/KgPtKyLdQnFAbR Ve6bY/euHd8VmZDoSmIom7i0EiiC3Q88GIhebv1d5jVaqX+GuhlfH/oFAH1Lwzj7 7HhSwpr81z1XAKEPb/61/sSoVwUvIfzOZfKDqCIoctDUvevGKveLD2VZlK0loEws PXIHrvMVI74L1mQI3viLFUtttbBNJ1izj7lQkvBihI4a+l91FJEBEnPl6eYDtVA= -----END CERTIFICATE-----Generated at Sun May 3 16:55:30 2026 by rpki-client