$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b1d2a49e-da3f-4bd5-8466-9342a694e588.roa File: b1d2a49e-da3f-4bd5-8466-9342a694e588.roa (raw, json) Hash identifier: WvliBPCoAcPJM9JQgXlKkIOMbPyjhWCSNj/QIu08y2s= Subject key identifier: 5B:83:77:7D:A0:81:5A:E9:4A:5F:AF:3E:49:89:CE:12:13:B7:8B:5C Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 1319026488B1E154349BDC5008DDD040AC014866 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b1d2a49e-da3f-4bd5-8466-9342a694e588.roa Signing time: Sun 03 May 2026 02:00:46 +0000 ROA not before: Sun 03 May 2026 02:00:46 +0000 ROA not after: Sat 01 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2480::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:19:02:64:88:b1:e1:54:34:9b:dc:50:08:dd:d0:40:ac:01:48:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: May 3 02:00:46 2026 GMT Not After : Aug 1 23:59:59 2026 GMT Subject: serialNumber=737290b757fa78e34049056125218810b8653aa036250cb95f7b879b2920f8aa, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:05:dc:30:0d:4e:63:6f:88:0d:51:bc:55:66: e0:11:39:7c:27:f3:c2:cd:e7:44:d9:e3:e6:c1:22: f1:70:c7:6d:7c:57:da:e0:a8:b2:ae:0f:37:42:0a: a5:d4:f9:de:ec:4d:7b:e1:f9:34:1c:c7:02:0e:c2: a0:b5:92:82:a8:72:e7:21:47:00:94:ce:eb:67:93: 42:8c:8d:c1:43:0d:fb:10:8b:49:9e:d6:9b:9a:0e: ab:75:c9:75:55:48:d7:25:e3:04:90:fe:ef:80:1d: ce:38:f5:72:b5:e4:86:64:45:aa:da:5c:0a:ac:72: 48:e2:fc:6a:70:5f:af:10:c3:65:de:21:4a:34:ae: 10:99:1e:1e:a4:10:15:af:13:e4:8d:07:88:da:3e: 1d:e9:3d:a3:77:14:11:3a:88:2a:01:ab:3c:fa:a7: 4a:c2:0a:27:7c:25:26:4b:6d:96:54:c0:71:25:ce: b5:6d:23:25:81:22:fc:ea:3f:b0:90:d3:54:74:da: 5b:5c:3a:75:80:62:37:35:1b:04:70:ae:ad:a8:bf: dd:23:8c:e7:a3:42:e4:07:f0:ca:60:13:d6:3b:ed: 49:6a:40:73:e9:46:52:e3:05:c6:5e:27:df:09:51: 30:ba:db:b2:10:cb:f9:1e:e4:81:82:41:1c:6b:b2: f8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:83:77:7D:A0:81:5A:E9:4A:5F:AF:3E:49:89:CE:12:13:B7:8B:5C X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b1d2a49e-da3f-4bd5-8466-9342a694e588.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2480::/46 Signature Algorithm: sha256WithRSAEncryption 10:35:d3:69:0e:70:d9:da:39:64:ee:cd:7c:ba:e4:8d:dc:ae: 4a:94:98:b4:9f:7c:19:52:84:4c:0a:df:f3:b9:b8:74:3e:8b: 1e:aa:81:2b:fb:a2:38:c1:d4:c7:d2:46:2a:85:69:ef:43:db: dc:78:b5:89:a3:79:53:22:d8:ae:64:58:81:a2:5d:c9:42:68: 83:8e:89:be:d1:a9:e2:15:76:60:47:bf:43:c4:e3:d8:01:73: b1:16:0d:99:e9:29:bb:b2:35:0c:1c:e0:64:49:57:e2:38:f2: 89:81:50:2d:03:98:4f:2b:a7:22:ce:61:7e:aa:e4:90:10:1d: 8f:e2:2c:2b:7d:9e:d1:02:86:5e:eb:b5:9f:3b:0c:64:2f:9a: b5:d0:5e:f8:0d:10:8d:36:0f:47:1a:b8:92:7b:c7:eb:64:b3: f7:b6:cf:e3:e9:8b:3b:26:ee:01:f2:fb:bb:1e:96:6a:c3:76: 47:53:7e:77:a7:58:e2:d6:a4:52:c9:d7:f8:e3:5b:e3:aa:c1: a0:04:6e:86:1c:c2:1b:45:73:c9:4e:ed:72:d4:49:83:fe:91: df:9d:27:44:54:43:9f:7b:fb:ca:ae:94:be:b8:f2:9f:13:1e: af:8a:63:fd:24:d7:9c:97:7c:6d:33:f4:0d:66:95:80:d6:1d: aa:f7:d8:b7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUExkCZIix4VQ0m9xQCN3QQKwBSGYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTAzMDIwMDQ2WhcNMjYwODAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MzcyOTBiNzU3ZmE3OGUzNDA0OTA1NjEyNTIxODgxMGI4 NjUzYWEwMzYyNTBjYjk1ZjdiODc5YjI5MjBmOGFhMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDmBdwwDU5jb4gNUbxVZuAROXwn88LN50TZ4+bBIvFwx218 V9rgqLKuDzdCCqXU+d7sTXvh+TQcxwIOwqC1koKocuchRwCUzutnk0KMjcFDDfsQ i0me1puaDqt1yXVVSNcl4wSQ/u+AHc449XK15IZkRaraXAqsckji/GpwX68Qw2Xe IUo0rhCZHh6kEBWvE+SNB4jaPh3pPaN3FBE6iCoBqzz6p0rCCid8JSZLbZZUwHEl zrVtIyWBIvzqP7CQ01R02ltcOnWAYjc1GwRwrq2ov90jjOejQuQH8MpgE9Y77Ulq QHPpRlLjBcZeJ98JUTC627IQy/ke5IGCQRxrsvjJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUW4N3faCBWulKX68+SYnOEhO3i1wwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2IxZDJhNDllLWRhM2YtNGJkNS04NDY2LTkzNDJhNjk0ZTU4OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAJIAwDQYJKoZIhvcNAQELBQADggEBABA102kOcNnaOWTuzXy65I3c rkqUmLSffBlShEwK3/O5uHQ+ix6qgSv7ojjB1MfSRiqFae9D29x4tYmjeVMi2K5k WIGiXclCaIOOib7RqeIVdmBHv0PE49gBc7EWDZnpKbuyNQwc4GRJV+I48omBUC0D mE8rpyLOYX6q5JAQHY/iLCt9ntEChl7rtZ87DGQvmrXQXvgNEI02D0cauJJ7x+tk s/e2z+Ppizsm7gHy+7selmrDdkdTfnenWOLWpFLJ1/jjW+OqwaAEboYcwhtFc8lO 7XLUSYP+kd+dJ0RUQ597+8qulL648p8THq+KY/0k15yXfG0z9A1mlYDWHar32Lc= -----END CERTIFICATE-----Generated at Tue May 5 08:15:00 2026 by rpki-client