$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dbc9efd0-4eba-4f1f-bf1a-4d08369c0401.roa File: dbc9efd0-4eba-4f1f-bf1a-4d08369c0401.roa (raw, json) Hash identifier: BBprUAWOd8TDWGBgK3V+UJkbGsp+3YqoL4K9dK7N7pg= Subject key identifier: B4:DC:9D:19:36:AA:B0:94:91:68:B8:61:34:53:AF:63:9E:69:A7:07 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 02108858844696FE0B72B160AE87B837F244C414 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dbc9efd0-4eba-4f1f-bf1a-4d08369c0401.roa Signing time: Sun 03 May 2026 03:21:52 +0000 ROA not before: Sun 03 May 2026 03:21:52 +0000 ROA not after: Sat 01 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:31c4::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:10:88:58:84:46:96:fe:0b:72:b1:60:ae:87:b8:37:f2:44:c4:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: May 3 03:21:52 2026 GMT Not After : Aug 1 23:59:59 2026 GMT Subject: serialNumber=ee7c45feb42d795de861660aa0c7ad51a564e6f3ae6d1e022cf4a78977966d4a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c9:29:2b:0a:f5:9f:e9:37:88:b9:d1:72:1e: d0:2f:1c:57:83:b4:11:9f:f1:37:03:e5:08:16:36: 1b:17:ab:e6:c1:25:49:5e:79:a7:da:ea:53:67:34: df:f4:76:6c:2b:cd:2c:c1:fe:c7:31:25:ad:3f:12: f9:71:09:c7:cd:84:6e:34:fe:9c:89:93:2a:6b:d2: 5e:53:75:16:51:2d:07:18:2d:25:e5:2a:dc:5c:b4: 5b:e4:29:61:66:21:a3:f7:81:92:f5:fa:3a:a6:a8: 95:c7:e6:e8:12:cc:f3:ca:9a:31:6e:48:a2:f6:68: c4:a2:d9:fe:9a:5f:b9:4e:a7:37:4f:b6:6a:eb:89: ba:63:7f:dc:34:60:42:77:b4:63:19:6a:2d:29:4d: d4:45:e1:94:aa:de:01:2c:c7:1a:db:74:37:ad:e6: ac:cf:1d:ab:15:71:48:e5:b9:5c:f2:17:6d:4b:b4: 64:69:b6:27:a8:48:8e:5a:11:06:7e:bf:ed:23:9e: 73:c4:a8:41:b6:77:4c:5b:f7:7d:fe:ff:28:f3:de: 13:52:8d:ac:4d:08:52:06:27:46:e4:94:66:04:c4: 77:ee:fa:75:12:16:9f:04:ad:30:02:54:3c:2f:2a: ee:36:6b:b8:9c:e7:c8:78:61:82:8b:31:31:38:a4: 57:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:DC:9D:19:36:AA:B0:94:91:68:B8:61:34:53:AF:63:9E:69:A7:07 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dbc9efd0-4eba-4f1f-bf1a-4d08369c0401.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:31c4::/47 Signature Algorithm: sha256WithRSAEncryption 8d:eb:94:e0:dc:10:5d:2e:f7:0b:55:4f:5a:95:be:55:78:3c: 84:f6:cd:f5:53:9e:f7:20:37:8e:f2:32:7f:81:54:c9:1c:5a: ee:85:5d:02:7b:64:00:dc:2c:aa:ff:95:8c:0e:c6:25:24:05: 67:5b:75:f2:2d:85:ad:d5:f8:ba:b7:a3:88:5c:82:fc:73:ba: 79:ad:ef:95:4d:bf:3c:db:77:7f:ca:8a:0c:95:46:83:e8:9f: c0:b6:3a:80:d7:ca:33:a7:a4:cd:87:fa:dd:96:f2:c4:b9:18: af:de:11:d7:4b:b6:99:6b:c8:6f:b5:ff:74:20:da:3c:7b:d7: 92:ba:6a:d8:08:5b:52:8b:2d:6e:e7:14:60:c0:34:1f:7b:36: 0f:ef:40:c9:48:b2:49:48:83:95:7a:87:6b:b7:2c:a8:08:55: 7c:5e:16:92:20:49:f9:77:20:72:8a:42:9e:fa:ad:23:27:6e: b2:92:f0:b5:d1:3f:46:e6:ba:dd:a3:c6:fa:1c:79:bb:ef:a0: 7e:97:ec:d0:0e:7d:73:d1:f2:3c:99:29:ee:fe:13:49:b9:35: 96:f1:6a:43:ba:4a:a4:f0:b5:51:d6:53:b4:89:72:f8:aa:4a: 29:1b:2e:31:46:93:50:48:c3:78:55:c4:b4:c9:14:e4:2a:45: a6:aa:09:84 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUAhCIWIRGlv4LcrFgroe4N/JExBQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTAzMDMyMTUyWhcNMjYwODAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZTdjNDVmZWI0MmQ3OTVkZTg2MTY2MGFhMGM3YWQ1MWE1 NjRlNmYzYWU2ZDFlMDIyY2Y0YTc4OTc3OTY2ZDRhMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrySkrCvWf6TeIudFyHtAvHFeDtBGf8TcD5QgWNhsXq+bB JUleeafa6lNnNN/0dmwrzSzB/scxJa0/EvlxCcfNhG40/pyJkypr0l5TdRZRLQcY LSXlKtxctFvkKWFmIaP3gZL1+jqmqJXH5ugSzPPKmjFuSKL2aMSi2f6aX7lOpzdP tmrribpjf9w0YEJ3tGMZai0pTdRF4ZSq3gEsxxrbdDet5qzPHasVcUjluVzyF21L tGRptieoSI5aEQZ+v+0jnnPEqEG2d0xb933+/yjz3hNSjaxNCFIGJ0bklGYExHfu +nUSFp8ErTACVDwvKu42a7ic58h4YYKLMTE4pFdFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUtNydGTaqsJSRaLhhNFOvY55ppwcwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2RiYzllZmQwLTRlYmEtNGYxZi1iZjFhLTRkMDgzNjljMDQwMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAMcQwDQYJKoZIhvcNAQELBQADggEBAI3rlODcEF0u9wtVT1qVvlV4 PIT2zfVTnvcgN47yMn+BVMkcWu6FXQJ7ZADcLKr/lYwOxiUkBWdbdfItha3V+Lq3 o4hcgvxzunmt75VNvzzbd3/KigyVRoPon8C2OoDXyjOnpM2H+t2W8sS5GK/eEddL tplryG+1/3Qg2jx715K6atgIW1KLLW7nFGDANB97Ng/vQMlIsklIg5V6h2u3LKgI VXxeFpIgSfl3IHKKQp76rSMnbrKS8LXRP0bmut2jxvocebvvoH6X7NAOfXPR8jyZ Ke7+E0m5NZbxakO6SqTwtVHWU7SJcviqSikbLjFGk1BIw3hVxLTJFOQqRaaqCYQ= -----END CERTIFICATE-----Generated at Sun May 3 16:57:30 2026 by rpki-client