$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f3d598e8-7cfe-4832-a85c-81693a4f24b7.roa File: f3d598e8-7cfe-4832-a85c-81693a4f24b7.roa (raw, json) Hash identifier: R7v94EPggNazvHzmTlF7obDXBb9oOP5IodBThZdaaAk= Subject key identifier: 2D:9F:A1:36:C1:11:5C:2D:04:E7:83:06:FA:CB:C4:53:5A:01:45:F1 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 7179AAD69F0C22175553EE5C8E844E5148228226 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f3d598e8-7cfe-4832-a85c-81693a4f24b7.roa Signing time: Sun 03 May 2026 02:50:10 +0000 ROA not before: Sun 03 May 2026 02:50:10 +0000 ROA not after: Sat 01 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:28c8::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:79:aa:d6:9f:0c:22:17:55:53:ee:5c:8e:84:4e:51:48:22:82:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: May 3 02:50:10 2026 GMT Not After : Aug 1 23:59:59 2026 GMT Subject: serialNumber=ff69674120afb2da0fa0ad88a884a476cacfa042f37079e8de27705a8193cb95, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3d:c1:12:92:a4:9e:37:1b:0b:e8:db:d2:8e: 2f:aa:ba:30:32:a3:c6:b0:a5:ef:d3:03:90:11:7b: 95:5e:a4:12:28:b9:16:d2:6f:db:1c:2e:d1:fd:1b: c9:c7:bb:86:8b:3b:58:ed:c1:35:79:22:c8:08:96: a1:a9:97:2b:fd:c1:7a:a7:aa:3f:99:95:24:b4:bc: 0c:8e:7a:e8:29:da:6f:ca:cf:a8:86:8e:73:89:a1: 18:f6:ac:db:91:1a:06:5b:c6:5c:89:8b:f0:2f:fe: 47:8a:02:b1:e9:51:c4:0a:c3:7c:86:d3:9c:f7:82: 2b:23:c2:91:5c:d7:d0:4d:9f:da:ba:89:95:bf:66: e6:3a:a0:b6:7f:ec:48:37:19:fc:d4:5c:1a:48:2b: 31:ed:4c:22:fb:98:14:6e:c5:c6:73:8f:90:d1:b0: bc:c5:9e:4b:f2:29:dd:cf:69:34:c8:64:0d:05:bd: 31:ea:52:a5:4a:b9:ca:2e:e2:f5:7b:22:e9:ce:d9: 49:8d:3d:0e:48:9f:3a:a3:ca:64:f9:8a:e0:6f:8c: 94:95:f6:35:c8:8e:36:fe:6d:c3:19:e7:0d:14:ec: c5:7d:75:df:17:aa:e0:e6:0e:c8:02:18:0e:ee:99: e7:25:2e:f2:ed:d2:d7:6d:48:8d:3d:65:3d:d4:5f: 50:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:9F:A1:36:C1:11:5C:2D:04:E7:83:06:FA:CB:C4:53:5A:01:45:F1 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f3d598e8-7cfe-4832-a85c-81693a4f24b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:28c8::/46 Signature Algorithm: sha256WithRSAEncryption 02:df:05:ee:1b:dd:8e:3c:7c:77:33:53:ad:8c:ab:44:6c:1a: 88:c1:1b:d9:fb:0b:a9:7c:71:8b:08:a2:49:05:8b:99:fc:d8: 74:f2:2f:d6:12:c7:ed:08:d6:27:7e:3b:cc:f6:55:a2:fa:29: d0:a2:ee:d2:a1:60:ce:69:39:3e:c4:eb:85:a8:da:b1:5a:b3: ae:d0:80:7c:88:82:78:7a:4f:4d:aa:37:49:d5:80:4f:db:fa: 18:46:c6:90:7e:60:f6:cd:49:3d:cc:3f:76:4f:dd:cf:72:54: e6:c6:6f:96:04:d4:6f:5a:31:67:bd:d2:c9:5a:35:58:4c:8e: 7a:f3:2d:ba:05:3e:e2:08:ca:15:3b:a6:b1:e7:32:01:63:e6: d3:46:23:ef:2d:c5:1c:1e:1d:75:22:9c:f2:a6:99:fe:83:bf: 8d:b9:57:16:4b:41:ec:e9:ed:de:37:15:60:c4:02:99:77:d4: 4c:0d:75:fc:ca:59:d2:2f:d4:f1:5b:40:78:18:75:fb:04:76: cb:ce:02:43:85:b7:7d:c4:b4:39:64:80:b9:5f:9a:ca:ea:66: ff:37:8f:1d:28:72:44:37:e8:9f:64:2d:4e:bd:21:83:7b:2a: d9:f3:71:42:3a:23:23:e2:9e:7f:24:96:08:a0:b5:b6:9e:2a: f5:55:91:96 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcXmq1p8MIhdVU+5cjoROUUgigiYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNTAzMDI1MDEwWhcNMjYwODAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BmZjY5Njc0MTIwYWZiMmRhMGZhMGFkODhhODg0YTQ3NmNh Y2ZhMDQyZjM3MDc5ZThkZTI3NzA1YTgxOTNjYjk1MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpPcESkqSeNxsL6NvSji+qujAyo8awpe/TA5ARe5VepBIo uRbSb9scLtH9G8nHu4aLO1jtwTV5IsgIlqGplyv9wXqnqj+ZlSS0vAyOeugp2m/K z6iGjnOJoRj2rNuRGgZbxlyJi/Av/keKArHpUcQKw3yG05z3gisjwpFc19BNn9q6 iZW/ZuY6oLZ/7Eg3GfzUXBpIKzHtTCL7mBRuxcZzj5DRsLzFnkvyKd3PaTTIZA0F vTHqUqVKucou4vV7IunO2UmNPQ5InzqjymT5iuBvjJSV9jXIjjb+bcMZ5w0U7MV9 dd8XquDmDsgCGA7umeclLvLt0tdtSI09ZT3UX1DVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQULZ+hNsERXC0E54MG+svEU1oBRfEwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2YzZDU5OGU4LTdjZmUtNDgzMi1hODVjLTgxNjkzYTRmMjRiNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAKMgwDQYJKoZIhvcNAQELBQADggEBAALfBe4b3Y48fHczU62Mq0Rs GojBG9n7C6l8cYsIokkFi5n82HTyL9YSx+0I1id+O8z2VaL6KdCi7tKhYM5pOT7E 64Wo2rFas67QgHyIgnh6T02qN0nVgE/b+hhGxpB+YPbNST3MP3ZP3c9yVObGb5YE 1G9aMWe90slaNVhMjnrzLboFPuIIyhU7prHnMgFj5tNGI+8txRweHXUinPKmmf6D v425VxZLQezp7d43FWDEApl31EwNdfzKWdIv1PFbQHgYdfsEdsvOAkOFt33EtDlk gLlfmsrqZv83jx0ockQ36J9kLU69IYN7KtnzcUI6IyPinn8klgigtbaeKvVVkZY= -----END CERTIFICATE-----Generated at Sun May 3 15:26:56 2026 by rpki-client