$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/02d5721c-169e-4466-8971-a80f6de45ba1.roa File: 02d5721c-169e-4466-8971-a80f6de45ba1.roa (raw, json) Hash identifier: XHqAqYwc3DP3EQiXWRH2g3oOKI6Td5Qt28mbAIPpyCM= Subject key identifier: E4:86:0A:EA:97:2A:35:59:B9:A1:43:C8:9C:79:F1:2E:1D:CE:DE:45 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 08FF947C4084AC4FE48A88A3561693A445A872AD Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/02d5721c-169e-4466-8971-a80f6de45ba1.roa Signing time: Wed 22 Jul 2026 03:00:47 +0000 ROA not before: Wed 22 Jul 2026 03:00:47 +0000 ROA not after: Tue 20 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2bd8::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:ff:94:7c:40:84:ac:4f:e4:8a:88:a3:56:16:93:a4:45:a8:72:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Jul 22 03:00:47 2026 GMT Not After : Oct 20 23:59:59 2026 GMT Subject: serialNumber=4fe733daf71a1008d1ee84c2b9d353194ca7844739080b78ad3b4fe4a21d3dd5, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f5:1f:f8:51:62:9b:96:f4:c7:14:e8:e0:4f: 20:b2:7c:d0:6f:5e:82:e3:5f:1d:09:f8:fe:8d:e2: c0:aa:a6:ae:0e:ce:e3:be:fa:49:62:80:b9:e6:c8: c5:d1:5c:d5:09:4b:11:bb:81:80:32:c6:e3:13:06: 1b:ed:b4:4b:ec:ab:9a:ab:8a:f8:c8:8d:15:fe:65: 90:49:71:79:42:7a:f8:f8:53:39:9d:67:fc:65:ad: a3:fa:ef:62:7f:ac:0e:af:1d:88:6e:02:7c:94:78: 64:b5:3e:f5:bd:b2:f8:40:6e:db:7f:89:dc:38:3e: 2b:2d:8c:5a:b0:48:e1:79:4a:47:10:84:24:50:81: dd:c2:6c:02:33:6a:1e:b6:3d:52:d6:e5:d8:35:04: 73:4d:fe:28:b4:d1:25:54:53:50:f3:b9:c4:84:69: 7b:71:a9:6e:fb:df:08:e6:5c:37:01:3d:4a:2d:7f: 28:14:ac:e5:ef:bd:85:be:77:38:8b:9b:ad:f6:24: 5a:47:3f:03:e1:53:65:d6:80:30:3e:c5:d3:01:0c: 6c:93:de:e7:7f:13:b7:c4:45:32:59:56:39:01:0d: a0:69:30:59:bd:56:a2:14:d0:a9:f1:e6:16:e4:51: 6d:65:c9:35:31:ea:74:7f:f0:05:a6:2f:a6:28:85: 86:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:86:0A:EA:97:2A:35:59:B9:A1:43:C8:9C:79:F1:2E:1D:CE:DE:45 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/02d5721c-169e-4466-8971-a80f6de45ba1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2bd8::/47 Signature Algorithm: sha256WithRSAEncryption 8c:63:8f:86:7f:6b:8e:e2:8a:b8:08:70:7c:a6:d4:f5:5a:a6: a6:21:67:69:79:c8:98:9a:2a:55:73:de:d3:19:60:44:82:ff: b0:a2:43:2d:c7:9d:c1:ca:a1:82:f6:de:a1:b7:07:ca:13:81: 84:b2:89:71:77:5a:73:29:5c:48:80:12:7c:e9:28:f2:b1:22: a8:ac:b4:c4:e2:40:86:66:03:8d:1a:95:f9:2b:ae:f5:37:ac: 26:ea:69:24:38:ce:7d:12:53:e3:d4:98:e3:ab:1c:93:03:36: 84:6d:fd:20:5e:48:ba:b0:67:fe:ad:9c:06:56:b3:51:36:67: ff:7f:d5:39:be:88:01:e9:65:99:72:99:49:8c:c0:30:e8:64: 88:ce:b6:e4:f2:39:f6:dd:58:99:51:96:4f:5f:b4:98:2a:1b: d3:eb:ac:94:9b:61:54:8c:9d:fa:9e:37:51:f4:74:15:55:29: 4b:60:45:ee:65:64:2a:8d:31:16:38:63:50:c0:ca:db:a8:1a: e7:f4:d5:18:c9:08:3d:1d:1d:ef:7b:46:11:d3:ef:b1:5e:19: 8e:57:d3:c0:16:7c:8c:67:da:a4:05:cc:f7:51:53:96:57:0c: 57:2a:6e:59:3a:42:ac:7e:2b:ae:e6:e2:ee:ee:ec:e0:d7:45: 85:b5:90:f7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCP+UfECErE/kioijVhaTpEWocq0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIyMDMwMDQ3WhcNMjYxMDIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZmU3MzNkYWY3MWExMDA4ZDFlZTg0YzJiOWQzNTMxOTRj YTc4NDQ3MzkwODBiNzhhZDNiNGZlNGEyMWQzZGQ1MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCq9R/4UWKblvTHFOjgTyCyfNBvXoLjXx0J+P6N4sCqpq4O zuO++kligLnmyMXRXNUJSxG7gYAyxuMTBhvttEvsq5qrivjIjRX+ZZBJcXlCevj4 UzmdZ/xlraP672J/rA6vHYhuAnyUeGS1PvW9svhAbtt/idw4PistjFqwSOF5SkcQ hCRQgd3CbAIzah62PVLW5dg1BHNN/ii00SVUU1DzucSEaXtxqW773wjmXDcBPUot fygUrOXvvYW+dziLm632JFpHPwPhU2XWgDA+xdMBDGyT3ud/E7fERTJZVjkBDaBp MFm9VqIU0Knx5hbkUW1lyTUx6nR/8AWmL6YohYbrAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU5IYK6pcqNVm5oUPInHnxLh3O3kUwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzAyZDU3MjFjLTE2OWUtNDQ2Ni04OTcxLWE4MGY2ZGU0NWJhMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAK9gwDQYJKoZIhvcNAQELBQADggEBAIxjj4Z/a47iirgIcHym1PVa pqYhZ2l5yJiaKlVz3tMZYESC/7CiQy3HncHKoYL23qG3B8oTgYSyiXF3WnMpXEiA EnzpKPKxIqistMTiQIZmA40alfkrrvU3rCbqaSQ4zn0SU+PUmOOrHJMDNoRt/SBe SLqwZ/6tnAZWs1E2Z/9/1Tm+iAHpZZlymUmMwDDoZIjOtuTyOfbdWJlRlk9ftJgq G9PrrJSbYVSMnfqeN1H0dBVVKUtgRe5lZCqNMRY4Y1DAytuoGuf01RjJCD0dHe97 RhHT77FeGY5X08AWfIxn2qQFzPdRU5ZXDFcqblk6Qqx+K67m4u7u7ODXRYW1kPc= -----END CERTIFICATE-----Generated at Fri Jul 24 05:25:16 2026 by rpki-client