$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0858861e-4010-4b21-8017-e656d2f4a14a.roa File: 0858861e-4010-4b21-8017-e656d2f4a14a.roa (raw, json) Hash identifier: UcAQbwJyRxPiFogCJiAKu8tQ5kigATNt/+gfNYpkBU8= Subject key identifier: 1A:22:01:09:C0:8E:AC:51:AF:0B:84:5A:1A:5A:6F:20:2F:34:C9:01 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 579F9ECDFBE29A4FE77F48569CA1F73E93A88E54 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0858861e-4010-4b21-8017-e656d2f4a14a.roa Signing time: Thu 23 Jul 2026 02:31:16 +0000 ROA not before: Thu 23 Jul 2026 02:31:16 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:38ae::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:9f:9e:cd:fb:e2:9a:4f:e7:7f:48:56:9c:a1:f7:3e:93:a8:8e:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Jul 23 02:31:16 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=7a6eb2bfe2e89501ff1d44272e553f014eefab7c23f34c123890a5f59df89408, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:70:cc:37:12:e0:89:ea:cd:11:6b:af:96:49: 73:3e:62:ad:1b:c3:c9:ea:ad:22:27:da:db:e7:15: e0:85:db:ef:d4:0c:94:ef:f5:21:5a:18:33:b9:67: 61:98:40:66:7f:35:69:b7:72:a2:4e:47:e1:02:2f: 37:89:c1:bd:2a:22:b0:f8:13:7d:b8:42:1f:7d:3b: 58:b7:e1:a6:68:36:93:ad:ee:7c:af:06:4a:b3:52: 7c:14:2f:62:62:9a:4e:9d:6c:d4:7f:63:4f:f0:22: c2:37:04:a1:eb:35:23:78:77:13:78:f4:b6:3a:83: 49:c2:c9:89:d7:5d:93:e6:2d:74:9e:2d:64:00:76: bc:1c:7d:f1:ef:de:06:8d:bc:ed:f2:85:ec:81:cb: de:d7:82:1c:ab:11:fb:10:5d:12:cc:3a:b2:5b:04: f9:7d:bb:6f:f4:f3:cb:30:fd:8f:02:dd:a9:25:95: ab:b5:32:24:e6:a3:4c:00:ef:47:e5:e5:d1:54:25: 9f:f8:37:92:4b:d4:be:40:06:a2:82:ec:22:a4:e7: cb:de:00:93:c3:7f:97:9e:26:6f:93:78:62:b4:6f: fd:13:ef:23:49:f4:ec:0a:27:12:33:57:dc:bc:24: 62:fc:db:7f:ed:87:fd:23:a3:1d:ca:1d:de:e9:9d: d9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:22:01:09:C0:8E:AC:51:AF:0B:84:5A:1A:5A:6F:20:2F:34:C9:01 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0858861e-4010-4b21-8017-e656d2f4a14a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:38ae::/47 Signature Algorithm: sha256WithRSAEncryption a8:13:4a:1a:27:4c:cb:8a:e8:e0:56:fe:97:d7:e0:70:c0:b3: bb:29:4b:39:e5:0c:4d:ef:25:04:21:ce:67:bc:b0:5e:25:ce: 34:d9:32:a3:fd:7b:56:4f:b4:e7:0a:9a:35:ca:79:a5:b3:6d: f2:4c:9e:6d:5f:36:a4:c3:30:37:40:9d:24:8e:a6:1b:9c:c4: b5:1f:ce:20:80:f2:e5:44:2a:8a:04:87:4a:98:1c:bd:5f:f3: 14:63:c6:fc:74:4c:cb:83:e9:0d:f4:0a:83:59:67:7b:2c:31: f4:3c:8c:30:bd:83:ae:0b:2a:45:94:c1:b1:33:53:63:3a:05: 78:9d:74:7e:41:3a:61:7e:03:c2:f8:83:5e:61:cc:f0:2f:de: de:c4:69:a5:ff:ff:d0:33:e7:68:26:08:5e:e3:5d:18:3d:e5: 82:f0:8e:75:43:b7:28:f5:5c:c0:97:c9:bf:6d:c9:35:96:9a: 14:9b:4f:1b:53:06:1d:39:6a:b9:8a:59:0a:df:97:34:87:73: 11:06:f3:11:5a:8d:5a:0f:ab:a8:d8:13:05:89:cc:2d:aa:9c: ce:f4:d8:1f:4c:0b:d8:6c:22:2d:d7:68:9c:9a:77:f6:ab:7e: 97:2c:80:ca:93:af:1f:27:93:c4:37:2e:25:df:0a:00:e2:74: 41:58:c0:26 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUV5+ezfvimk/nf0hWnKH3PpOojlQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMDIzMTE2WhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3YTZlYjJiZmUyZTg5NTAxZmYxZDQ0MjcyZTU1M2YwMTRl ZWZhYjdjMjNmMzRjMTIzODkwYTVmNTlkZjg5NDA4MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCOcMw3EuCJ6s0Ra6+WSXM+Yq0bw8nqrSIn2tvnFeCF2+/U DJTv9SFaGDO5Z2GYQGZ/NWm3cqJOR+ECLzeJwb0qIrD4E324Qh99O1i34aZoNpOt 7nyvBkqzUnwUL2Jimk6dbNR/Y0/wIsI3BKHrNSN4dxN49LY6g0nCyYnXXZPmLXSe LWQAdrwcffHv3gaNvO3yheyBy97XghyrEfsQXRLMOrJbBPl9u2/088sw/Y8C3akl lau1MiTmo0wA70fl5dFUJZ/4N5JL1L5ABqKC7CKk58veAJPDf5eeJm+TeGK0b/0T 7yNJ9OwKJxIzV9y8JGL823/th/0jox3KHd7pndnRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUGiIBCcCOrFGvC4RaGlpvIC80yQEwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzA4NTg4NjFlLTQwMTAtNGIyMS04MDE3LWU2NTZkMmY0YTE0YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAOK4wDQYJKoZIhvcNAQELBQADggEBAKgTShonTMuK6OBW/pfX4HDA s7spSznlDE3vJQQhzme8sF4lzjTZMqP9e1ZPtOcKmjXKeaWzbfJMnm1fNqTDMDdA nSSOphucxLUfziCA8uVEKooEh0qYHL1f8xRjxvx0TMuD6Q30CoNZZ3ssMfQ8jDC9 g64LKkWUwbEzU2M6BXiddH5BOmF+A8L4g15hzPAv3t7EaaX//9Az52gmCF7jXRg9 5YLwjnVDtyj1XMCXyb9tyTWWmhSbTxtTBh05armKWQrflzSHcxEG8xFajVoPq6jY EwWJzC2qnM702B9MC9hsIi3XaJyad/arfpcsgMqTrx8nk8Q3LiXfCgDidEFYwCY= -----END CERTIFICATE-----Generated at Fri Jul 24 01:14:38 2026 by rpki-client