$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/23708281-eb06-4ef4-800e-24ad32b93d2c.roa File: 23708281-eb06-4ef4-800e-24ad32b93d2c.roa (raw, json) Hash identifier: 6x4GMzTubb3NHLdMbJSVeThhyqq0SZtnY4W5r22gJfY= Subject key identifier: 09:25:0F:A1:6F:80:46:F5:04:A4:9A:56:09:2D:F3:C4:02:03:B4:53 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 2B5391C4BE585886E7EA071B05D2D2E869A8530F Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/23708281-eb06-4ef4-800e-24ad32b93d2c.roa Signing time: Wed 22 Jul 2026 02:30:16 +0000 ROA not before: Wed 22 Jul 2026 02:30:16 +0000 ROA not after: Tue 20 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2c18::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:53:91:c4:be:58:58:86:e7:ea:07:1b:05:d2:d2:e8:69:a8:53:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Jul 22 02:30:16 2026 GMT Not After : Oct 20 23:59:59 2026 GMT Subject: serialNumber=48e783a632ae9df48e90e96d4938e2ddc80d392104b33628b58bc47b5d0d1521, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a9:26:9e:d0:c0:dd:f5:8f:f7:30:2c:18:c9: 2b:5e:49:7b:bb:95:01:02:a7:70:0f:62:23:33:0b: b1:62:76:ba:65:94:da:a5:af:84:2c:df:57:3e:9f: 8b:a8:3b:92:0a:ea:f7:a7:bc:e1:e9:09:4a:66:55: 26:28:81:5b:cd:02:6f:fc:0f:dc:0c:ef:9f:39:53: ef:33:ce:00:99:6a:d6:6e:6d:a3:af:13:61:f5:48: fd:6d:d9:11:a9:f7:e0:d0:87:ce:9c:39:64:06:be: 47:cb:1a:cb:0e:37:3e:89:26:b7:53:00:39:5e:ed: a9:04:f1:d4:cb:0f:85:70:bc:49:24:0b:91:1a:07: 70:2d:a3:6f:80:b8:72:43:59:e7:c7:d2:32:e7:dc: 15:1d:69:99:e4:7f:58:ec:d8:5a:ef:04:cb:36:5a: ff:1c:2d:dc:06:e7:5a:bd:dc:39:61:e1:74:ec:cc: 68:21:5d:e2:54:49:29:b0:78:3d:18:10:e6:7e:27: 12:1e:12:fc:19:1f:35:33:9c:1c:8e:75:04:ec:fd: 90:ee:ce:5e:9c:d3:f7:2e:19:d1:00:ae:af:72:38: b8:60:c0:77:bb:89:87:61:5e:2a:56:5d:61:b3:0a: 1c:e2:cf:dd:d8:c2:68:dc:f1:e6:dd:7a:48:00:84: eb:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:25:0F:A1:6F:80:46:F5:04:A4:9A:56:09:2D:F3:C4:02:03:B4:53 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/23708281-eb06-4ef4-800e-24ad32b93d2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2c18::/47 Signature Algorithm: sha256WithRSAEncryption 08:ec:f1:7f:72:77:2d:ab:6d:52:db:d3:3d:d5:a4:b0:60:a4: 06:5b:1e:72:5d:5e:52:f4:7c:b5:1c:4b:eb:25:7b:c3:f0:da: ec:8c:93:a8:78:da:dc:c9:9c:97:a0:a3:ec:54:e4:45:3e:9b: 0e:56:8f:76:9e:ef:34:09:ca:4d:2f:0c:04:4e:94:eb:e8:dc: 8c:8d:76:7f:47:82:11:7b:fa:be:6c:dc:33:58:d6:95:d7:96: c5:3b:9b:e5:79:6c:73:b8:3f:2a:81:a2:2d:32:73:47:5d:f6: 30:f9:ed:af:fc:8a:d4:87:bf:d3:03:bb:a4:3d:bb:90:b2:11: bd:85:43:d1:1b:05:ba:a6:8a:cc:dd:f3:ee:e4:b2:6a:48:3c: e1:29:94:db:8c:a4:9c:76:a6:b7:a5:b1:89:2b:af:b6:22:e6: 90:b7:c0:74:ff:64:9f:80:f8:64:b9:6c:3f:b5:3f:7b:48:7e: 09:54:15:d6:22:f1:79:49:5c:a8:c2:9a:11:8b:ef:c7:39:5c: a4:43:22:be:75:88:4d:27:ee:ec:10:f2:b5:78:f9:19:79:9f: cc:80:fd:fc:94:45:94:af:06:93:15:2f:e8:3b:94:88:a9:9a: 80:2a:ea:b3:69:ab:04:19:fd:cd:c2:df:dd:2f:a9:3d:8e:bd: fe:88:ac:81 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUK1ORxL5YWIbn6gcbBdLS6GmoUw8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIyMDIzMDE2WhcNMjYxMDIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0OGU3ODNhNjMyYWU5ZGY0OGU5MGU5NmQ0OTM4ZTJkZGM4 MGQzOTIxMDRiMzM2MjhiNThiYzQ3YjVkMGQxNTIxMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxqSae0MDd9Y/3MCwYySteSXu7lQECp3APYiMzC7Fidrpl lNqlr4Qs31c+n4uoO5IK6venvOHpCUpmVSYogVvNAm/8D9wM7585U+8zzgCZatZu baOvE2H1SP1t2RGp9+DQh86cOWQGvkfLGssONz6JJrdTADle7akE8dTLD4VwvEkk C5EaB3Ato2+AuHJDWefH0jLn3BUdaZnkf1js2FrvBMs2Wv8cLdwG51q93Dlh4XTs zGghXeJUSSmweD0YEOZ+JxIeEvwZHzUznByOdQTs/ZDuzl6c0/cuGdEArq9yOLhg wHe7iYdhXipWXWGzChziz93Ywmjc8ebdekgAhOvnAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUCSUPoW+ARvUEpJpWCS3zxAIDtFMwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzIzNzA4MjgxLWViMDYtNGVmNC04MDBlLTI0YWQzMmI5M2QyYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAALBgwDQYJKoZIhvcNAQELBQADggEBAAjs8X9ydy2rbVLb0z3VpLBg pAZbHnJdXlL0fLUcS+sle8Pw2uyMk6h42tzJnJego+xU5EU+mw5Wj3ae7zQJyk0v DAROlOvo3IyNdn9HghF7+r5s3DNY1pXXlsU7m+V5bHO4PyqBoi0yc0dd9jD57a/8 itSHv9MDu6Q9u5CyEb2FQ9EbBbqmiszd8+7ksmpIPOEplNuMpJx2prelsYkrr7Yi 5pC3wHT/ZJ+A+GS5bD+1P3tIfglUFdYi8XlJXKjCmhGL78c5XKRDIr51iE0n7uwQ 8rV4+Rl5n8yA/fyURZSvBpMVL+g7lIipmoAq6rNpqwQZ/c3C390vqT2Ovf6IrIE= -----END CERTIFICATE-----Generated at Fri Jul 24 02:41:07 2026 by rpki-client