$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/28ef4155-6526-482a-9145-c94e8e68f22a.roa File: 28ef4155-6526-482a-9145-c94e8e68f22a.roa (raw, json) Hash identifier: xDCwLk41mJM8zuxmHdhOtOCwHzl8mDukfWIvnLaHqa4= Subject key identifier: 1B:19:53:F9:BD:0F:32:3B:C5:DD:97:9C:97:A0:CC:C0:FA:04:62:4F Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 58309AE9836D04B3D71FAE6263FCDE2B63345537 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/28ef4155-6526-482a-9145-c94e8e68f22a.roa Signing time: Thu 23 Jul 2026 08:30:12 +0000 ROA not before: Thu 23 Jul 2026 08:30:12 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3dd2::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:30:9a:e9:83:6d:04:b3:d7:1f:ae:62:63:fc:de:2b:63:34:55:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Jul 23 08:30:12 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=924fff8ad96782e197a39869f3a2789f9762601f6426ab8046cb3b39f46b91cc, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:87:b2:81:e7:f7:61:f1:0d:dd:50:f9:53:7d: 5d:2e:2e:db:da:ca:9b:c0:02:d3:d4:b9:8d:28:42: f4:c3:7e:ec:6f:a8:43:31:c0:f5:06:77:43:0c:82: 23:fb:6e:f0:a5:16:3c:8d:90:d8:29:ec:29:ec:5a: 6f:2b:72:b7:91:8e:94:7e:fd:e8:fc:dd:37:1e:14: 1d:1e:44:e0:1c:9c:4d:0e:d6:b5:09:e9:90:00:24: 35:7c:04:91:e2:aa:8a:56:4f:9c:6b:4c:d9:cf:40: 4a:97:2b:29:f3:88:72:55:6d:b9:1f:9d:29:a8:86: 6f:59:33:54:5f:dd:42:0e:10:f4:5c:ec:69:52:a5: f6:6c:0c:29:a8:c8:8b:37:f8:8d:00:b8:86:33:83: 96:ef:71:b4:da:0b:a5:d9:1a:c2:dd:b0:17:26:6e: 0c:cc:4e:2a:74:66:6c:ec:77:9e:af:a9:52:49:99: dd:e0:1d:45:99:4d:44:cf:e2:77:bc:88:33:b6:8b: 94:5c:65:3f:87:ec:fe:6d:fa:c1:dd:9a:5a:9d:4b: 83:98:6a:67:2b:10:bb:58:e9:ee:de:33:3b:e7:3f: df:07:25:cf:f7:d2:67:02:1e:35:66:3c:bb:8b:b6: 1a:52:11:aa:59:a5:28:ff:37:66:29:41:7b:32:36: df:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:19:53:F9:BD:0F:32:3B:C5:DD:97:9C:97:A0:CC:C0:FA:04:62:4F X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/28ef4155-6526-482a-9145-c94e8e68f22a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3dd2::/47 Signature Algorithm: sha256WithRSAEncryption 9f:7c:95:6c:90:a5:ae:53:41:6f:5c:46:f0:93:42:a9:89:98: 85:d6:6e:27:15:0d:b8:55:5e:cf:b9:56:ec:13:f4:66:f8:f9: 97:7c:b4:c4:99:63:aa:1a:62:7b:26:69:1f:e7:e7:3e:d1:4f: fc:19:66:51:2f:d6:6e:0c:03:c3:6e:cb:07:86:3f:bb:1e:35: c7:cc:ef:7b:7c:d7:ae:67:6c:82:bf:38:2a:85:5d:2b:3a:f0: 6c:52:5e:e9:ff:01:b3:62:a1:c9:cc:05:4a:8b:ef:6c:80:36: b8:04:01:45:21:40:aa:61:aa:e3:30:19:b0:d1:57:37:f0:4a: dd:2b:00:9c:ed:84:de:ce:24:8d:4e:e3:4b:95:98:56:5b:89: 75:5a:38:f9:e9:93:5e:bc:4a:82:e1:9b:40:4a:d2:13:3d:77: 87:3d:8e:a8:cb:ce:54:f7:92:8c:fc:24:e8:90:bd:a3:f7:b7: 85:59:16:f5:ec:54:55:3b:fe:b6:0b:18:f4:aa:01:32:fc:b5: f8:e8:5a:2f:62:84:45:7d:28:30:bf:9d:c1:14:e8:29:83:a3: 57:6d:5a:28:3f:20:24:0f:41:4a:0b:d9:2f:0f:b9:d5:d4:b1: 46:14:08:ba:e2:00:f2:dc:0e:c8:2b:12:bd:21:db:6f:a2:bd: d0:53:99:95 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWDCa6YNtBLPXH65iY/zeK2M0VTcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMDgzMDEyWhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MjRmZmY4YWQ5Njc4MmUxOTdhMzk4NjlmM2EyNzg5Zjk3 NjI2MDFmNjQyNmFiODA0NmNiM2IzOWY0NmI5MWNjMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAh7KB5/dh8Q3dUPlTfV0uLtvaypvAAtPUuY0oQvTDfuxv qEMxwPUGd0MMgiP7bvClFjyNkNgp7CnsWm8rcreRjpR+/ej83TceFB0eROAcnE0O 1rUJ6ZAAJDV8BJHiqopWT5xrTNnPQEqXKynziHJVbbkfnSmohm9ZM1Rf3UIOEPRc 7GlSpfZsDCmoyIs3+I0AuIYzg5bvcbTaC6XZGsLdsBcmbgzMTip0Zmzsd56vqVJJ md3gHUWZTUTP4ne8iDO2i5RcZT+H7P5t+sHdmlqdS4OYamcrELtY6e7eMzvnP98H Jc/30mcCHjVmPLuLthpSEapZpSj/N2YpQXsyNt+zAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUGxlT+b0PMjvF3Zecl6DMwPoEYk8wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzI4ZWY0MTU1LTY1MjYtNDgyYS05MTQ1LWM5NGU4ZTY4ZjIyYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAPdIwDQYJKoZIhvcNAQELBQADggEBAJ98lWyQpa5TQW9cRvCTQqmJ mIXWbicVDbhVXs+5VuwT9Gb4+Zd8tMSZY6oaYnsmaR/n5z7RT/wZZlEv1m4MA8Nu yweGP7seNcfM73t8165nbIK/OCqFXSs68GxSXun/AbNiocnMBUqL72yANrgEAUUh QKphquMwGbDRVzfwSt0rAJzthN7OJI1O40uVmFZbiXVaOPnpk168SoLhm0BK0hM9 d4c9jqjLzlT3koz8JOiQvaP3t4VZFvXsVFU7/rYLGPSqATL8tfjoWi9ihEV9KDC/ ncEU6CmDo1dtWig/ICQPQUoL2S8PudXUsUYUCLriAPLcDsgrEr0h22+ivdBTmZU= -----END CERTIFICATE-----Generated at Fri Jul 24 06:19:44 2026 by rpki-client