$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/299ed28f-d28b-41d7-abc0-20c27ad2b15f.roa File: 299ed28f-d28b-41d7-abc0-20c27ad2b15f.roa (raw, json) Hash identifier: jtazbH8ToFVfozCXrEq+fJm1lv9yn4IRoDVqA0fZlmA= Subject key identifier: 39:93:33:3F:9C:83:A4:58:90:06:8D:37:6C:5D:14:87:C6:61:C8:53 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 4D8222C3CF0D536CF0C862BE527C97B162BAB2 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/299ed28f-d28b-41d7-abc0-20c27ad2b15f.roa Signing time: Thu 23 Jul 2026 00:50:13 +0000 ROA not before: Thu 23 Jul 2026 00:50:13 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3a62::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:82:22:c3:cf:0d:53:6c:f0:c8:62:be:52:7c:97:b1:62:ba:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Jul 23 00:50:13 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=922cd94b86e294a22254d7a74c4d7e7f62ffdc47fc9433e7208b755730d3b303, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:95:06:b3:c0:b7:20:fd:c5:2c:72:5f:87:02: c9:cf:e7:ff:75:9d:2a:8e:84:1e:67:e7:e3:50:4e: 0a:0a:95:0b:ba:ad:77:8e:8e:34:9a:bd:0c:22:ec: 07:cc:65:e8:49:1b:d0:f4:7e:8b:ae:7d:8a:88:ca: de:d1:41:ba:2c:57:57:85:ed:22:bf:f3:2e:04:ad: f1:c2:51:20:c6:44:65:db:e7:53:87:96:f4:ee:e4: 6a:a0:21:ac:63:65:4a:21:b5:e6:01:19:c3:ad:b3: 3f:38:32:bc:16:77:95:6b:01:5c:3a:48:9c:82:fa: 6d:df:b0:27:1c:eb:c7:85:bd:9e:72:e1:f4:34:be: 69:02:01:23:7f:61:a7:3a:30:80:fb:d3:c5:15:ac: 53:76:db:02:c2:18:47:6b:e8:99:cb:53:07:bc:16: a1:86:f7:8d:73:4c:8e:12:be:7e:79:b3:ba:42:1a: b3:2b:98:b4:c1:25:ea:a0:df:16:84:07:bb:c1:34: ac:f9:0b:d6:f0:37:74:36:52:4d:e3:fe:db:01:d2: cf:bb:f4:49:fd:4e:fa:b1:fe:7f:38:7e:d6:83:f0: 4c:13:62:cf:8f:d3:7c:39:72:be:88:d1:58:47:48: 70:df:90:05:e8:2d:28:46:d1:7b:e2:d5:eb:30:d3: 1d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:93:33:3F:9C:83:A4:58:90:06:8D:37:6C:5D:14:87:C6:61:C8:53 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/299ed28f-d28b-41d7-abc0-20c27ad2b15f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3a62::/47 Signature Algorithm: sha256WithRSAEncryption b9:96:3f:95:b9:94:1e:62:d7:bb:b9:b2:18:ec:4d:8a:0d:a1: e0:14:5e:52:0b:56:49:78:f4:46:d1:8d:9c:d9:f9:e0:35:d6: 5d:f8:59:a5:08:dc:a2:16:7a:01:a8:d6:53:0d:1f:22:22:61: 2c:5b:d7:5c:05:8b:07:aa:3b:f0:aa:17:df:bb:1f:68:1c:2f: e0:14:fe:9f:e4:22:78:7c:6c:35:1a:bb:8f:6d:71:ac:b2:e0: 8b:ff:15:6b:85:53:92:99:c4:1a:de:99:1f:26:ea:2a:bc:c6: 37:57:d2:a2:48:c2:bc:0e:bb:5d:6a:57:c0:2f:f3:c7:33:b4: ef:34:11:df:f9:24:dd:5c:07:f2:d2:d9:22:9c:0f:02:6b:b6: 5f:09:00:4e:fb:4c:88:9a:49:e3:86:48:e1:a2:db:16:a4:25: 32:71:29:2b:23:87:23:d8:b5:a2:81:4c:7c:93:38:35:1f:b9: 5e:91:3b:34:0b:99:a7:2a:c0:3c:00:48:80:ae:af:46:f8:cc: 31:5c:b3:4e:77:41:82:b6:55:54:3c:4b:21:8c:64:cc:6a:fc: 11:c0:e4:e5:79:ea:0d:28:d3:35:d9:c4:e8:f4:c3:23:78:de: 3f:d9:b3:16:d9:b3:68:5b:d4:3f:33:f3:41:da:1a:b3:ee:dd: 4e:bb:16:44 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgITTYIiw88NU2zwyGK+UnyXsWK6sjANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI1NTEyMDkwMjdmNWU3YWQ1NGUwNGYwNDJlNGFjMGU5ZTY1 YzU2ZTU1Yzc3NDc4ZDJjZTAeFw0yNjA3MjMwMDUwMTNaFw0yNjEwMjEyMzU5NTla MHoxSTBHBgNVBAUTQDkyMmNkOTRiODZlMjk0YTIyMjU0ZDdhNzRjNGQ3ZTdmNjJm ZmRjNDdmYzk0MzNlNzIwOGI3NTU3MzBkM2IzMDMxLTArBgNVBAMTJDlmMjMwZmE5 LWFhMmYtNDAyMC1hZTJhLTFhNjAzNzQwODRiODCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAMSVBrPAtyD9xSxyX4cCyc/n/3WdKo6EHmfn41BOCgqVC7qt d46ONJq9DCLsB8xl6Ekb0PR+i659iojK3tFBuixXV4XtIr/zLgSt8cJRIMZEZdvn U4eW9O7kaqAhrGNlSiG15gEZw62zPzgyvBZ3lWsBXDpInIL6bd+wJxzrx4W9nnLh 9DS+aQIBI39hpzowgPvTxRWsU3bbAsIYR2vomctTB7wWoYb3jXNMjhK+fnmzukIa syuYtMEl6qDfFoQHu8E0rPkL1vA3dDZSTeP+2wHSz7v0Sf1O+rH+fzh+1oPwTBNi z4/TfDlyvojRWEdIcN+QBegtKEbRe+LV6zDTHfcCAwEAAaOCArQwggKwMB0GA1Ud DgQWBBQ5kzM/nIOkWJAGjTdsXRSHxmHIUzAfBgNVHSMEGDAWgBTo88Ug4g7yXTq3 oha7FAQxajc48TAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv ZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzk5ZjhmZWQyLTI5 MmItNDcyMi1iOTI4LWZlZTdiZjBhNTkxMC81NTEyMDkwMjdmNWU3YWQ1NGUwNGYw NDJlNGFjMGU5ZTY1YzU2ZTU1Yzc3NDc4ZDJjZS5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9lNzUxOGFmNS1hMzQzLTQyOGQtYmY3OC1mOTgy YjZlNjA1MDUvMjk5ZWQyOGYtZDI4Yi00MWQ3LWFiYzAtMjBjMjdhZDJiMTVmLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgt Zjk4MmI2ZTYwNTA1L1huclZUZ1R3UXVTc0RwNWx4VzVWeDNSNDBzNC5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHASYAkAA6YjANBgkqhkiG9w0BAQsFAAOCAQEAuZY/lbmUHmLXu7myGOxNig2h 4BReUgtWSXj0RtGNnNn54DXWXfhZpQjcohZ6AajWUw0fIiJhLFvXXAWLB6o78KoX 37sfaBwv4BT+n+QieHxsNRq7j21xrLLgi/8Va4VTkpnEGt6ZHybqKrzGN1fSokjC vA67XWpXwC/zxzO07zQR3/kk3VwH8tLZIpwPAmu2XwkATvtMiJpJ44ZI4aLbFqQl MnEpKyOHI9i1ooFMfJM4NR+5XpE7NAuZpyrAPABIgK6vRvjMMVyzTndBgrZVVDxL IYxkzGr8EcDk5XnqDSjTNdnE6PTDI3jeP9mzFtmzaFvUPzPzQdoas+7dTrsWRA== -----END CERTIFICATE-----Generated at Fri Jul 24 01:19:28 2026 by rpki-client