$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2d7ddeb0-ea20-46f0-9f32-69570a935156.roa File: 2d7ddeb0-ea20-46f0-9f32-69570a935156.roa (raw, json) Hash identifier: BiSwK050mg4Z7RON9uR9B/ubK3WsGde9r0csOMqTc98= Subject key identifier: 43:87:86:D8:86:BA:56:E0:FB:9E:ED:4F:21:A8:17:FA:16:84:05:5B Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 5AEA0A5F4C49CBF905F193417A9541B6E45ADDB3 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2d7ddeb0-ea20-46f0-9f32-69570a935156.roa Signing time: Thu 23 Jul 2026 08:21:02 +0000 ROA not before: Thu 23 Jul 2026 08:21:02 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3280::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:ea:0a:5f:4c:49:cb:f9:05:f1:93:41:7a:95:41:b6:e4:5a:dd:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Jul 23 08:21:02 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=f4c582408123ad6e39db1d3a8bfc8bb4d469bf8a3ba38b1080a65707c0f9fc97, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d3:e2:83:01:9c:0d:4f:2f:27:46:58:99:7b: e8:f1:b3:26:9e:e0:c5:bd:79:15:6f:4e:9d:39:af: 6f:77:de:6c:c3:f2:7a:a8:75:02:b0:95:f8:bf:4d: dc:38:ca:64:1b:f9:74:42:ab:de:75:a8:b7:5f:9d: 95:f8:d6:48:d9:f0:19:75:cf:97:cc:4a:88:fa:a2: 20:25:ca:96:25:46:1b:4c:0f:e7:54:20:a6:78:56: 3c:ab:17:32:dc:98:0e:c3:26:7f:4c:15:ad:1a:78: f8:d4:cc:64:6e:19:d8:37:43:a1:cf:99:33:ed:fc: 67:65:e0:2c:4d:b2:8a:ec:97:32:ca:67:e0:75:6f: 11:87:a2:b4:f7:23:c5:8d:99:ab:44:2c:43:74:53: ca:2e:e3:ec:f8:b3:e6:38:67:ae:b0:12:97:7f:64: 68:7c:6d:b0:b8:9e:60:50:d5:98:ca:0f:ad:45:47: c1:e5:d9:bc:04:c6:ad:a2:c8:ee:1a:a8:83:c8:13: fc:ea:80:b3:b8:71:12:58:ae:97:28:c9:9f:2d:a1: a0:a7:ea:d9:a3:ac:9e:b1:e6:c7:40:57:43:90:95: dc:51:c3:d5:de:50:f8:15:ae:ce:0b:f5:f5:04:19: 0d:00:94:74:07:e7:5b:75:89:f7:e7:3c:31:d5:20: 59:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:87:86:D8:86:BA:56:E0:FB:9E:ED:4F:21:A8:17:FA:16:84:05:5B X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2d7ddeb0-ea20-46f0-9f32-69570a935156.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3280::/44 Signature Algorithm: sha256WithRSAEncryption 16:a9:2b:67:a3:8b:30:ac:da:1f:7b:d9:a7:fb:d5:c6:a6:f3: 94:37:b4:23:eb:7b:b6:d1:f1:ba:84:b3:3b:3b:90:f4:1b:3a: a3:99:89:e6:57:5b:75:48:8b:87:8d:d8:bc:b7:bf:c8:38:d9: 01:9d:55:f3:f2:0e:e0:7c:96:8c:dc:30:7b:c6:71:d4:cb:f9: 5a:8a:c7:3e:f8:60:f8:d4:ef:f5:10:ca:bb:75:9d:71:1c:d7: 04:0c:9e:19:20:e0:74:7f:01:8c:18:07:b8:52:df:ad:f1:f5: 98:96:f7:64:bd:26:1d:cb:b0:19:cd:3d:1c:71:62:6f:ee:c3: 98:fa:f2:68:4b:c1:b1:27:b7:a4:cf:aa:f5:0f:2c:80:fd:5a: cc:9e:3b:68:a5:a7:66:80:72:0e:55:d4:a1:1d:18:06:bc:18: 3a:cf:e2:c2:04:ea:4b:5b:aa:24:52:6c:16:d7:b6:6b:ac:1d: 9c:35:df:a4:4b:b5:03:74:8e:f4:05:0b:50:a9:25:b0:cc:4b: 53:4a:74:4e:d7:d8:8a:fb:17:3a:49:ca:e9:9b:a6:8b:8c:41: a7:1e:61:35:51:7a:f2:ec:75:ea:d4:16:d1:98:f8:f5:eb:74: b0:a3:d6:9c:96:72:ff:d4:dd:eb:4f:43:27:8c:ef:3a:93:4a: a1:fc:33:22 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWuoKX0xJy/kF8ZNBepVBtuRa3bMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMDgyMTAyWhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNGM1ODI0MDgxMjNhZDZlMzlkYjFkM2E4YmZjOGJiNGQ0 NjliZjhhM2JhMzhiMTA4MGE2NTcwN2MwZjlmYzk3MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCw0+KDAZwNTy8nRliZe+jxsyae4MW9eRVvTp05r2933mzD 8nqodQKwlfi/Tdw4ymQb+XRCq951qLdfnZX41kjZ8Bl1z5fMSoj6oiAlypYlRhtM D+dUIKZ4VjyrFzLcmA7DJn9MFa0aePjUzGRuGdg3Q6HPmTPt/Gdl4CxNsorslzLK Z+B1bxGHorT3I8WNmatELEN0U8ou4+z4s+Y4Z66wEpd/ZGh8bbC4nmBQ1ZjKD61F R8Hl2bwExq2iyO4aqIPIE/zqgLO4cRJYrpcoyZ8toaCn6tmjrJ6x5sdAV0OQldxR w9XeUPgVrs4L9fUEGQ0AlHQH51t1iffnPDHVIFl7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUQ4eG2Ia6VuD7nu1PIagX+haEBVswHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzJkN2RkZWIwLWVhMjAtNDZmMC05ZjMyLTY5NTcwYTkzNTE1Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAJAAMoAwDQYJKoZIhvcNAQELBQADggEBABapK2ejizCs2h972af71cam 85Q3tCPre7bR8bqEszs7kPQbOqOZieZXW3VIi4eN2Ly3v8g42QGdVfPyDuB8lozc MHvGcdTL+VqKxz74YPjU7/UQyrt1nXEc1wQMnhkg4HR/AYwYB7hS363x9ZiW92S9 Jh3LsBnNPRxxYm/uw5j68mhLwbEnt6TPqvUPLID9WsyeO2ilp2aAcg5V1KEdGAa8 GDrP4sIE6ktbqiRSbBbXtmusHZw136RLtQN0jvQFC1CpJbDMS1NKdE7X2Ir7FzpJ yumbpouMQaceYTVRevLsderUFtGY+PXrdLCj1pyWcv/U3etPQyeM7zqTSqH8MyI= -----END CERTIFICATE-----Generated at Fri Jul 24 06:20:08 2026 by rpki-client