$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/33b20d19-db57-477c-9bbd-ccca6cc59749.roa File: 33b20d19-db57-477c-9bbd-ccca6cc59749.roa (raw, json) Hash identifier: Otf5uEB0avQ4HfzfK1Z6jB92dmM4PnLP2Ao/qmkgJ/g= Subject key identifier: 48:54:5D:DE:29:B1:62:86:14:BF:0E:3D:74:0F:CA:16:FA:E3:A9:6D Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 430D5134DFC6F6ED46497C6DF5EF031F66037448 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/33b20d19-db57-477c-9bbd-ccca6cc59749.roa Signing time: Thu 23 Jul 2026 08:10:06 +0000 ROA not before: Thu 23 Jul 2026 08:10:06 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3b50::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:0d:51:34:df:c6:f6:ed:46:49:7c:6d:f5:ef:03:1f:66:03:74:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Jul 23 08:10:06 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=2c1dcfff6a79ce6d9ef5a3c0aedd3d3b9f9814e0bbe2006b18c166a1dca0fa37, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7e:42:bb:4d:4a:8a:18:50:5f:65:bc:c7:bd: ce:d7:17:55:88:e8:01:4a:96:35:a5:22:c6:cf:a0: ee:f6:74:d1:14:e5:4f:73:bf:bc:cf:e1:4a:3b:ca: dd:05:21:6d:d4:b9:eb:65:47:d4:20:5a:03:98:f0: 80:3c:0e:c9:2f:10:66:08:4b:e4:af:19:38:f8:58: aa:29:df:58:12:66:b2:06:90:ee:e0:2c:7f:40:43: cf:d3:57:d7:42:80:96:7b:47:a4:3d:74:82:62:ae: 83:10:1d:68:59:7e:1e:28:5d:ef:4b:94:eb:3d:50: 9a:a2:89:4a:db:74:67:7a:80:e6:6d:68:ac:93:f0: 57:8e:59:99:be:ea:bb:a9:e0:27:a7:a2:5d:c6:01: ac:f1:de:e6:4f:ba:ba:c6:77:db:96:c2:d1:d5:02: bb:b7:cd:09:ea:95:42:ae:d0:4e:64:1d:d2:19:89: 3c:19:dc:b2:85:e7:06:67:d5:3c:5e:53:2b:d9:9d: 3f:ba:e3:8e:c4:14:46:36:f3:89:7f:90:24:8d:36: 27:43:88:f9:4a:40:8d:45:f2:8f:00:8f:a9:54:c2: 7c:65:1f:aa:89:50:96:ed:cb:4d:89:42:13:8f:34: ca:17:fb:b0:14:24:46:17:32:55:56:fc:64:76:ad: 4e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:54:5D:DE:29:B1:62:86:14:BF:0E:3D:74:0F:CA:16:FA:E3:A9:6D X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/33b20d19-db57-477c-9bbd-ccca6cc59749.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3b50::/46 Signature Algorithm: sha256WithRSAEncryption 13:8e:d4:4c:85:b3:41:c5:5a:5a:d4:0e:44:9d:84:c2:f7:51: 38:ac:fb:3f:60:d7:d4:eb:ec:44:04:b4:f9:f6:34:70:45:a3: 1a:25:a6:f8:fc:8a:02:3e:ac:78:21:98:53:f9:77:6b:a6:f9: 0c:f6:15:1e:7a:89:84:3b:20:24:9c:68:87:f1:75:6f:4f:56: 60:b5:6d:8d:f2:3e:92:29:9b:c1:1c:13:37:c0:a2:18:8e:d2: d5:24:51:a5:c4:e5:31:ac:72:79:f9:c5:a3:e2:71:a2:8d:c1: bf:63:71:5b:c6:8e:66:24:92:55:fa:6d:bc:46:85:62:84:94: 7b:2f:b1:fc:f1:29:c3:ed:98:86:43:73:c1:09:16:79:ba:ec: 55:24:77:14:48:aa:28:60:ac:2f:e5:78:0b:34:39:00:fe:a7: 8b:f5:9c:b8:f0:51:72:43:2e:78:99:b5:2b:4c:4f:40:f0:0d: 7c:d1:fe:f9:cc:00:c8:3f:0c:6b:6e:2e:c8:6c:44:38:1e:4d: 79:f5:e3:7e:78:4f:23:b4:01:3a:71:5a:64:6a:44:a2:ce:5b: f9:54:72:aa:94:d9:9d:f0:37:f5:20:b8:38:44:7d:54:49:b2: f3:74:3a:95:e8:ea:cd:68:b5:b6:b7:4e:9a:7f:dd:be:0e:05: f1:40:bf:a3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQw1RNN/G9u1GSXxt9e8DH2YDdEgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMDgxMDA2WhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYzFkY2ZmZjZhNzljZTZkOWVmNWEzYzBhZWRkM2QzYjlm OTgxNGUwYmJlMjAwNmIxOGMxNjZhMWRjYTBmYTM3MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVfkK7TUqKGFBfZbzHvc7XF1WI6AFKljWlIsbPoO72dNEU 5U9zv7zP4Uo7yt0FIW3UuetlR9QgWgOY8IA8DskvEGYIS+SvGTj4WKop31gSZrIG kO7gLH9AQ8/TV9dCgJZ7R6Q9dIJiroMQHWhZfh4oXe9LlOs9UJqiiUrbdGd6gOZt aKyT8FeOWZm+6rup4Cenol3GAazx3uZPurrGd9uWwtHVAru3zQnqlUKu0E5kHdIZ iTwZ3LKF5wZn1TxeUyvZnT+6447EFEY284l/kCSNNidDiPlKQI1F8o8Aj6lUwnxl H6qJUJbty02JQhOPNMoX+7AUJEYXMlVW/GR2rU5PAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUSFRd3imxYoYUvw49dA/KFvrjqW0wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzMzYjIwZDE5LWRiNTctNDc3Yy05YmJkLWNjY2E2Y2M1OTc0OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAO1AwDQYJKoZIhvcNAQELBQADggEBABOO1EyFs0HFWlrUDkSdhML3 UTis+z9g19Tr7EQEtPn2NHBFoxolpvj8igI+rHghmFP5d2um+Qz2FR56iYQ7ICSc aIfxdW9PVmC1bY3yPpIpm8EcEzfAohiO0tUkUaXE5TGscnn5xaPicaKNwb9jcVvG jmYkklX6bbxGhWKElHsvsfzxKcPtmIZDc8EJFnm67FUkdxRIqihgrC/leAs0OQD+ p4v1nLjwUXJDLniZtStMT0DwDXzR/vnMAMg/DGtuLshsRDgeTXn14354TyO0ATpx WmRqRKLOW/lUcqqU2Z3wN/UguDhEfVRJsvN0OpXo6s1otba3Tpp/3b4OBfFAv6M= -----END CERTIFICATE-----Generated at Fri Jul 24 01:17:19 2026 by rpki-client