$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/38f3e17c-3e1a-42f6-9333-a390edefac07.roa File: 38f3e17c-3e1a-42f6-9333-a390edefac07.roa (raw, json) Hash identifier: AwnihQIvRhICSNrJmYr8kR9da6R1dqdYn+gTkXrAPhE= Subject key identifier: E7:05:A1:DB:1C:08:90:B2:60:63:E6:63:F4:DF:0D:F1:86:99:D5:3E Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 0612B062179CA4311B97E605744F23F379039044 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/38f3e17c-3e1a-42f6-9333-a390edefac07.roa Signing time: Thu 23 Jul 2026 13:21:17 +0000 ROA not before: Thu 23 Jul 2026 13:21:17 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3890::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:12:b0:62:17:9c:a4:31:1b:97:e6:05:74:4f:23:f3:79:03:90:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Jul 23 13:21:17 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=0b309d9581240a79ac97d1e945c7e8fcbd2fdc43a05fb7c0b1c106c01b764f13, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b4:6e:80:f1:98:c9:f3:2d:d0:dd:21:03:b2: 48:85:de:45:fc:b6:6d:07:0e:80:73:50:ad:a8:b6: 64:1b:cc:7e:5d:98:70:67:a0:ce:cd:99:5f:70:c0: ad:e9:e9:ad:61:50:a6:49:46:77:c2:d8:9f:23:e4: 9d:c2:7f:60:91:63:f1:5e:62:03:f7:d1:0b:e3:50: 03:34:4a:2a:20:99:4d:05:dc:bb:e3:1f:83:90:1a: 6e:43:a2:45:3d:a8:88:f7:7e:6b:45:da:7e:40:08: 58:1b:15:0a:fd:40:26:a2:45:0c:5e:c8:ea:34:0f: c5:9f:72:3f:64:1d:52:c2:85:44:a4:e5:0a:cf:1f: 4f:dc:24:67:40:43:e1:79:69:ee:8e:84:56:95:3e: 23:2d:59:2d:5e:7c:52:22:ed:4e:79:70:1d:d8:0c: a5:c4:2e:91:2c:0e:8b:9f:8b:33:c5:d8:bd:32:cc: 7c:bc:02:a1:19:53:b9:3c:c6:19:b0:5b:ff:2b:95: cf:ae:fa:41:30:4f:94:a0:50:15:85:9b:a4:f4:ed: 4d:81:00:8b:e4:13:7d:01:a6:68:d1:62:11:aa:82: 11:34:84:6e:b5:19:92:69:26:b3:5f:29:a2:93:bf: 47:36:b6:36:a1:33:2f:23:d1:f0:fa:ff:d6:6e:58: 97:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:05:A1:DB:1C:08:90:B2:60:63:E6:63:F4:DF:0D:F1:86:99:D5:3E X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/38f3e17c-3e1a-42f6-9333-a390edefac07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3890::/44 Signature Algorithm: sha256WithRSAEncryption a2:36:0c:98:25:73:e1:63:8c:4c:61:a3:f1:47:71:a4:01:a2: 62:8e:bc:d1:a9:9f:32:52:59:03:56:9e:4a:bf:ef:47:f1:27: e2:67:ab:1e:12:bf:44:2c:bf:c8:39:6a:02:51:32:81:22:3a: 42:f4:c7:15:76:e9:62:86:c5:fc:bf:d9:55:7a:a6:e5:71:df: 8d:81:db:a6:1f:38:21:3b:23:76:1c:f1:c9:f7:ab:57:62:54: 31:9b:bb:3e:4d:1e:f1:22:4b:1e:6e:72:e6:b6:ba:20:fe:17: 73:3d:0e:82:80:4c:0c:e8:bd:8c:67:f2:15:45:90:9c:b1:fc: 34:71:b9:35:92:85:6a:fb:6b:4f:ec:48:ca:3b:61:aa:9c:1d: ef:32:52:00:3d:c1:9d:47:c1:c3:90:8d:86:1d:a8:65:75:79: ca:40:ca:86:35:d4:33:44:3e:4b:12:af:44:70:6d:ed:11:f3: a4:25:62:8a:b9:f8:c5:da:a1:8d:78:13:a6:42:ac:40:d7:72: 73:3c:6d:8f:31:40:32:3d:d0:04:41:56:74:c4:80:bc:81:fa: cf:f4:1c:f3:68:6b:4e:ce:13:c8:b0:75:a5:9c:75:91:d0:0b: 19:63:63:a1:14:85:80:89:c6:bf:9c:e6:0e:f4:14:a5:57:c5: d6:6d:c9:67 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBhKwYhecpDEbl+YFdE8j83kDkEQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMTMyMTE3WhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwYjMwOWQ5NTgxMjQwYTc5YWM5N2QxZTk0NWM3ZThmY2Jk MmZkYzQzYTA1ZmI3YzBiMWMxMDZjMDFiNzY0ZjEzMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMtG6A8ZjJ8y3Q3SEDskiF3kX8tm0HDoBzUK2otmQbzH5d mHBnoM7NmV9wwK3p6a1hUKZJRnfC2J8j5J3Cf2CRY/FeYgP30QvjUAM0SiogmU0F 3LvjH4OQGm5DokU9qIj3fmtF2n5ACFgbFQr9QCaiRQxeyOo0D8Wfcj9kHVLChUSk 5QrPH0/cJGdAQ+F5ae6OhFaVPiMtWS1efFIi7U55cB3YDKXELpEsDoufizPF2L0y zHy8AqEZU7k8xhmwW/8rlc+u+kEwT5SgUBWFm6T07U2BAIvkE30BpmjRYhGqghE0 hG61GZJpJrNfKaKTv0c2tjahMy8j0fD6/9ZuWJcnAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU5wWh2xwIkLJgY+Zj9N8N8YaZ1T4wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzM4ZjNlMTdjLTNlMWEtNDJmNi05MzMzLWEzOTBlZGVmYWMwNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAJAAOJAwDQYJKoZIhvcNAQELBQADggEBAKI2DJglc+FjjExho/FHcaQB omKOvNGpnzJSWQNWnkq/70fxJ+Jnqx4Sv0Qsv8g5agJRMoEiOkL0xxV26WKGxfy/ 2VV6puVx342B26YfOCE7I3Yc8cn3q1diVDGbuz5NHvEiSx5ucua2uiD+F3M9DoKA TAzovYxn8hVFkJyx/DRxuTWShWr7a0/sSMo7YaqcHe8yUgA9wZ1HwcOQjYYdqGV1 ecpAyoY11DNEPksSr0Rwbe0R86QlYoq5+MXaoY14E6ZCrEDXcnM8bY8xQDI90ARB VnTEgLyB+s/0HPNoa07OE8iwdaWcdZHQCxljY6EUhYCJxr+c5g70FKVXxdZtyWc= -----END CERTIFICATE-----Generated at Fri Jul 24 06:19:40 2026 by rpki-client