$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3a9803cc-62eb-4013-a624-b6e632fd80aa.roa File: 3a9803cc-62eb-4013-a624-b6e632fd80aa.roa (raw, json) Hash identifier: uycBeAmJkr5aWwbTaWfO8SNJJR/+XFrGt4e0ps0iJ6I= Subject key identifier: 1A:11:A8:EE:34:04:5C:CF:05:49:4C:6E:79:1B:FD:50:84:89:39:0C Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 2390CF5F004F98561BC4A716D38E888DBE83398B Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3a9803cc-62eb-4013-a624-b6e632fd80aa.roa Signing time: Thu 23 Jul 2026 02:11:21 +0000 ROA not before: Thu 23 Jul 2026 02:11:21 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3704::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:90:cf:5f:00:4f:98:56:1b:c4:a7:16:d3:8e:88:8d:be:83:39:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Jul 23 02:11:21 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=2737af879b1bf0c891fa546844b9928e4dc5486d9c66f14a1ea3ba3efe230e1c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:60:ec:4d:70:94:b8:6b:87:c4:42:96:1a:19: 68:81:7a:1a:6d:38:7d:ae:37:7a:28:96:f9:73:04: 62:49:8e:cd:5d:9c:56:b4:5a:db:46:cd:38:b1:93: 77:67:53:89:43:84:74:e6:59:75:35:3d:b7:ac:29: 69:5c:c1:0b:fe:2f:53:11:27:f5:84:75:02:10:84: a7:67:64:dd:63:0d:eb:f8:b7:22:f0:83:ad:c6:bc: 34:68:52:a0:f9:24:f5:4b:e9:5d:fa:6a:98:2c:ac: 2a:4d:39:7e:90:7f:2f:e8:f3:16:ab:13:e5:9f:d4: d2:d2:52:dc:fc:c1:ba:b8:eb:03:3e:3a:1f:43:65: ef:05:f1:1f:19:5c:05:c8:33:1e:be:d3:8e:dc:25: 2e:3a:aa:5b:4f:59:a2:04:6f:1e:ad:84:a9:00:a7: 3d:d4:50:0e:c3:82:95:ec:93:7f:2c:cc:8f:81:3b: dc:f9:64:2c:d4:1d:ce:cd:86:40:94:a5:c8:02:29: a6:10:85:9e:58:61:c1:09:a3:76:2c:13:35:a9:15: 19:c6:83:cf:a9:67:46:40:80:e8:0e:f0:96:4c:8e: 79:84:5a:70:c1:1a:53:c7:e3:f6:95:e6:92:7a:bb: a4:7a:24:d7:71:69:2e:e6:e3:a5:ab:85:f9:e7:ae: d3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:11:A8:EE:34:04:5C:CF:05:49:4C:6E:79:1B:FD:50:84:89:39:0C X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3a9803cc-62eb-4013-a624-b6e632fd80aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3704::/47 Signature Algorithm: sha256WithRSAEncryption 7e:db:d7:bb:70:ec:44:58:d5:25:ee:ea:67:57:44:8f:da:d4: c8:65:c8:b0:4c:46:ca:3e:8e:b6:77:b3:24:c4:46:23:5a:25: 52:e8:e5:95:e2:5c:d2:20:1c:a2:00:64:57:3b:42:eb:0c:77: ad:dc:18:64:07:a1:46:3d:11:ba:d0:23:ce:f0:53:c8:aa:07: a0:36:8f:38:d9:a5:4b:39:cb:c6:10:c3:1e:0e:d6:db:2e:fb: dc:3a:d1:5d:d3:a3:c4:b5:fa:ee:ed:53:10:67:52:6c:9a:97: 61:95:68:25:3c:16:97:9d:74:b2:fd:f6:bf:d2:74:92:f8:4c: ef:33:16:6b:1e:3c:03:37:23:68:0a:8d:34:42:51:ab:e0:77: 72:cf:a7:97:76:6f:62:17:35:0a:51:22:65:cf:29:f3:79:6d: 80:84:90:d6:3b:8f:08:83:84:4a:85:39:1e:72:eb:1a:dd:b4: cd:94:6d:d4:1c:15:01:2c:c7:be:6d:d5:a8:ac:e0:5c:ed:08: d4:b2:82:a3:0c:a5:f7:ff:a1:3c:ef:b2:df:7b:ce:12:0f:a3: a7:c1:c8:a2:d1:7c:ae:10:2e:69:b9:ad:2d:d5:1d:32:46:6f: b5:df:0b:38:8b:75:bf:f4:b1:14:ad:d8:8c:98:dc:43:1d:c9: 87:2d:be:84 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUI5DPXwBPmFYbxKcW046Ijb6DOYswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMDIxMTIxWhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyNzM3YWY4NzliMWJmMGM4OTFmYTU0Njg0NGI5OTI4ZTRk YzU0ODZkOWM2NmYxNGExZWEzYmEzZWZlMjMwZTFjMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXYOxNcJS4a4fEQpYaGWiBehptOH2uN3oolvlzBGJJjs1d nFa0WttGzTixk3dnU4lDhHTmWXU1PbesKWlcwQv+L1MRJ/WEdQIQhKdnZN1jDev4 tyLwg63GvDRoUqD5JPVL6V36apgsrCpNOX6Qfy/o8xarE+Wf1NLSUtz8wbq46wM+ Oh9DZe8F8R8ZXAXIMx6+047cJS46qltPWaIEbx6thKkApz3UUA7DgpXsk38szI+B O9z5ZCzUHc7NhkCUpcgCKaYQhZ5YYcEJo3YsEzWpFRnGg8+pZ0ZAgOgO8JZMjnmE WnDBGlPH4/aV5pJ6u6R6JNdxaS7m46WrhfnnrtMVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUGhGo7jQEXM8FSUxueRv9UISJOQwwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzNhOTgwM2NjLTYyZWItNDAxMy1hNjI0LWI2ZTYzMmZkODBhYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAANwQwDQYJKoZIhvcNAQELBQADggEBAH7b17tw7ERY1SXu6mdXRI/a 1MhlyLBMRso+jrZ3syTERiNaJVLo5ZXiXNIgHKIAZFc7QusMd63cGGQHoUY9EbrQ I87wU8iqB6A2jzjZpUs5y8YQwx4O1tsu+9w60V3To8S1+u7tUxBnUmyal2GVaCU8 FpeddLL99r/SdJL4TO8zFmsePAM3I2gKjTRCUavgd3LPp5d2b2IXNQpRImXPKfN5 bYCEkNY7jwiDhEqFOR5y6xrdtM2UbdQcFQEsx75t1ais4FztCNSygqMMpff/oTzv st97zhIPo6fByKLRfK4QLmm5rS3VHTJGb7XfCziLdb/0sRSt2IyY3EMdyYctvoQ= -----END CERTIFICATE-----Generated at Fri Jul 24 01:21:35 2026 by rpki-client