$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/65ceca35-1231-4f29-a88d-1425ce24a12e.roa File: 65ceca35-1231-4f29-a88d-1425ce24a12e.roa (raw, json) Hash identifier: +1OLtYos4lqtDoNKCVZnHEtfaDbC99cEtdNs7re4IUY= Subject key identifier: D6:48:0C:3C:88:1B:A0:2D:A9:6A:F4:BE:1C:57:32:35:31:00:97:5C Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 4D63AF256D57FAC318CA046099B620752344FC34 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/65ceca35-1231-4f29-a88d-1425ce24a12e.roa Signing time: Thu 23 Jul 2026 03:01:22 +0000 ROA not before: Thu 23 Jul 2026 03:01:22 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:36ce::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:63:af:25:6d:57:fa:c3:18:ca:04:60:99:b6:20:75:23:44:fc:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Jul 23 03:01:22 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=dfe25ef9b909e8d5d3b3f92b196456f44ffed4b4af7bd12fd361596b25197b01, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:78:17:14:b4:c6:c1:65:86:38:7d:4a:e6:35: 79:b2:66:25:0b:b0:81:73:23:da:e8:5c:99:44:c2: 4c:04:90:12:da:51:a5:de:c8:13:c4:ba:9f:bc:ee: d1:8d:1b:23:b3:90:d3:62:b7:c8:fe:5f:c0:e8:21: 3c:ec:a8:4c:1b:d4:5d:72:2f:f6:05:06:f8:98:06: a2:f7:2a:8a:da:73:5d:00:81:64:20:a1:62:dc:a2: fc:5e:08:33:7e:b2:e7:a6:5c:ff:aa:75:a5:11:31: e1:67:3f:14:c8:f2:7e:07:5c:0a:77:4f:7e:20:be: 83:f0:c3:c0:4c:0f:f6:e8:fd:8a:b6:71:96:ff:be: bf:21:32:f5:ac:0e:9c:d0:16:e4:30:5d:c4:bb:a0: 03:2c:dd:37:78:e8:dd:15:41:74:f1:52:1f:28:e5: 4b:17:65:6b:3f:a9:ae:40:29:79:2d:62:30:d0:00: 27:f0:16:3f:34:cf:ac:b9:91:8d:71:60:34:b6:13: 14:3f:58:5e:a9:e3:78:de:35:a1:5b:9c:40:a0:f3: 6d:fa:86:b7:f3:af:c9:c6:1e:25:d0:d2:74:a0:db: 93:8e:5b:d0:2b:a1:22:51:a3:70:2d:75:c8:41:77: 04:e4:a9:72:ac:c8:21:4b:4a:ee:3a:2e:fb:d0:3e: dc:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:48:0C:3C:88:1B:A0:2D:A9:6A:F4:BE:1C:57:32:35:31:00:97:5C X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/65ceca35-1231-4f29-a88d-1425ce24a12e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:36ce::/47 Signature Algorithm: sha256WithRSAEncryption 22:4c:57:36:47:33:6e:9d:64:07:ca:bf:21:63:a3:b0:6b:e4: da:96:9f:08:51:46:45:8d:5b:c3:b7:45:d5:a9:80:58:82:94: fa:95:14:ee:2b:78:29:92:de:d6:17:68:3f:6a:6c:c8:30:b3: 9f:0a:a6:50:8b:8b:06:8e:7f:82:0f:f0:1b:65:2c:ce:44:99: 58:db:29:ba:db:b7:8f:79:8d:cf:0a:fc:f9:63:ad:65:33:ea: 7b:cc:55:5a:2c:dd:37:04:56:f3:76:af:2e:8d:64:cf:70:87: e5:a8:52:ea:28:b6:53:8b:c1:a2:e2:a8:21:e7:f1:91:17:ed: ab:e8:74:2c:c4:91:f7:d1:73:42:f1:69:31:3c:dc:39:05:39: 50:72:9b:eb:f7:70:6b:f6:2d:a5:c3:9d:07:e5:38:22:91:b2: 78:05:49:24:68:4f:22:fd:b5:7e:af:41:ae:07:7c:54:e7:e2: 3d:31:6a:76:cf:9c:0b:fc:2b:24:30:55:69:37:e8:92:ac:d3: 97:83:c4:f7:c3:e6:ac:3d:fb:e8:d9:b6:a1:54:f2:13:ea:6c: 31:83:ac:06:c4:d3:45:92:04:b2:fa:44:b2:4f:7e:44:a8:45: 28:b8:24:6b:6a:50:0e:aa:26:c0:c1:5e:c5:f2:49:11:05:25: f7:73:bc:32 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTWOvJW1X+sMYygRgmbYgdSNE/DQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMDMwMTIyWhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZmUyNWVmOWI5MDllOGQ1ZDNiM2Y5MmIxOTY0NTZmNDRm ZmVkNGI0YWY3YmQxMmZkMzYxNTk2YjI1MTk3YjAxMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxeBcUtMbBZYY4fUrmNXmyZiULsIFzI9roXJlEwkwEkBLa UaXeyBPEup+87tGNGyOzkNNit8j+X8DoITzsqEwb1F1yL/YFBviYBqL3Korac10A gWQgoWLcovxeCDN+suemXP+qdaURMeFnPxTI8n4HXAp3T34gvoPww8BMD/bo/Yq2 cZb/vr8hMvWsDpzQFuQwXcS7oAMs3Td46N0VQXTxUh8o5UsXZWs/qa5AKXktYjDQ ACfwFj80z6y5kY1xYDS2ExQ/WF6p43jeNaFbnECg8236hrfzr8nGHiXQ0nSg25OO W9AroSJRo3AtdchBdwTkqXKsyCFLSu46LvvQPtyTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU1kgMPIgboC2pavS+HFcyNTEAl1wwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzY1Y2VjYTM1LTEyMzEtNGYyOS1hODhkLTE0MjVjZTI0YTEyZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAANs4wDQYJKoZIhvcNAQELBQADggEBACJMVzZHM26dZAfKvyFjo7Br 5NqWnwhRRkWNW8O3RdWpgFiClPqVFO4reCmS3tYXaD9qbMgws58KplCLiwaOf4IP 8BtlLM5EmVjbKbrbt495jc8K/PljrWUz6nvMVVos3TcEVvN2ry6NZM9wh+WoUuoo tlOLwaLiqCHn8ZEX7avodCzEkffRc0LxaTE83DkFOVBym+v3cGv2LaXDnQflOCKR sngFSSRoTyL9tX6vQa4HfFTn4j0xanbPnAv8KyQwVWk36JKs05eDxPfD5qw9++jZ tqFU8hPqbDGDrAbE00WSBLL6RLJPfkSoRSi4JGtqUA6qJsDBXsXySREFJfdzvDI= -----END CERTIFICATE-----Generated at Fri Jul 24 01:18:37 2026 by rpki-client