$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/67fd66ac-c8da-41e8-8f29-c2b983a1395d.roa File: 67fd66ac-c8da-41e8-8f29-c2b983a1395d.roa (raw, json) Hash identifier: lgS37dqQd+UwvhsgKUlPlJ+pMk4QWsaQUCmjlr79WlI= Subject key identifier: 3C:E1:AA:3E:D3:AE:60:AD:20:DE:55:2D:D5:A6:5E:0E:BA:B9:E4:9B Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 3386E376ED6667732D5733ED032912E5717DC635 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/67fd66ac-c8da-41e8-8f29-c2b983a1395d.roa Signing time: Thu 23 Jul 2026 12:51:51 +0000 ROA not before: Thu 23 Jul 2026 12:51:51 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:36f8::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:86:e3:76:ed:66:67:73:2d:57:33:ed:03:29:12:e5:71:7d:c6:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Jul 23 12:51:51 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=fb68d144ff7950d59499b73c3f2382a72fe1ee3ee75957c3316cb66b2351c2c8, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:df:79:ed:53:bc:ab:37:a1:81:4b:78:14:86: 29:63:73:0d:2b:ce:b5:93:ed:5a:22:f9:0d:50:a5: d3:8d:2a:68:80:bf:88:eb:04:59:e2:90:47:e6:84: de:f8:25:6d:6b:aa:16:3b:5c:98:7e:3c:fd:b1:da: 28:91:93:ff:2c:75:10:29:27:30:77:2e:22:fc:f0: 06:0e:53:00:af:c2:99:0f:a2:94:f8:35:5c:6b:8c: 78:7b:c0:90:fe:e1:f7:30:c8:11:74:84:84:cd:d2: 86:c9:07:1f:89:a7:5b:1d:08:b5:85:27:aa:68:a0: a7:35:24:ef:e1:b0:eb:58:73:b7:75:fe:c5:92:64: 0e:09:26:01:8e:ce:68:5b:c0:20:2b:3c:d7:ee:b3: b7:79:e7:81:28:8c:30:c5:f4:f0:dd:a4:48:c7:35: 5c:98:fe:22:92:82:01:12:35:61:03:d6:22:3c:1a: d9:34:a0:8e:e2:84:af:3d:86:b8:0b:88:d1:52:33: c9:73:58:b6:2f:32:ba:a9:c5:67:59:4d:00:ce:b4: 95:a0:97:a3:8b:36:56:2d:26:08:a5:ef:5c:c8:cc: 1c:01:b2:ea:28:91:f2:95:d2:4c:c0:19:70:5c:36: 64:f6:99:2e:9a:91:dd:7d:f5:aa:e0:33:44:54:e5: b8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:E1:AA:3E:D3:AE:60:AD:20:DE:55:2D:D5:A6:5E:0E:BA:B9:E4:9B X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/67fd66ac-c8da-41e8-8f29-c2b983a1395d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:36f8::/46 Signature Algorithm: sha256WithRSAEncryption 54:62:6a:13:58:b9:06:96:a1:44:67:87:7c:fa:ec:cc:d0:72: e4:5e:31:52:0d:ec:91:91:e8:18:36:6b:13:d5:d7:34:d9:ba: 7e:db:1d:a6:a8:e0:b0:1f:11:2f:cb:cf:6f:ab:0b:36:8f:fb: 35:f5:95:f1:c2:d6:7b:d4:c3:e9:b2:7e:a4:d5:c8:3f:aa:e3: 4e:a6:1d:50:9b:e7:a0:e8:64:ed:a7:f5:52:8f:23:d7:61:04: 94:4f:49:e1:d1:0a:97:27:29:8b:bc:4c:d0:9e:9f:3b:62:c0: 0d:d0:49:46:a3:06:ee:59:71:b5:78:8a:e1:c3:ef:65:2e:eb: 61:ba:f7:2a:06:60:af:39:38:e6:27:74:b3:56:85:cc:53:0c: b0:61:fa:d2:c6:ba:e9:7a:9a:89:af:2f:22:5c:92:09:99:a0: 13:d4:c4:cd:71:47:b6:e3:e1:17:c4:81:f7:57:83:71:74:21: 11:4a:ab:88:5c:a8:5a:75:31:3f:8b:d7:c3:9f:3d:58:a5:d4: 58:1c:a9:a4:5f:83:d5:3a:f5:27:c2:61:23:ea:85:ed:67:dc: dc:18:11:74:77:5f:b9:27:2d:12:9b:f4:7d:11:55:c3:a0:5d: 72:89:03:8b:26:0b:99:41:9a:3a:5c:a4:07:76:5d:f1:51:96: af:a7:44:53 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUM4bjdu1mZ3MtVzPtAykS5XF9xjUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMTI1MTUxWhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BmYjY4ZDE0NGZmNzk1MGQ1OTQ5OWI3M2MzZjIzODJhNzJm ZTFlZTNlZTc1OTU3YzMzMTZjYjY2YjIzNTFjMmM4MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDk33ntU7yrN6GBS3gUhiljcw0rzrWT7Voi+Q1QpdONKmiA v4jrBFnikEfmhN74JW1rqhY7XJh+PP2x2iiRk/8sdRApJzB3LiL88AYOUwCvwpkP opT4NVxrjHh7wJD+4fcwyBF0hITN0obJBx+Jp1sdCLWFJ6pooKc1JO/hsOtYc7d1 /sWSZA4JJgGOzmhbwCArPNfus7d554EojDDF9PDdpEjHNVyY/iKSggESNWED1iI8 Gtk0oI7ihK89hrgLiNFSM8lzWLYvMrqpxWdZTQDOtJWgl6OLNlYtJgil71zIzBwB suookfKV0kzAGXBcNmT2mS6akd199argM0RU5birAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUPOGqPtOuYK0g3lUt1aZeDrq55JswHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzY3ZmQ2NmFjLWM4ZGEtNDFlOC04ZjI5LWMyYjk4M2ExMzk1ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAANvgwDQYJKoZIhvcNAQELBQADggEBAFRiahNYuQaWoURnh3z67MzQ cuReMVIN7JGR6Bg2axPV1zTZun7bHaao4LAfES/Lz2+rCzaP+zX1lfHC1nvUw+my fqTVyD+q406mHVCb56DoZO2n9VKPI9dhBJRPSeHRCpcnKYu8TNCenztiwA3QSUaj Bu5ZcbV4iuHD72Uu62G69yoGYK85OOYndLNWhcxTDLBh+tLGuul6momvLyJckgmZ oBPUxM1xR7bj4RfEgfdXg3F0IRFKq4hcqFp1MT+L18OfPVil1FgcqaRfg9U69SfC YSPqhe1n3NwYEXR3X7knLRKb9H0RVcOgXXKJA4smC5lBmjpcpAd2XfFRlq+nRFM= -----END CERTIFICATE-----Generated at Fri Jul 24 07:34:42 2026 by rpki-client