$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/74cc41d9-9c89-4e31-98d2-3c497f055168.roa File: 74cc41d9-9c89-4e31-98d2-3c497f055168.roa (raw, json) Hash identifier: OLqt03uffOKfkKsTAJ2yUUgymvSI/dVYA5jbqn4aOu0= Subject key identifier: 91:04:D1:DE:7E:2D:D1:B7:32:CE:AA:A5:80:E7:98:E7:55:D6:BC:51 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 1043141146BEC87FC5E4B037F12559E36A8C6BA5 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/74cc41d9-9c89-4e31-98d2-3c497f055168.roa Signing time: Thu 23 Jul 2026 04:31:01 +0000 ROA not before: Thu 23 Jul 2026 04:31:01 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3394::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:43:14:11:46:be:c8:7f:c5:e4:b0:37:f1:25:59:e3:6a:8c:6b:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Jul 23 04:31:01 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=d75742928bd3ea988fa39f7092dc1d40346c3ddc79dcc373b36126601697e4e5, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:97:c0:c2:2e:65:0b:f6:cc:20:01:de:f9:59: ea:24:f7:0a:4f:14:18:e7:42:36:70:fd:47:a4:88: 5a:4d:a3:08:12:43:52:e9:19:4b:aa:c4:be:b6:72: b7:73:79:0d:21:7b:72:b3:1f:a1:fa:a6:23:9a:6f: 33:43:68:80:e3:62:85:e1:3f:6f:a9:47:86:6f:da: a3:15:ba:48:e7:ba:8b:cc:03:11:9e:4e:c1:9d:02: da:b9:b9:e3:0d:00:99:f4:9f:05:35:be:2a:e3:ce: b9:44:05:f3:bf:74:ba:18:b8:b3:de:d8:0a:3f:37: cf:04:9e:e1:04:a6:99:a2:5f:c6:ed:e3:57:bc:d6: 4a:84:ac:19:96:fa:f5:3a:70:01:70:00:cb:dd:53: c8:31:a1:8a:74:c4:5b:ec:31:a2:4f:9e:53:96:13: 86:85:e4:ff:e5:94:a9:1c:d4:7f:f3:c3:71:b6:7b: d6:9b:66:3a:87:17:f1:84:e7:84:93:a0:40:4e:4a: 70:db:65:7e:99:20:df:2d:fb:bd:1f:57:bb:15:86: 34:3d:9b:ac:6d:fc:2f:a6:71:9e:09:25:7b:53:3d: 8d:f2:51:05:12:68:55:c2:79:09:36:a5:72:87:9a: 81:af:8d:b5:73:19:6b:a3:1f:89:45:94:a6:27:c8: bf:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:04:D1:DE:7E:2D:D1:B7:32:CE:AA:A5:80:E7:98:E7:55:D6:BC:51 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/74cc41d9-9c89-4e31-98d2-3c497f055168.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3394::/47 Signature Algorithm: sha256WithRSAEncryption c2:d5:82:a8:84:49:8a:94:49:b6:a0:53:e3:d2:6a:cc:10:d9: 15:7c:9c:f2:88:f7:51:9d:56:e9:45:cf:01:f1:e6:a3:27:86: 55:50:2e:5f:76:ab:f7:9e:db:cf:1d:45:14:9d:b3:e1:20:df: 6e:8c:ab:bd:36:1e:bc:ad:f7:1f:a1:d7:7d:5b:c7:7e:ce:09: 95:76:27:a9:12:c4:8b:8f:3b:bb:e1:75:26:41:36:05:51:80: a7:84:65:7e:be:a5:34:e1:95:ae:fe:8c:d7:8a:27:75:06:f9: b7:8d:5c:f9:00:dc:95:d7:34:90:9d:65:58:2e:9d:99:a8:8e: d6:9b:30:a8:f9:cb:64:07:bd:73:4d:a0:05:14:01:48:c4:a1: a4:b4:8c:ed:62:63:5c:b0:b4:ec:61:ab:4c:61:ac:79:e1:12: b4:2c:53:15:1c:10:80:f3:f9:a8:7a:24:06:74:08:64:c3:30: 6b:d0:75:a2:1d:57:98:b4:9f:33:93:ac:5d:ee:9b:5a:ef:81: c2:b9:c2:c9:da:a7:d8:d9:f5:cc:49:7e:f1:5e:b0:40:48:51: ee:0b:70:2d:0f:e4:a1:6f:25:ec:3f:bf:9c:ac:2d:2b:f4:23: 1c:5b:8e:ca:e3:95:69:fe:a9:a0:11:95:ca:aa:90:1f:e2:38: 65:a5:1b:e0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEEMUEUa+yH/F5LA38SVZ42qMa6UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMDQzMTAxWhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNzU3NDI5MjhiZDNlYTk4OGZhMzlmNzA5MmRjMWQ0MDM0 NmMzZGRjNzlkY2MzNzNiMzYxMjY2MDE2OTdlNGU1MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbl8DCLmUL9swgAd75Weok9wpPFBjnQjZw/UekiFpNowgS Q1LpGUuqxL62crdzeQ0he3KzH6H6piOabzNDaIDjYoXhP2+pR4Zv2qMVukjnuovM AxGeTsGdAtq5ueMNAJn0nwU1virjzrlEBfO/dLoYuLPe2Ao/N88EnuEEppmiX8bt 41e81kqErBmW+vU6cAFwAMvdU8gxoYp0xFvsMaJPnlOWE4aF5P/llKkc1H/zw3G2 e9abZjqHF/GE54SToEBOSnDbZX6ZIN8t+70fV7sVhjQ9m6xt/C+mcZ4JJXtTPY3y UQUSaFXCeQk2pXKHmoGvjbVzGWujH4lFlKYnyL+pAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUkQTR3n4t0bcyzqqlgOeY51XWvFEwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1Lzc0Y2M0MWQ5LTljODktNGUzMS05OGQyLTNjNDk3ZjA1NTE2OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAM5QwDQYJKoZIhvcNAQELBQADggEBAMLVgqiESYqUSbagU+PSaswQ 2RV8nPKI91GdVulFzwHx5qMnhlVQLl92q/ee288dRRSds+Eg326Mq702Hryt9x+h 131bx37OCZV2J6kSxIuPO7vhdSZBNgVRgKeEZX6+pTThla7+jNeKJ3UG+beNXPkA 3JXXNJCdZVgunZmojtabMKj5y2QHvXNNoAUUAUjEoaS0jO1iY1ywtOxhq0xhrHnh ErQsUxUcEIDz+ah6JAZ0CGTDMGvQdaIdV5i0nzOTrF3um1rvgcK5wsnap9jZ9cxJ fvFesEBIUe4LcC0P5KFvJew/v5ysLSv0IxxbjsrjlWn+qaARlcqqkB/iOGWlG+A= -----END CERTIFICATE-----Generated at Fri Jul 24 05:11:40 2026 by rpki-client