$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9075028e-19d1-4814-b7a1-5bc1baec879c.roa File: 9075028e-19d1-4814-b7a1-5bc1baec879c.roa (raw, json) Hash identifier: 8YEPTcRWhpV53zX7dFbkW+VNfVV2PYp/WKdj6yMZJEo= Subject key identifier: 18:3B:00:1D:BA:43:26:20:EC:38:54:79:29:23:31:EE:89:A9:B7:0B Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 2B997F6F0566A17C5BE953DDB1381411098EEBDB Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9075028e-19d1-4814-b7a1-5bc1baec879c.roa Signing time: Thu 23 Jul 2026 03:02:01 +0000 ROA not before: Thu 23 Jul 2026 03:02:01 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3600::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:99:7f:6f:05:66:a1:7c:5b:e9:53:dd:b1:38:14:11:09:8e:eb:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Jul 23 03:02:01 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=d26d919a8e4d142b0c2ba7e18559f6c0b17a80a6c80d7f3868b839e9dfc0e4c0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:05:cb:a4:d5:fd:95:61:24:2d:7f:40:3c:3e: fc:58:89:2f:5e:b8:cf:f0:86:fe:31:4c:9e:ab:25: 73:28:70:22:ad:89:34:eb:55:dc:da:13:ed:83:52: d5:28:ad:1a:8e:91:03:78:ff:75:cd:03:29:b4:e6: 42:94:62:91:5d:87:49:de:13:a0:5d:73:cb:d2:08: bb:6b:51:85:a4:a7:65:2a:51:36:56:c8:6d:0a:48: 87:da:99:1c:b3:4c:38:39:51:12:76:d4:74:92:00: 61:02:fd:80:91:a0:70:a1:cd:bd:81:19:75:72:14: bb:a9:36:b7:2b:66:47:cb:05:92:9b:68:59:7f:5f: cc:17:0d:fa:9b:6c:e2:93:67:ba:de:4b:42:5d:83: 44:cd:54:f2:5e:50:53:f3:03:51:4d:d2:09:c8:d8: b5:64:e1:fc:9c:98:e2:c0:59:57:13:95:79:51:8c: f4:96:5b:f5:fd:9a:b7:7a:08:30:a4:08:00:91:6d: 2b:2d:c9:38:19:07:bf:83:2c:84:37:be:1a:6c:2a: c3:34:8e:44:9a:08:d2:a4:d1:62:4e:ef:61:42:a0: fd:b0:97:e3:92:1b:67:9b:1c:b8:d4:1c:24:49:14: 8b:f5:13:7c:8e:10:c5:02:f2:97:ef:75:39:b9:ef: 41:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:3B:00:1D:BA:43:26:20:EC:38:54:79:29:23:31:EE:89:A9:B7:0B X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9075028e-19d1-4814-b7a1-5bc1baec879c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3600::/42 Signature Algorithm: sha256WithRSAEncryption 21:e9:81:a2:e3:c0:d0:59:8c:2f:fb:9d:b3:84:6d:35:9b:40: 36:aa:da:9d:5c:ef:76:52:78:65:cf:78:88:5d:f5:8f:84:4f: e3:4d:3d:d6:28:ad:6d:c2:6a:da:a5:a7:a7:d6:95:97:3f:11: 4d:e4:9d:15:45:a6:58:42:c3:62:c3:2e:8d:4f:39:5b:c3:0f: 19:45:f2:7a:ed:8b:ef:bd:f8:9d:39:5f:8a:51:b4:5b:3a:64: e5:ad:f0:31:61:cb:a0:a4:64:f3:38:51:d5:24:c1:37:04:cc: 62:94:4a:27:fa:d5:3f:99:71:25:c9:d2:bc:4a:9d:3d:56:a4: f3:2e:29:a3:62:29:ef:60:00:de:a5:36:2e:45:7f:69:80:01: 4c:62:93:57:64:49:1a:ca:8b:98:09:b7:f4:88:29:e9:81:27: da:a6:cb:52:d3:d0:02:f2:08:bc:5a:c5:8b:ea:50:4d:b6:65: 05:66:f6:65:06:de:40:2e:57:27:62:40:fa:a6:8c:40:92:40: 69:3e:5f:dd:70:b2:8e:27:dc:a3:0d:79:c7:29:6e:1d:30:e1: 08:1e:16:34:fc:27:cc:a5:39:aa:3b:58:90:84:17:1d:81:62: ed:8e:2f:dd:b4:92:d0:69:ec:88:a7:11:bb:5c:85:b0:1f:45: 82:85:64:c8 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUK5l/bwVmoXxb6VPdsTgUEQmO69swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMDMwMjAxWhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMjZkOTE5YThlNGQxNDJiMGMyYmE3ZTE4NTU5ZjZjMGIx N2E4MGE2YzgwZDdmMzg2OGI4MzllOWRmYzBlNGMwMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjBcuk1f2VYSQtf0A8PvxYiS9euM/whv4xTJ6rJXMocCKt iTTrVdzaE+2DUtUorRqOkQN4/3XNAym05kKUYpFdh0neE6Bdc8vSCLtrUYWkp2Uq UTZWyG0KSIfamRyzTDg5URJ21HSSAGEC/YCRoHChzb2BGXVyFLupNrcrZkfLBZKb aFl/X8wXDfqbbOKTZ7reS0Jdg0TNVPJeUFPzA1FN0gnI2LVk4fycmOLAWVcTlXlR jPSWW/X9mrd6CDCkCACRbSstyTgZB7+DLIQ3vhpsKsM0jkSaCNKk0WJO72FCoP2w l+OSG2ebHLjUHCRJFIv1E3yOEMUC8pfvdTm570FzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUGDsAHbpDJiDsOFR5KSMx7omptwswHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzkwNzUwMjhlLTE5ZDEtNDgxNC1iN2ExLTViYzFiYWVjODc5Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAJAANgAwDQYJKoZIhvcNAQELBQADggEBACHpgaLjwNBZjC/7nbOEbTWb QDaq2p1c73ZSeGXPeIhd9Y+ET+NNPdYorW3Catqlp6fWlZc/EU3knRVFplhCw2LD Lo1POVvDDxlF8nrti++9+J05X4pRtFs6ZOWt8DFhy6CkZPM4UdUkwTcEzGKUSif6 1T+ZcSXJ0rxKnT1WpPMuKaNiKe9gAN6lNi5Ff2mAAUxik1dkSRrKi5gJt/SIKemB J9qmy1LT0ALyCLxaxYvqUE22ZQVm9mUG3kAuVydiQPqmjECSQGk+X91wso4n3KMN eccpbh0w4QgeFjT8J8ylOao7WJCEFx2BYu2OL920ktBp7IinEbtchbAfRYKFZMg= -----END CERTIFICATE-----Generated at Fri Jul 24 01:21:43 2026 by rpki-client