$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/965304b3-9ac5-4573-8d5d-94762763b483.roa File: 965304b3-9ac5-4573-8d5d-94762763b483.roa (raw, json) Hash identifier: Xh3swX/1t3diL6XR8sjQ1gDABlO+BaQupYmqD9Xx8wo= Subject key identifier: DD:F0:1B:EE:E0:97:A9:28:1A:37:9B:AD:65:0E:AF:90:91:9F:5E:36 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 7E26A37BDE2DF09ED3647C321190F9B942E90CC0 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/965304b3-9ac5-4573-8d5d-94762763b483.roa Signing time: Thu 23 Jul 2026 01:32:03 +0000 ROA not before: Thu 23 Jul 2026 01:32:03 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2e40::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:26:a3:7b:de:2d:f0:9e:d3:64:7c:32:11:90:f9:b9:42:e9:0c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Jul 23 01:32:03 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=c2c721699a0c457f6ec2ef643161e4d52512327cc67e30de68376a353a95384d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:08:73:51:a1:71:cb:4c:bb:d4:e7:fd:d0:dd: 7e:f4:28:d9:97:5c:a4:f9:25:1b:c5:08:78:2e:ee: 27:79:f7:4b:18:76:b7:e6:b8:5a:a0:43:ff:38:78: 8c:7e:07:ef:10:8c:56:84:f7:3f:d6:77:4f:94:ea: 85:8c:ff:1a:a8:91:06:c5:c0:ac:2a:96:a4:5c:2b: f4:38:c3:d5:e9:c9:5a:41:ac:1d:97:2f:84:c0:ef: 67:e9:e8:c1:eb:43:b2:81:5d:94:75:2d:16:05:01: e4:40:d0:2b:a9:87:d9:c8:bd:52:aa:3b:26:d0:69: 4b:4e:8c:67:ae:ca:26:0e:37:9e:47:0f:ac:4f:58: 85:53:ca:05:8e:11:f2:64:ba:c2:97:07:f6:35:7c: 1f:20:bf:82:cc:4e:da:a8:af:a3:44:4e:73:f8:aa: 44:5f:e2:d1:86:b9:80:d1:4d:75:22:ee:7a:b1:45: 87:16:78:56:bf:c5:93:42:a8:29:b2:da:fa:63:9d: bd:fc:44:86:74:73:2b:8a:0b:2b:4d:f2:4c:7a:53: 78:41:7f:5a:4f:4e:3d:b0:5e:b8:b3:2c:fb:33:6f: 22:89:27:b5:f2:ef:1e:f3:e3:0a:4c:26:09:62:d4: ec:26:51:0b:20:67:43:de:cf:1d:be:2b:e8:02:4d: 56:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:F0:1B:EE:E0:97:A9:28:1A:37:9B:AD:65:0E:AF:90:91:9F:5E:36 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/965304b3-9ac5-4573-8d5d-94762763b483.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2e40::/45 Signature Algorithm: sha256WithRSAEncryption 17:6b:f6:2a:55:b4:a2:67:98:3a:4d:47:50:41:29:b1:cb:66: c9:2b:bb:ae:66:0a:29:a1:60:3e:ef:df:ff:54:55:cd:db:e2: ce:14:2c:f0:22:24:82:cf:e5:8e:9e:4b:8b:b4:d3:3d:42:b5: f1:a8:f1:f0:55:7b:4c:06:e2:c2:02:3c:0d:b0:3d:66:b0:c9: 0e:1f:cd:93:7b:3d:91:d4:76:14:53:9e:dc:92:48:e1:b3:5e: e3:83:4f:67:f8:74:36:b5:e1:b8:4d:10:1f:89:90:bc:8a:cd: 5c:30:cb:4c:a8:28:70:ab:cb:a6:6a:f8:c1:57:3a:e3:51:d8: 17:83:d8:02:4a:0e:2f:08:c3:8d:fc:1c:3d:22:71:09:dc:9c: 97:4e:ca:bb:97:d8:9c:70:e0:2c:76:2a:f6:34:58:43:e3:4d: ad:db:9d:54:fc:ef:b0:24:bf:31:42:f5:e3:1e:80:4b:36:6c: 29:e5:6c:05:9c:da:30:20:40:6f:43:65:f4:89:7b:d3:28:63: e5:7e:72:78:34:44:81:f2:75:1c:67:fd:cf:03:78:fe:80:0c: c1:7e:6b:d4:c4:7a:c2:6c:7b:7f:0c:78:b0:ed:4b:38:98:ae: 13:aa:c7:7c:65:02:9e:68:e0:7d:c8:97:09:57:b2:d0:80:ff: 80:e0:19:2a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfiaje94t8J7TZHwyEZD5uULpDMAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMDEzMjAzWhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BjMmM3MjE2OTlhMGM0NTdmNmVjMmVmNjQzMTYxZTRkNTI1 MTIzMjdjYzY3ZTMwZGU2ODM3NmEzNTNhOTUzODRkMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+CHNRoXHLTLvU5/3Q3X70KNmXXKT5JRvFCHgu7id590sY drfmuFqgQ/84eIx+B+8QjFaE9z/Wd0+U6oWM/xqokQbFwKwqlqRcK/Q4w9XpyVpB rB2XL4TA72fp6MHrQ7KBXZR1LRYFAeRA0Cuph9nIvVKqOybQaUtOjGeuyiYON55H D6xPWIVTygWOEfJkusKXB/Y1fB8gv4LMTtqor6NETnP4qkRf4tGGuYDRTXUi7nqx RYcWeFa/xZNCqCmy2vpjnb38RIZ0cyuKCytN8kx6U3hBf1pPTj2wXrizLPszbyKJ J7Xy7x7z4wpMJgli1OwmUQsgZ0Pezx2+K+gCTVZFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU3fAb7uCXqSgaN5utZQ6vkJGfXjYwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1Lzk2NTMwNGIzLTlhYzUtNDU3My04ZDVkLTk0NzYyNzYzYjQ4My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAALkAwDQYJKoZIhvcNAQELBQADggEBABdr9ipVtKJnmDpNR1BBKbHL Zskru65mCimhYD7v3/9UVc3b4s4ULPAiJILP5Y6eS4u00z1CtfGo8fBVe0wG4sIC PA2wPWawyQ4fzZN7PZHUdhRTntySSOGzXuODT2f4dDa14bhNEB+JkLyKzVwwy0yo KHCry6Zq+MFXOuNR2BeD2AJKDi8Iw438HD0icQncnJdOyruX2Jxw4Cx2KvY0WEPj Ta3bnVT877AkvzFC9eMegEs2bCnlbAWc2jAgQG9DZfSJe9MoY+V+cng0RIHydRxn /c8DeP6ADMF+a9TEesJse38MeLDtSziYrhOqx3xlAp5o4H3IlwlXstCA/4DgGSo= -----END CERTIFICATE-----Generated at Fri Jul 24 11:16:06 2026 by rpki-client