$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a2c77147-b47f-4156-88a8-7546722df75b.roa File: a2c77147-b47f-4156-88a8-7546722df75b.roa (raw, json) Hash identifier: 04ISX9muB2QYORA9nMY7r/U01X9LM43G3NwYEo+h7h0= Subject key identifier: 10:4B:08:20:8A:E4:94:11:FB:5D:BF:44:8F:35:46:53:FD:BC:CE:94 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 4C1056DC4166AAE388B6AE502B24EB8A535D110A Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a2c77147-b47f-4156-88a8-7546722df75b.roa Signing time: Wed 22 Jul 2026 02:10:04 +0000 ROA not before: Wed 22 Jul 2026 02:10:04 +0000 ROA not after: Tue 20 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2b4c::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:10:56:dc:41:66:aa:e3:88:b6:ae:50:2b:24:eb:8a:53:5d:11:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Jul 22 02:10:04 2026 GMT Not After : Oct 20 23:59:59 2026 GMT Subject: serialNumber=7d947e43128b6aaf370429ba0c1778acc6a541ef68163c1e9223fb91e8c16ef0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:da:16:b5:d1:a9:fd:fd:52:c6:7a:7f:5a:5f: 89:c8:59:4c:41:70:41:cb:1a:84:4b:17:9d:39:8b: 86:02:2b:7b:e5:9e:12:c7:9c:96:c2:82:ff:17:1d: 39:b9:9d:d3:f8:ea:4f:0d:86:dd:de:6c:21:d4:73: f3:ac:dc:57:48:cd:19:98:19:3a:e7:74:19:b6:df: 0c:49:1a:8a:ab:fd:c2:65:9b:dc:b5:1c:12:9d:fe: d6:a1:fe:9d:72:76:36:78:36:45:a9:22:7d:30:06: b4:31:45:a5:94:26:99:ed:43:7e:a4:85:3a:83:63: 16:d5:c4:b1:d2:73:fe:58:15:74:3e:de:32:39:04: a1:d1:42:a3:6e:46:7a:af:b6:f3:43:63:69:87:b5: 40:bb:61:a7:14:77:8e:30:0f:94:bd:5e:6f:b8:b9: 21:e3:02:df:c1:89:96:bc:0f:fe:ea:d1:98:4d:a3: f2:44:f4:47:d6:ff:c2:e5:47:b1:be:79:91:77:5b: 01:bf:00:55:c7:eb:ae:92:33:72:36:5b:8f:93:f4: 42:de:34:0f:4b:27:ba:4d:2c:fd:b9:02:bd:0a:bd: ec:4e:89:88:aa:fc:e0:f4:a9:3d:92:1f:22:18:54: 25:89:d5:49:c9:db:20:70:59:b0:6d:ac:b4:8f:8c: 17:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:4B:08:20:8A:E4:94:11:FB:5D:BF:44:8F:35:46:53:FD:BC:CE:94 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a2c77147-b47f-4156-88a8-7546722df75b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2b4c::/47 Signature Algorithm: sha256WithRSAEncryption a5:1a:1a:f5:ea:7b:ee:84:d2:17:9c:73:4d:2c:eb:30:34:79: b3:44:f7:a5:6f:5c:6b:25:7d:93:9a:47:e8:c6:39:22:70:50: ea:c9:10:a7:de:93:25:9c:f0:12:c8:e9:05:68:8b:96:12:b8: 62:96:1c:69:ad:f0:41:84:49:c8:80:07:35:50:93:14:f1:59: 9b:cc:51:2f:a6:41:60:0e:49:51:4c:00:f1:f5:a1:5a:63:bf: a5:d5:e0:d5:df:7e:2c:a8:de:75:bf:64:7e:a5:7a:f7:fd:46: 32:11:9b:2d:5c:01:9a:1c:7c:7d:3b:3c:2a:1d:a9:d7:6d:52: 50:a6:f6:b3:02:7a:93:93:b8:af:51:b5:79:36:53:ac:b3:c4: b8:25:d3:ea:68:d9:7c:19:00:dc:97:0a:1c:98:10:73:3a:f8: 28:14:6a:63:b4:fa:88:cc:71:7d:89:2f:92:84:2b:7c:9f:bd: a6:82:59:37:41:91:36:fb:f9:31:89:21:21:50:4f:46:db:f8: 90:34:86:72:d9:81:d3:b2:e2:e0:46:16:30:c6:c9:58:a2:15: fd:bf:23:3c:3c:03:12:d2:cc:5b:aa:4d:0c:5d:21:ac:d1:92: e8:0c:17:ce:39:15:74:28:40:e8:fe:99:aa:2b:72:b6:93:06: 42:91:4d:08 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTBBW3EFmquOItq5QKyTrilNdEQowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIyMDIxMDA0WhcNMjYxMDIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZDk0N2U0MzEyOGI2YWFmMzcwNDI5YmEwYzE3NzhhY2M2 YTU0MWVmNjgxNjNjMWU5MjIzZmI5MWU4YzE2ZWYwMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCh2ha10an9/VLGen9aX4nIWUxBcEHLGoRLF505i4YCK3vl nhLHnJbCgv8XHTm5ndP46k8Nht3ebCHUc/Os3FdIzRmYGTrndBm23wxJGoqr/cJl m9y1HBKd/tah/p1ydjZ4NkWpIn0wBrQxRaWUJpntQ36khTqDYxbVxLHSc/5YFXQ+ 3jI5BKHRQqNuRnqvtvNDY2mHtUC7YacUd44wD5S9Xm+4uSHjAt/BiZa8D/7q0ZhN o/JE9EfW/8LlR7G+eZF3WwG/AFXH666SM3I2W4+T9ELeNA9LJ7pNLP25Ar0KvexO iYiq/OD0qT2SHyIYVCWJ1UnJ2yBwWbBtrLSPjBcJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUEEsIIIrklBH7Xb9EjzVGU/28zpQwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2EyYzc3MTQ3LWI0N2YtNDE1Ni04OGE4LTc1NDY3MjJkZjc1Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAK0wwDQYJKoZIhvcNAQELBQADggEBAKUaGvXqe+6E0hecc00s6zA0 ebNE96VvXGslfZOaR+jGOSJwUOrJEKfekyWc8BLI6QVoi5YSuGKWHGmt8EGESciA BzVQkxTxWZvMUS+mQWAOSVFMAPH1oVpjv6XV4NXffiyo3nW/ZH6levf9RjIRmy1c AZocfH07PCodqddtUlCm9rMCepOTuK9RtXk2U6yzxLgl0+po2XwZANyXChyYEHM6 +CgUamO0+ojMcX2JL5KEK3yfvaaCWTdBkTb7+TGJISFQT0bb+JA0hnLZgdOy4uBG FjDGyViiFf2/Izw8AxLSzFuqTQxdIazRkugMF845FXQoQOj+maorcraTBkKRTQg= -----END CERTIFICATE-----Generated at Fri Jul 24 01:21:32 2026 by rpki-client