$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a3c560f2-9b8b-470a-9b57-db5fcd2826ac.roa File: a3c560f2-9b8b-470a-9b57-db5fcd2826ac.roa (raw, json) Hash identifier: gZk1+bANO1xu6byUYSw8XyDwijtXhe+3xOJEF97ERb8= Subject key identifier: 14:B0:A7:A4:7B:E4:31:F5:CC:E7:B4:B8:CA:DD:C3:57:CD:6C:35:87 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 7A8E7AB72DFB32ABB10AEE97EC757859E9560CDB Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a3c560f2-9b8b-470a-9b57-db5fcd2826ac.roa Signing time: Thu 23 Jul 2026 11:11:18 +0000 ROA not before: Thu 23 Jul 2026 11:11:18 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3f50::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:8e:7a:b7:2d:fb:32:ab:b1:0a:ee:97:ec:75:78:59:e9:56:0c:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Jul 23 11:11:18 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=2a0c550d7db04ce0e3fbe3f3d4a44dc383c0d8cba279e7b3594820e5fc580c78, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9d:0f:49:79:04:9a:0e:12:32:83:c2:fc:11: 86:72:8f:dc:85:64:22:84:46:be:2a:a4:fe:a3:0b: d2:17:3a:4f:70:49:8d:fe:a9:a3:1a:29:cc:aa:3d: 04:8a:e4:78:84:fd:3a:2e:fb:54:b8:ab:05:bf:88: e2:02:9d:20:bd:0a:60:10:f8:35:27:cb:6b:3b:29: d3:ec:1b:8f:93:22:95:0d:99:ae:e1:3c:20:5a:4b: ce:95:27:80:ca:0c:34:94:71:37:0a:cb:a7:eb:76: 18:47:a7:e2:ce:3c:d5:6b:4c:30:0d:90:e6:28:cc: 86:bc:2c:4e:38:7a:2b:dd:11:cf:2b:50:96:89:9d: 4d:5b:c2:58:1a:a7:35:b4:73:e2:ce:a4:bc:f7:a1: bb:bf:dc:80:83:6b:4c:f0:82:53:a2:c8:f5:ea:92: a1:51:e2:12:76:6c:96:41:07:17:f3:b5:d0:a7:44: fc:93:ea:54:0d:8b:98:a4:8f:22:3b:79:29:b9:74: 9d:b2:1a:cb:32:76:f3:0e:f3:f7:b8:11:8d:6c:82: 6a:78:9b:77:c4:48:20:94:4c:c5:f8:da:fe:d4:9a: 6a:b3:e5:72:81:49:9b:97:cf:b6:27:b9:cc:00:cf: a1:af:02:52:81:12:39:f7:77:53:43:3a:0e:d5:43: e3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B0:A7:A4:7B:E4:31:F5:CC:E7:B4:B8:CA:DD:C3:57:CD:6C:35:87 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a3c560f2-9b8b-470a-9b57-db5fcd2826ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3f50::/46 Signature Algorithm: sha256WithRSAEncryption 4e:7d:40:75:07:db:4d:de:20:42:24:2e:09:2b:b6:94:ae:13: 04:92:1e:fe:48:5f:c7:f0:1d:31:17:49:11:50:b7:70:9a:d8: 7a:55:98:40:41:93:a9:1d:1a:27:a6:85:05:f3:5c:66:5c:dd: 46:36:19:96:4e:1e:0c:25:b2:dc:7f:95:54:a8:dc:b7:43:11: 69:d2:88:dd:68:54:09:a0:29:51:52:9f:ec:3c:1f:c8:77:77: 4c:dc:0d:64:4a:6c:35:39:1a:fa:11:83:29:c8:39:76:8e:37: 17:e0:da:55:c1:ac:45:5b:f0:d6:4d:fa:e6:db:d5:24:a5:6f: da:24:ac:7c:11:f3:ed:4e:31:f7:40:00:db:1d:46:c8:7a:ed: 7d:10:b9:c8:7a:a9:68:97:cc:8a:1e:8d:f6:32:7f:0c:78:f6: fe:62:87:7a:a6:d4:d1:a8:29:f0:d7:fd:df:2f:03:a6:63:b4: 86:d8:f5:14:9b:a6:af:97:22:5a:2c:df:89:ff:ae:e7:6e:e3: aa:7b:8b:6d:7a:86:d9:64:d9:55:d1:36:a3:44:30:af:bf:6a: 4f:ef:a5:74:03:7a:f0:73:cc:66:12:22:87:cc:fa:ad:8d:83: 21:9f:50:e3:4a:78:49:b9:4e:ed:0f:3e:15:62:e5:5d:dc:5a: cb:5b:d7:97 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUeo56ty37MquxCu6X7HV4WelWDNswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMTExMTE4WhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYTBjNTUwZDdkYjA0Y2UwZTNmYmUzZjNkNGE0NGRjMzgz YzBkOGNiYTI3OWU3YjM1OTQ4MjBlNWZjNTgwYzc4MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGnQ9JeQSaDhIyg8L8EYZyj9yFZCKERr4qpP6jC9IXOk9w SY3+qaMaKcyqPQSK5HiE/Tou+1S4qwW/iOICnSC9CmAQ+DUny2s7KdPsG4+TIpUN ma7hPCBaS86VJ4DKDDSUcTcKy6frdhhHp+LOPNVrTDANkOYozIa8LE44eivdEc8r UJaJnU1bwlgapzW0c+LOpLz3obu/3ICDa0zwglOiyPXqkqFR4hJ2bJZBBxfztdCn RPyT6lQNi5ikjyI7eSm5dJ2yGssydvMO8/e4EY1sgmp4m3fESCCUTMX42v7Ummqz 5XKBSZuXz7YnucwAz6GvAlKBEjn3d1NDOg7VQ+MTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUFLCnpHvkMfXM57S4yt3DV81sNYcwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2EzYzU2MGYyLTliOGItNDcwYS05YjU3LWRiNWZjZDI4MjZhYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAP1AwDQYJKoZIhvcNAQELBQADggEBAE59QHUH203eIEIkLgkrtpSu EwSSHv5IX8fwHTEXSRFQt3Ca2HpVmEBBk6kdGiemhQXzXGZc3UY2GZZOHgwlstx/ lVSo3LdDEWnSiN1oVAmgKVFSn+w8H8h3d0zcDWRKbDU5GvoRgynIOXaONxfg2lXB rEVb8NZN+ubb1SSlb9okrHwR8+1OMfdAANsdRsh67X0Quch6qWiXzIoejfYyfwx4 9v5ih3qm1NGoKfDX/d8vA6ZjtIbY9RSbpq+XIlos34n/rudu46p7i216htlk2VXR NqNEMK+/ak/vpXQDevBzzGYSIofM+q2NgyGfUONKeEm5Tu0PPhVi5V3cWstb15c= -----END CERTIFICATE-----Generated at Fri Jul 24 01:17:29 2026 by rpki-client