$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a857900e-5c35-4945-a937-6630127a7787.roa File: a857900e-5c35-4945-a937-6630127a7787.roa (raw, json) Hash identifier: GWZpXlzO/Bnut0Me4arrLCof2t5iYLuAvSfcT86xddc= Subject key identifier: B2:66:C5:DB:41:4A:02:90:06:B6:74:77:8F:60:DE:CF:CA:EC:04:54 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 0C0E035D7E880BF361CE444FB53EB6CE8B7473FE Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a857900e-5c35-4945-a937-6630127a7787.roa Signing time: Thu 23 Jul 2026 06:31:22 +0000 ROA not before: Thu 23 Jul 2026 06:31:22 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:38e2::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:0e:03:5d:7e:88:0b:f3:61:ce:44:4f:b5:3e:b6:ce:8b:74:73:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Jul 23 06:31:22 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=2315a5687e462094ae350bee5f6caa915b8309e2fd682fa88fcc5cffd435e30c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:34:b5:38:a3:b7:1b:d5:85:41:ad:35:6e:8a: c8:8b:c7:51:4b:b3:8f:7a:8b:2a:d5:6e:ff:fc:ef: 56:61:bd:05:f9:95:da:80:4b:33:0e:18:7d:e2:62: 46:df:02:6e:f1:80:00:6e:41:89:56:a9:84:b4:af: 06:0d:29:4c:b8:39:8b:2a:cd:65:ce:fa:19:5a:65: 1f:2f:3c:e3:c6:bd:f0:15:ee:56:2d:b6:f7:e8:b3: 74:e6:18:5d:19:dd:47:fa:2e:16:82:f8:9b:35:56: 1c:f7:21:3f:5c:f4:89:e1:27:97:4a:69:e6:f2:ef: 5e:e4:00:56:ec:81:b3:2a:17:f7:eb:f5:ee:81:f7: 55:e3:89:ab:ad:15:a0:60:85:c4:3b:c7:10:58:e6: 23:70:52:bf:ed:0f:09:2b:3d:bb:41:de:b8:c5:97: 8e:0a:aa:12:75:a5:56:a5:e6:8e:d6:49:da:98:a4: 9e:ef:b2:4e:3b:df:c8:08:19:5e:c6:7b:e7:42:67: 0c:7b:52:42:14:65:7c:48:d5:7b:1d:7b:5f:50:2c: 07:36:51:63:c8:04:db:3f:e9:53:ed:23:59:43:bf: 73:c4:ee:62:dd:ad:95:d9:0f:83:96:ce:9a:0b:b9: a3:48:5d:73:57:9a:c8:52:b6:f8:ce:ac:71:35:fe: 23:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:66:C5:DB:41:4A:02:90:06:B6:74:77:8F:60:DE:CF:CA:EC:04:54 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a857900e-5c35-4945-a937-6630127a7787.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:38e2::/47 Signature Algorithm: sha256WithRSAEncryption 5d:bb:59:18:71:6e:fd:a3:23:f5:ca:30:a7:b3:61:80:73:91: cb:93:2f:55:0c:02:50:7c:b4:95:48:f6:23:f8:b1:82:a0:9a: 85:ce:44:f9:56:dd:20:76:19:f7:c1:b1:9b:c2:97:42:cc:44: e9:50:1e:ab:ac:a3:4c:98:1d:67:34:cf:5d:d9:b3:e6:da:40: 97:9c:41:fe:f8:c0:ba:1d:4d:fa:4f:c7:8b:16:b2:03:b6:66: 58:4c:17:4f:d5:e5:02:24:20:3e:67:95:f1:df:51:d4:e4:f0: 3a:7b:21:2b:07:07:33:3d:94:69:f0:56:a9:3e:5a:54:00:58: 7f:75:94:9f:bd:31:aa:d5:b7:57:c3:68:52:e0:9c:ff:1e:cc: 44:f8:b4:8b:19:11:51:3a:87:36:db:f7:c2:71:d3:28:64:f6: 31:8f:ef:e2:4f:a7:32:c3:d2:35:fe:58:c6:91:d9:dc:47:10: 6a:53:d1:1e:82:ef:87:2c:74:35:60:e5:13:ee:fd:d3:ba:7f: eb:25:2d:99:74:59:61:47:89:ea:05:66:04:c1:02:5d:00:6a: e7:e0:e8:46:b8:f2:22:5c:d8:93:4e:e4:96:2e:fd:52:c8:55: e5:38:a6:dd:15:99:41:c8:2f:88:98:a4:0a:85:c5:c5:be:4f: 23:de:39:f4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDA4DXX6IC/NhzkRPtT62zot0c/4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMDYzMTIyWhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMzE1YTU2ODdlNDYyMDk0YWUzNTBiZWU1ZjZjYWE5MTVi ODMwOWUyZmQ2ODJmYTg4ZmNjNWNmZmQ0MzVlMzBjMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHNLU4o7cb1YVBrTVuisiLx1FLs496iyrVbv/871ZhvQX5 ldqASzMOGH3iYkbfAm7xgABuQYlWqYS0rwYNKUy4OYsqzWXO+hlaZR8vPOPGvfAV 7lYttvfos3TmGF0Z3Uf6LhaC+Js1Vhz3IT9c9InhJ5dKaeby717kAFbsgbMqF/fr 9e6B91XjiautFaBghcQ7xxBY5iNwUr/tDwkrPbtB3rjFl44KqhJ1pVal5o7WSdqY pJ7vsk4738gIGV7Ge+dCZwx7UkIUZXxI1Xsde19QLAc2UWPIBNs/6VPtI1lDv3PE 7mLdrZXZD4OWzpoLuaNIXXNXmshStvjOrHE1/iO3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUsmbF20FKApAGtnR3j2Dez8rsBFQwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2E4NTc5MDBlLTVjMzUtNDk0NS1hOTM3LTY2MzAxMjdhNzc4Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAOOIwDQYJKoZIhvcNAQELBQADggEBAF27WRhxbv2jI/XKMKezYYBz kcuTL1UMAlB8tJVI9iP4sYKgmoXORPlW3SB2GffBsZvCl0LMROlQHquso0yYHWc0 z13Zs+baQJecQf74wLodTfpPx4sWsgO2ZlhMF0/V5QIkID5nlfHfUdTk8Dp7ISsH BzM9lGnwVqk+WlQAWH91lJ+9MarVt1fDaFLgnP8ezET4tIsZEVE6hzbb98Jx0yhk 9jGP7+JPpzLD0jX+WMaR2dxHEGpT0R6C74csdDVg5RPu/dO6f+slLZl0WWFHieoF ZgTBAl0Aaufg6Ea48iJc2JNO5JYu/VLIVeU4pt0VmUHIL4iYpAqFxcW+TyPeOfQ= -----END CERTIFICATE-----Generated at Fri Jul 24 11:56:05 2026 by rpki-client