$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ba23a652-2a7c-475f-9700-43ccbf89b577.roa File: ba23a652-2a7c-475f-9700-43ccbf89b577.roa (raw, json) Hash identifier: xy9BT3xLH3uE+zakuYsbJFc/N0LQVZSrheeEcryOlCQ= Subject key identifier: 1D:21:29:12:BC:68:D7:31:50:6F:F5:E8:2D:E6:4E:15:D0:4C:42:75 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 22F19FA65836522358D30AE33C94CBC2015256B8 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ba23a652-2a7c-475f-9700-43ccbf89b577.roa Signing time: Wed 22 Jul 2026 01:10:39 +0000 ROA not before: Wed 22 Jul 2026 01:10:39 +0000 ROA not after: Tue 20 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:296c::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:f1:9f:a6:58:36:52:23:58:d3:0a:e3:3c:94:cb:c2:01:52:56:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Jul 22 01:10:39 2026 GMT Not After : Oct 20 23:59:59 2026 GMT Subject: serialNumber=ca1837fdc9ae9dc647660b706e7d6b9b21dd38bb283d05ed792a96b1f115f808, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d6:b7:61:62:6a:4d:01:a9:aa:2b:59:94:d6: d0:e0:a4:2c:32:43:dc:96:79:ac:15:67:a1:96:44: ab:a0:7c:97:8c:91:ab:b5:f0:62:92:ac:ee:3b:79: 72:b6:7d:5c:ba:eb:3f:41:70:1e:c7:6b:11:00:26: 30:4c:cd:a5:a4:65:88:11:e2:a3:b8:34:24:e1:18: 4d:31:75:cb:08:cb:3d:d7:a1:70:90:6a:e8:bc:44: a6:23:12:0e:08:3b:c7:76:e4:23:82:f1:b6:4a:8d: cf:e0:11:0b:42:25:63:2d:49:b1:2a:90:b6:88:49: fb:55:9f:bd:58:b5:51:c0:20:50:b8:ec:23:33:70: 4c:20:22:c0:5a:39:05:26:88:d5:3c:1f:db:9b:66: 70:92:12:03:39:ae:13:31:ff:24:ba:b1:dd:6c:66: e5:58:80:2d:60:73:91:73:15:93:3c:bd:df:0b:67: 8c:44:ff:0b:a7:2b:48:30:ca:13:a2:de:0c:77:0c: cb:9d:0d:bd:9b:b6:5f:ad:e2:e5:3d:74:ca:2c:17: a3:ac:91:b1:3b:6b:cf:4e:d9:5f:6a:90:60:f8:15: 63:21:23:18:1d:ba:c8:ba:28:e5:02:31:23:95:57: 06:f1:d8:59:a6:e3:9f:34:47:e2:8d:32:89:bc:2c: 5c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:21:29:12:BC:68:D7:31:50:6F:F5:E8:2D:E6:4E:15:D0:4C:42:75 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ba23a652-2a7c-475f-9700-43ccbf89b577.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:296c::/47 Signature Algorithm: sha256WithRSAEncryption 43:e9:b7:3c:7d:bf:7f:2e:bb:f3:e7:d5:50:da:09:58:df:c5: e3:9e:61:8f:7d:61:ea:aa:74:34:f3:b5:f8:5d:b6:de:84:1b: 6e:8d:a6:b6:8c:48:bb:6c:a7:67:51:6a:97:aa:8f:9b:36:fb: cf:ef:14:d3:a9:cf:46:94:43:b3:81:ca:20:1f:03:51:9b:69: 2a:2c:3e:ee:5e:35:85:26:e8:a8:01:39:fd:b2:52:9e:8a:1f: 54:ad:36:d4:d5:01:71:6c:d9:6c:c4:fe:15:52:e8:c8:b7:2b: 35:ee:f5:c2:6c:99:f9:9b:d8:c2:25:df:0d:f4:b1:db:da:d1: d4:cd:a0:7d:5a:92:6c:b8:b7:44:0f:8b:9e:9a:b7:de:d7:6e: d5:df:75:e8:ed:b0:fe:e6:bf:f1:35:1a:b5:d8:e6:51:fb:00: 8b:9e:46:16:e1:86:73:1c:83:62:7d:9c:2c:31:87:ab:a0:f3: e1:fd:0d:fa:d0:e1:93:83:35:71:67:c0:77:e3:28:9d:88:f3: a2:ca:8d:f3:97:bb:22:6d:c8:20:ff:60:a2:8c:f4:6f:a3:e2: be:76:04:a0:47:24:3b:83:99:35:64:4d:21:ee:31:6e:c3:c9: 2d:6b:68:b2:4a:64:4c:ed:4d:dc:86:7d:80:95:ed:31:ce:a8: 54:3b:ac:fa -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUIvGfplg2UiNY0wrjPJTLwgFSVrgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIyMDExMDM5WhcNMjYxMDIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjYTE4MzdmZGM5YWU5ZGM2NDc2NjBiNzA2ZTdkNmI5YjIx ZGQzOGJiMjgzZDA1ZWQ3OTJhOTZiMWYxMTVmODA4MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZ1rdhYmpNAamqK1mU1tDgpCwyQ9yWeawVZ6GWRKugfJeM kau18GKSrO47eXK2fVy66z9BcB7HaxEAJjBMzaWkZYgR4qO4NCThGE0xdcsIyz3X oXCQaui8RKYjEg4IO8d25COC8bZKjc/gEQtCJWMtSbEqkLaISftVn71YtVHAIFC4 7CMzcEwgIsBaOQUmiNU8H9ubZnCSEgM5rhMx/yS6sd1sZuVYgC1gc5FzFZM8vd8L Z4xE/wunK0gwyhOi3gx3DMudDb2btl+t4uU9dMosF6OskbE7a89O2V9qkGD4FWMh Ixgdusi6KOUCMSOVVwbx2Fmm4580R+KNMom8LFy/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUHSEpErxo1zFQb/XoLeZOFdBMQnUwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2JhMjNhNjUyLTJhN2MtNDc1Zi05NzAwLTQzY2NiZjg5YjU3Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAKWwwDQYJKoZIhvcNAQELBQADggEBAEPptzx9v38uu/Pn1VDaCVjf xeOeYY99YeqqdDTztfhdtt6EG26NpraMSLtsp2dRapeqj5s2+8/vFNOpz0aUQ7OB yiAfA1GbaSosPu5eNYUm6KgBOf2yUp6KH1StNtTVAXFs2WzE/hVS6Mi3KzXu9cJs mfmb2MIl3w30sdva0dTNoH1akmy4t0QPi56at97XbtXfdejtsP7mv/E1GrXY5lH7 AIueRhbhhnMcg2J9nCwxh6ug8+H9DfrQ4ZODNXFnwHfjKJ2I86LKjfOXuyJtyCD/ YKKM9G+j4r52BKBHJDuDmTVkTSHuMW7DyS1raLJKZEztTdyGfYCV7THOqFQ7rPo= -----END CERTIFICATE-----Generated at Fri Jul 24 03:51:09 2026 by rpki-client