$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bac6b870-9391-4623-9ac7-4832bab26560.roa File: bac6b870-9391-4623-9ac7-4832bab26560.roa (raw, json) Hash identifier: rJ1/TMX8OUwemZTN1DFINeom+gV2Tu470cnzJEn6QFY= Subject key identifier: 5E:DB:AF:2A:43:A8:55:B9:39:35:1D:64:D2:36:5F:EB:7B:CE:87:FE Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 31C4A923D90502C41023E393ED42C353BF52C9D8 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bac6b870-9391-4623-9ac7-4832bab26560.roa Signing time: Thu 23 Jul 2026 13:11:31 +0000 ROA not before: Thu 23 Jul 2026 13:11:31 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:33fc::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:c4:a9:23:d9:05:02:c4:10:23:e3:93:ed:42:c3:53:bf:52:c9:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Jul 23 13:11:31 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=9c32486727c598936b36d32698cd77e8b6bbb959efe4d08b06ee379f4ca9e729, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2d:ef:a4:bb:fe:e3:27:f6:49:4f:4b:2d:a4: 9f:b2:20:06:2f:8b:d5:cb:3a:42:7d:5d:bf:ef:19: 57:39:dd:d7:32:a2:cc:f5:c3:ea:20:d5:ee:f3:dc: c5:b0:24:9f:43:af:31:fc:f4:67:10:c2:14:c5:6e: a4:cd:fb:66:62:ad:b8:2f:f6:5c:63:eb:17:b9:dd: 71:1c:50:8f:02:94:c5:6e:ed:ca:e3:ab:45:42:03: 00:0b:da:94:89:6c:08:57:04:13:96:d4:ca:01:77: b6:d6:1a:1e:92:b5:5c:ce:eb:60:e1:73:e6:4e:27: a6:53:20:2a:8b:29:12:53:22:1a:37:d4:98:3c:67: 19:1b:64:9b:04:a5:f8:03:77:ba:e7:18:d1:17:35: 52:b6:e2:87:82:62:f1:45:55:96:83:a7:6a:98:fb: 72:40:79:37:2e:41:dd:10:0c:cb:1b:f1:74:2e:38: f9:ea:95:18:6e:29:cb:95:2f:b4:64:3b:01:74:28: 39:92:c0:d6:85:7a:b3:1a:52:d5:83:c1:23:1a:0c: 4b:86:5d:27:22:7d:54:4d:22:60:0a:13:48:e5:b6: 84:57:cc:8e:1a:b6:0d:54:99:a3:42:f0:d6:34:97: a9:d2:00:f7:cf:dd:a5:f9:c5:55:56:6d:d6:c2:bd: 9f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:DB:AF:2A:43:A8:55:B9:39:35:1D:64:D2:36:5F:EB:7B:CE:87:FE X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bac6b870-9391-4623-9ac7-4832bab26560.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:33fc::/46 Signature Algorithm: sha256WithRSAEncryption a7:8b:81:1d:cd:6a:fb:38:91:ec:e6:97:e9:e0:06:fc:76:4c: 28:55:62:ec:19:d5:ab:1c:c9:e2:61:d0:92:c5:b6:8d:9c:36: 37:ea:7b:b2:5f:7d:eb:f3:f6:36:26:7d:7b:d6:b2:7d:17:b1: da:14:05:8a:a4:4e:68:f0:26:22:37:30:c0:7f:5d:9c:a4:3b: 25:bf:ad:9d:9c:53:cb:0c:4e:36:7a:6c:9c:19:12:3d:6c:22: 49:74:bf:d1:fe:90:4e:66:6f:8b:a6:03:58:87:d1:52:bf:7e: 65:3a:5e:c8:c5:4b:9d:d9:a6:be:5a:ee:e4:9b:dc:40:8a:75: 26:aa:31:a5:99:ee:fb:f7:68:b1:64:88:40:fa:66:16:38:28: 22:ee:88:dd:95:c9:6f:20:47:de:b1:a4:1c:7f:b4:e0:cf:19: 94:4a:69:c2:ac:f3:27:4e:eb:2c:bf:bc:d0:b0:48:d2:ca:ba: 10:01:8d:ac:54:31:7f:82:ed:82:8e:cb:c2:74:1f:ff:81:3b: 69:3a:9b:4f:5d:d5:cd:1b:72:e2:0b:49:dc:bd:af:e9:b2:a4: 2e:40:fb:fa:41:f5:e0:39:5e:6b:9c:f4:18:c4:e6:58:92:d7: af:60:25:a5:2d:d5:ea:c9:a7:79:19:7a:a2:01:e0:f1:86:8a: 8d:ef:76:06 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMcSpI9kFAsQQI+OT7ULDU79SydgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMTMxMTMxWhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5YzMyNDg2NzI3YzU5ODkzNmIzNmQzMjY5OGNkNzdlOGI2 YmJiOTU5ZWZlNGQwOGIwNmVlMzc5ZjRjYTllNzI5MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzLe+ku/7jJ/ZJT0stpJ+yIAYvi9XLOkJ9Xb/vGVc53dcy osz1w+og1e7z3MWwJJ9DrzH89GcQwhTFbqTN+2Zirbgv9lxj6xe53XEcUI8ClMVu 7crjq0VCAwAL2pSJbAhXBBOW1MoBd7bWGh6StVzO62Dhc+ZOJ6ZTICqLKRJTIho3 1Jg8ZxkbZJsEpfgDd7rnGNEXNVK24oeCYvFFVZaDp2qY+3JAeTcuQd0QDMsb8XQu OPnqlRhuKcuVL7RkOwF0KDmSwNaFerMaUtWDwSMaDEuGXScifVRNImAKE0jltoRX zI4atg1UmaNC8NY0l6nSAPfP3aX5xVVWbdbCvZ8tAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUXtuvKkOoVbk5NR1k0jZf63vOh/4wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2JhYzZiODcwLTkzOTEtNDYyMy05YWM3LTQ4MzJiYWIyNjU2MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAM/wwDQYJKoZIhvcNAQELBQADggEBAKeLgR3Navs4kezml+ngBvx2 TChVYuwZ1ascyeJh0JLFto2cNjfqe7Jffevz9jYmfXvWsn0XsdoUBYqkTmjwJiI3 MMB/XZykOyW/rZ2cU8sMTjZ6bJwZEj1sIkl0v9H+kE5mb4umA1iH0VK/fmU6XsjF S53Zpr5a7uSb3ECKdSaqMaWZ7vv3aLFkiED6ZhY4KCLuiN2VyW8gR96xpBx/tODP GZRKacKs8ydO6yy/vNCwSNLKuhABjaxUMX+C7YKOy8J0H/+BO2k6m09d1c0bcuIL Sdy9r+mypC5A+/pB9eA5Xmuc9BjE5liS169gJaUt1erJp3kZeqIB4PGGio3vdgY= -----END CERTIFICATE-----Generated at Fri Jul 24 02:45:02 2026 by rpki-client