$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c68ea132-5296-4e64-b039-3be4392792b5.roa File: c68ea132-5296-4e64-b039-3be4392792b5.roa (raw, json) Hash identifier: VA/NGQcrP5AvbMMheROx3dle3//U/Gp4m84YixVNapQ= Subject key identifier: 23:C2:41:06:F7:3B:67:18:5E:B0:B3:B8:39:EF:57:45:2D:D0:02:44 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 34D1C3FD650065EDF2ABAE5927CC548422C79868 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c68ea132-5296-4e64-b039-3be4392792b5.roa Signing time: Thu 23 Jul 2026 10:00:08 +0000 ROA not before: Thu 23 Jul 2026 10:00:08 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2d2c::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:d1:c3:fd:65:00:65:ed:f2:ab:ae:59:27:cc:54:84:22:c7:98:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Jul 23 10:00:08 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=cb8f95fefdcdc3ea81b8ff7b77110120aa2931c6eedd36a386116b5cc162e4d1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b1:ea:9e:34:b7:c2:d4:86:61:76:5a:3a:9f: 74:86:4c:96:22:3f:3d:03:9e:b1:5b:14:28:9c:6d: 85:1e:a4:a3:78:83:da:1d:44:b5:57:e2:30:0e:7f: 92:26:f2:57:05:f4:4c:55:c9:38:2e:a1:03:c8:92: 8d:6d:f5:77:e1:53:cd:43:16:79:38:d2:93:dc:d3: 4a:e5:58:11:6e:62:fb:ea:f4:4a:94:01:d1:13:7d: 3b:b4:3a:e0:38:fe:76:62:80:bd:d1:cc:9e:19:01: 49:75:f0:4c:b4:35:76:6a:40:26:5b:99:3c:5d:f8: 74:54:f3:ed:bc:a0:a1:07:89:c7:35:9a:68:e1:cf: 73:a7:75:6c:ca:6f:c9:48:f8:df:de:a6:82:a3:31: 2f:08:9d:1f:bd:0b:25:73:e6:44:bd:e7:0e:70:83: 11:57:f2:d2:0e:32:34:6b:c0:38:cc:f2:98:b0:7b: 15:4a:b9:59:d8:c9:42:1f:c5:90:52:6b:20:58:bc: 86:c7:3d:ea:68:14:d8:0c:89:ca:e1:35:2f:c9:ea: fa:43:3e:9e:66:8b:0f:28:3c:36:b6:7d:bb:4d:f0: 41:f5:55:2b:74:66:47:9b:3d:56:1e:81:14:5d:d9: 4a:04:1c:b7:68:25:9b:16:bc:10:c4:9c:25:61:26: 5e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C2:41:06:F7:3B:67:18:5E:B0:B3:B8:39:EF:57:45:2D:D0:02:44 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c68ea132-5296-4e64-b039-3be4392792b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2d2c::/46 Signature Algorithm: sha256WithRSAEncryption 4e:1a:5c:21:d0:fd:74:6e:62:03:b4:07:3b:c7:33:33:63:0f: 11:ed:ec:4a:bb:45:ce:46:7f:b4:af:a1:2d:05:a7:e9:14:dc: b8:22:f2:b4:fa:64:5e:40:b2:90:fe:7c:4b:ad:b8:e8:f3:78: 3b:ce:1b:aa:dc:77:cb:6d:eb:d0:0f:99:17:89:fb:18:ed:72: be:5a:bd:fc:6a:02:01:90:58:f5:cb:24:30:93:d5:ea:41:67: c5:23:3c:ee:25:5c:3e:0e:8b:37:0f:b1:48:d8:5c:6f:b9:db: f5:b6:6c:1b:62:14:18:72:53:4b:07:37:24:02:26:26:18:e9: ed:07:ba:13:46:69:d1:61:de:1a:f1:26:4e:37:12:76:e2:ed: fd:75:1a:4b:36:c1:62:9d:fa:b8:e3:03:b9:84:fb:1a:e6:f3: 52:8f:96:2d:2e:e7:6c:7a:1e:f6:95:68:13:7b:d9:af:dc:99: 23:43:d8:44:ee:4f:b8:a8:1e:ec:3d:b1:63:50:0b:a0:e5:d0: cd:c8:37:6c:f3:e9:b6:52:b1:06:74:e3:cb:93:1b:37:8d:25: fe:55:a9:0f:2f:f4:8f:26:4e:45:3a:a8:35:da:63:92:3d:19: d1:d7:df:e1:6a:2b:0c:b9:88:40:31:96:3c:2d:a2:06:1e:60: 96:5a:e5:0e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUNNHD/WUAZe3yq65ZJ8xUhCLHmGgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIzMTAwMDA4WhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BjYjhmOTVmZWZkY2RjM2VhODFiOGZmN2I3NzExMDEyMGFh MjkzMWM2ZWVkZDM2YTM4NjExNmI1Y2MxNjJlNGQxMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOseqeNLfC1IZhdlo6n3SGTJYiPz0DnrFbFCicbYUepKN4 g9odRLVX4jAOf5Im8lcF9ExVyTguoQPIko1t9XfhU81DFnk40pPc00rlWBFuYvvq 9EqUAdETfTu0OuA4/nZigL3RzJ4ZAUl18Ey0NXZqQCZbmTxd+HRU8+28oKEHicc1 mmjhz3OndWzKb8lI+N/epoKjMS8InR+9CyVz5kS95w5wgxFX8tIOMjRrwDjM8piw exVKuVnYyUIfxZBSayBYvIbHPepoFNgMicrhNS/J6vpDPp5miw8oPDa2fbtN8EH1 VSt0ZkebPVYegRRd2UoEHLdoJZsWvBDEnCVhJl7PAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUI8JBBvc7ZxhesLO4Oe9XRS3QAkQwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2M2OGVhMTMyLTUyOTYtNGU2NC1iMDM5LTNiZTQzOTI3OTJiNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAALSwwDQYJKoZIhvcNAQELBQADggEBAE4aXCHQ/XRuYgO0BzvHMzNj DxHt7Eq7Rc5Gf7SvoS0Fp+kU3Lgi8rT6ZF5AspD+fEutuOjzeDvOG6rcd8tt69AP mReJ+xjtcr5avfxqAgGQWPXLJDCT1epBZ8UjPO4lXD4OizcPsUjYXG+52/W2bBti FBhyU0sHNyQCJiYY6e0HuhNGadFh3hrxJk43Enbi7f11Gks2wWKd+rjjA7mE+xrm 81KPli0u52x6HvaVaBN72a/cmSND2ETuT7ioHuw9sWNQC6Dl0M3IN2zz6bZSsQZ0 48uTGzeNJf5VqQ8v9I8mTkU6qDXaY5I9GdHX3+FqKwy5iEAxljwtogYeYJZa5Q4= -----END CERTIFICATE-----Generated at Fri Jul 24 02:40:42 2026 by rpki-client