$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/18ef4204-2e3f-4646-8e9f-2840f5cdda31.roa File: 18ef4204-2e3f-4646-8e9f-2840f5cdda31.roa (raw, json) Hash identifier: RwQa/0tGkgax7zo25BmVddpt0QZ5vy0oNmEsHgFWWRY= Subject key identifier: 14:7A:F2:44:9F:8D:FA:B3:58:95:FE:11:02:51:53:CC:99:4F:62:C5 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 765809BB13799C2491FED13A709A49A7731359B5 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/18ef4204-2e3f-4646-8e9f-2840f5cdda31.roa Signing time: Thu 10 Sep 2026 01:41:32 +0000 ROA not before: Thu 10 Sep 2026 01:41:32 +0000 ROA not after: Wed 09 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1216::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:58:09:bb:13:79:9c:24:91:fe:d1:3a:70:9a:49:a7:73:13:59:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Sep 10 01:41:32 2026 GMT Not After : Dec 9 23:59:59 2026 GMT Subject: serialNumber=c0b346e0484b6ac413b7c3e1562bedd63cd6f8faae5b40335aa51941acf8a1aa, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:be:2c:37:44:dd:4f:3b:24:b1:8a:ba:d2:83: ad:87:ea:63:2b:f7:10:3d:18:e9:8b:75:30:71:b7: d0:d6:46:0e:f3:9f:2b:af:06:69:bc:d1:eb:08:40: 26:fd:97:27:f9:98:3d:7e:ed:93:92:64:af:76:26: f6:bf:9f:88:76:50:68:25:6d:f4:f6:f9:0b:88:c5: 38:52:19:c9:bf:6b:d9:87:27:5f:c9:12:69:e4:fe: 03:43:0d:86:36:86:36:1c:7b:a1:0e:24:a6:6b:d9: 51:3c:22:90:66:51:1b:5c:60:cc:8b:a7:eb:aa:bd: 17:b0:ee:ed:67:2b:e9:99:0c:2b:4b:88:6a:dc:37: 37:5a:25:d2:2b:fd:3e:d3:86:be:05:fc:7d:7b:22: be:8a:46:e4:a4:a8:c0:f7:66:c4:9f:ea:06:44:c0: 63:c8:ab:fe:fe:21:bd:a8:25:6e:a2:4f:81:23:8c: e8:99:81:0a:a0:ca:89:aa:70:1b:c7:3a:c7:5d:d7: 07:64:89:43:66:a1:50:bb:b0:55:1a:57:3c:ab:dc: f3:58:82:4e:47:1b:e6:c3:aa:5d:83:fd:31:40:e3: 7a:cf:f4:54:92:51:fd:f4:67:a6:d2:9b:a5:53:e6: 3a:49:12:59:ef:8d:95:ee:31:7d:12:48:28:e1:f0: d5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:7A:F2:44:9F:8D:FA:B3:58:95:FE:11:02:51:53:CC:99:4F:62:C5 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/18ef4204-2e3f-4646-8e9f-2840f5cdda31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1216::/48 Signature Algorithm: sha256WithRSAEncryption 9d:c4:0b:c3:e0:df:df:94:a5:b1:85:95:7d:72:7c:e2:7d:41: e1:07:67:f2:f7:48:49:10:2b:50:5a:e7:c8:0d:f1:c5:9e:95: 95:5e:97:2a:f6:37:c6:3c:d3:ba:c8:e5:39:21:7d:77:f2:d1: 1a:e2:5f:6d:1c:ab:a0:2d:bb:6a:fa:f4:3c:9a:47:ed:58:1c: be:97:08:14:b9:ed:1f:27:03:fe:1a:59:ab:26:98:ad:2b:c8: 51:67:39:42:07:84:e3:a1:87:14:18:4e:a2:73:4e:7c:fe:24: c7:9e:56:41:75:65:8a:9b:a2:14:de:07:da:bc:f4:d4:cc:01: 4e:03:88:fc:06:f3:ac:8f:54:06:23:1f:0d:82:ed:6c:36:88: 83:66:72:f7:2f:66:f8:ba:60:c3:b8:eb:5a:0a:eb:27:cb:c2: 99:ee:93:89:5e:80:bb:cb:b5:31:f9:7b:ff:03:b4:c9:96:bf: 74:63:96:0a:6a:88:97:bf:e4:0c:3b:60:c8:e9:2b:9a:3d:78: 75:e8:b0:27:59:4e:23:64:78:5b:40:8a:34:5f:b5:7b:86:c7: b5:1f:76:b9:c1:ac:29:d0:5e:2f:ac:ef:aa:3c:17:66:60:84: 13:50:1f:9c:d6:b5:7e:8b:6d:63:67:18:d1:8d:68:1b:e0:9c: 77:15:55:62 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdlgJuxN5nCSR/tE6cJpJp3MTWbUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwOTEwMDE0MTMyWhcNMjYxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMGIzNDZlMDQ4NGI2YWM0MTNiN2MzZTE1NjJiZWRkNjNj ZDZmOGZhYWU1YjQwMzM1YWE1MTk0MWFjZjhhMWFhMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtviw3RN1POySxirrSg62H6mMr9xA9GOmLdTBxt9DWRg7z nyuvBmm80esIQCb9lyf5mD1+7ZOSZK92Jva/n4h2UGglbfT2+QuIxThSGcm/a9mH J1/JEmnk/gNDDYY2hjYce6EOJKZr2VE8IpBmURtcYMyLp+uqvRew7u1nK+mZDCtL iGrcNzdaJdIr/T7Thr4F/H17Ir6KRuSkqMD3ZsSf6gZEwGPIq/7+Ib2oJW6iT4Ej jOiZgQqgyomqcBvHOsdd1wdkiUNmoVC7sFUaVzyr3PNYgk5HG+bDql2D/TFA43rP 9FSSUf30Z6bSm6VT5jpJElnvjZXuMX0SSCjh8NVzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUFHryRJ+N+rNYlf4RAlFTzJlPYsUwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzE4ZWY0MjA0LTJlM2YtNDY0Ni04ZTlmLTI4NDBmNWNkZGEzMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAJAAEhYwDQYJKoZIhvcNAQELBQADggEBAJ3EC8Pg39+UpbGFlX1yfOJ9 QeEHZ/L3SEkQK1Ba58gN8cWelZVelyr2N8Y807rI5TkhfXfy0RriX20cq6Atu2r6 9DyaR+1YHL6XCBS57R8nA/4aWasmmK0ryFFnOUIHhOOhhxQYTqJzTnz+JMeeVkF1 ZYqbohTeB9q89NTMAU4DiPwG86yPVAYjHw2C7Ww2iINmcvcvZvi6YMO461oK6yfL wpnuk4legLvLtTH5e/8DtMmWv3RjlgpqiJe/5Aw7YMjpK5o9eHXosCdZTiNkeFtA ijRftXuGx7UfdrnBrCnQXi+s76o8F2ZghBNQH5zWtX6LbWNnGNGNaBvgnHcVVWI= -----END CERTIFICATE-----Generated at Mon Sep 21 13:17:58 2026 by rpki-client