$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2568587f-3fdf-4ede-9804-0f4a19af727b.roa File: 2568587f-3fdf-4ede-9804-0f4a19af727b.roa (raw, json) Hash identifier: dI/UnvcoQr/ajzzopAHI56pvwFDafrOEkoquCD6O+f4= Subject key identifier: E6:41:B1:21:75:8C:71:38:EA:EC:15:71:A4:8E:97:86:50:B0:87:3A Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 24CDD4761F2AB2237B0B38A6051D293573051890 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2568587f-3fdf-4ede-9804-0f4a19af727b.roa Signing time: Thu 10 Sep 2026 00:31:48 +0000 ROA not before: Thu 10 Sep 2026 00:31:48 +0000 ROA not after: Wed 09 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:11b3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:cd:d4:76:1f:2a:b2:23:7b:0b:38:a6:05:1d:29:35:73:05:18:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Sep 10 00:31:48 2026 GMT Not After : Dec 9 23:59:59 2026 GMT Subject: serialNumber=7985ee41498cdc8e6f6ddbbf8924279b0eaec93d5f81d63b5ef6daaf96a09e5f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c7:a8:0c:80:cd:eb:b9:dc:52:81:b4:bc:37: f4:3f:88:af:d4:5a:63:6f:5a:07:ce:5c:e9:c2:5e: 85:41:7e:da:9b:5d:0f:19:e7:bf:db:0f:0a:6b:36: 04:be:fe:75:cd:40:a6:dd:24:df:01:4e:5f:44:b5: 35:b3:7b:d4:c9:ef:66:c7:3b:6d:7a:2d:ad:99:99: 54:92:fe:b7:81:f5:e4:02:9c:87:22:95:5f:74:9a: 36:a2:d0:d4:6a:aa:8a:a8:dc:44:d3:00:1e:32:47: 20:73:be:cc:d2:8a:2d:cf:af:51:09:32:3e:ae:74: 3d:b6:de:2a:99:7c:97:4c:f5:c2:0e:6f:48:14:b0: 6c:ba:37:41:c8:17:9c:ae:23:7b:55:10:72:43:ac: 7b:61:e0:bc:c8:6d:72:46:2d:dd:99:54:a0:1a:85: df:cf:98:bd:31:71:ce:3e:01:d1:66:d7:c6:ae:55: 13:f2:59:f9:ff:e4:ef:4e:8f:b8:ab:ea:ad:9d:76: b5:01:9a:a2:ee:5f:c9:f7:77:72:7e:b9:6b:3c:0e: 23:8c:b8:15:66:91:52:1f:0f:16:9c:60:42:20:c5: 54:b9:b8:99:a7:e6:d6:7c:a0:71:09:6a:b2:57:4d: e5:97:df:f7:65:cf:c3:d9:06:5d:6b:bd:06:7c:41: d8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:41:B1:21:75:8C:71:38:EA:EC:15:71:A4:8E:97:86:50:B0:87:3A X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2568587f-3fdf-4ede-9804-0f4a19af727b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:11b3::/48 Signature Algorithm: sha256WithRSAEncryption a1:3c:58:8c:fa:f7:a0:8b:e9:3a:15:52:38:78:4e:fc:56:74: 0b:c3:2f:10:ec:ca:3d:cf:08:18:93:90:b5:55:1f:cf:27:19: a8:63:7f:d9:8d:c5:83:74:4f:26:74:30:0c:f5:32:1f:d7:27: a1:a5:c4:9d:62:ba:31:66:27:8a:59:c6:f7:1b:85:00:bd:63: b4:13:16:fc:95:4c:c2:bc:c7:32:d7:7e:a1:6d:1e:a3:30:d1: 01:68:b4:e0:04:75:f0:fc:df:be:7e:7b:be:12:0b:1a:bb:6b: 67:1b:4c:6f:1a:d2:7f:35:98:0c:9b:3d:e7:e3:51:c9:b4:fb: 07:62:03:84:96:d8:be:6a:5c:53:8e:39:a6:ba:27:fd:1f:83: 59:90:c9:77:7a:66:bb:26:11:bc:53:cb:34:c8:53:35:43:48: 1d:ce:be:00:a3:a2:bf:f3:30:af:fd:58:93:c5:d8:0b:9b:2c: 64:5a:4a:93:81:46:5a:50:5f:96:85:1a:e5:c7:c2:d2:66:f2: fa:04:94:30:c7:ef:51:0e:8f:12:ea:02:ab:c8:f7:d8:b4:57: 79:42:22:eb:b5:ed:54:ef:4b:cf:84:51:91:86:41:52:0f:b9: ed:d2:d1:f6:dc:5b:7f:61:3b:31:f9:c5:7f:a4:40:e2:b8:96: 4d:82:35:91 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJM3Udh8qsiN7CzimBR0pNXMFGJAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwOTEwMDAzMTQ4WhcNMjYxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3OTg1ZWU0MTQ5OGNkYzhlNmY2ZGRiYmY4OTI0Mjc5YjBl YWVjOTNkNWY4MWQ2M2I1ZWY2ZGFhZjk2YTA5ZTVmMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8x6gMgM3rudxSgbS8N/Q/iK/UWmNvWgfOXOnCXoVBftqb XQ8Z57/bDwprNgS+/nXNQKbdJN8BTl9EtTWze9TJ72bHO216La2ZmVSS/reB9eQC nIcilV90mjai0NRqqoqo3ETTAB4yRyBzvszSii3Pr1EJMj6udD223iqZfJdM9cIO b0gUsGy6N0HIF5yuI3tVEHJDrHth4LzIbXJGLd2ZVKAahd/PmL0xcc4+AdFm18au VRPyWfn/5O9Oj7ir6q2ddrUBmqLuX8n3d3J+uWs8DiOMuBVmkVIfDxacYEIgxVS5 uJmn5tZ8oHEJarJXTeWX3/dlz8PZBl1rvQZ8QdiDAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU5kGxIXWMcTjq7BVxpI6XhlCwhzowHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzI1Njg1ODdmLTNmZGYtNGVkZS05ODA0LTBmNGExOWFmNzI3Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAJAAEbMwDQYJKoZIhvcNAQELBQADggEBAKE8WIz696CL6ToVUjh4TvxW dAvDLxDsyj3PCBiTkLVVH88nGahjf9mNxYN0TyZ0MAz1Mh/XJ6GlxJ1iujFmJ4pZ xvcbhQC9Y7QTFvyVTMK8xzLXfqFtHqMw0QFotOAEdfD8375+e74SCxq7a2cbTG8a 0n81mAybPefjUcm0+wdiA4SW2L5qXFOOOaa6J/0fg1mQyXd6ZrsmEbxTyzTIUzVD SB3OvgCjor/zMK/9WJPF2AubLGRaSpOBRlpQX5aFGuXHwtJm8voElDDH71EOjxLq AqvI99i0V3lCIuu17VTvS8+EUZGGQVIPue3S0fbcW39hOzH5xX+kQOK4lk2CNZE= -----END CERTIFICATE-----Generated at Mon Sep 21 14:24:51 2026 by rpki-client