$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2825613b-8af4-4e67-8f1d-4c90e38f7d09.roa File: 2825613b-8af4-4e67-8f1d-4c90e38f7d09.roa (raw, json) Hash identifier: IvDC8CROVzqhXw1B/BMEx4DjrWprHIyh0z6+ilVqkGI= Subject key identifier: F0:57:91:03:B4:05:9F:B3:EB:1D:E6:7C:BF:C5:27:AE:43:AE:F7:45 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 3C6E1A7D56066B30711AB66488DAAD020CB0CEBE Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2825613b-8af4-4e67-8f1d-4c90e38f7d09.roa Signing time: Thu 10 Sep 2026 01:31:32 +0000 ROA not before: Thu 10 Sep 2026 01:31:32 +0000 ROA not after: Wed 09 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1234::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:6e:1a:7d:56:06:6b:30:71:1a:b6:64:88:da:ad:02:0c:b0:ce:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Sep 10 01:31:32 2026 GMT Not After : Dec 9 23:59:59 2026 GMT Subject: serialNumber=728d5db262533b19d909dc21ab024df8584b947086f7b8c8645ecc5d5110ef49, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b2:ad:10:5f:da:e9:9e:a3:96:c3:6c:ff:e7: 8a:e3:e4:50:ef:7a:03:aa:30:d6:6a:c2:a3:1c:53: ac:4c:79:73:c9:8c:30:35:51:31:2a:78:9b:89:6e: 1a:af:0a:a2:c5:a3:c4:c3:97:bc:48:aa:84:41:6c: e1:e3:51:14:0d:82:80:13:dd:e1:89:32:6e:44:7b: d6:d9:09:75:fc:f9:f3:44:a2:5c:17:48:b5:29:ca: 1c:aa:21:78:67:a8:9f:bb:77:90:e1:f1:08:48:77: 3b:67:77:3b:b6:bd:51:0b:d1:19:3c:1b:e8:0a:cb: 0d:d1:ab:4b:bf:2b:c3:bc:e2:c7:2b:e4:db:84:16: a6:52:c1:7b:7b:f5:7d:f8:cc:fd:87:4d:b8:34:5b: 9d:54:a9:00:c0:54:75:29:e4:e1:dc:df:92:0e:45: 74:18:ca:3f:73:b0:56:0c:3d:03:5a:fc:d7:b6:db: 7d:e3:39:33:a9:b9:9c:34:d3:6e:d3:f7:e1:06:eb: 66:2d:e1:07:05:04:09:67:a8:50:d5:92:ee:3b:d7: 38:fa:73:6a:ea:85:52:10:70:5f:3b:84:5d:37:52: 79:e9:aa:78:9d:44:b6:0f:6f:24:7f:a9:10:5f:b5: 37:db:4a:60:13:d8:ba:1b:de:fa:97:b6:e7:d7:3a: 2f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:57:91:03:B4:05:9F:B3:EB:1D:E6:7C:BF:C5:27:AE:43:AE:F7:45 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2825613b-8af4-4e67-8f1d-4c90e38f7d09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1234::/48 Signature Algorithm: sha256WithRSAEncryption 85:e5:96:4d:2d:b0:c5:af:09:70:96:6c:c5:3a:7e:26:c2:34: f0:16:77:0d:00:28:85:41:bb:d7:c2:69:b0:a3:99:b9:be:6c: f5:5b:fb:e1:84:06:64:7d:b1:91:d3:61:58:48:93:a4:89:eb: 8e:8e:b5:f9:ac:65:0a:b6:76:51:58:2c:81:be:67:05:a8:b2: e6:34:6a:9f:32:6b:38:b7:ef:0a:4e:fe:de:2e:e3:a0:15:0c: b6:9f:91:4d:8e:0c:de:e4:ef:17:29:9c:1d:67:78:ee:60:1f: e7:5d:d8:4e:43:48:a3:29:84:b5:af:af:9a:44:d6:1d:63:1f: 70:67:64:0a:03:44:d1:16:61:c8:ed:f0:cf:9c:2e:d1:b3:bb: f3:bf:77:93:66:79:6d:66:a8:54:11:25:5b:aa:c6:08:6d:c2: cf:8f:70:db:25:8b:04:cd:91:bd:e1:9f:c1:e4:d5:48:f1:b0: 7d:f9:57:ca:38:4a:93:85:87:b0:a6:64:4e:15:b7:0e:c5:d6: 00:bb:83:19:28:a3:31:28:74:38:96:3a:46:ec:b1:61:f8:1e: d9:9d:37:4d:84:9b:b6:3a:26:87:6f:dd:db:82:82:62:b0:09: 14:47:27:8c:87:2e:01:7c:fb:df:0f:96:21:87:ea:a1:96:17: 37:b3:e7:a9 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUPG4afVYGazBxGrZkiNqtAgywzr4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwOTEwMDEzMTMyWhcNMjYxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MjhkNWRiMjYyNTMzYjE5ZDkwOWRjMjFhYjAyNGRmODU4 NGI5NDcwODZmN2I4Yzg2NDVlY2M1ZDUxMTBlZjQ5MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzsq0QX9rpnqOWw2z/54rj5FDvegOqMNZqwqMcU6xMeXPJ jDA1UTEqeJuJbhqvCqLFo8TDl7xIqoRBbOHjURQNgoAT3eGJMm5Ee9bZCXX8+fNE olwXSLUpyhyqIXhnqJ+7d5Dh8QhIdztndzu2vVEL0Rk8G+gKyw3Rq0u/K8O84scr 5NuEFqZSwXt79X34zP2HTbg0W51UqQDAVHUp5OHc35IORXQYyj9zsFYMPQNa/Ne2 233jOTOpuZw0027T9+EG62Yt4QcFBAlnqFDVku471zj6c2rqhVIQcF87hF03Unnp qnidRLYPbyR/qRBftTfbSmAT2Lob3vqXtufXOi9fAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU8FeRA7QFn7PrHeZ8v8UnrkOu90UwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzI4MjU2MTNiLThhZjQtNGU2Ny04ZjFkLTRjOTBlMzhmN2QwOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAJAAEjQwDQYJKoZIhvcNAQELBQADggEBAIXllk0tsMWvCXCWbMU6fibC NPAWdw0AKIVBu9fCabCjmbm+bPVb++GEBmR9sZHTYVhIk6SJ646OtfmsZQq2dlFY LIG+ZwWosuY0ap8yazi37wpO/t4u46AVDLafkU2ODN7k7xcpnB1neO5gH+dd2E5D SKMphLWvr5pE1h1jH3BnZAoDRNEWYcjt8M+cLtGzu/O/d5NmeW1mqFQRJVuqxght ws+PcNsliwTNkb3hn8Hk1UjxsH35V8o4SpOFh7CmZE4Vtw7F1gC7gxkoozEodDiW OkbssWH4HtmdN02Em7Y6Jodv3duCgmKwCRRHJ4yHLgF8+98PliGH6qGWFzez56k= -----END CERTIFICATE-----Generated at Mon Sep 21 16:25:59 2026 by rpki-client