$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/32bc1b73-ff46-4309-bfbd-4f9ec872b394.roa File: 32bc1b73-ff46-4309-bfbd-4f9ec872b394.roa (raw, json) Hash identifier: DIT64QkEF3gPJxujdb4EivzlhNHwnwMutvb+5ZGAzNA= Subject key identifier: 64:96:C5:FD:CC:7D:8D:56:BD:C5:3F:6A:41:7F:BA:38:B6:E4:57:B4 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 50FD1334F12318089C113F6422249423272057DF Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/32bc1b73-ff46-4309-bfbd-4f9ec872b394.roa Signing time: Thu 10 Sep 2026 02:20:55 +0000 ROA not before: Thu 10 Sep 2026 02:20:55 +0000 ROA not after: Wed 09 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:10da::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:fd:13:34:f1:23:18:08:9c:11:3f:64:22:24:94:23:27:20:57:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Sep 10 02:20:55 2026 GMT Not After : Dec 9 23:59:59 2026 GMT Subject: serialNumber=d57544270e33d740d6ce3e46a960947b01137b271ca40986721d763e0c0a945e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:12:67:23:73:54:52:1a:4a:e3:3c:c3:8c:a9: fa:91:4b:96:7f:cd:be:d9:18:07:72:68:4b:d6:34: 96:d5:24:51:4e:36:69:c0:e4:8c:9c:cf:76:29:50: 25:73:0e:31:f0:97:9c:1b:12:d1:72:fd:37:55:dc: 6a:88:2c:ac:50:fa:94:85:8e:84:da:59:a7:cf:86: 27:b4:a1:20:fb:23:26:30:86:99:ee:9e:5d:be:cd: 06:80:9d:3a:b2:c3:50:07:9e:df:63:b7:ab:40:48: 3c:e8:20:9b:70:4a:62:7a:61:80:81:cc:b3:07:2a: a5:b6:69:ce:6c:e4:45:fa:dd:bb:7b:10:1e:a4:db: b1:89:4b:92:66:a0:fb:10:6d:90:14:20:d3:fb:f4: fa:7e:40:94:9b:fe:cf:00:30:05:9b:f9:bc:28:56: 08:43:bf:0a:06:e3:74:f9:e4:0d:84:e5:43:72:d5: b3:5a:99:67:a2:36:d5:7e:59:47:1a:bc:6d:94:9d: fa:f5:93:c4:23:31:37:36:5a:7b:3e:8d:84:68:35: 95:db:e9:62:40:15:80:31:ef:d3:45:ef:98:25:3b: 6a:42:8d:7a:60:b6:04:93:a4:c0:fc:ee:bd:ab:ec: 56:55:d3:b6:8e:5c:14:a8:2b:c6:d6:15:cf:98:e9: 4a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:96:C5:FD:CC:7D:8D:56:BD:C5:3F:6A:41:7F:BA:38:B6:E4:57:B4 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/32bc1b73-ff46-4309-bfbd-4f9ec872b394.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:10da::/48 Signature Algorithm: sha256WithRSAEncryption 4a:7a:d8:b3:39:ec:9c:c4:ad:9c:f3:f4:5b:fb:d3:f9:1a:96: 29:42:dc:ec:ef:42:96:be:56:ae:72:c0:5d:e4:10:a9:89:af: e3:22:48:93:b4:79:8e:df:3d:4b:19:46:90:71:71:26:54:b1: e6:0d:c4:4d:94:f3:82:a0:76:e2:fb:47:32:94:33:4d:62:d9: 89:20:17:aa:11:6c:b6:9e:61:9e:43:b4:f6:c0:e6:62:50:ad: bd:a3:ac:87:00:f7:3c:98:e0:7a:02:a5:38:f4:2a:7f:31:9a: 59:ad:ca:3e:f1:97:22:ae:6d:80:79:c1:12:a9:c0:61:af:0a: 01:a5:70:b7:43:cd:f0:65:ab:88:df:e1:f5:3d:11:74:60:b6: 98:d6:0c:df:cd:b4:68:2f:27:bf:cb:47:d8:e3:09:71:4d:8b: ff:a5:ef:10:4a:0f:6f:ac:aa:57:1b:5d:e0:c1:20:c4:da:86: 72:92:f1:b1:dd:39:f6:17:55:fd:b0:7d:72:c1:33:4f:cc:90: cd:e3:67:95:63:6e:18:15:56:76:2a:3a:19:d0:a7:27:9e:d1: 9b:3f:d8:d9:f8:95:8d:20:23:59:b5:62:cd:d2:c6:ff:99:c6: 05:e0:30:13:ac:d0:b9:73:1f:3f:db:fb:24:4b:8d:2e:2c:0d: 77:cd:e4:df -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUP0TNPEjGAicET9kIiSUIycgV98wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwOTEwMDIyMDU1WhcNMjYxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNTc1NDQyNzBlMzNkNzQwZDZjZTNlNDZhOTYwOTQ3YjAx MTM3YjI3MWNhNDA5ODY3MjFkNzYzZTBjMGE5NDVlMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8Emcjc1RSGkrjPMOMqfqRS5Z/zb7ZGAdyaEvWNJbVJFFO NmnA5Iycz3YpUCVzDjHwl5wbEtFy/TdV3GqILKxQ+pSFjoTaWafPhie0oSD7IyYw hpnunl2+zQaAnTqyw1AHnt9jt6tASDzoIJtwSmJ6YYCBzLMHKqW2ac5s5EX63bt7 EB6k27GJS5JmoPsQbZAUINP79Pp+QJSb/s8AMAWb+bwoVghDvwoG43T55A2E5UNy 1bNamWeiNtV+WUcavG2Unfr1k8QjMTc2Wns+jYRoNZXb6WJAFYAx79NF75glO2pC jXpgtgSTpMD87r2r7FZV07aOXBSoK8bWFc+Y6UptAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUZJbF/cx9jVa9xT9qQX+6OLbkV7QwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzMyYmMxYjczLWZmNDYtNDMwOS1iZmJkLTRmOWVjODcyYjM5NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAJAAENowDQYJKoZIhvcNAQELBQADggEBAEp62LM57JzErZzz9Fv70/ka lilC3OzvQpa+Vq5ywF3kEKmJr+MiSJO0eY7fPUsZRpBxcSZUseYNxE2U84KgduL7 RzKUM01i2YkgF6oRbLaeYZ5DtPbA5mJQrb2jrIcA9zyY4HoCpTj0Kn8xmlmtyj7x lyKubYB5wRKpwGGvCgGlcLdDzfBlq4jf4fU9EXRgtpjWDN/NtGgvJ7/LR9jjCXFN i/+l7xBKD2+sqlcbXeDBIMTahnKS8bHdOfYXVf2wfXLBM0/MkM3jZ5VjbhgVVnYq OhnQpyee0Zs/2Nn4lY0gI1m1Ys3Sxv+ZxgXgMBOs0LlzHz/b+yRLjS4sDXfN5N8= -----END CERTIFICATE-----Generated at Mon Sep 21 10:42:25 2026 by rpki-client