$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/37ffd7d2-2c93-4d95-addd-cab33737a37e.roa File: 37ffd7d2-2c93-4d95-addd-cab33737a37e.roa (raw, json) Hash identifier: 5vW1/tN63IE4X75h7Nm5OENvrIC+Igejy16IaJdZrvY= Subject key identifier: F3:8E:1E:6F:A7:81:13:70:96:9B:DC:5B:B8:CD:81:2A:29:4D:89:4E Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 37D244D61EA8762A3A43CE32BC042DA81F6FDA48 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/37ffd7d2-2c93-4d95-addd-cab33737a37e.roa Signing time: Thu 10 Sep 2026 01:20:39 +0000 ROA not before: Thu 10 Sep 2026 01:20:39 +0000 ROA not after: Wed 09 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:118f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:d2:44:d6:1e:a8:76:2a:3a:43:ce:32:bc:04:2d:a8:1f:6f:da:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Sep 10 01:20:39 2026 GMT Not After : Dec 9 23:59:59 2026 GMT Subject: serialNumber=be8bbd1574af390ed497b92a1deb80dfdb95b5bc8c9e8e892c9efdf4bfaf40c0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:33:7a:95:53:b3:a4:54:34:b6:bf:d8:70:b0: 52:f0:07:e9:90:5c:c7:cb:b8:2f:bb:d0:b3:24:51: 1b:41:9f:03:91:cd:83:ea:f9:84:da:ab:b0:ee:3c: 46:95:a2:a5:a2:39:ea:1e:66:a6:43:cc:59:2a:40: cb:1c:e3:80:ed:9d:3d:24:5b:12:76:ee:0e:47:59: 82:12:19:6b:73:a4:dd:fb:99:67:df:68:21:21:e0: a8:ea:e2:08:19:23:f1:02:27:82:57:fd:df:c7:ef: 2b:02:5b:c3:9b:26:b4:ae:e8:1a:22:3b:32:60:ca: b4:e9:0f:42:a5:92:93:75:c2:68:f1:2a:d9:92:de: 53:64:dd:4e:99:d9:ad:fe:75:9b:bd:d2:1a:65:39: 0a:40:97:90:25:3e:36:c7:33:71:2b:78:8f:bc:ad: 94:66:15:14:b6:c3:05:b9:fb:cd:65:f8:71:c6:0b: a3:d0:22:bc:60:d0:7c:fa:6f:ac:55:0e:b0:55:19: b5:e5:55:71:d9:5f:95:8f:d2:dc:ee:1b:80:60:ba: f5:ce:4b:1a:d4:5e:0d:6f:d3:a3:1c:2c:0d:2c:a0: bb:c1:03:56:6f:0a:23:83:bf:31:bb:56:a8:88:86: bc:58:2f:cb:80:03:b6:d9:58:51:4c:27:30:ec:c6: 66:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:8E:1E:6F:A7:81:13:70:96:9B:DC:5B:B8:CD:81:2A:29:4D:89:4E X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/37ffd7d2-2c93-4d95-addd-cab33737a37e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:118f::/48 Signature Algorithm: sha256WithRSAEncryption 15:13:62:32:19:e4:68:3d:59:4a:bf:29:b1:54:6e:00:1c:b7: a5:6e:3d:7f:78:8e:c8:ff:ee:9c:ee:c0:73:ec:84:c6:61:3b: dc:34:39:d1:72:07:03:ef:c5:27:e5:40:ef:68:74:54:23:2c: ce:24:2e:f6:31:b7:1c:0a:38:23:c2:2e:01:c7:c2:8b:1f:20: 87:19:b1:07:0d:90:6f:d6:f8:31:74:23:8b:aa:c5:ca:24:0c: 78:52:94:a4:dc:62:b5:ad:ef:6b:dc:6f:4c:56:db:84:f1:c9: d1:ac:db:9b:5d:e3:1e:79:a0:93:76:64:e8:54:60:a4:08:b7: 32:2f:ff:57:eb:12:ea:23:cc:88:1a:a6:19:cd:fc:e8:94:68: 74:96:3e:30:d2:70:15:d9:3f:31:c2:5f:d5:77:00:33:45:ed: e5:fd:7e:38:17:67:f2:82:de:25:fc:81:07:d7:74:c3:11:d2: de:82:4e:b8:48:a5:6d:f4:ab:17:13:71:4c:27:a3:2f:b7:5a: 2b:21:8b:a0:ae:e8:98:48:2f:c4:3c:84:5d:6d:75:1c:8f:5c: 9b:d3:c5:30:91:ba:19:71:70:5f:ab:55:ee:a2:ca:c3:65:c7: 1b:76:53:c1:be:6d:a7:e2:3e:c2:83:5a:04:11:68:5f:4a:54: 5f:1d:5b:91 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUN9JE1h6odio6Q84yvAQtqB9v2kgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwOTEwMDEyMDM5WhcNMjYxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZThiYmQxNTc0YWYzOTBlZDQ5N2I5MmExZGViODBkZmRi OTViNWJjOGM5ZThlODkyYzllZmRmNGJmYWY0MGMwMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxM3qVU7OkVDS2v9hwsFLwB+mQXMfLuC+70LMkURtBnwOR zYPq+YTaq7DuPEaVoqWiOeoeZqZDzFkqQMsc44DtnT0kWxJ27g5HWYISGWtzpN37 mWffaCEh4Kjq4ggZI/ECJ4JX/d/H7ysCW8ObJrSu6BoiOzJgyrTpD0KlkpN1wmjx KtmS3lNk3U6Z2a3+dZu90hplOQpAl5AlPjbHM3EreI+8rZRmFRS2wwW5+81l+HHG C6PQIrxg0Hz6b6xVDrBVGbXlVXHZX5WP0tzuG4BguvXOSxrUXg1v06McLA0soLvB A1ZvCiODvzG7VqiIhrxYL8uAA7bZWFFMJzDsxmZvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU844eb6eBE3CWm9xbuM2BKilNiU4wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzM3ZmZkN2QyLTJjOTMtNGQ5NS1hZGRkLWNhYjMzNzM3YTM3ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAJAAEY8wDQYJKoZIhvcNAQELBQADggEBABUTYjIZ5Gg9WUq/KbFUbgAc t6VuPX94jsj/7pzuwHPshMZhO9w0OdFyBwPvxSflQO9odFQjLM4kLvYxtxwKOCPC LgHHwosfIIcZsQcNkG/W+DF0I4uqxcokDHhSlKTcYrWt72vcb0xW24TxydGs25td 4x55oJN2ZOhUYKQItzIv/1frEuojzIgaphnN/OiUaHSWPjDScBXZPzHCX9V3ADNF 7eX9fjgXZ/KC3iX8gQfXdMMR0t6CTrhIpW30qxcTcUwnoy+3Wishi6Cu6JhIL8Q8 hF1tdRyPXJvTxTCRuhlxcF+rVe6iysNlxxt2U8G+bafiPsKDWgQRaF9KVF8dW5E= -----END CERTIFICATE-----Generated at Mon Sep 21 10:19:26 2026 by rpki-client