$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3872d11c-02c1-46f6-bf94-2faa0f5b1996.roa File: 3872d11c-02c1-46f6-bf94-2faa0f5b1996.roa (raw, json) Hash identifier: uHZ+jy/Zsha4FDMbyTjxbpb8TROOKbyL/tLvA253tdA= Subject key identifier: 8B:27:90:84:C2:2B:FB:42:69:50:C6:B5:0D:26:74:2B:6F:63:14:C5 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 7B42D3666AA4F2D610CF0B1F9A9E97D728F97A40 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3872d11c-02c1-46f6-bf94-2faa0f5b1996.roa Signing time: Thu 10 Sep 2026 00:41:41 +0000 ROA not before: Thu 10 Sep 2026 00:41:41 +0000 ROA not after: Wed 09 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:10b1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:42:d3:66:6a:a4:f2:d6:10:cf:0b:1f:9a:9e:97:d7:28:f9:7a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Sep 10 00:41:41 2026 GMT Not After : Dec 9 23:59:59 2026 GMT Subject: serialNumber=617a166ab6fb13a48a34793efc2929c774cd589b39ec96ffa4d162608ff560d0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e4:eb:ab:9f:2a:62:ee:3c:a9:a0:e0:85:9b: 3c:f8:a7:f4:d5:24:a9:ba:70:67:bf:ed:46:27:f3: ec:3b:83:44:da:db:20:d1:57:21:12:75:d2:5d:41: 5d:43:af:c2:89:f9:a6:c8:f3:15:21:d7:8d:ec:25: dc:fd:39:71:a5:65:6c:27:b6:73:fe:3b:48:5b:9f: 13:b0:09:5a:37:fd:ec:22:b7:6a:9d:f6:df:47:aa: 6b:63:94:cb:af:70:34:73:0b:5a:c7:3a:cf:0a:46: 8c:70:16:49:08:95:31:92:e1:64:92:e9:2a:38:f6: 2a:ce:74:87:d6:bf:bf:d9:7a:44:d7:b8:b0:5a:ca: 16:81:8f:7e:b6:99:41:da:ca:f2:60:0b:fb:c2:24: 52:fc:d1:20:8f:0b:b7:61:51:57:03:fc:46:33:b0: 6a:aa:b0:5f:6a:60:2b:21:a6:58:a1:73:93:51:d8: f6:df:49:a7:6d:92:75:8b:ff:e5:15:41:12:84:b6: c9:24:d4:8e:1b:34:92:9c:15:be:6a:fa:e8:c8:fe: 87:d1:05:03:2f:dc:64:b1:74:c0:32:6d:6d:2b:f9: 8e:17:88:33:d8:2f:95:69:e8:49:a5:87:bd:87:b8: 26:d9:fb:1c:5e:9b:7d:e7:36:72:e1:db:40:c3:34: 6c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:27:90:84:C2:2B:FB:42:69:50:C6:B5:0D:26:74:2B:6F:63:14:C5 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3872d11c-02c1-46f6-bf94-2faa0f5b1996.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:10b1::/48 Signature Algorithm: sha256WithRSAEncryption 6b:ba:9a:6b:c0:b3:c5:7d:10:89:d8:c8:0d:32:4e:b8:58:5c: 7b:fa:ff:69:c7:ab:4b:b2:d2:d8:b2:13:e7:46:02:8e:4e:c4: 3a:eb:cb:33:8c:0a:81:65:ae:c8:74:50:c7:a3:46:78:af:a4: ca:0c:e6:9f:ce:97:47:88:b5:05:45:11:fe:e1:53:48:ac:64: 53:23:bc:b0:c8:4f:0d:e1:13:fd:63:d9:8b:ca:22:3a:2a:35: fa:7e:4e:82:3a:f9:58:2f:ec:82:a3:07:c0:e0:60:a4:de:43: 5e:f5:21:25:07:58:82:be:74:f7:6c:ed:7f:bb:db:57:77:a3: 60:ce:db:bc:c0:b0:4e:84:33:a9:a9:db:54:e1:67:32:f7:3f: cc:ec:36:a2:83:d2:a8:4e:d5:47:52:2b:21:c8:79:eb:4f:e9: 39:5e:6c:95:f3:da:ea:b0:f1:a8:0c:bb:31:c4:0d:06:70:a0: de:1e:91:90:7c:72:6f:d0:83:2a:52:1d:4c:9c:08:07:49:f9: f0:d4:84:ca:4f:cf:ce:47:58:97:8e:2b:1b:af:e2:97:bc:40: c1:3f:ab:5f:e1:bf:d4:ad:5d:40:b5:df:3c:7c:5c:33:95:ba: ca:fe:37:c2:f8:78:9a:40:10:ff:f0:30:ab:23:0c:ce:af:72: 50:44:e9:06 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUe0LTZmqk8tYQzwsfmp6X1yj5ekAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwOTEwMDA0MTQxWhcNMjYxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MTdhMTY2YWI2ZmIxM2E0OGEzNDc5M2VmYzI5MjljNzc0 Y2Q1ODliMzllYzk2ZmZhNGQxNjI2MDhmZjU2MGQwMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCq5Ournypi7jypoOCFmzz4p/TVJKm6cGe/7UYn8+w7g0Ta 2yDRVyESddJdQV1Dr8KJ+abI8xUh143sJdz9OXGlZWwntnP+O0hbnxOwCVo3/ewi t2qd9t9HqmtjlMuvcDRzC1rHOs8KRoxwFkkIlTGS4WSS6So49irOdIfWv7/ZekTX uLBayhaBj362mUHayvJgC/vCJFL80SCPC7dhUVcD/EYzsGqqsF9qYCshplihc5NR 2PbfSadtknWL/+UVQRKEtskk1I4bNJKcFb5q+ujI/ofRBQMv3GSxdMAybW0r+Y4X iDPYL5Vp6Emlh72HuCbZ+xxem33nNnLh20DDNGxNAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUiyeQhMIr+0JpUMa1DSZ0K29jFMUwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzM4NzJkMTFjLTAyYzEtNDZmNi1iZjk0LTJmYWEwZjViMTk5Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAJAAELEwDQYJKoZIhvcNAQELBQADggEBAGu6mmvAs8V9EInYyA0yTrhY XHv6/2nHq0uy0tiyE+dGAo5OxDrryzOMCoFlrsh0UMejRnivpMoM5p/Ol0eItQVF Ef7hU0isZFMjvLDITw3hE/1j2YvKIjoqNfp+ToI6+Vgv7IKjB8DgYKTeQ171ISUH WIK+dPds7X+721d3o2DO27zAsE6EM6mp21ThZzL3P8zsNqKD0qhO1UdSKyHIeetP 6TlebJXz2uqw8agMuzHEDQZwoN4ekZB8cm/QgypSHUycCAdJ+fDUhMpPz85HWJeO Kxuv4pe8QME/q1/hv9StXUC13zx8XDOVusr+N8L4eJpAEP/wMKsjDM6vclBE6QY= -----END CERTIFICATE-----Generated at Mon Sep 21 02:53:34 2026 by rpki-client