$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3bbccb96-7130-4a26-981b-7083587e7802.roa File: 3bbccb96-7130-4a26-981b-7083587e7802.roa (raw, json) Hash identifier: JqjkeXZopd+wKxVPOUUVebj+slL1gzE7cobVPWw76m0= Subject key identifier: F2:AA:26:67:20:D3:BE:42:40:87:71:49:E9:00:8C:5D:A1:CF:11:52 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 6E71D3799BFE7C6AE4471DFB122726DF19FB5965 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3bbccb96-7130-4a26-981b-7083587e7802.roa Signing time: Thu 10 Sep 2026 00:51:03 +0000 ROA not before: Thu 10 Sep 2026 00:51:03 +0000 ROA not after: Wed 09 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1217::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:71:d3:79:9b:fe:7c:6a:e4:47:1d:fb:12:27:26:df:19:fb:59:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Sep 10 00:51:03 2026 GMT Not After : Dec 9 23:59:59 2026 GMT Subject: serialNumber=86e55fa6acf6a268e6676b92c5f5d32a87d73d9fdc94c692931be83840357bfd, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:94:5f:32:df:f0:70:63:73:29:ef:4d:b6:82: 58:94:b4:19:08:9f:be:ea:9f:38:ac:d4:49:c7:0b: d4:d1:30:84:b2:8e:9d:d7:df:31:c9:d0:d3:4c:3c: 53:50:39:59:06:73:94:35:05:75:e0:ac:0d:75:cf: 27:2f:e7:3b:4d:d3:96:f8:3b:2a:81:2b:74:f7:b3: a3:b6:96:df:33:c1:9d:08:9f:ca:fe:50:41:d2:c4: 55:90:d0:b5:d1:03:6b:e8:13:03:8c:ef:3e:91:a8: e9:76:44:ca:30:7a:f3:78:d1:46:03:4e:0c:f4:88: 7d:fc:cd:64:12:44:3d:d3:0c:47:87:42:50:83:24: eb:5d:76:e3:02:5c:1e:46:bd:a1:67:25:29:b2:6d: 13:2e:0f:c3:3e:ab:77:32:ce:51:6a:66:90:33:55: 2e:f2:61:b3:66:55:f7:0f:e1:0a:f0:62:6b:66:de: 03:3a:16:90:2f:2e:3c:31:92:4c:8e:76:da:fe:eb: 77:90:f0:81:3e:4d:ab:c3:69:b3:e9:8b:26:c5:27: 20:f0:33:da:c0:f4:2f:f1:b8:e2:a6:01:a2:a6:74: bc:c9:71:25:08:4e:84:d8:f4:d9:55:ad:0f:e0:fc: df:9a:86:21:04:c1:66:d2:d8:0b:ab:ba:da:4b:96: c1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:AA:26:67:20:D3:BE:42:40:87:71:49:E9:00:8C:5D:A1:CF:11:52 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3bbccb96-7130-4a26-981b-7083587e7802.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1217::/48 Signature Algorithm: sha256WithRSAEncryption 15:6a:01:17:3b:be:d0:cc:ff:2f:7b:7d:e1:bd:0e:4c:3e:4c: e1:43:43:04:f1:58:e5:7a:9c:5c:22:1b:64:b2:6c:2f:5b:c0: d1:4c:64:33:ec:62:ee:65:47:df:3e:6d:96:c7:f2:75:d0:8e: 13:09:93:a8:10:21:e6:78:fb:eb:f5:95:81:68:b3:16:fd:6b: b8:ee:47:ea:aa:a2:b9:13:0e:2e:18:a5:45:24:20:60:08:cb: 10:75:f8:c8:23:d0:88:0c:96:bc:cd:02:e0:fd:2b:2a:d9:46: 56:26:ca:7e:01:ee:9b:45:44:53:77:75:3c:6a:31:8c:0a:6b: 90:5f:91:be:d9:77:e1:3c:3b:d0:df:22:74:18:6e:f2:49:f3: 14:24:c1:66:5a:ec:29:fd:ff:e9:a0:b0:e8:2a:b1:53:93:10: 09:04:0f:38:15:d8:60:8e:20:56:1c:18:be:f1:6c:2f:c2:f9: 3e:8d:d8:6f:53:f8:b1:f1:9f:fb:35:91:af:ab:24:5b:1e:cc: 76:88:62:e5:46:c9:af:2d:cf:42:fc:d0:bf:7f:26:a7:8e:39: 41:3c:55:3c:00:69:b3:a2:9d:c1:69:2c:70:00:d4:92:30:07: c1:dd:bc:1e:1e:90:81:31:88:53:40:22:c6:c2:31:f0:33:18: 29:63:3e:4c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUbnHTeZv+fGrkRx37Eicm3xn7WWUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwOTEwMDA1MTAzWhcNMjYxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NmU1NWZhNmFjZjZhMjY4ZTY2NzZiOTJjNWY1ZDMyYTg3 ZDczZDlmZGM5NGM2OTI5MzFiZTgzODQwMzU3YmZkMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCblF8y3/BwY3Mp7022gliUtBkIn77qnzis1EnHC9TRMISy jp3X3zHJ0NNMPFNQOVkGc5Q1BXXgrA11zycv5ztN05b4OyqBK3T3s6O2lt8zwZ0I n8r+UEHSxFWQ0LXRA2voEwOM7z6RqOl2RMowevN40UYDTgz0iH38zWQSRD3TDEeH QlCDJOtdduMCXB5GvaFnJSmybRMuD8M+q3cyzlFqZpAzVS7yYbNmVfcP4QrwYmtm 3gM6FpAvLjwxkkyOdtr+63eQ8IE+TavDabPpiybFJyDwM9rA9C/xuOKmAaKmdLzJ cSUIToTY9NlVrQ/g/N+ahiEEwWbS2AurutpLlsEDAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU8qomZyDTvkJAh3FJ6QCMXaHPEVIwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzNiYmNjYjk2LTcxMzAtNGEyNi05ODFiLTcwODM1ODdlNzgwMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAJAAEhcwDQYJKoZIhvcNAQELBQADggEBABVqARc7vtDM/y97feG9Dkw+ TOFDQwTxWOV6nFwiG2SybC9bwNFMZDPsYu5lR98+bZbH8nXQjhMJk6gQIeZ4++v1 lYFosxb9a7juR+qqorkTDi4YpUUkIGAIyxB1+Mgj0IgMlrzNAuD9KyrZRlYmyn4B 7ptFRFN3dTxqMYwKa5Bfkb7Zd+E8O9DfInQYbvJJ8xQkwWZa7Cn9/+mgsOgqsVOT EAkEDzgV2GCOIFYcGL7xbC/C+T6N2G9T+LHxn/s1ka+rJFsezHaIYuVGya8tz0L8 0L9/JqeOOUE8VTwAabOincFpLHAA1JIwB8HdvB4ekIExiFNAIsbCMfAzGCljPkw= -----END CERTIFICATE-----Generated at Mon Sep 21 21:51:26 2026 by rpki-client