$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8359a261-6574-4a80-8e0b-923525d185db.roa File: 8359a261-6574-4a80-8e0b-923525d185db.roa (raw, json) Hash identifier: E26rrprmKw8GofdAEx8FGQWyoo6wEKmMqkPpWHdQ3A8= Subject key identifier: 94:88:A8:53:41:C6:39:AF:35:21:69:F1:7D:50:C2:58:F9:8D:AA:21 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 03AA1F66773BE1C129EDDB6E2AA68141FA941CDE Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8359a261-6574-4a80-8e0b-923525d185db.roa Signing time: Thu 10 Sep 2026 01:00:09 +0000 ROA not before: Thu 10 Sep 2026 01:00:09 +0000 ROA not after: Wed 09 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:11c6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:aa:1f:66:77:3b:e1:c1:29:ed:db:6e:2a:a6:81:41:fa:94:1c:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Sep 10 01:00:09 2026 GMT Not After : Dec 9 23:59:59 2026 GMT Subject: serialNumber=2c9e4ad95cc6b086f6707479f70cfb973faf61eef0f9c9f5a8ddb075eaf85a1e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:31:3c:1a:5a:37:8a:27:a0:a3:d5:cd:f0:74: b2:e1:30:f1:50:89:6e:95:c1:20:4e:e7:5e:f2:c9: 99:7f:a7:45:97:c6:aa:f9:9a:84:40:bf:e9:2d:37: d1:f8:9c:87:e3:49:bb:0f:08:06:9d:7c:f5:b0:fd: 4e:02:03:bb:57:ea:0e:40:b9:33:b8:b2:f4:00:94: 41:d9:4e:3f:5c:7f:36:b0:e5:ef:e3:ef:71:bb:61: aa:c2:e2:71:0c:d3:66:07:00:a3:32:00:65:eb:c8: 55:01:3f:40:4f:1b:b5:d9:88:f7:7b:8a:c5:b7:a5: d1:e2:04:21:bd:73:6a:f1:6e:57:a8:f9:3f:c9:68: e6:24:0c:61:17:21:17:e1:0b:8c:7c:67:d3:50:8b: e7:58:e7:5b:3d:5a:10:65:15:12:64:72:66:69:75: 21:f0:61:c5:7f:7e:cb:17:1d:f8:40:cb:2a:b9:b0: 78:ad:cc:99:4c:7c:a8:6c:91:cb:fa:28:7e:b3:13: 37:82:da:1e:f2:f0:92:25:ac:df:06:c0:34:8d:08: 52:b6:ec:54:04:5e:f8:04:41:12:0c:4c:7c:81:f4: d3:c4:ae:cf:96:7e:17:e0:a5:bc:bd:29:3d:c1:b1: 0f:00:d6:4d:c1:be:30:74:ad:46:67:4b:1f:0c:1f: bc:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:88:A8:53:41:C6:39:AF:35:21:69:F1:7D:50:C2:58:F9:8D:AA:21 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8359a261-6574-4a80-8e0b-923525d185db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:11c6::/48 Signature Algorithm: sha256WithRSAEncryption 43:e2:27:fc:e1:44:3b:4a:04:39:6b:d7:b7:ea:3a:0f:12:bf: 26:88:b0:df:07:d6:53:cd:95:c1:b6:93:19:07:e2:39:ef:2d: 07:df:21:9a:92:85:da:c4:49:81:5a:c6:28:3f:ed:a6:be:44: 56:74:c5:af:cb:9b:5b:31:f6:fa:07:05:80:fe:38:02:5c:c3: f2:0b:ed:0a:6e:90:82:aa:ca:5c:32:dc:25:29:21:ce:cb:dd: d8:a0:2c:da:0a:0b:1d:52:3d:ca:c0:c6:d5:5d:72:06:63:27: 87:3e:ae:b1:43:10:11:dc:df:03:ad:f1:7e:83:d2:39:2e:b0: cd:d1:b0:b6:68:f0:e0:d1:df:ab:a5:df:95:cd:77:a0:0e:1e: b4:11:49:79:28:13:cd:87:cc:f9:c8:5c:06:6b:c9:19:bd:54: 3c:10:b6:c9:83:5c:17:68:4e:7e:25:78:42:97:ac:62:d6:f5: 7b:13:6d:03:d1:9c:7b:68:c3:cf:a8:2e:15:93:64:62:e9:39: 58:51:78:81:3f:bb:a2:cf:05:2d:db:76:1d:0b:eb:23:ea:93: dd:ea:e9:c9:b8:7e:a7:d6:c0:f0:f8:cb:58:61:4d:da:ba:4b: 23:55:5c:e1:da:2c:4e:6d:56:7a:b1:d5:28:1d:e1:af:50:6b: 56:ea:3b:c0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUA6ofZnc74cEp7dtuKqaBQfqUHN4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwOTEwMDEwMDA5WhcNMjYxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyYzllNGFkOTVjYzZiMDg2ZjY3MDc0NzlmNzBjZmI5NzNm YWY2MWVlZjBmOWM5ZjVhOGRkYjA3NWVhZjg1YTFlMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCHMTwaWjeKJ6Cj1c3wdLLhMPFQiW6VwSBO517yyZl/p0WX xqr5moRAv+ktN9H4nIfjSbsPCAadfPWw/U4CA7tX6g5AuTO4svQAlEHZTj9cfzaw 5e/j73G7YarC4nEM02YHAKMyAGXryFUBP0BPG7XZiPd7isW3pdHiBCG9c2rxbleo +T/JaOYkDGEXIRfhC4x8Z9NQi+dY51s9WhBlFRJkcmZpdSHwYcV/fssXHfhAyyq5 sHitzJlMfKhskcv6KH6zEzeC2h7y8JIlrN8GwDSNCFK27FQEXvgEQRIMTHyB9NPE rs+Wfhfgpby9KT3BsQ8A1k3BvjB0rUZnSx8MH7xJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUlIioU0HGOa81IWnxfVDCWPmNqiEwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzgzNTlhMjYxLTY1NzQtNGE4MC04ZTBiLTkyMzUyNWQxODVkYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAJAAEcYwDQYJKoZIhvcNAQELBQADggEBAEPiJ/zhRDtKBDlr17fqOg8S vyaIsN8H1lPNlcG2kxkH4jnvLQffIZqShdrESYFaxig/7aa+RFZ0xa/Lm1sx9voH BYD+OAJcw/IL7QpukIKqylwy3CUpIc7L3digLNoKCx1SPcrAxtVdcgZjJ4c+rrFD EBHc3wOt8X6D0jkusM3RsLZo8ODR36ul35XNd6AOHrQRSXkoE82HzPnIXAZryRm9 VDwQtsmDXBdoTn4leEKXrGLW9XsTbQPRnHtow8+oLhWTZGLpOVhReIE/u6LPBS3b dh0L6yPqk93q6cm4fqfWwPD4y1hhTdq6SyNVXOHaLE5tVnqx1Sgd4a9Qa1bqO8A= -----END CERTIFICATE-----Generated at Mon Sep 21 01:50:16 2026 by rpki-client