$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/85deb819-eeec-4ff7-94c0-51079618b009.roa File: 85deb819-eeec-4ff7-94c0-51079618b009.roa (raw, json) Hash identifier: IUVhmI0TOYNpWQklW/ou/H2wi0EJMTeY0aDd8ttMZI0= Subject key identifier: C2:52:9E:E3:DC:A4:E3:99:53:16:AF:6D:C9:62:11:93:5B:83:BE:C5 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 19C2829B407F664118D98A6B99B09D6A2EAAE732 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/85deb819-eeec-4ff7-94c0-51079618b009.roa Signing time: Thu 10 Sep 2026 01:30:41 +0000 ROA not before: Thu 10 Sep 2026 01:30:41 +0000 ROA not after: Wed 09 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:10a7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:c2:82:9b:40:7f:66:41:18:d9:8a:6b:99:b0:9d:6a:2e:aa:e7:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Sep 10 01:30:41 2026 GMT Not After : Dec 9 23:59:59 2026 GMT Subject: serialNumber=d82cbaaccc1339ea8af333bba41855b54ea89d60eecde7461ab291d56e6125d1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9e:71:79:08:62:ec:72:9a:f7:ee:4f:40:8f: ad:cd:f1:d3:4d:c1:39:49:1d:41:9f:84:41:52:cc: 30:da:91:2f:2f:fd:62:11:68:dd:bb:98:6b:b9:59: 96:f5:2b:31:9e:3d:cf:18:8f:07:db:a3:da:1a:19: 27:be:ed:1a:8f:4e:a1:13:0a:2f:9c:46:0e:56:8b: f9:ed:fd:65:fa:86:f6:66:c8:67:5a:d3:be:30:79: 15:e4:6e:af:a1:c3:a9:4b:4e:af:56:fc:5d:7f:c0: 83:0f:90:37:57:41:41:93:0f:d6:62:fb:01:16:27: 3c:ce:63:e9:86:6c:08:95:ab:f9:99:db:76:04:14: ce:5d:5d:76:4f:34:16:9c:9a:ef:b7:85:4c:37:62: a1:44:b8:29:d3:b8:3a:94:e0:e1:64:37:a0:12:44: 36:9b:d0:0b:dd:d8:4a:d1:f9:df:18:4e:ec:26:5e: b6:e9:bb:3e:5e:5c:9b:26:6b:87:af:b7:70:ee:c2: 1f:89:fd:02:41:9b:e6:af:a0:64:3b:8b:50:fe:00: 29:fb:f0:48:44:1e:41:9b:b5:25:f6:37:7b:c3:7a: a6:de:6a:0d:cf:eb:5d:27:60:cb:d7:7c:58:1b:63: 02:f8:e8:4d:76:c1:69:7f:fc:f1:47:3c:64:9c:c6: 4d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:52:9E:E3:DC:A4:E3:99:53:16:AF:6D:C9:62:11:93:5B:83:BE:C5 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/85deb819-eeec-4ff7-94c0-51079618b009.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:10a7::/48 Signature Algorithm: sha256WithRSAEncryption 35:05:10:04:cd:26:88:26:f1:12:36:a4:60:9a:97:0b:3e:73: 8f:d1:24:37:ed:74:a6:4d:0e:3a:f1:0b:dd:8e:11:4b:97:00: bd:bd:e8:31:d2:57:8b:c2:a5:5c:55:c6:db:3c:ae:f8:f4:ae: 02:91:eb:32:e8:d9:89:42:ba:4c:d8:82:59:8f:5f:7a:7f:08: 39:7b:7f:da:ac:d0:1c:64:1f:b9:9c:ef:bf:da:dd:92:a3:71: fc:a9:b1:30:80:7d:00:e5:cc:3a:1c:e9:75:6b:75:cf:fe:b3: 44:f7:b6:57:ee:6e:6d:85:5a:67:8e:aa:1d:46:54:27:10:fb: bd:2d:04:f9:78:b2:3e:91:f2:64:a2:a9:47:5d:cc:fb:04:76: 95:12:2b:d6:9f:96:c9:b7:b8:40:3f:de:1b:02:57:3c:d4:29: e1:d5:e0:cd:ef:28:1f:c0:cc:a3:a0:e1:b7:76:77:f1:77:53: 5b:33:8e:15:0b:c5:73:5e:b7:3d:f0:5b:a4:64:1c:89:3d:be: 48:01:39:d6:25:e6:93:99:4d:99:49:96:eb:4b:89:de:50:00: 8e:a8:3d:ff:15:dd:de:92:92:40:01:29:0b:b1:dd:99:88:08: ba:46:fc:74:ee:37:de:e1:e3:b9:00:10:3f:54:69:f3:02:c1: 56:da:98:43 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUGcKCm0B/ZkEY2YprmbCdai6q5zIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwOTEwMDEzMDQxWhcNMjYxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkODJjYmFhY2NjMTMzOWVhOGFmMzMzYmJhNDE4NTViNTRl YTg5ZDYwZWVjZGU3NDYxYWIyOTFkNTZlNjEyNWQxMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwnnF5CGLscpr37k9Aj63N8dNNwTlJHUGfhEFSzDDakS8v /WIRaN27mGu5WZb1KzGePc8Yjwfbo9oaGSe+7RqPTqETCi+cRg5Wi/nt/WX6hvZm yGda074weRXkbq+hw6lLTq9W/F1/wIMPkDdXQUGTD9Zi+wEWJzzOY+mGbAiVq/mZ 23YEFM5dXXZPNBacmu+3hUw3YqFEuCnTuDqU4OFkN6ASRDab0Avd2ErR+d8YTuwm Xrbpuz5eXJsma4evt3Duwh+J/QJBm+avoGQ7i1D+ACn78EhEHkGbtSX2N3vDeqbe ag3P610nYMvXfFgbYwL46E12wWl//PFHPGScxk3rAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUwlKe49yk45lTFq9tyWIRk1uDvsUwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1Lzg1ZGViODE5LWVlZWMtNGZmNy05NGMwLTUxMDc5NjE4YjAwOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAJAAEKcwDQYJKoZIhvcNAQELBQADggEBADUFEATNJogm8RI2pGCalws+ c4/RJDftdKZNDjrxC92OEUuXAL296DHSV4vCpVxVxts8rvj0rgKR6zLo2YlCukzY glmPX3p/CDl7f9qs0BxkH7mc77/a3ZKjcfypsTCAfQDlzDoc6XVrdc/+s0T3tlfu bm2FWmeOqh1GVCcQ+70tBPl4sj6R8mSiqUddzPsEdpUSK9aflsm3uEA/3hsCVzzU KeHV4M3vKB/AzKOg4bd2d/F3U1szjhULxXNetz3wW6RkHIk9vkgBOdYl5pOZTZlJ lutLid5QAI6oPf8V3d6SkkABKQux3ZmICLpG/HTuN97h47kAED9UafMCwVbamEM= -----END CERTIFICATE-----Generated at Tue Sep 22 12:05:36 2026 by rpki-client