$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9142491d-b325-4ef5-980c-e8ae24bad295.roa File: 9142491d-b325-4ef5-980c-e8ae24bad295.roa (raw, json) Hash identifier: VVuk2ajNLDwWj+fqgiko9kX+/0NQy6uo1HXwgdXgj6s= Subject key identifier: E8:2E:F3:B0:AB:58:F8:68:C7:05:66:56:16:9A:E0:95:35:28:56:28 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 412DC43D91E51FC137B3C2365D5677D4681B9F95 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9142491d-b325-4ef5-980c-e8ae24bad295.roa Signing time: Thu 10 Sep 2026 01:20:34 +0000 ROA not before: Thu 10 Sep 2026 01:20:34 +0000 ROA not after: Wed 09 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:112a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:2d:c4:3d:91:e5:1f:c1:37:b3:c2:36:5d:56:77:d4:68:1b:9f:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Sep 10 01:20:34 2026 GMT Not After : Dec 9 23:59:59 2026 GMT Subject: serialNumber=132828c6c019f3162a78f558afd845f7a87f9827720060bb63ca9cf7deaa9441, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5a:87:63:b1:f4:99:ae:78:aa:be:f4:6b:66: bc:ce:54:57:e8:31:0f:4c:53:51:c0:e8:7b:ae:76: 69:17:45:d0:39:97:18:93:d5:c9:4e:56:7a:eb:62: e3:93:52:ba:03:c9:b3:76:5f:47:52:72:64:36:d2: 34:45:f4:1f:a4:81:00:1b:f2:ab:80:0e:50:56:4d: 47:5e:0a:90:50:28:39:42:57:c0:49:79:32:f6:71: 28:a5:38:80:29:dd:80:0b:b9:4e:a6:cd:aa:c8:7b: 43:3c:f4:50:da:9c:90:c2:5d:cf:98:37:a5:9a:23: 68:61:bd:95:94:a5:2e:df:d8:59:58:f6:c6:d2:75: cf:2c:61:25:ca:45:56:bd:79:9f:33:5f:47:aa:f6: 31:cb:b3:e3:3e:f2:b8:ad:ce:63:00:3b:42:2e:19: 79:02:35:f3:8e:6c:8b:e8:fb:de:4b:0f:a3:f7:2e: 9e:1b:cd:9c:da:61:7a:11:be:b4:ad:4a:e3:de:54: 61:e6:f8:89:04:88:e9:78:b3:7c:2e:03:b5:0e:67: 62:78:33:b9:ce:3e:d6:75:41:99:88:c6:d6:1e:06: d9:7c:0b:08:40:22:90:c2:18:f9:ee:11:b5:c1:53: e8:45:d1:04:06:aa:15:54:b0:09:87:59:ae:57:a9: 58:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:2E:F3:B0:AB:58:F8:68:C7:05:66:56:16:9A:E0:95:35:28:56:28 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9142491d-b325-4ef5-980c-e8ae24bad295.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:112a::/48 Signature Algorithm: sha256WithRSAEncryption 90:a0:6d:7b:18:6c:69:3e:27:2a:8a:62:17:3e:d4:a7:cc:32: 01:02:a5:f7:fa:74:84:d7:91:3e:41:28:28:c9:c6:0e:95:0e: 24:1b:5b:01:9a:58:45:08:22:5c:35:74:ec:9a:15:7b:42:3c: 11:47:b2:35:df:ed:93:5d:40:07:4d:86:27:a1:6d:49:3e:9c: 66:ef:e7:48:7e:f4:b3:0b:73:6f:cb:22:97:0f:81:7a:69:35: 16:97:c2:fd:81:d4:c5:3d:32:78:42:3c:75:41:21:58:1b:1a: d2:13:03:1a:87:e3:9c:d2:1d:f5:1c:ee:ed:78:b7:ea:7a:ef: 31:51:ce:9a:2e:a4:ba:c2:53:d0:b4:e2:df:bd:a8:e7:98:7e: a0:af:a2:40:0e:e2:18:a8:52:03:74:91:6d:0d:16:b8:41:9e: 7d:27:44:b8:16:2a:38:f1:62:9f:20:ad:7e:1d:3a:01:58:48: b4:fe:6c:e2:28:55:7f:07:c2:71:51:db:2c:04:95:01:a5:70: 0b:5e:8b:06:7d:3d:06:0a:9c:a3:2b:1f:75:19:e3:48:c4:ab: 9b:0a:d5:5f:6f:75:de:15:3e:8b:74:1f:dc:b8:09:82:f7:b1: a6:f1:fa:de:83:04:ba:a0:93:ef:d2:ad:87:f0:ce:04:0a:4d: 8a:6d:c4:25 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQS3EPZHlH8E3s8I2XVZ31Ggbn5UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwOTEwMDEyMDM0WhcNMjYxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMzI4MjhjNmMwMTlmMzE2MmE3OGY1NThhZmQ4NDVmN2E4 N2Y5ODI3NzIwMDYwYmI2M2NhOWNmN2RlYWE5NDQxMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbWodjsfSZrniqvvRrZrzOVFfoMQ9MU1HA6HuudmkXRdA5 lxiT1clOVnrrYuOTUroDybN2X0dScmQ20jRF9B+kgQAb8quADlBWTUdeCpBQKDlC V8BJeTL2cSilOIAp3YALuU6mzarIe0M89FDanJDCXc+YN6WaI2hhvZWUpS7f2FlY 9sbSdc8sYSXKRVa9eZ8zX0eq9jHLs+M+8ritzmMAO0IuGXkCNfOObIvo+95LD6P3 Lp4bzZzaYXoRvrStSuPeVGHm+IkEiOl4s3wuA7UOZ2J4M7nOPtZ1QZmIxtYeBtl8 CwhAIpDCGPnuEbXBU+hF0QQGqhVUsAmHWa5XqVgzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU6C7zsKtY+GjHBWZWFprglTUoVigwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzkxNDI0OTFkLWIzMjUtNGVmNS05ODBjLWU4YWUyNGJhZDI5NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAJAAESowDQYJKoZIhvcNAQELBQADggEBAJCgbXsYbGk+JyqKYhc+1KfM MgECpff6dITXkT5BKCjJxg6VDiQbWwGaWEUIIlw1dOyaFXtCPBFHsjXf7ZNdQAdN hiehbUk+nGbv50h+9LMLc2/LIpcPgXppNRaXwv2B1MU9MnhCPHVBIVgbGtITAxqH 45zSHfUc7u14t+p67zFRzpoupLrCU9C04t+9qOeYfqCvokAO4hioUgN0kW0NFrhB nn0nRLgWKjjxYp8grX4dOgFYSLT+bOIoVX8HwnFR2ywElQGlcAteiwZ9PQYKnKMr H3UZ40jEq5sK1V9vdd4VPot0H9y4CYL3sabx+t6DBLqgk+/SrYfwzgQKTYptxCU= -----END CERTIFICATE-----Generated at Mon Sep 21 17:33:53 2026 by rpki-client