$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/975af1d2-e640-4c4d-9b9f-7f339708f40e.roa File: 975af1d2-e640-4c4d-9b9f-7f339708f40e.roa (raw, json) Hash identifier: XUmv6kI6e//osN1ItIXcMPi84E28eAWsqJXzU2ZQZLU= Subject key identifier: B4:12:76:BE:97:A0:66:B2:51:BD:A5:F2:75:E8:11:41:05:C5:CA:04 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 670A61F2E2DA8C83705DAC5BB99C72A359C59614 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/975af1d2-e640-4c4d-9b9f-7f339708f40e.roa Signing time: Thu 10 Sep 2026 01:51:02 +0000 ROA not before: Thu 10 Sep 2026 01:51:02 +0000 ROA not after: Wed 09 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1e37::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:0a:61:f2:e2:da:8c:83:70:5d:ac:5b:b9:9c:72:a3:59:c5:96:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Sep 10 01:51:02 2026 GMT Not After : Dec 9 23:59:59 2026 GMT Subject: serialNumber=ab2f88c61d074c26c084f8a27dc6cbcc8cc8386272089968520e09cc0b1b1de1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:d4:ae:be:bf:af:40:10:33:a7:f5:18:d9:ac: c8:2d:0b:af:a2:c9:04:22:20:63:63:74:cd:9f:14: 93:82:ba:8a:e5:d1:63:f8:f5:a5:e6:1b:dc:59:5b: 9d:2e:1b:89:3f:82:bc:3b:0c:12:6d:7c:db:0f:83: 9d:59:3f:73:a9:a8:49:df:00:1f:94:e5:ec:ea:7d: 01:30:e9:06:23:bd:fd:4a:a9:0d:9c:40:ce:40:85: 29:d4:e9:26:35:05:9f:47:f6:ff:e5:25:d8:09:83: 2a:5e:50:0f:55:94:bf:62:44:9e:d3:a0:68:26:f9: 50:50:2b:f7:48:af:8d:49:67:8f:af:66:3c:4d:63: bd:1b:68:b4:85:35:83:19:29:73:b0:53:e7:b6:56: a1:bd:34:4a:6e:56:5d:b1:d7:36:47:8c:c1:7a:0b: 2b:78:53:9c:b7:28:a0:46:8c:db:12:47:83:59:e3: 83:25:7c:6b:c1:96:88:b0:14:a2:d2:c2:16:f2:a1: a2:15:c6:bd:57:2b:d1:19:1e:d8:b1:bd:1e:fc:f2: b5:1b:e1:54:43:89:33:d0:ed:a6:12:eb:69:9c:30: 64:47:d8:21:8b:ba:28:54:ac:06:53:57:35:81:53: de:09:25:d1:99:ab:5e:1c:55:1e:7a:2e:6b:e6:46: 4d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:12:76:BE:97:A0:66:B2:51:BD:A5:F2:75:E8:11:41:05:C5:CA:04 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/975af1d2-e640-4c4d-9b9f-7f339708f40e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1e37::/48 Signature Algorithm: sha256WithRSAEncryption a2:a2:f4:9f:10:59:e5:8f:02:d2:fb:0a:b9:24:4b:45:c4:aa: 49:4f:15:73:3b:d9:96:5e:52:1c:1b:9b:43:3e:4a:d5:e2:e1: b6:89:fd:fc:e5:a8:19:e3:8a:a5:57:3d:ca:14:9b:28:78:6d: fe:66:dd:1e:46:cf:6c:8d:9a:53:a0:25:26:8e:43:d1:e4:8b: 76:9c:22:9d:f8:cf:95:12:9a:05:1b:a8:53:2b:d4:29:78:24: 56:9b:58:c8:c4:72:48:ad:60:f2:25:47:dd:df:f0:ac:49:12: 38:db:23:d6:6c:2e:e8:1c:79:87:31:72:1f:7c:4a:ce:a2:fc: 99:83:1e:b8:39:86:e2:60:62:71:39:57:1a:a0:60:4c:48:c6: bd:03:29:46:d4:c2:e7:4b:96:b9:d5:f1:61:d5:d2:33:89:66: 6a:60:9c:9e:49:7a:25:44:93:ad:dd:8c:4f:03:9d:05:f1:72: 70:26:ad:37:34:ed:50:3c:68:42:6c:b5:d4:15:2c:0a:7c:9d: 65:c1:9f:1f:2f:a9:d0:d5:76:cd:72:f6:c4:c3:47:64:fc:d5: 2e:18:e4:b7:88:29:29:f8:3d:75:0b:07:b5:38:49:00:42:68: cd:20:4e:13:ca:52:16:a9:4c:65:6f:5e:ed:ba:65:4a:e3:3d: 00:32:a6:a7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZwph8uLajINwXaxbuZxyo1nFlhQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwOTEwMDE1MTAyWhcNMjYxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYjJmODhjNjFkMDc0YzI2YzA4NGY4YTI3ZGM2Y2JjYzhj YzgzODYyNzIwODk5Njg1MjBlMDljYzBiMWIxZGUxMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD01K6+v69AEDOn9RjZrMgtC6+iyQQiIGNjdM2fFJOCuorl 0WP49aXmG9xZW50uG4k/grw7DBJtfNsPg51ZP3OpqEnfAB+U5ezqfQEw6QYjvf1K qQ2cQM5AhSnU6SY1BZ9H9v/lJdgJgypeUA9VlL9iRJ7ToGgm+VBQK/dIr41JZ4+v ZjxNY70baLSFNYMZKXOwU+e2VqG9NEpuVl2x1zZHjMF6Cyt4U5y3KKBGjNsSR4NZ 44MlfGvBloiwFKLSwhbyoaIVxr1XK9EZHtixvR788rUb4VRDiTPQ7aYS62mcMGRH 2CGLuihUrAZTVzWBU94JJdGZq14cVR56LmvmRk2BAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUtBJ2vpegZrJRvaXydegRQQXFygQwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1Lzk3NWFmMWQyLWU2NDAtNGM0ZC05YjlmLTdmMzM5NzA4ZjQwZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAJAAHjcwDQYJKoZIhvcNAQELBQADggEBAKKi9J8QWeWPAtL7CrkkS0XE qklPFXM72ZZeUhwbm0M+StXi4baJ/fzlqBnjiqVXPcoUmyh4bf5m3R5Gz2yNmlOg JSaOQ9Hki3acIp34z5USmgUbqFMr1Cl4JFabWMjEckitYPIlR93f8KxJEjjbI9Zs LugceYcxch98Ss6i/JmDHrg5huJgYnE5VxqgYExIxr0DKUbUwudLlrnV8WHV0jOJ ZmpgnJ5JeiVEk63djE8DnQXxcnAmrTc07VA8aEJstdQVLAp8nWXBnx8vqdDVds1y 9sTDR2T81S4Y5LeIKSn4PXULB7U4SQBCaM0gThPKUhapTGVvXu26ZUrjPQAypqc= -----END CERTIFICATE-----Generated at Mon Sep 21 10:19:27 2026 by rpki-client