$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a71067a1-e87c-403e-a130-8b9e8c52960d.roa File: a71067a1-e87c-403e-a130-8b9e8c52960d.roa (raw, json) Hash identifier: prGuRy7FjqGaRFFK0nF9LIXvcHbOjKd8Vjk7wJJFkRc= Subject key identifier: 04:EA:B7:00:70:E2:09:57:3D:5A:AD:90:2B:94:F7:F0:33:CB:F4:74 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 59F18FEA8CBC3AA0FAA069E5FA6268227778F2C7 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a71067a1-e87c-403e-a130-8b9e8c52960d.roa Signing time: Thu 10 Sep 2026 00:51:36 +0000 ROA not before: Thu 10 Sep 2026 00:51:36 +0000 ROA not after: Wed 09 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1066::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:f1:8f:ea:8c:bc:3a:a0:fa:a0:69:e5:fa:62:68:22:77:78:f2:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Sep 10 00:51:36 2026 GMT Not After : Dec 9 23:59:59 2026 GMT Subject: serialNumber=4f8bc832dca38fb6f58b20f70b8c184b85dc49cbaa41a761f43e702a4f58a1d6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:66:e7:cc:b4:b2:70:02:68:16:c4:a8:89:27: 03:52:b9:32:35:b5:f8:5f:e1:a6:e2:6e:f5:e1:25: e3:f1:f2:c7:be:76:85:42:26:21:e6:45:0b:9d:5b: 40:94:c6:72:dc:5c:f7:15:1d:d3:7f:c8:82:e0:a2: 17:88:9d:51:1b:ad:42:83:d4:68:6a:e7:15:b1:18: f0:c0:4a:5c:8f:9e:ce:f4:1e:8a:3e:14:10:22:43: 4c:b1:c6:43:e6:d2:66:f9:29:61:10:1f:8d:0e:fc: 1b:44:14:75:e8:bc:2f:5c:ad:7d:31:89:41:40:e5: e2:42:ab:62:3b:5e:27:1a:5f:cd:8a:e9:70:83:06: 15:2a:8e:14:7e:e5:ae:da:de:9e:13:3b:2e:b3:ac: 8f:2d:28:a2:2b:4b:49:96:fc:da:39:79:63:d6:f4: 85:1a:ea:8a:b1:0a:db:20:24:ff:8a:0b:30:9b:e4: d5:dd:7a:3b:f3:b5:05:2a:cc:8e:84:9f:a7:26:72: 01:33:ba:c0:88:ec:26:20:32:32:e4:1f:37:68:d7: 1d:38:6c:16:9c:84:08:a5:77:d5:13:1a:46:88:98: b3:0c:69:d6:aa:4d:97:5c:6f:50:f9:07:06:c1:61: bb:a9:19:41:0a:42:2e:9e:ca:fc:0e:ae:c8:92:35: 20:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:EA:B7:00:70:E2:09:57:3D:5A:AD:90:2B:94:F7:F0:33:CB:F4:74 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a71067a1-e87c-403e-a130-8b9e8c52960d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1066::/48 Signature Algorithm: sha256WithRSAEncryption 5d:8b:b3:62:31:2a:f8:25:97:5c:2d:84:ee:0f:e8:d5:e9:b2: 16:b6:64:a2:a0:d4:09:aa:0e:37:31:96:ea:96:92:bb:8a:aa: c6:bf:84:f5:de:f7:0b:9c:8b:89:c1:81:10:cf:2b:3d:d4:fb: cd:35:81:80:01:3d:15:a2:3a:ea:ed:7d:d3:e9:6f:90:9e:4a: a0:15:68:20:ff:df:b4:54:3a:63:02:59:5d:37:17:b0:e5:20: 66:d8:04:85:2b:a8:ca:84:46:1b:a4:3b:4b:2f:9e:d9:c2:df: 45:11:64:7a:a6:6b:34:06:52:e7:95:8d:d2:72:43:86:8d:98: 5a:b8:ed:c1:bf:40:58:16:b1:7e:cf:7e:da:6d:e8:90:3a:db: 21:19:ce:5a:d5:7f:f2:f4:29:b0:f0:1d:72:62:52:f0:76:e5: 96:60:fb:b4:30:dd:b0:af:0a:38:93:5a:eb:18:3f:41:d1:48: 24:d5:94:ca:07:0b:42:d6:f2:04:2a:86:e1:bf:24:7f:d8:4a: 22:09:6c:0c:a5:4d:c3:91:cd:bf:e8:20:39:5f:a1:db:b5:6a: bc:03:9a:52:cb:13:83:66:34:40:4b:6a:f3:24:ed:64:43:cd: ab:20:56:32:4e:93:67:d1:23:16:ce:26:4a:ea:37:c7:f4:72: e4:f9:57:1a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWfGP6oy8OqD6oGnl+mJoInd48scwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwOTEwMDA1MTM2WhcNMjYxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZjhiYzgzMmRjYTM4ZmI2ZjU4YjIwZjcwYjhjMTg0Yjg1 ZGM0OWNiYWE0MWE3NjFmNDNlNzAyYTRmNThhMWQ2MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHZufMtLJwAmgWxKiJJwNSuTI1tfhf4abibvXhJePx8se+ doVCJiHmRQudW0CUxnLcXPcVHdN/yILgoheInVEbrUKD1Ghq5xWxGPDASlyPns70 Hoo+FBAiQ0yxxkPm0mb5KWEQH40O/BtEFHXovC9crX0xiUFA5eJCq2I7XicaX82K 6XCDBhUqjhR+5a7a3p4TOy6zrI8tKKIrS0mW/No5eWPW9IUa6oqxCtsgJP+KCzCb 5NXdejvztQUqzI6En6cmcgEzusCI7CYgMjLkHzdo1x04bBachAild9UTGkaImLMM adaqTZdcb1D5BwbBYbupGUEKQi6eyvwOrsiSNSAVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUBOq3AHDiCVc9Wq2QK5T38DPL9HQwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2E3MTA2N2ExLWU4N2MtNDAzZS1hMTMwLThiOWU4YzUyOTYwZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAJAAEGYwDQYJKoZIhvcNAQELBQADggEBAF2Ls2IxKvgll1wthO4P6NXp sha2ZKKg1AmqDjcxluqWkruKqsa/hPXe9wuci4nBgRDPKz3U+801gYABPRWiOurt fdPpb5CeSqAVaCD/37RUOmMCWV03F7DlIGbYBIUrqMqERhukO0svntnC30URZHqm azQGUueVjdJyQ4aNmFq47cG/QFgWsX7Pftpt6JA62yEZzlrVf/L0KbDwHXJiUvB2 5ZZg+7Qw3bCvCjiTWusYP0HRSCTVlMoHC0LW8gQqhuG/JH/YSiIJbAylTcORzb/o IDlfodu1arwDmlLLE4NmNEBLavMk7WRDzasgVjJOk2fRIxbOJkrqN8f0cuT5Vxo= -----END CERTIFICATE-----Generated at Mon Sep 21 05:32:40 2026 by rpki-client