$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0fba9926-3deb-4472-ada4-07ea81aa3305.roa File: 0fba9926-3deb-4472-ada4-07ea81aa3305.roa (raw, json) Hash identifier: stbQ8051Rsdnr+rZG+q+jkOtHGLA1fTbd4Q1X0hNMuk= Subject key identifier: 35:82:AA:0E:FB:3B:5F:0E:00:0A:99:A9:CF:68:71:10:94:75:B2:55 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 370658290C0896151C6D6F31253C8455D6C819BA Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0fba9926-3deb-4472-ada4-07ea81aa3305.roa Signing time: Mon 22 Jun 2026 00:30:48 +0000 ROA not before: Mon 22 Jun 2026 00:30:48 +0000 ROA not after: Sun 20 Sep 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1e2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:06:58:29:0c:08:96:15:1c:6d:6f:31:25:3c:84:55:d6:c8:19:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Jun 22 00:30:48 2026 GMT Not After : Sep 20 23:59:59 2026 GMT Subject: serialNumber=31f9aab47589c09881c536d414068dcce706077344a53abfea6d4b2cf611157b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:23:ae:c8:2f:a2:e1:18:7b:5e:8c:61:78:07: a4:37:aa:63:97:1f:01:63:5a:87:cb:b5:20:d7:0f: 1c:f3:65:a2:9b:dd:68:aa:f3:0b:03:cb:9a:c1:ad: ca:6a:39:9d:30:83:22:08:35:45:2d:fe:0d:69:39: e5:39:4d:f4:1b:90:20:99:4b:de:46:5d:38:53:36: b7:00:7a:e3:94:8b:51:9d:9a:17:17:88:c5:fc:a0: 4d:77:92:09:b2:59:6c:06:bd:b4:91:61:d0:9d:07: 70:94:a4:aa:e9:7f:c0:3f:c1:bd:99:13:70:36:90: 72:d8:04:90:c6:c0:97:df:65:55:03:81:d9:de:0d: e8:b9:4d:cc:c8:99:9c:86:61:13:f8:05:be:52:a0: fa:a0:44:02:8e:55:e7:7a:a4:5f:6c:5d:1b:4f:27: 76:7f:a3:23:d2:c6:cd:bc:3c:b8:e8:72:de:4a:6f: 5c:79:df:1d:5b:f3:cb:4e:12:59:23:e3:88:d9:91: 05:31:fe:df:0f:dd:5c:be:35:ea:7a:b7:34:37:3a: ce:58:9a:c4:6b:4c:7b:10:b5:60:75:96:16:ae:56: 7a:eb:5a:e3:5b:55:c0:29:c6:3c:11:63:53:8f:27: c7:98:9c:80:f1:24:f2:85:b7:5e:a2:4f:78:08:8a: 9a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:82:AA:0E:FB:3B:5F:0E:00:0A:99:A9:CF:68:71:10:94:75:B2:55 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0fba9926-3deb-4472-ada4-07ea81aa3305.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1e2b::/48 Signature Algorithm: sha256WithRSAEncryption 33:14:2f:0b:3f:aa:49:55:7c:ed:af:ac:cf:4c:38:ec:21:57: e8:77:65:da:aa:bc:dd:71:b6:d4:7b:c0:a0:ff:08:fe:08:f7: 67:db:76:e2:32:7e:5b:5e:e6:61:2e:50:eb:2f:e9:31:f6:92: 1b:e0:a4:23:f5:35:13:63:0f:2b:21:13:ce:f3:fc:17:19:e3: 9a:17:33:f7:ca:95:4d:6c:23:bc:5c:dd:b6:d6:ea:28:c6:d9: 21:68:40:8a:c0:14:d6:13:62:78:db:93:ab:d2:5c:82:83:d3: a0:62:3d:8b:35:6a:97:c4:d9:53:10:a8:ee:81:69:42:83:aa: 47:42:77:53:7e:f6:ce:a1:e1:bc:78:91:2c:15:31:01:db:36: 2d:46:cf:26:e9:10:4a:40:6d:ce:70:12:81:1a:fe:62:a3:80: 50:eb:a9:63:81:d8:9a:e5:e6:e2:c6:d8:ab:10:2a:d6:6d:b4: 90:a4:c3:e1:50:16:c9:a2:ee:34:51:23:a8:87:1d:5d:b5:b9: 48:77:36:d3:a5:72:d6:db:08:68:6f:89:15:1b:93:73:d4:d8: 73:da:e6:c0:35:12:9f:a8:43:c8:75:98:7e:43:09:71:ab:4f: 37:2b:e8:48:eb:d4:a2:36:d2:d8:b3:cb:53:03:f8:95:af:5b: 30:1f:03:d5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUNwZYKQwIlhUcbW8xJTyEVdbIGbowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNjIyMDAzMDQ4WhcNMjYwOTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMWY5YWFiNDc1ODljMDk4ODFjNTM2ZDQxNDA2OGRjY2U3 MDYwNzczNDRhNTNhYmZlYTZkNGIyY2Y2MTExNTdiMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQI67IL6LhGHtejGF4B6Q3qmOXHwFjWofLtSDXDxzzZaKb 3Wiq8wsDy5rBrcpqOZ0wgyIINUUt/g1pOeU5TfQbkCCZS95GXThTNrcAeuOUi1Gd mhcXiMX8oE13kgmyWWwGvbSRYdCdB3CUpKrpf8A/wb2ZE3A2kHLYBJDGwJffZVUD gdneDei5TczImZyGYRP4Bb5SoPqgRAKOVed6pF9sXRtPJ3Z/oyPSxs28PLjoct5K b1x53x1b88tOElkj44jZkQUx/t8P3Vy+Nep6tzQ3Os5YmsRrTHsQtWB1lhauVnrr WuNbVcApxjwRY1OPJ8eYnIDxJPKFt16iT3gIipqvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUNYKqDvs7Xw4ACpmpz2hxEJR1slUwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzBmYmE5OTI2LTNkZWItNDQ3Mi1hZGE0LTA3ZWE4MWFhMzMwNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAJAAHiswDQYJKoZIhvcNAQELBQADggEBADMULws/qklVfO2vrM9MOOwh V+h3ZdqqvN1xttR7wKD/CP4I92fbduIyflte5mEuUOsv6TH2khvgpCP1NRNjDysh E87z/BcZ45oXM/fKlU1sI7xc3bbW6ijG2SFoQIrAFNYTYnjbk6vSXIKD06BiPYs1 apfE2VMQqO6BaUKDqkdCd1N+9s6h4bx4kSwVMQHbNi1GzybpEEpAbc5wEoEa/mKj gFDrqWOB2Jrl5uLG2KsQKtZttJCkw+FQFsmi7jRRI6iHHV21uUh3NtOlctbbCGhv iRUbk3PU2HPa5sA1Ep+oQ8h1mH5DCXGrTzcr6Ejr1KI20tizy1MD+JWvWzAfA9U= -----END CERTIFICATE-----Generated at Sat Jul 4 09:09:31 2026 by rpki-client