$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2d3f4a50-7a94-48b8-8883-062ffd9253b0.roa File: 2d3f4a50-7a94-48b8-8883-062ffd9253b0.roa (raw, json) Hash identifier: /kR8MgSv3FeUWWpIPBujBqxEKSdy63q2LGqy5/c1glE= Subject key identifier: B0:48:5E:86:AF:5B:A8:39:3B:FC:ED:05:E1:F0:CC:6C:19:D0:90:E1 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 42A3BB64A8B94E4027234D04C0994B1696A29356 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2d3f4a50-7a94-48b8-8883-062ffd9253b0.roa Signing time: Mon 22 Jun 2026 01:30:10 +0000 ROA not before: Mon 22 Jun 2026 01:30:10 +0000 ROA not after: Sun 20 Sep 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:122d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:a3:bb:64:a8:b9:4e:40:27:23:4d:04:c0:99:4b:16:96:a2:93:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Jun 22 01:30:10 2026 GMT Not After : Sep 20 23:59:59 2026 GMT Subject: serialNumber=d0f6aca1168cd19ddc16886424df9d8d46c731d0125d70aa66e746d2483e8a9f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2f:b8:62:b0:67:33:2b:09:3c:2a:70:79:c0: 8d:0c:04:04:d9:c9:96:7f:c9:d0:9c:73:a7:e9:b8: fe:2b:86:c9:c1:7b:7f:ba:06:5a:e2:94:c5:cc:0b: 72:b2:c6:3c:d7:34:d7:4d:df:71:01:c5:39:69:4e: 50:29:d1:b9:7b:90:05:97:fd:e9:33:ed:18:ce:f6: ee:d8:0c:42:ac:ec:a1:2a:0f:68:3f:da:00:ca:b0: b5:db:19:08:f6:42:96:ec:58:8d:6e:cc:f2:d8:96: 94:79:09:2c:d0:63:a4:a8:fb:87:11:78:b0:a3:e4: 14:63:65:66:27:e1:32:0f:27:69:df:06:c6:d3:4e: fa:b1:7c:50:21:60:c9:00:9e:9a:01:27:a1:8e:33: 4d:2a:f0:c4:2b:3a:f2:77:91:25:4b:c6:b4:5a:d1: a6:a7:73:52:b0:94:79:04:bc:f7:cf:91:b2:09:a5: bd:3b:d6:2f:f9:89:54:39:6b:73:f0:bf:8b:01:a2: 9c:e5:a1:0b:eb:1f:69:05:8f:a1:07:9f:75:0e:e1: 95:cd:c9:63:79:66:f0:ac:0b:b6:c3:a4:95:9b:50: 65:36:2b:82:c1:81:c9:56:99:bb:7a:a8:5e:9f:1d: 9f:23:ce:d5:86:28:0b:5b:94:7f:0a:ad:a0:4a:42: 95:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:48:5E:86:AF:5B:A8:39:3B:FC:ED:05:E1:F0:CC:6C:19:D0:90:E1 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2d3f4a50-7a94-48b8-8883-062ffd9253b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:122d::/48 Signature Algorithm: sha256WithRSAEncryption 84:64:79:75:c9:12:b9:7d:92:5c:0f:72:cc:0b:08:05:0a:4f: 4b:fc:5c:9a:0c:dc:d4:c7:da:f9:91:75:38:d7:06:05:cc:ac: e7:08:dc:20:90:fc:73:2c:d0:78:68:c1:d9:d8:47:e4:1c:12: 08:0b:64:52:47:da:bc:88:d9:a6:db:f8:1b:a6:bf:c7:82:97: 9d:13:1e:d6:55:c6:aa:93:1a:a2:5c:24:54:b7:e9:d2:48:01: 5e:8f:64:45:f6:d9:9d:35:21:82:17:99:ae:6b:98:40:66:9a: 5f:b7:46:87:4c:53:bc:4c:a2:3b:82:96:27:d5:18:63:7e:a7: ae:71:c6:26:86:8f:d3:cc:c9:b0:32:87:2e:90:93:e8:36:e9: 46:a2:32:e9:70:d1:ee:e8:c3:de:4d:8f:3f:47:e9:ec:19:e0: 82:5e:df:09:9b:50:20:39:9a:9c:89:b9:f8:bf:91:64:d7:f0: aa:e0:96:51:df:8c:d1:d6:cf:dd:c4:e3:a6:ac:46:52:43:52: a9:f1:9c:a3:30:53:22:a8:e6:c2:ec:64:f1:3e:61:9c:0b:91: f9:ac:d0:74:bc:52:91:2d:28:14:38:ca:4e:54:50:0a:42:69: 3d:ab:7c:97:2e:59:32:71:9f:f2:f6:45:c0:1c:23:e3:f7:d1: c4:cb:ac:dc -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQqO7ZKi5TkAnI00EwJlLFpaik1YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNjIyMDEzMDEwWhcNMjYwOTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMGY2YWNhMTE2OGNkMTlkZGMxNjg4NjQyNGRmOWQ4ZDQ2 YzczMWQwMTI1ZDcwYWE2NmU3NDZkMjQ4M2U4YTlmMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQL7hisGczKwk8KnB5wI0MBATZyZZ/ydCcc6fpuP4rhsnB e3+6BlrilMXMC3KyxjzXNNdN33EBxTlpTlAp0bl7kAWX/ekz7RjO9u7YDEKs7KEq D2g/2gDKsLXbGQj2QpbsWI1uzPLYlpR5CSzQY6So+4cReLCj5BRjZWYn4TIPJ2nf BsbTTvqxfFAhYMkAnpoBJ6GOM00q8MQrOvJ3kSVLxrRa0aanc1KwlHkEvPfPkbIJ pb071i/5iVQ5a3Pwv4sBopzloQvrH2kFj6EHn3UO4ZXNyWN5ZvCsC7bDpJWbUGU2 K4LBgclWmbt6qF6fHZ8jztWGKAtblH8KraBKQpWvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUsEhehq9bqDk7/O0F4fDMbBnQkOEwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzJkM2Y0YTUwLTdhOTQtNDhiOC04ODgzLTA2MmZmZDkyNTNiMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAJAAEi0wDQYJKoZIhvcNAQELBQADggEBAIRkeXXJErl9klwPcswLCAUK T0v8XJoM3NTH2vmRdTjXBgXMrOcI3CCQ/HMs0HhowdnYR+QcEggLZFJH2ryI2abb +Bumv8eCl50THtZVxqqTGqJcJFS36dJIAV6PZEX22Z01IYIXma5rmEBmml+3RodM U7xMojuClifVGGN+p65xxiaGj9PMybAyhy6Qk+g26UaiMulw0e7ow95Njz9H6ewZ 4IJe3wmbUCA5mpyJufi/kWTX8KrgllHfjNHWz93E46asRlJDUqnxnKMwUyKo5sLs ZPE+YZwLkfms0HS8UpEtKBQ4yk5UUApCaT2rfJcuWTJxn/L2RcAcI+P30cTLrNw= -----END CERTIFICATE-----Generated at Sat Jul 4 09:06:35 2026 by rpki-client