$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5a99d502-895d-4928-a31a-1c228e1f7e0f.roa File: 5a99d502-895d-4928-a31a-1c228e1f7e0f.roa (raw, json) Hash identifier: CMKAun39zsOAgnpwtJwprfJT2Ts8fykWON1EYrPOKZ4= Subject key identifier: 93:48:0A:C9:CF:43:88:05:3E:DC:3F:0B:82:13:F6:ED:26:46:4C:77 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 193B384CA2C2B8F4C47BE14142F62FD43268AA36 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5a99d502-895d-4928-a31a-1c228e1f7e0f.roa Signing time: Thu 01 Oct 2026 00:00:25 +0000 ROA not before: Thu 01 Oct 2026 00:00:25 +0000 ROA not after: Wed 30 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1240::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:3b:38:4c:a2:c2:b8:f4:c4:7b:e1:41:42:f6:2f:d4:32:68:aa:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 1 00:00:25 2026 GMT Not After : Dec 30 23:59:59 2026 GMT Subject: serialNumber=b16bc38c85698a6a2ce87e040767ccda882f69a0f64b0d24495aa92bc87cd3e7, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1e:36:76:08:6a:4e:fc:f4:dc:76:c6:5c:5f: 2e:9e:3c:25:4b:48:ea:e4:86:50:fb:91:ae:7d:39: ba:c5:97:ef:c2:69:92:af:a3:2c:5a:4d:02:ce:c1: 28:9f:6e:c6:80:f1:7f:36:78:f0:6e:2e:29:0b:f9: ff:00:a0:39:46:fc:13:97:2a:c1:a8:a4:ba:47:1d: 27:a7:d1:f8:23:46:5e:83:21:ce:18:65:d9:0c:e1: c8:5c:5b:44:24:ee:72:9a:8a:4c:10:4c:47:26:2a: 8a:36:6d:86:93:9c:26:eb:5c:e0:35:bc:ad:dd:c5: 37:cc:5c:a7:f9:9f:ac:f0:92:e8:8e:1e:af:81:d4: 75:02:42:1c:be:2e:c2:19:5f:de:e9:12:96:5d:3a: 5f:05:1e:c9:7a:08:06:9a:33:fb:41:29:16:69:e4: dd:a2:e6:5a:b4:11:2f:ac:f7:88:de:23:3d:f1:50: 06:b4:84:f0:80:bb:29:4c:1e:30:89:03:04:79:9c: 4a:21:c5:0e:68:89:c4:8a:7f:9b:97:28:1e:0c:88: 26:f0:bc:54:ae:ad:eb:05:c7:b9:54:0c:d5:89:3a: 35:9c:c1:3a:10:97:4f:60:ee:3f:c9:85:c9:e1:71: 56:d1:e0:fe:75:6b:c9:cc:04:70:5b:40:b3:87:46: e4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:48:0A:C9:CF:43:88:05:3E:DC:3F:0B:82:13:F6:ED:26:46:4C:77 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5a99d502-895d-4928-a31a-1c228e1f7e0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1240::/48 Signature Algorithm: sha256WithRSAEncryption 93:a3:18:a4:16:74:92:10:85:c3:57:ad:37:0b:84:16:46:d2: cb:eb:4f:94:dc:11:ab:bd:19:36:9f:d5:ec:a1:fe:d8:36:6a: 94:27:b3:e5:c6:59:f5:87:ec:47:68:81:ab:7f:d4:67:ee:97: b2:cf:bf:7b:61:e2:6a:79:f7:24:3b:10:15:43:fe:e8:dd:48: eb:aa:2c:fc:96:f0:01:fe:c2:75:dc:12:02:22:f6:ee:26:90: f6:eb:45:ab:de:9a:4c:ef:03:78:d7:8a:f3:86:63:c2:8b:cf: 99:0e:12:1d:ee:c0:14:40:48:b9:54:d0:70:8e:26:fb:51:49: 90:ec:ce:eb:50:fe:8e:26:08:fc:58:bc:3b:82:cd:7f:89:ea: d3:a1:9c:61:b0:3c:62:c8:40:79:a1:8b:e3:37:c2:ba:b0:13: 12:62:e4:09:91:2e:7e:d7:85:57:a5:2f:83:18:73:40:0e:f1: 65:44:92:1d:c2:f1:34:88:96:8a:98:3d:e9:a4:05:f1:b3:08: 84:b3:90:46:03:a7:36:aa:9b:d2:d4:6f:12:44:46:ca:95:dd: c6:77:61:2b:55:b4:97:92:b0:25:18:7b:d2:ca:a8:45:34:11: fb:27:48:55:b4:9c:d8:09:00:bc:85:a7:68:ef:6d:9f:75:9b: 48:27:6d:08 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUGTs4TKLCuPTEe+FBQvYv1DJoqjYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYxMDAxMDAwMDI1WhcNMjYxMjMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMTZiYzM4Yzg1Njk4YTZhMmNlODdlMDQwNzY3Y2NkYTg4 MmY2OWEwZjY0YjBkMjQ0OTVhYTkyYmM4N2NkM2U3MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAHjZ2CGpO/PTcdsZcXy6ePCVLSOrkhlD7ka59ObrFl+/C aZKvoyxaTQLOwSifbsaA8X82ePBuLikL+f8AoDlG/BOXKsGopLpHHSen0fgjRl6D Ic4YZdkM4chcW0Qk7nKaikwQTEcmKoo2bYaTnCbrXOA1vK3dxTfMXKf5n6zwkuiO Hq+B1HUCQhy+LsIZX97pEpZdOl8FHsl6CAaaM/tBKRZp5N2i5lq0ES+s94jeIz3x UAa0hPCAuylMHjCJAwR5nEohxQ5oicSKf5uXKB4MiCbwvFSuresFx7lUDNWJOjWc wToQl09g7j/JhcnhcVbR4P51a8nMBHBbQLOHRuQpAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUk0gKyc9DiAU+3D8LghP27SZGTHcwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzVhOTlkNTAyLTg5NWQtNDkyOC1hMzFhLTFjMjI4ZTFmN2UwZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAJAAEkAwDQYJKoZIhvcNAQELBQADggEBAJOjGKQWdJIQhcNXrTcLhBZG 0svrT5TcEau9GTaf1eyh/tg2apQns+XGWfWH7Edogat/1Gful7LPv3th4mp59yQ7 EBVD/ujdSOuqLPyW8AH+wnXcEgIi9u4mkPbrRavemkzvA3jXivOGY8KLz5kOEh3u wBRASLlU0HCOJvtRSZDszutQ/o4mCPxYvDuCzX+J6tOhnGGwPGLIQHmhi+M3wrqw ExJi5AmRLn7XhVelL4MYc0AO8WVEkh3C8TSIloqYPemkBfGzCISzkEYDpzaqm9LU bxJERsqV3cZ3YStVtJeSsCUYe9LKqEU0EfsnSFW0nNgJALyFp2jvbZ91m0gnbQg= -----END CERTIFICATE-----Generated at Thu Oct 8 07:28:24 2026 by rpki-client