$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/af2a801b-2232-465c-8e17-4de2e5c9669e.roa File: af2a801b-2232-465c-8e17-4de2e5c9669e.roa (raw, json) Hash identifier: Iaad5cfJ1DUkfA7PlPwBdZe8e8GPx1KiSc8t+fUULO4= Subject key identifier: 04:A4:31:C2:EF:05:F7:59:52:D5:0D:5B:52:EE:D9:D0:EC:46:C5:39 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 3362DBBB1A1DE00C22EA6196095CA8E6E2883A74 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/af2a801b-2232-465c-8e17-4de2e5c9669e.roa Signing time: Mon 22 Jun 2026 01:51:42 +0000 ROA not before: Mon 22 Jun 2026 01:51:42 +0000 ROA not after: Sun 20 Sep 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:112e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:62:db:bb:1a:1d:e0:0c:22:ea:61:96:09:5c:a8:e6:e2:88:3a:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Jun 22 01:51:42 2026 GMT Not After : Sep 20 23:59:59 2026 GMT Subject: serialNumber=d0907507d694e00c3be5143e7e13424c199c885e8e50d4d6f7f8acd2ee64079d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:36:16:40:9c:e6:ee:93:7d:06:30:47:8b:c1: 0f:20:0b:f2:48:ef:be:c4:1a:5e:2d:4e:cf:0e:ba: 26:f9:f5:9d:24:89:1b:04:ab:c9:9b:aa:fa:3a:3a: fd:21:bc:76:7c:95:69:68:c6:37:c9:07:13:b3:ff: 22:b7:c7:d8:24:41:af:e3:ed:f7:bc:97:0b:54:a9: 75:2e:9a:9f:e4:99:30:e6:83:8f:9b:38:b2:de:7a: d7:59:7d:cc:15:f0:78:bf:ce:db:c9:d2:2a:8d:62: 9b:0a:ec:69:eb:d2:3e:c6:2b:41:72:29:ad:f5:0a: c6:85:47:a5:d1:8c:12:51:ea:16:4b:27:9b:fe:35: 7b:1c:e4:ae:aa:86:89:a4:67:27:8c:71:13:1d:2f: 22:fb:be:a5:d3:b6:40:5b:a4:82:25:24:fa:6a:c9: ea:19:47:bd:6a:6d:52:f5:4e:94:aa:fe:ee:a7:08: 07:f6:bf:d4:4f:86:b9:47:72:d7:2d:a8:24:10:d0: 52:9c:81:4c:b8:17:1d:e8:73:1e:06:24:5c:f3:4d: c0:6b:cd:9c:c2:7f:b2:09:ff:40:c4:36:26:86:20: 65:92:ac:c3:49:76:e6:6d:b8:d5:38:69:58:c1:5a: 6d:ce:0c:8b:9a:32:38:70:0a:68:72:9d:e7:84:dc: 9d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A4:31:C2:EF:05:F7:59:52:D5:0D:5B:52:EE:D9:D0:EC:46:C5:39 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/af2a801b-2232-465c-8e17-4de2e5c9669e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:112e::/48 Signature Algorithm: sha256WithRSAEncryption 34:6a:64:2f:a2:11:60:07:24:54:48:d5:64:0e:64:25:74:a7: 8b:d1:0e:9a:f7:cd:48:18:55:4c:6c:da:e4:e5:fc:62:70:84: ad:27:8f:6f:0d:36:ad:33:07:35:ec:da:a0:5f:1d:6c:cd:43: a3:f2:c3:4c:01:64:8d:e6:b5:d7:9d:f8:1e:61:6e:40:10:fc: 36:6d:ce:d0:f7:1a:b4:46:31:4c:1b:63:ba:7a:52:bf:51:66: 6e:6b:1e:d7:81:3f:85:d9:5e:39:2e:e1:d4:54:17:54:a0:c2: 3b:22:4d:4e:9e:aa:ea:63:4e:b2:92:e2:0d:37:13:bf:54:b8: b0:56:ec:b9:95:1a:77:4b:39:81:c6:e0:ca:58:15:e2:d4:b0: d6:7e:bc:77:df:22:e5:af:15:b1:be:85:6c:a2:a0:cb:f4:0b: e4:8a:4c:5d:34:cd:64:b2:3d:10:6c:de:e0:c2:c5:d0:90:25: 43:a7:2d:fe:79:60:a0:8b:85:11:99:90:cc:84:cf:fa:13:3a: bb:a4:d5:5f:f2:b5:56:d9:0c:1c:70:ca:d7:aa:55:c6:f5:ce: 3a:10:61:88:13:63:47:b4:69:93:38:c7:ec:e9:59:b7:3a:78: 70:58:c9:53:3f:3b:1d:37:cb:42:78:ad:25:f1:39:98:31:5c: ef:e2:63:d2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUM2Lbuxod4Awi6mGWCVyo5uKIOnQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNjIyMDE1MTQyWhcNMjYwOTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMDkwNzUwN2Q2OTRlMDBjM2JlNTE0M2U3ZTEzNDI0YzE5 OWM4ODVlOGU1MGQ0ZDZmN2Y4YWNkMmVlNjQwNzlkMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDkNhZAnObuk30GMEeLwQ8gC/JI777EGl4tTs8Ouib59Z0k iRsEq8mbqvo6Ov0hvHZ8lWloxjfJBxOz/yK3x9gkQa/j7fe8lwtUqXUump/kmTDm g4+bOLLeetdZfcwV8Hi/ztvJ0iqNYpsK7Gnr0j7GK0FyKa31CsaFR6XRjBJR6hZL J5v+NXsc5K6qhomkZyeMcRMdLyL7vqXTtkBbpIIlJPpqyeoZR71qbVL1TpSq/u6n CAf2v9RPhrlHctctqCQQ0FKcgUy4Fx3ocx4GJFzzTcBrzZzCf7IJ/0DENiaGIGWS rMNJduZtuNU4aVjBWm3ODIuaMjhwCmhyneeE3J01AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUBKQxwu8F91lS1Q1bUu7Z0OxGxTkwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2FmMmE4MDFiLTIyMzItNDY1Yy04ZTE3LTRkZTJlNWM5NjY5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAJAAES4wDQYJKoZIhvcNAQELBQADggEBADRqZC+iEWAHJFRI1WQOZCV0 p4vRDpr3zUgYVUxs2uTl/GJwhK0nj28NNq0zBzXs2qBfHWzNQ6Pyw0wBZI3mtded +B5hbkAQ/DZtztD3GrRGMUwbY7p6Ur9RZm5rHteBP4XZXjku4dRUF1SgwjsiTU6e qupjTrKS4g03E79UuLBW7LmVGndLOYHG4MpYFeLUsNZ+vHffIuWvFbG+hWyioMv0 C+SKTF00zWSyPRBs3uDCxdCQJUOnLf55YKCLhRGZkMyEz/oTOruk1V/ytVbZDBxw yteqVcb1zjoQYYgTY0e0aZM4x+zpWbc6eHBYyVM/Ox03y0J4rSXxOZgxXO/iY9I= -----END CERTIFICATE-----Generated at Sat Jul 4 08:02:27 2026 by rpki-client