$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bf3b985d-8b24-45d3-9b5d-70d06011aa76.roa File: bf3b985d-8b24-45d3-9b5d-70d06011aa76.roa (raw, json) Hash identifier: xRwWMKBTzPp/3BnbMtiyIrkNfDihwvN0n+Ub0tH/e2g= Subject key identifier: E9:48:1A:DC:2C:5C:45:1B:98:B8:F9:2A:38:57:21:06:16:83:9D:83 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 5CC30AAD64C42E4639F085BC37C7DC718CF4FB6B Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bf3b985d-8b24-45d3-9b5d-70d06011aa76.roa Signing time: Mon 22 Jun 2026 01:01:28 +0000 ROA not before: Mon 22 Jun 2026 01:01:28 +0000 ROA not after: Sun 20 Sep 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1e5f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:c3:0a:ad:64:c4:2e:46:39:f0:85:bc:37:c7:dc:71:8c:f4:fb:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Jun 22 01:01:28 2026 GMT Not After : Sep 20 23:59:59 2026 GMT Subject: serialNumber=02db67a5373ebbfd1ce4d3b4a66c676995a1da102ef726e902798202ab877824, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d9:fb:6d:59:85:70:aa:5b:32:5c:d1:ab:9f: 18:b9:5d:92:33:1d:62:5d:19:65:f4:00:84:ff:70: 01:76:6f:92:8c:18:03:b9:21:d2:41:7f:af:15:31: 6d:03:87:2e:5e:c7:39:80:19:e7:bd:7b:c2:88:d1: 32:44:de:52:e8:25:3f:5c:c8:e5:a2:12:4e:76:22: c2:df:2b:64:d7:24:65:aa:1e:c8:4a:55:c3:07:a6: 87:1d:4c:e0:04:05:a2:90:9e:f0:36:56:2f:53:30: ed:d4:70:8c:62:52:6f:be:09:c5:e4:3f:0b:8d:5c: 6d:57:03:31:91:85:11:7f:6c:6a:af:92:4e:c0:16: 0e:14:dc:49:9f:a4:f9:95:aa:2c:2c:13:53:83:19: a5:78:20:78:d7:7e:50:25:85:c0:92:6a:21:e1:5a: 42:60:95:a2:69:5f:81:32:4d:b3:d4:97:77:32:49: 13:d8:91:6b:18:1b:da:b2:54:97:56:23:e6:67:de: b4:39:e6:17:78:5b:7b:cc:60:d3:67:37:3d:7c:70: 3a:1a:e7:f5:2d:31:59:2c:6d:ea:f7:2f:19:d5:bc: df:a6:0f:13:79:f3:40:4b:4b:65:77:b3:e5:85:26: b5:9d:6a:0f:ed:0e:6b:f2:f7:28:87:0d:62:d3:83: 9d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:48:1A:DC:2C:5C:45:1B:98:B8:F9:2A:38:57:21:06:16:83:9D:83 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bf3b985d-8b24-45d3-9b5d-70d06011aa76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1e5f::/48 Signature Algorithm: sha256WithRSAEncryption 91:3e:18:07:27:32:d8:c6:9b:1d:66:c9:7b:b0:d4:28:d3:24: 27:09:39:24:fb:f8:f3:24:2f:99:c4:79:97:9e:2a:72:89:cb: cd:34:f8:ff:15:97:92:49:7b:fb:b5:aa:40:7a:1a:6a:96:49: 28:73:4a:98:f3:94:98:b3:27:ac:d4:96:d7:ac:51:8e:83:3d: a2:30:01:30:38:64:05:09:e9:23:b3:0e:0b:47:a3:9d:b3:be: 7c:4d:c1:07:69:5e:80:c2:6a:07:f4:4e:41:31:a9:f0:31:55: 72:f5:af:8d:30:6f:e0:2d:52:ac:52:a2:2d:c7:0d:69:cd:4b: 17:1f:49:3d:32:81:80:97:a6:e7:07:c3:cb:78:35:de:33:f8: 01:d4:60:17:2b:7b:0a:85:48:9a:2b:7f:d7:bd:6f:d2:2c:1b: bf:d4:e7:c1:11:f2:66:f4:fb:c0:b9:bc:af:75:e1:b9:50:bb: 7b:b4:85:97:78:8f:a3:e5:60:32:8d:a6:91:0a:fa:63:b9:be: c6:7f:21:b9:9b:0e:3e:8d:f5:43:04:36:78:23:81:54:ff:05: 34:f8:fa:e5:e3:ef:e7:0f:ed:9b:57:84:6d:19:f9:2f:53:db: 00:52:0f:c6:eb:32:1d:d6:7d:15:08:f8:5f:b3:01:43:a1:91: ea:ed:ab:44 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXMMKrWTELkY58IW8N8fccYz0+2swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNjIyMDEwMTI4WhcNMjYwOTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMmRiNjdhNTM3M2ViYmZkMWNlNGQzYjRhNjZjNjc2OTk1 YTFkYTEwMmVmNzI2ZTkwMjc5ODIwMmFiODc3ODI0MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCx2fttWYVwqlsyXNGrnxi5XZIzHWJdGWX0AIT/cAF2b5KM GAO5IdJBf68VMW0Dhy5exzmAGee9e8KI0TJE3lLoJT9cyOWiEk52IsLfK2TXJGWq HshKVcMHpocdTOAEBaKQnvA2Vi9TMO3UcIxiUm++CcXkPwuNXG1XAzGRhRF/bGqv kk7AFg4U3EmfpPmVqiwsE1ODGaV4IHjXflAlhcCSaiHhWkJglaJpX4EyTbPUl3cy SRPYkWsYG9qyVJdWI+Zn3rQ55hd4W3vMYNNnNz18cDoa5/UtMVksber3LxnVvN+m DxN580BLS2V3s+WFJrWdag/tDmvy9yiHDWLTg51fAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU6Uga3CxcRRuYuPkqOFchBhaDnYMwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2JmM2I5ODVkLThiMjQtNDVkMy05YjVkLTcwZDA2MDExYWE3Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAJAAHl8wDQYJKoZIhvcNAQELBQADggEBAJE+GAcnMtjGmx1myXuw1CjT JCcJOST7+PMkL5nEeZeeKnKJy800+P8Vl5JJe/u1qkB6GmqWSShzSpjzlJizJ6zU ltesUY6DPaIwATA4ZAUJ6SOzDgtHo52zvnxNwQdpXoDCagf0TkExqfAxVXL1r40w b+AtUqxSoi3HDWnNSxcfST0ygYCXpucHw8t4Nd4z+AHUYBcrewqFSJorf9e9b9Is G7/U58ER8mb0+8C5vK914blQu3u0hZd4j6PlYDKNppEK+mO5vsZ/IbmbDj6N9UME NngjgVT/BTT4+uXj7+cP7ZtXhG0Z+S9T2wBSD8brMh3WfRUI+F+zAUOhkertq0Q= -----END CERTIFICATE-----Generated at Sat Jul 4 08:00:38 2026 by rpki-client