$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0934543e-90db-4ba0-9848-455452e0c367.roa File: 0934543e-90db-4ba0-9848-455452e0c367.roa (raw, json) Hash identifier: QzdYOWkYIQTfrSPCaeYDjnAupgTvOjjBXemtDgmQAdY= Subject key identifier: 6C:87:CC:0B:50:93:D0:67:C3:EC:86:D7:31:4A:08:27:06:9B:14:9E Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 1A4EADBD00CB5B35855C5711FCD8FFD8BEB1DC9B Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0934543e-90db-4ba0-9848-455452e0c367.roa Signing time: Thu 23 Jul 2026 14:20:33 +0000 ROA not before: Thu 23 Jul 2026 14:20:33 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c02::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:4e:ad:bd:00:cb:5b:35:85:5c:57:11:fc:d8:ff:d8:be:b1:dc:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 23 14:20:33 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=f914dba2cada8e35203e6c9eecac710822fc080d261f356ca5c317e3b12b348b, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8f:20:e3:58:79:f6:30:2f:46:7a:4b:4a:cd: 03:69:92:18:ef:6f:07:96:f0:8e:c7:61:f4:5d:11: d0:8d:5a:58:0e:fb:27:f4:85:1a:49:49:2f:8a:ca: f3:53:d7:5d:14:cf:94:84:b0:3c:99:53:33:94:dc: 1f:a9:23:34:a2:69:e1:06:dc:5e:fe:45:68:15:d9: 2b:af:eb:d4:b6:4e:0b:31:ab:9d:11:c6:28:90:20: 01:73:ac:9c:d5:4d:60:da:34:2c:b5:ef:44:73:4f: 67:f4:b8:dd:f0:b2:99:26:3e:89:05:cc:84:14:4e: 32:95:b5:4b:e7:3d:9e:ca:cb:cc:ea:45:63:6f:bc: f1:9c:b2:2a:f3:c5:e2:c7:7e:47:b3:74:ec:fc:00: a4:86:1e:f1:47:d0:cc:4e:33:28:31:7d:21:8a:53: d2:1a:3b:6e:9b:9b:1e:8e:e0:e3:d6:90:eb:34:a3: f2:25:49:bc:0a:d6:84:8e:e5:3c:19:92:2f:82:fd: 3c:f4:e7:8c:80:5d:49:f4:f8:69:d0:27:9e:b1:e1: 68:75:a4:d7:ff:4b:4c:e8:d6:02:4f:cd:f6:74:69: 5a:ea:c5:6f:37:97:0a:7e:e5:ea:dd:1b:b8:fb:fd: f9:4d:8f:e5:65:b9:b6:43:1c:ef:14:89:a8:3e:1c: 71:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:87:CC:0B:50:93:D0:67:C3:EC:86:D7:31:4A:08:27:06:9B:14:9E X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0934543e-90db-4ba0-9848-455452e0c367.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c02::/48 Signature Algorithm: sha256WithRSAEncryption 48:ad:79:d8:97:8e:ff:60:79:bd:3e:2d:1d:d6:26:1d:7c:03: c8:c7:b0:f9:15:f9:73:ef:33:50:1f:cb:24:ce:1f:d2:a6:5a: 5e:b7:ce:69:7c:5c:1a:19:db:65:5c:c3:61:c7:1e:9b:95:93: 68:bf:80:76:e9:2e:8e:06:e7:c4:1a:b3:1c:d6:b9:a7:44:a8: 49:d2:63:c5:79:51:a1:fe:83:eb:e7:90:22:c3:78:1a:a4:7a: f7:7e:6b:31:45:57:6f:d2:1a:77:37:da:b1:a7:ee:1f:e5:bb: eb:05:3e:8f:f8:13:47:5a:0e:01:4a:e4:57:83:ee:38:48:b1: 65:9d:13:f2:11:b7:d1:3d:7c:3f:54:3e:a3:88:43:10:f0:76: bd:f0:ca:41:7c:85:e5:40:d1:7a:cd:67:48:17:b8:42:2a:fb: 11:06:83:71:e7:e3:3e:c5:8e:2c:6d:bf:a2:5c:75:99:8c:c4: 20:60:91:d7:fb:f1:4c:1b:09:7f:4e:9a:68:4e:51:14:4e:37: 8c:2d:e3:9d:24:91:84:90:fa:bb:54:2b:0a:83:4f:a8:5c:d9: 45:73:18:27:1a:44:6e:82:2d:9f:2b:18:24:bf:72:d6:9d:89: 2d:ff:5c:cc:b1:94:af:fb:4c:41:6d:61:26:b4:ca:16:fb:ec: d1:dc:ca:7d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUGk6tvQDLWzWFXFcR/Nj/2L6x3JswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwNzIzMTQyMDMzWhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BmOTE0ZGJhMmNhZGE4ZTM1MjAzZTZjOWVlY2FjNzEwODIy ZmMwODBkMjYxZjM1NmNhNWMzMTdlM2IxMmIzNDhiMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUjyDjWHn2MC9GektKzQNpkhjvbweW8I7HYfRdEdCNWlgO +yf0hRpJSS+KyvNT110Uz5SEsDyZUzOU3B+pIzSiaeEG3F7+RWgV2Suv69S2Tgsx q50RxiiQIAFzrJzVTWDaNCy170RzT2f0uN3wspkmPokFzIQUTjKVtUvnPZ7Ky8zq RWNvvPGcsirzxeLHfkezdOz8AKSGHvFH0MxOMygxfSGKU9IaO26bmx6O4OPWkOs0 o/IlSbwK1oSO5TwZki+C/Tz054yAXUn0+GnQJ56x4Wh1pNf/S0zo1gJPzfZ0aVrq xW83lwp+5erdG7j7/flNj+VlubZDHO8Uiag+HHGjAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUbIfMC1CT0GfD7IbXMUoIJwabFJ4wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzA5MzQ1NDNlLTkwZGItNGJhMC05ODQ4LTQ1NTQ1MmUwYzM2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAIwDQYJKoZIhvcNAQELBQADggEBAEitediXjv9geb0+LR3WJh18 A8jHsPkV+XPvM1AfyyTOH9KmWl63zml8XBoZ22Vcw2HHHpuVk2i/gHbpLo4G58Qa sxzWuadEqEnSY8V5UaH+g+vnkCLDeBqkevd+azFFV2/SGnc32rGn7h/lu+sFPo/4 E0daDgFK5FeD7jhIsWWdE/IRt9E9fD9UPqOIQxDwdr3wykF8heVA0XrNZ0gXuEIq +xEGg3Hn4z7Fjixtv6JcdZmMxCBgkdf78UwbCX9OmmhOURRON4wt450kkYSQ+rtU KwqDT6hc2UVzGCcaRG6CLZ8rGCS/ctadiS3/XMyxlK/7TEFtYSa0yhb77NHcyn0= -----END CERTIFICATE-----Generated at Thu Jul 23 19:06:03 2026 by rpki-client