$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1311a895-43fc-49eb-996b-222d911710a4.roa File: 1311a895-43fc-49eb-996b-222d911710a4.roa (raw, json) Hash identifier: jtveu5BBe5FRfvjd4kKveNabz15dcRNQaXRSkC7bAb8= Subject key identifier: 31:DC:24:65:02:8C:40:1E:FF:E6:92:91:4A:9C:8B:52:90:AF:4A:C0 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 3DEB854C8C4E07BA1D9F88D8861BBCCC36B919AC Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1311a895-43fc-49eb-996b-222d911710a4.roa Signing time: Thu 23 Jul 2026 14:50:45 +0000 ROA not before: Thu 23 Jul 2026 14:50:45 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:eb:85:4c:8c:4e:07:ba:1d:9f:88:d8:86:1b:bc:cc:36:b9:19:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 23 14:50:45 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=c89c6d2ea6ffb035424d8db943241423a3298134bca590c9faa54b49a76ee790, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9c:a9:8b:d4:1c:15:bd:b6:90:3c:f0:6d:e0: 11:f4:d1:30:12:a3:3b:dc:8a:71:86:2f:5c:75:56: 8f:e7:67:0c:5c:cd:9c:78:95:57:62:0c:a9:a0:63: 98:ae:19:cf:50:d9:59:b0:c4:3e:a1:1f:3c:16:41: 6d:5f:59:01:b6:fd:3f:e8:9d:0b:b5:da:4d:8e:ba: c0:35:9c:d8:37:75:03:88:86:9b:d7:07:bd:bf:6b: 16:d4:f2:4f:b1:9d:0d:dc:d8:3a:b5:c5:da:32:80: 2c:c2:4d:7a:38:c0:bb:b6:94:af:c7:74:ca:61:85: 41:84:44:bb:82:d0:ac:59:18:59:37:e9:e8:4a:bd: e7:f0:73:5d:23:a2:60:a6:3a:9f:99:90:8d:32:e2: f4:03:a6:a4:45:de:48:05:85:c2:79:5b:75:b4:1b: 3a:c4:0e:b2:f1:08:d9:ee:67:5a:29:e3:b5:9f:c4: ff:56:dc:ed:07:e7:b6:55:33:35:8b:69:00:f9:4a: 1a:7d:2b:35:4e:77:f2:b8:21:97:2a:94:93:54:1d: 27:6b:18:16:f3:a2:de:c7:83:ca:5d:d6:7e:af:21: 1e:ea:d7:24:85:c6:8e:88:0f:c6:f9:2f:9b:0c:d9: bd:16:66:ea:bd:0b:76:cb:e3:23:b6:61:b0:74:9d: 1c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:DC:24:65:02:8C:40:1E:FF:E6:92:91:4A:9C:8B:52:90:AF:4A:C0 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1311a895-43fc-49eb-996b-222d911710a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c00::/48 Signature Algorithm: sha256WithRSAEncryption 17:99:ae:91:ac:f6:7e:5e:92:ce:be:5d:b2:82:19:f0:76:2e: 1c:d4:ae:10:28:2c:8a:7a:7f:34:00:46:40:69:ce:2a:75:b0: 32:08:98:ae:d6:ec:76:95:58:20:3e:fe:e3:28:d2:24:aa:47: 9b:59:4e:df:f2:3f:3d:eb:03:ca:ae:a1:a3:94:d3:74:57:da: 9b:7d:45:77:1a:a2:c2:cd:e4:eb:85:10:75:08:6a:51:d2:c1: f2:3c:11:df:2e:44:c1:86:2c:ff:b5:8d:7b:37:b1:b5:82:54: 1b:e7:95:98:44:f8:dc:a3:86:d1:83:56:de:5f:8f:0c:14:ac: 4b:f5:aa:0a:67:18:d7:59:83:4d:41:ad:01:90:d1:50:c6:3b: 2e:5e:27:20:22:fb:1c:74:f9:d7:51:54:f3:52:97:bc:c5:e0: 85:79:9e:e3:1b:23:57:00:96:37:87:88:81:fc:27:ee:8a:52: 1f:96:90:02:e7:e9:5a:0c:d6:f2:ad:83:14:ca:3d:e3:eb:a1: f4:3a:e2:76:36:6b:67:9a:97:52:72:e8:46:3c:d1:55:92:d3: c6:fc:96:fa:aa:99:60:e7:0a:b0:26:cf:04:46:41:39:f7:8a: c8:fd:95:a9:79:53:0a:0a:0e:db:f5:30:4a:44:09:48:69:b5: bb:1a:48:82 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUPeuFTIxOB7odn4jYhhu8zDa5GawwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwNzIzMTQ1MDQ1WhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BjODljNmQyZWE2ZmZiMDM1NDI0ZDhkYjk0MzI0MTQyM2Ez Mjk4MTM0YmNhNTkwYzlmYWE1NGI0OWE3NmVlNzkwMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbnKmL1BwVvbaQPPBt4BH00TASozvcinGGL1x1Vo/nZwxc zZx4lVdiDKmgY5iuGc9Q2VmwxD6hHzwWQW1fWQG2/T/onQu12k2OusA1nNg3dQOI hpvXB72/axbU8k+xnQ3c2Dq1xdoygCzCTXo4wLu2lK/HdMphhUGERLuC0KxZGFk3 6ehKvefwc10jomCmOp+ZkI0y4vQDpqRF3kgFhcJ5W3W0GzrEDrLxCNnuZ1op47Wf xP9W3O0H57ZVMzWLaQD5Shp9KzVOd/K4IZcqlJNUHSdrGBbzot7Hg8pd1n6vIR7q 1ySFxo6ID8b5L5sM2b0WZuq9C3bL4yO2YbB0nRyNAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUMdwkZQKMQB7/5pKRSpyLUpCvSsAwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzEzMTFhODk1LTQzZmMtNDllYi05OTZiLTIyMmQ5MTE3MTBhNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAAwDQYJKoZIhvcNAQELBQADggEBABeZrpGs9n5eks6+XbKCGfB2 LhzUrhAoLIp6fzQARkBpzip1sDIImK7W7HaVWCA+/uMo0iSqR5tZTt/yPz3rA8qu oaOU03RX2pt9RXcaosLN5OuFEHUIalHSwfI8Ed8uRMGGLP+1jXs3sbWCVBvnlZhE +NyjhtGDVt5fjwwUrEv1qgpnGNdZg01BrQGQ0VDGOy5eJyAi+xx0+ddRVPNSl7zF 4IV5nuMbI1cAljeHiIH8J+6KUh+WkALn6VoM1vKtgxTKPeProfQ64nY2a2eal1Jy 6EY80VWS08b8lvqqmWDnCrAmzwRGQTn3isj9lal5UwoKDtv1MEpECUhptbsaSII= -----END CERTIFICATE-----Generated at Thu Jul 23 21:23:08 2026 by rpki-client