$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/35afbdf6-f55d-4d3d-aff7-700bafad591c.roa File: 35afbdf6-f55d-4d3d-aff7-700bafad591c.roa (raw, json) Hash identifier: /eoT7ihl8ys3s0bk184vrnXxDu6Qpdb3BOATXXii28U= Subject key identifier: 76:1A:16:3C:82:20:CF:A3:1D:BD:54:96:05:19:7C:0D:36:D8:71:2A Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 7A9F8D65D354A05644F23A150C7AE174BBD69A91 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/35afbdf6-f55d-4d3d-aff7-700bafad591c.roa Signing time: Tue 24 Mar 2026 22:06:53 +0000 ROA not before: Tue 24 Mar 2026 22:06:53 +0000 ROA not after: Mon 22 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:fffe::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:9f:8d:65:d3:54:a0:56:44:f2:3a:15:0c:7a:e1:74:bb:d6:9a:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Mar 24 22:06:53 2026 GMT Not After : Jun 22 23:59:59 2026 GMT Subject: serialNumber=a9588388128237baf17c1361a2f1c8dc9784218a4e4d89aa918a2f0afea68676, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b6:58:e7:2c:c5:00:dc:a5:1f:01:9a:a0:a3: 63:e8:a7:4d:71:07:1c:98:ad:a9:34:6d:a8:62:84: 47:ac:2d:f5:11:39:80:aa:f1:33:2b:0d:70:e1:02: 1e:7a:bc:b2:21:20:d7:c0:3d:65:38:a8:5c:c9:b2: aa:b2:3f:e5:c9:3d:cd:ab:70:a3:7f:4a:fa:ea:a7: 3d:12:49:d7:d6:3b:e7:fb:bf:72:3c:d2:28:c2:db: 86:90:d4:ef:9e:43:83:9a:2a:a0:62:27:8e:21:b1: a3:89:33:5e:e0:37:5e:ac:42:da:7d:42:72:db:96: df:81:43:36:db:6c:0a:13:19:c7:f5:4b:37:5c:6e: 5c:e6:a5:a4:f3:e9:df:fe:d3:d0:ec:0a:97:a7:33: 1b:8f:b6:74:c2:7b:7d:d8:43:30:b6:91:90:3f:46: 54:51:12:6c:f3:90:98:8e:0a:0b:2e:4d:70:58:55: 68:78:15:32:6b:1c:44:fc:4b:89:5b:d3:43:59:e7: 32:c7:00:73:5e:15:73:30:d3:e1:d5:45:54:70:71: 45:eb:8f:a4:86:4f:ba:e5:5c:e6:c4:44:ac:da:d6: 72:18:04:06:12:e5:36:e2:ed:04:f8:6e:f4:89:78: b9:0d:bc:56:ea:7c:1a:6c:f1:9b:6d:27:47:06:7b: ea:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:1A:16:3C:82:20:CF:A3:1D:BD:54:96:05:19:7C:0D:36:D8:71:2A X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/35afbdf6-f55d-4d3d-aff7-700bafad591c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:fffe::/48 Signature Algorithm: sha256WithRSAEncryption 33:e1:f2:e1:b8:e8:ad:3d:a7:3f:65:03:86:d5:30:f3:3d:c3: ce:7a:10:5c:4b:ec:22:16:69:f4:7a:97:79:b3:ab:6d:fd:e0: b3:08:f2:d3:b5:03:91:4f:a9:c4:be:dd:ca:20:6f:b5:5a:dc: eb:6d:b2:47:46:16:2b:b5:2b:6d:01:61:cb:72:9b:24:67:35: 0e:ab:bf:53:28:0f:64:f6:a4:89:b9:e3:39:38:19:f3:46:41: 51:30:02:07:a5:80:97:95:29:2b:ca:c2:dd:f5:42:45:0e:96: 5f:b7:a5:33:0e:2a:3b:4f:fd:84:ef:b9:95:32:7d:54:0f:10: 56:8e:da:72:5e:1e:9e:cb:22:4d:4f:60:fa:24:f9:27:3a:92: 94:cb:23:94:24:d3:5e:14:94:60:8d:6e:dd:7c:03:1e:61:04: 92:a9:86:d3:13:98:5c:d6:d9:88:e4:d3:5d:5a:33:3d:68:4b: 44:16:18:c0:cb:88:f2:91:0d:24:cf:32:ca:bf:f4:9a:90:00: 31:40:27:7b:2d:dd:af:ce:d2:ea:8d:2e:49:73:17:87:2a:1b: 5b:67:35:f2:c5:71:06:7a:5e:72:20:6c:39:de:0b:1d:7e:41: 5e:23:7d:b9:ba:de:75:cc:85:c4:9f:25:5a:6e:b6:14:4a:18: ab:90:40:47 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUep+NZdNUoFZE8joVDHrhdLvWmpEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwMzI0MjIwNjUzWhcNMjYwNjIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhOTU4ODM4ODEyODIzN2JhZjE3YzEzNjFhMmYxYzhkYzk3 ODQyMThhNGU0ZDg5YWE5MThhMmYwYWZlYTY4Njc2MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCOtljnLMUA3KUfAZqgo2Pop01xBxyYrak0bahihEesLfUR OYCq8TMrDXDhAh56vLIhINfAPWU4qFzJsqqyP+XJPc2rcKN/Svrqpz0SSdfWO+f7 v3I80ijC24aQ1O+eQ4OaKqBiJ44hsaOJM17gN16sQtp9QnLblt+BQzbbbAoTGcf1 SzdcblzmpaTz6d/+09DsCpenMxuPtnTCe33YQzC2kZA/RlRREmzzkJiOCgsuTXBY VWh4FTJrHET8S4lb00NZ5zLHAHNeFXMw0+HVRVRwcUXrj6SGT7rlXObERKza1nIY BAYS5Tbi7QT4bvSJeLkNvFbqfBps8ZttJ0cGe+oBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUdhoWPIIgz6MdvVSWBRl8DTbYcSowHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzM1YWZiZGY2LWY1NWQtNGQzZC1hZmY3LTcwMGJhZmFkNTkxYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzA//4wDQYJKoZIhvcNAQELBQADggEBADPh8uG46K09pz9lA4bVMPM9 w856EFxL7CIWafR6l3mzq2394LMI8tO1A5FPqcS+3cogb7Va3OttskdGFiu1K20B YctymyRnNQ6rv1MoD2T2pIm54zk4GfNGQVEwAgelgJeVKSvKwt31QkUOll+3pTMO KjtP/YTvuZUyfVQPEFaO2nJeHp7LIk1PYPok+Sc6kpTLI5Qk014UlGCNbt18Ax5h BJKphtMTmFzW2Yjk011aMz1oS0QWGMDLiPKRDSTPMsq/9JqQADFAJ3st3a/O0uqN LklzF4cqG1tnNfLFcQZ6XnIgbDneCx1+QV4jfbm63nXMhcSfJVputhRKGKuQQEc= -----END CERTIFICATE-----Generated at Thu Mar 26 03:12:06 2026 by rpki-client