$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/41ebc629-d0f5-46b1-91c9-800b5e69216f.roa File: 41ebc629-d0f5-46b1-91c9-800b5e69216f.roa (raw, json) Hash identifier: JDMZhRp34Zxx/lqSfLngdfSXi71hcuoWLdZLmwyVmPU= Subject key identifier: BD:2B:70:D7:CA:51:D1:90:DA:C7:2E:4F:6B:0A:C4:8F:3F:90:3C:C5 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 03CBFE84A49CB461351FCFB974D08B918A7C6993 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/41ebc629-d0f5-46b1-91c9-800b5e69216f.roa Signing time: Thu 23 Jul 2026 14:50:22 +0000 ROA not before: Thu 23 Jul 2026 14:50:22 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 40045 IP address blocks: 2605:9cc0:c15::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:cb:fe:84:a4:9c:b4:61:35:1f:cf:b9:74:d0:8b:91:8a:7c:69:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 23 14:50:22 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=3fa2695fc59604a92f9f3c73eb006fe6d8c3d7d31b2e7db2b35f2805e56ddc8f, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1a:f9:d8:93:b1:c2:c4:92:c4:c7:ae:cb:df: 38:76:01:8b:1b:f3:24:c1:6e:34:26:35:a3:54:fe: 73:9d:0c:84:f9:58:4c:e5:59:8b:da:a5:18:b9:27: 9e:66:72:c9:0b:05:18:e2:c9:49:c1:1d:96:d2:91: e0:12:c6:d8:1f:6b:04:32:a6:7f:59:c5:47:0b:f1: 1f:69:e7:6c:4d:09:c2:29:a4:1c:b0:4b:e8:17:ae: dd:48:58:8d:fc:85:ee:e7:47:42:d8:3d:ea:45:3f: 7e:ef:ab:7a:32:51:2a:60:23:92:39:b0:4b:c6:df: 96:46:07:6e:08:71:9c:23:39:6d:e0:64:85:12:14: b3:95:2e:85:8d:dd:1d:61:0e:d3:f9:c8:39:a3:0f: 1f:b1:d7:66:7d:bb:7d:17:15:d5:8d:d5:20:51:84: 04:0f:15:50:6b:c7:e2:db:9f:c6:8e:db:43:44:01: e0:c3:3f:08:6f:30:6e:8e:f0:0b:bd:1a:43:dc:f7: 5a:22:46:34:ff:c6:04:d4:3f:ea:da:9e:9c:ec:2e: b0:fa:49:d8:0c:e2:2f:9c:df:14:96:aa:97:62:a8: 9b:33:99:75:98:5d:6b:86:78:bf:34:f1:e6:c8:cf: ce:07:b5:de:e4:76:71:94:63:f7:d1:59:31:c7:14: a6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:2B:70:D7:CA:51:D1:90:DA:C7:2E:4F:6B:0A:C4:8F:3F:90:3C:C5 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/41ebc629-d0f5-46b1-91c9-800b5e69216f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c15::/48 Signature Algorithm: sha256WithRSAEncryption 68:0b:a7:5b:7a:b7:a1:a6:83:f5:1e:86:0c:e4:14:68:f4:a9: 61:a2:86:27:14:9c:36:47:d5:43:11:15:1e:ab:c5:5f:bc:c1: bb:83:fc:dc:0b:04:54:5a:d4:97:20:a7:f3:24:94:e0:1e:84: d1:45:af:de:9f:c4:24:18:72:f9:d9:09:8d:01:c5:74:fb:56: 4f:de:89:91:18:d0:a5:79:1f:9d:8e:74:dd:dd:d7:65:00:32: bd:65:cd:c0:a9:6b:4e:36:ca:5a:f2:46:e5:3d:74:ff:91:dd: 0c:96:54:4a:96:53:13:1c:d8:ca:e4:9c:09:89:eb:2b:38:c1: 20:ff:51:4e:bd:70:4b:e2:98:d6:a6:b1:7c:69:ea:53:dc:00: cd:df:a3:0b:d6:65:3d:1e:7f:5a:7d:b2:73:fb:5d:2e:93:0e: 0b:fe:43:46:70:92:2d:27:0e:64:31:c9:e5:96:5b:0a:25:d7: e0:b3:5e:fb:a3:1e:4f:6b:2b:7e:fb:6f:18:eb:69:56:d4:67: 6e:fe:43:97:8c:d9:86:77:29:bc:6b:0f:f1:57:55:99:bb:78: 1b:6d:d5:20:a2:5a:c4:90:82:3c:54:6b:11:f3:6c:8f:2e:de: 43:07:8d:2d:60:03:f8:44:db:c0:b6:40:d4:19:81:4d:42:00: 87:e5:49:84 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUA8v+hKSctGE1H8+5dNCLkYp8aZMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwNzIzMTQ1MDIyWhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AzZmEyNjk1ZmM1OTYwNGE5MmY5ZjNjNzNlYjAwNmZlNmQ4 YzNkN2QzMWIyZTdkYjJiMzVmMjgwNWU1NmRkYzhmMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxGvnYk7HCxJLEx67L3zh2AYsb8yTBbjQmNaNU/nOdDIT5 WEzlWYvapRi5J55mcskLBRjiyUnBHZbSkeASxtgfawQypn9ZxUcL8R9p52xNCcIp pBywS+gXrt1IWI38he7nR0LYPepFP37vq3oyUSpgI5I5sEvG35ZGB24IcZwjOW3g ZIUSFLOVLoWN3R1hDtP5yDmjDx+x12Z9u30XFdWN1SBRhAQPFVBrx+Lbn8aO20NE AeDDPwhvMG6O8Au9GkPc91oiRjT/xgTUP+ranpzsLrD6SdgM4i+c3xSWqpdiqJsz mXWYXWuGeL808ebIz84Htd7kdnGUY/fRWTHHFKYbAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUvStw18pR0ZDaxy5PawrEjz+QPMUwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzQxZWJjNjI5LWQwZjUtNDZiMS05MWM5LTgwMGI1ZTY5MjE2Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBUwDQYJKoZIhvcNAQELBQADggEBAGgLp1t6t6Gmg/UehgzkFGj0 qWGihicUnDZH1UMRFR6rxV+8wbuD/NwLBFRa1Jcgp/MklOAehNFFr96fxCQYcvnZ CY0BxXT7Vk/eiZEY0KV5H52OdN3d12UAMr1lzcCpa042ylryRuU9dP+R3QyWVEqW UxMc2MrknAmJ6ys4wSD/UU69cEvimNamsXxp6lPcAM3fowvWZT0ef1p9snP7XS6T Dgv+Q0Zwki0nDmQxyeWWWwol1+CzXvujHk9rK377bxjraVbUZ27+Q5eM2YZ3Kbxr D/FXVZm7eBtt1SCiWsSQgjxUaxHzbI8u3kMHjS1gA/hE28C2QNQZgU1CAIflSYQ= -----END CERTIFICATE-----Generated at Thu Jul 23 21:20:53 2026 by rpki-client