$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/43f38a90-941c-4e61-8aa5-ead957bf6ae6.roa File: 43f38a90-941c-4e61-8aa5-ead957bf6ae6.roa (raw, json) Hash identifier: /5ctQ8Hn/sggzjCl7JhHAlYsyRxHCeKF+kTYV/yOhls= Subject key identifier: 80:B4:23:03:24:05:D0:95:41:B2:5C:B9:51:78:E8:8F:B1:5E:19:37 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 44A4A15F5EA504557E39A5616D621CE18F0A1AD8 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/43f38a90-941c-4e61-8aa5-ead957bf6ae6.roa Signing time: Fri 08 May 2026 02:50:42 +0000 ROA not before: Fri 08 May 2026 02:50:42 +0000 ROA not after: Thu 06 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:c1a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:a4:a1:5f:5e:a5:04:55:7e:39:a5:61:6d:62:1c:e1:8f:0a:1a:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 8 02:50:42 2026 GMT Not After : Aug 6 23:59:59 2026 GMT Subject: serialNumber=ee3ce193d26ec3778f55889ee1663c97cd6aaf95cb511284946069e1035b2bf5, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0c:23:af:9d:23:29:2d:87:2a:10:b5:2c:e9: 0b:ee:98:02:4e:b3:02:10:25:26:b4:a0:02:3d:57: 8d:ad:59:29:51:f2:d0:9e:95:45:1b:01:35:57:d0: 32:fe:47:f7:ac:ae:8f:0b:31:fd:46:33:d8:6b:45: 06:f8:a5:37:f6:cf:dc:fc:de:23:a4:62:3a:9a:da: 3c:6a:bc:d2:d1:b7:6c:4f:56:1d:28:c6:fe:cc:c0: 8d:61:9b:a3:f9:f8:81:3f:f8:50:47:1d:6f:68:fd: b9:fb:ad:1a:7e:08:27:38:8c:d0:2e:8c:34:4f:6d: 4a:df:b5:4f:0a:87:4b:93:a0:c0:43:1c:8d:5b:ac: d6:5c:6b:5a:2d:7c:88:2d:82:1b:bb:33:06:0b:5e: bd:76:d0:da:b2:55:8f:07:3a:0e:74:29:46:85:21: 8c:d8:a4:f5:1c:6d:96:02:fd:b7:6b:24:57:39:6e: a5:f4:07:68:cd:6c:36:f4:40:15:43:36:58:24:b2: 48:c1:a1:3f:a3:b0:82:0c:e6:aa:ae:f1:df:4d:39: 2f:30:b9:4e:55:d8:75:c5:41:c9:11:56:d8:50:7a: 42:8e:1f:21:2b:09:b5:2d:e1:77:4f:82:f6:f8:70: 9b:d4:60:37:73:74:09:72:12:db:ba:96:22:90:29: 52:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:B4:23:03:24:05:D0:95:41:B2:5C:B9:51:78:E8:8F:B1:5E:19:37 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/43f38a90-941c-4e61-8aa5-ead957bf6ae6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c1a::/48 Signature Algorithm: sha256WithRSAEncryption 4c:af:ec:8d:19:b8:1a:a3:59:c4:bb:bc:55:22:8e:e7:8e:14: cc:80:78:2d:f3:fb:36:90:56:00:51:14:02:f3:df:cf:c7:2f: 85:52:1f:bd:f7:db:cc:a2:92:2f:14:c4:5c:b1:22:55:3a:6e: 93:d7:5f:c7:bd:e7:17:00:7f:3f:c5:8c:a7:17:16:15:b1:74: 9d:31:7f:d7:5c:e5:69:7e:c4:bc:92:62:cf:92:42:1c:a4:47: ed:15:0e:5d:e5:75:9b:8b:de:21:b7:a8:5b:2e:76:4a:fc:de: 2a:82:0c:c5:dc:cf:f9:f1:ab:c5:f6:1f:1b:45:f3:71:d6:7c: e2:f6:93:62:2b:d2:e7:54:aa:df:62:f7:30:58:23:38:d6:7e: 88:6f:e0:96:de:bb:68:9a:3d:e9:a9:ed:bd:de:3b:d4:07:e6: 36:2f:ab:7c:91:46:a3:df:bf:79:f3:96:ef:5d:c1:2f:66:c3: 95:49:c8:bc:ae:88:06:ff:10:99:4f:05:ba:27:b0:e0:e0:95: 98:a0:b3:6a:d6:91:40:9a:7f:4b:d8:f5:7c:35:32:5a:16:65: 9e:a8:6e:31:2c:db:82:0b:63:eb:1d:8b:2b:5c:7b:eb:5a:67: ab:a0:d4:04:f2:29:04:ab:39:6e:66:06:4e:4f:df:d9:80:c8: 4a:98:b4:eb -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURKShX16lBFV+OaVhbWIc4Y8KGtgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwNTA4MDI1MDQyWhcNMjYwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZTNjZTE5M2QyNmVjMzc3OGY1NTg4OWVlMTY2M2M5N2Nk NmFhZjk1Y2I1MTEyODQ5NDYwNjllMTAzNWIyYmY1MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4DCOvnSMpLYcqELUs6QvumAJOswIQJSa0oAI9V42tWSlR 8tCelUUbATVX0DL+R/esro8LMf1GM9hrRQb4pTf2z9z83iOkYjqa2jxqvNLRt2xP Vh0oxv7MwI1hm6P5+IE/+FBHHW9o/bn7rRp+CCc4jNAujDRPbUrftU8Kh0uToMBD HI1brNZca1otfIgtghu7MwYLXr120NqyVY8HOg50KUaFIYzYpPUcbZYC/bdrJFc5 bqX0B2jNbDb0QBVDNlgkskjBoT+jsIIM5qqu8d9NOS8wuU5V2HXFQckRVthQekKO HyErCbUt4XdPgvb4cJvUYDdzdAlyEtu6liKQKVJvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUgLQjAyQF0JVBsly5UXjoj7FeGTcwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzQzZjM4YTkwLTk0MWMtNGU2MS04YWE1LWVhZDk1N2JmNmFlNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBowDQYJKoZIhvcNAQELBQADggEBAEyv7I0ZuBqjWcS7vFUijueO FMyAeC3z+zaQVgBRFALz38/HL4VSH73328yiki8UxFyxIlU6bpPXX8e95xcAfz/F jKcXFhWxdJ0xf9dc5Wl+xLySYs+SQhykR+0VDl3ldZuL3iG3qFsudkr83iqCDMXc z/nxq8X2HxtF83HWfOL2k2Ir0udUqt9i9zBYIzjWfohv4Jbeu2iaPemp7b3eO9QH 5jYvq3yRRqPfv3nzlu9dwS9mw5VJyLyuiAb/EJlPBbonsODglZigs2rWkUCaf0vY 9Xw1MloWZZ6objEs24ILY+sdiytce+taZ6ug1ATyKQSrOW5mBk5P39mAyEqYtOs= -----END CERTIFICATE-----Generated at Wed May 13 00:38:08 2026 by rpki-client