$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/43f88a93-015f-458c-bd29-a421ebdf2a4c.roa File: 43f88a93-015f-458c-bd29-a421ebdf2a4c.roa (raw, json) Hash identifier: gqry2Ew8+gVefnPZGFKPthU9JfcF5bS8wBLayTPxPZM= Subject key identifier: 7F:E4:68:7B:88:BD:F0:CB:66:73:92:86:5C:8A:62:21:3D:69:8C:E6 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 74E738ABBE8EBA9B1F09468BFC63877292001CD3 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/43f88a93-015f-458c-bd29-a421ebdf2a4c.roa Signing time: Thu 23 Jul 2026 14:50:24 +0000 ROA not before: Thu 23 Jul 2026 14:50:24 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c1b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:e7:38:ab:be:8e:ba:9b:1f:09:46:8b:fc:63:87:72:92:00:1c:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 23 14:50:24 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=a77a8ea40cd49305953387ae4f8947c230b21b4f6512ddccacb3c3556a3a93b5, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:01:d7:fb:35:3c:e0:b9:5e:be:29:de:df:5e: 9d:fb:6c:a4:c9:47:dd:52:08:de:dc:76:7d:89:b2: 01:cc:b2:62:32:51:bb:29:74:98:97:8a:3e:53:11: 09:b3:62:d2:f6:b8:e1:e9:ef:35:b1:86:9e:9f:33: f2:74:60:ed:4a:d9:f6:c9:2f:96:df:39:49:3c:8a: cd:1b:22:c2:ea:32:cf:34:e5:3a:fc:3d:42:2b:ef: 4c:07:78:2b:ee:43:12:e3:50:3b:73:2e:94:bf:28: 90:12:0b:a1:8f:c6:cc:fc:a9:dd:0e:73:b6:0d:88: a3:af:80:37:0e:92:5f:0e:aa:0c:40:ed:50:da:f3: 8e:88:bb:22:dd:45:9e:b1:2f:d1:47:ed:26:26:84: ac:41:db:30:80:c0:f6:db:22:c9:88:70:1b:be:d6: af:d3:81:a3:41:ad:09:06:24:f3:78:bb:52:92:3b: 4e:78:28:45:f0:3c:1e:49:36:61:a7:c1:f7:c7:06: 4c:1d:82:c7:27:52:63:c4:12:05:93:8f:8f:b2:f9: fa:5d:36:77:db:3d:58:b4:23:ee:11:3b:4b:16:9b: ee:6a:a7:13:05:87:33:a4:a8:85:2b:9b:d1:1c:be: 51:f1:b0:49:94:01:cc:4b:0c:91:ec:47:d1:c8:a8: 2e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:E4:68:7B:88:BD:F0:CB:66:73:92:86:5C:8A:62:21:3D:69:8C:E6 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/43f88a93-015f-458c-bd29-a421ebdf2a4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c1b::/48 Signature Algorithm: sha256WithRSAEncryption 78:17:9c:27:cd:04:97:b0:ec:fc:eb:e3:0e:66:01:39:37:2f: 0f:a5:fe:75:89:fb:92:9b:ff:fa:75:be:3b:d7:ab:ec:48:a1: 2b:55:7a:08:51:a5:c0:c8:d5:f1:6d:7b:c0:d3:96:4c:18:7f: e1:05:e3:45:8a:29:f7:1d:c7:8d:3c:b3:29:9d:e3:fb:35:9a: 63:27:6f:db:ab:e0:28:4e:6a:aa:1f:2a:aa:46:3e:2e:7c:8e: f0:28:4b:75:7c:ae:fb:df:1e:d5:c9:01:4e:52:bc:ff:70:31: be:7b:7f:60:7d:81:dd:15:97:33:ca:0d:7f:b7:fe:a2:28:d0: ff:bb:d9:90:ab:0e:3a:95:ac:2b:d1:04:41:09:ec:54:04:ae: 59:3e:d1:c4:f1:72:d9:ca:cc:a4:fc:4f:c1:97:60:98:5a:60: 0a:48:2d:89:6d:9c:bb:31:8f:7c:06:96:04:c7:7d:25:f7:db: 79:8d:6a:b5:df:87:f1:c4:b2:6f:2d:f6:57:69:7c:38:86:fa: d8:eb:51:d6:fa:02:cc:a4:cd:cf:f0:d8:dc:a8:fe:60:c8:e5: f3:e1:9a:12:b2:e2:20:e5:7e:b0:53:d8:aa:92:80:26:e9:0f: 57:f7:b1:95:46:66:6e:4d:ad:a2:df:d7:f9:41:e2:e3:39:0c: fe:c9:99:86 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdOc4q76OupsfCUaL/GOHcpIAHNMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwNzIzMTQ1MDI0WhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNzdhOGVhNDBjZDQ5MzA1OTUzMzg3YWU0Zjg5NDdjMjMw YjIxYjRmNjUxMmRkY2NhY2IzYzM1NTZhM2E5M2I1MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZAdf7NTzguV6+Kd7fXp37bKTJR91SCN7cdn2JsgHMsmIy UbspdJiXij5TEQmzYtL2uOHp7zWxhp6fM/J0YO1K2fbJL5bfOUk8is0bIsLqMs80 5Tr8PUIr70wHeCvuQxLjUDtzLpS/KJASC6GPxsz8qd0Oc7YNiKOvgDcOkl8OqgxA 7VDa846IuyLdRZ6xL9FH7SYmhKxB2zCAwPbbIsmIcBu+1q/TgaNBrQkGJPN4u1KS O054KEXwPB5JNmGnwffHBkwdgscnUmPEEgWTj4+y+fpdNnfbPVi0I+4RO0sWm+5q pxMFhzOkqIUrm9EcvlHxsEmUAcxLDJHsR9HIqC6PAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUf+Roe4i98Mtmc5KGXIpiIT1pjOYwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzQzZjg4YTkzLTAxNWYtNDU4Yy1iZDI5LWE0MjFlYmRmMmE0Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBswDQYJKoZIhvcNAQELBQADggEBAHgXnCfNBJew7Pzr4w5mATk3 Lw+l/nWJ+5Kb//p1vjvXq+xIoStVeghRpcDI1fFte8DTlkwYf+EF40WKKfcdx408 symd4/s1mmMnb9ur4ChOaqofKqpGPi58jvAoS3V8rvvfHtXJAU5SvP9wMb57f2B9 gd0VlzPKDX+3/qIo0P+72ZCrDjqVrCvRBEEJ7FQErlk+0cTxctnKzKT8T8GXYJha YApILYltnLsxj3wGlgTHfSX323mNarXfh/HEsm8t9ldpfDiG+tjrUdb6Asykzc/w 2Nyo/mDI5fPhmhKy4iDlfrBT2KqSgCbpD1f3sZVGZm5NraLf1/lB4uM5DP7JmYY= -----END CERTIFICATE-----Generated at Fri Jul 24 01:09:26 2026 by rpki-client