$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7ea881c9-cef8-42c2-a799-42fc26355ba1.roa File: 7ea881c9-cef8-42c2-a799-42fc26355ba1.roa (raw, json) Hash identifier: rqeDWrkMYbL3N/fvMYLW1CuXagZdNo9TY99hKmzWXRM= Subject key identifier: 12:D5:C9:1F:C8:40:35:1E:16:66:E8:C3:A4:17:48:18:27:71:64:84 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 39AF86179C0AB94F34531FBA3279618F361C3E47 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7ea881c9-cef8-42c2-a799-42fc26355ba1.roa Signing time: Fri 08 May 2026 03:00:21 +0000 ROA not before: Fri 08 May 2026 03:00:21 +0000 ROA not after: Thu 06 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:64d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:af:86:17:9c:0a:b9:4f:34:53:1f:ba:32:79:61:8f:36:1c:3e:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 8 03:00:21 2026 GMT Not After : Aug 6 23:59:59 2026 GMT Subject: serialNumber=f99aae430719121827545be9b76bb1b2ceae51a6e694a62d63b15fd6c02e46ed, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ee:19:51:fb:f6:cb:79:aa:f2:a5:fe:5e:e5: 8b:18:2c:37:c9:4f:ef:b4:96:21:14:28:cf:3d:dd: 61:51:e0:02:1d:84:3c:51:0e:4b:e9:5b:d7:6e:9b: e3:7c:8c:a0:3b:61:e4:a6:6f:3e:22:11:fc:d9:1d: 80:3a:9b:f1:99:49:ce:f0:27:1b:b9:82:d8:da:9e: 64:68:13:bc:46:97:f9:4d:a0:e8:34:2c:28:6b:41: 61:7a:c7:0c:b1:94:0b:98:ae:93:64:77:5e:8c:fe: af:60:2a:41:af:5d:77:c4:2c:61:a4:af:85:e9:82: 90:b6:49:3b:c0:41:67:6c:e1:c7:ab:22:fc:63:4f: 73:6f:6d:bf:47:53:6b:d9:08:2d:e3:d3:7e:2b:b5: e9:98:b0:4f:44:67:c9:af:64:2b:27:f9:6f:2a:21: 19:fe:16:de:0d:fb:b7:7d:63:d4:a4:86:c6:94:ef: 46:08:10:e3:5b:19:cd:32:b4:25:1b:ed:68:35:5e: 46:a3:4b:aa:da:3f:7a:6e:b1:08:e8:b2:d9:ce:e5: d9:b2:c1:9e:ca:49:9b:a0:6c:32:9d:f2:10:eb:33: d1:9c:72:65:b4:2b:f1:9a:9b:bb:35:6a:b9:e1:44: 33:09:4c:ab:0f:28:92:de:f0:f4:95:92:e6:ef:3e: 68:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:D5:C9:1F:C8:40:35:1E:16:66:E8:C3:A4:17:48:18:27:71:64:84 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7ea881c9-cef8-42c2-a799-42fc26355ba1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:64d::/48 Signature Algorithm: sha256WithRSAEncryption 84:2b:5c:76:d5:e1:46:68:d5:8f:79:f1:6c:d8:a0:ee:6e:a0: 21:04:16:a8:a3:4d:e4:c1:3c:aa:67:40:25:fd:fd:1f:a6:61: df:14:41:13:e0:ea:16:e0:38:1c:e2:14:d8:d6:35:87:16:7f: d6:0d:20:57:13:bc:7c:94:af:7b:e9:6e:6a:2b:99:48:79:8e: 29:8a:6e:41:27:89:0b:32:fe:6d:55:2f:ba:21:48:8d:d5:ba: 06:ad:f1:15:30:5c:5c:bb:5a:aa:75:77:6c:38:45:d1:c1:38: e6:da:2e:ae:46:e2:01:1a:ca:56:b8:7f:a4:86:b5:37:49:9f: 40:5a:c7:b7:bf:42:f2:5a:ab:4d:d5:2b:44:7f:eb:f4:c2:6e: 9e:76:f9:cd:aa:51:ae:91:13:df:46:42:e3:9a:ae:e8:d2:94: 26:49:82:ae:3f:29:fa:47:8a:84:72:02:6e:11:4c:a0:71:1f: 6a:5b:f5:65:c3:f9:bd:12:1e:ea:d3:bc:74:b6:c4:10:ff:87: a6:49:9b:77:fb:8d:83:7b:6f:2c:cc:56:bf:9a:d7:57:bd:29: 1e:2b:1e:b7:2d:d9:e5:47:76:c9:4b:c6:f0:a3:8d:83:94:43: 7c:d8:c0:08:26:f9:62:18:9c:23:c1:8c:6a:2b:22:c0:9a:10: 0f:b5:32:ca -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUOa+GF5wKuU80Ux+6MnlhjzYcPkcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwNTA4MDMwMDIxWhcNMjYwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmOTlhYWU0MzA3MTkxMjE4Mjc1NDViZTliNzZiYjFiMmNl YWU1MWE2ZTY5NGE2MmQ2M2IxNWZkNmMwMmU0NmVkMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCo7hlR+/bLearypf5e5YsYLDfJT++0liEUKM893WFR4AId hDxRDkvpW9dum+N8jKA7YeSmbz4iEfzZHYA6m/GZSc7wJxu5gtjanmRoE7xGl/lN oOg0LChrQWF6xwyxlAuYrpNkd16M/q9gKkGvXXfELGGkr4XpgpC2STvAQWds4cer IvxjT3Nvbb9HU2vZCC3j034rtemYsE9EZ8mvZCsn+W8qIRn+Ft4N+7d9Y9SkhsaU 70YIEONbGc0ytCUb7Wg1XkajS6raP3pusQjostnO5dmywZ7KSZugbDKd8hDrM9Gc cmW0K/Gam7s1arnhRDMJTKsPKJLe8PSVkubvPmgHAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUEtXJH8hANR4WZujDpBdIGCdxZIQwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzdlYTg4MWM5LWNlZjgtNDJjMi1hNzk5LTQyZmMyNjM1NWJhMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABk0wDQYJKoZIhvcNAQELBQADggEBAIQrXHbV4UZo1Y958WzYoO5u oCEEFqijTeTBPKpnQCX9/R+mYd8UQRPg6hbgOBziFNjWNYcWf9YNIFcTvHyUr3vp bmormUh5jimKbkEniQsy/m1VL7ohSI3Vugat8RUwXFy7Wqp1d2w4RdHBOObaLq5G 4gEayla4f6SGtTdJn0Bax7e/QvJaq03VK0R/6/TCbp52+c2qUa6RE99GQuOarujS lCZJgq4/KfpHioRyAm4RTKBxH2pb9WXD+b0SHurTvHS2xBD/h6ZJm3f7jYN7byzM Vr+a11e9KR4rHrct2eVHdslLxvCjjYOUQ3zYwAgm+WIYnCPBjGorIsCaEA+1Mso= -----END CERTIFICATE-----Generated at Wed May 13 00:45:41 2026 by rpki-client