$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/803ff471-2975-4fde-a4bd-31c53d5ce004.roa File: 803ff471-2975-4fde-a4bd-31c53d5ce004.roa (raw, json) Hash identifier: SO6G/bB0cULsseKC6MIvAeXMcVlncS2dj2vMx2b/LgY= Subject key identifier: AA:A4:52:C4:C5:E6:3E:F2:C6:46:BC:54:54:FC:14:DE:30:BD:7A:23 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 1A1B3981A4679FBC1ED241609F5B4E7C538FE8AD Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/803ff471-2975-4fde-a4bd-31c53d5ce004.roa Signing time: Fri 08 May 2026 03:00:22 +0000 ROA not before: Fri 08 May 2026 03:00:22 +0000 ROA not after: Thu 06 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:64d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:1b:39:81:a4:67:9f:bc:1e:d2:41:60:9f:5b:4e:7c:53:8f:e8:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 8 03:00:22 2026 GMT Not After : Aug 6 23:59:59 2026 GMT Subject: serialNumber=a99cb483334c1a6711b4a17a5ba779e062c8dce392db178acadd2afee756cda5, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f0:90:2d:52:28:ef:d7:0e:f3:28:5a:3b:2a: 7e:fd:b8:88:2a:fe:05:44:3e:4a:88:c3:96:54:49: e6:71:df:37:f8:86:4f:04:0b:57:f1:18:ee:0a:2a: 31:ca:ab:92:ae:1c:82:eb:00:ea:39:19:dd:c3:ec: 00:04:56:f5:99:8e:e5:53:06:4e:aa:9f:8c:67:1e: 98:92:38:7b:25:5c:04:b8:15:be:70:90:19:98:a8: 6f:52:46:c3:ca:60:fb:f2:2f:5c:7b:87:de:c8:76: b3:bf:24:a3:fb:7e:6c:28:23:54:2b:5b:9b:7e:32: f5:65:45:26:46:d6:d7:75:4d:bf:05:92:f3:f3:cc: 66:6e:19:cd:fb:80:6d:4b:f6:8d:07:21:eb:cb:77: d5:ac:a6:26:65:82:ed:f0:df:1a:19:9d:73:59:0e: d8:95:8d:33:94:33:35:4a:ec:41:f4:36:cd:97:13: 53:65:94:12:e1:3a:7c:11:f9:55:a1:30:89:90:11: 66:f5:d7:9d:6a:9e:d0:19:b7:36:17:39:39:d8:3e: 3d:d4:ef:1f:53:07:7b:e5:a6:2b:5f:6f:77:9d:d1: 35:2b:ba:6e:03:5a:68:63:2f:5a:ab:41:2c:75:1c: 77:92:61:9f:b9:ff:58:77:01:a5:cd:67:82:01:52: e7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A4:52:C4:C5:E6:3E:F2:C6:46:BC:54:54:FC:14:DE:30:BD:7A:23 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/803ff471-2975-4fde-a4bd-31c53d5ce004.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:64d::/48 Signature Algorithm: sha256WithRSAEncryption 1b:cf:7f:a3:bb:46:59:2e:b1:45:14:20:4c:4d:03:d2:a0:de: 86:83:22:e3:91:11:a2:5c:81:99:41:12:d9:3d:ef:09:3f:bf: 66:d1:f4:d2:ba:20:7e:eb:ef:b6:d3:cb:ab:dc:be:36:98:c6: a0:d3:95:71:7a:88:a2:7d:23:02:a5:e0:d0:e0:e5:bc:dd:b8: 9d:a3:d3:ed:2b:19:82:7f:8f:bf:b2:b6:2a:37:cf:91:00:b5: 32:e8:c9:b3:58:47:97:b9:0c:ad:d8:73:15:b8:b4:c2:63:3e: 04:a3:30:3d:73:4e:23:da:1c:df:86:e9:30:c9:cb:e8:31:63: 26:a5:59:90:04:60:73:3b:b3:e2:3a:51:d0:7d:8d:66:a4:0d: 23:c3:f9:66:b1:61:39:37:b9:63:27:ec:ff:6b:bf:98:cd:10: b7:1c:a5:1a:00:66:42:57:29:24:de:29:28:d0:14:b6:a0:23: 6c:8b:09:83:fe:51:83:02:73:1e:59:6d:1e:03:27:c2:cc:c0: b7:62:a1:b8:c5:d6:62:43:fe:38:35:8f:44:9b:1d:dc:95:78: 06:68:86:fe:b7:9f:78:18:a2:98:b2:f0:c1:5f:9d:2d:d9:0b: 0a:d6:6a:45:98:61:ad:ba:94:41:ce:91:e1:cd:08:e3:6a:54: fd:b5:4a:c3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUGhs5gaRnn7we0kFgn1tOfFOP6K0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwNTA4MDMwMDIyWhcNMjYwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BhOTljYjQ4MzMzNGMxYTY3MTFiNGExN2E1YmE3NzllMDYy YzhkY2UzOTJkYjE3OGFjYWRkMmFmZWU3NTZjZGE1MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDL8JAtUijv1w7zKFo7Kn79uIgq/gVEPkqIw5ZUSeZx3zf4 hk8EC1fxGO4KKjHKq5KuHILrAOo5Gd3D7AAEVvWZjuVTBk6qn4xnHpiSOHslXAS4 Fb5wkBmYqG9SRsPKYPvyL1x7h97IdrO/JKP7fmwoI1QrW5t+MvVlRSZG1td1Tb8F kvPzzGZuGc37gG1L9o0HIevLd9WspiZlgu3w3xoZnXNZDtiVjTOUMzVK7EH0Ns2X E1NllBLhOnwR+VWhMImQEWb1151qntAZtzYXOTnYPj3U7x9TB3vlpitfb3ed0TUr um4DWmhjL1qrQSx1HHeSYZ+5/1h3AaXNZ4IBUucLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUqqRSxMXmPvLGRrxUVPwU3jC9eiMwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzgwM2ZmNDcxLTI5NzUtNGZkZS1hNGJkLTMxYzUzZDVjZTAwNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABk0wDQYJKoZIhvcNAQELBQADggEBABvPf6O7RlkusUUUIExNA9Kg 3oaDIuOREaJcgZlBEtk97wk/v2bR9NK6IH7r77bTy6vcvjaYxqDTlXF6iKJ9IwKl 4NDg5bzduJ2j0+0rGYJ/j7+ytio3z5EAtTLoybNYR5e5DK3YcxW4tMJjPgSjMD1z TiPaHN+G6TDJy+gxYyalWZAEYHM7s+I6UdB9jWakDSPD+WaxYTk3uWMn7P9rv5jN ELccpRoAZkJXKSTeKSjQFLagI2yLCYP+UYMCcx5ZbR4DJ8LMwLdiobjF1mJD/jg1 j0SbHdyVeAZohv63n3gYopiy8MFfnS3ZCwrWakWYYa26lEHOkeHNCONqVP21SsM= -----END CERTIFICATE-----Generated at Tue May 12 22:24:13 2026 by rpki-client