$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a3dc9780-ee42-4415-930a-4d78bbb4e531.roa File: a3dc9780-ee42-4415-930a-4d78bbb4e531.roa (raw, json) Hash identifier: pdm2GgAiSTKr4b4uGl12S3Xu70GmyBK1dyKzHEW6668= Subject key identifier: DA:A4:2C:E1:BA:FC:68:81:E1:2E:3F:3C:9C:5B:3F:AF:90:70:0E:AD Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 60573DC1FE6391928257D7E03E1BB8C9D6E9AF14 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a3dc9780-ee42-4415-930a-4d78bbb4e531.roa Signing time: Mon 04 May 2026 14:50:09 +0000 ROA not before: Mon 04 May 2026 14:50:09 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:c02::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:57:3d:c1:fe:63:91:92:82:57:d7:e0:3e:1b:b8:c9:d6:e9:af:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 4 14:50:09 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=d2ffe2995ee7b6d010537b2ac7e5d85b76d01b7856039b88837bfc91fc61dc83, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:aa:e9:13:93:b9:cb:f7:f0:23:d7:f8:f7:ee: 4d:2f:55:cf:86:0b:8c:30:41:61:c4:dc:92:36:00: 76:f6:83:75:45:5f:69:ef:73:9f:54:31:30:8a:87: 64:bb:7f:2f:65:2f:41:cb:fd:1b:68:4b:76:22:40: 8b:ba:cf:84:09:4d:6f:ce:9d:77:44:c5:c6:d2:a4: a7:45:19:41:d0:34:47:71:5e:09:34:7f:da:81:28: b8:98:02:da:84:3d:91:3f:64:db:e3:93:25:31:d6: 77:2a:57:09:49:15:b0:80:a7:b4:db:54:db:a7:f8: b1:98:88:7e:52:fa:71:23:eb:ed:95:64:22:cf:77: 3b:d9:0c:32:68:e8:dc:2b:4d:52:c8:5f:a9:ac:77: af:bc:90:04:16:b8:f6:1e:ea:08:6b:de:90:76:5c: 40:3e:54:c2:e6:ab:09:bb:0f:a6:2b:be:f6:de:93: c7:3b:e0:6a:62:b1:51:fd:37:10:d5:44:fc:da:6d: 94:c5:ce:3a:e2:0c:69:4e:06:dc:f5:7c:06:e7:07: 47:44:95:16:c0:31:a7:e7:4b:9e:b8:4a:5e:9e:4c: d5:b2:6b:8f:fe:0d:c9:2a:e5:bf:07:39:ff:03:2f: 99:4c:ab:70:fa:7d:61:24:ca:14:ad:d2:f0:60:a2: 00:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:A4:2C:E1:BA:FC:68:81:E1:2E:3F:3C:9C:5B:3F:AF:90:70:0E:AD X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a3dc9780-ee42-4415-930a-4d78bbb4e531.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c02::/48 Signature Algorithm: sha256WithRSAEncryption 31:74:58:aa:0b:c5:6b:4a:f4:b9:31:8c:ec:0a:06:ad:e4:f0: 62:5c:13:78:ca:ec:18:01:74:80:ee:44:03:6a:63:07:81:b3: 9d:92:2e:8c:85:51:55:64:93:42:4a:32:cf:43:e1:1a:cf:a0: cc:2f:cb:e7:a5:39:1b:32:fd:55:19:72:7e:fe:dc:4a:de:48: 5b:7b:d0:f8:d1:9e:4e:70:b8:f1:31:0d:31:90:5d:42:ea:5b: 74:b5:3b:2d:07:ba:ca:11:ea:48:ae:a1:6c:7f:99:8a:7f:4d: 87:22:3e:5f:f9:1e:33:5c:a5:df:cc:ab:7d:1c:f3:0d:4e:81: dc:84:7f:2b:e7:44:9f:3a:43:a3:2e:f2:8f:a6:fb:df:cc:75: 39:fd:f7:ac:e7:eb:a3:43:89:0e:63:78:07:8a:7e:80:93:74: 87:fb:c3:77:79:44:d5:b7:17:ba:f3:4c:f3:70:46:f1:f4:10: 77:fb:ca:98:25:5c:4f:9a:13:a1:31:4c:c4:ef:b1:eb:ff:47: 87:ea:ec:a0:2c:73:09:9f:f8:f8:d3:82:49:5a:8f:12:09:d0: c4:78:b3:bf:68:b1:8f:12:84:b3:a1:47:cf:d3:22:45:c4:78: a8:ee:bc:b6:f5:ef:e2:ed:45:f9:0b:8b:0a:27:c4:90:d3:fd: fa:67:d9:fa -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUYFc9wf5jkZKCV9fgPhu4ydbprxQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwNTA0MTQ1MDA5WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMmZmZTI5OTVlZTdiNmQwMTA1MzdiMmFjN2U1ZDg1Yjc2 ZDAxYjc4NTYwMzliODg4MzdiZmM5MWZjNjFkYzgzMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCWqukTk7nL9/Aj1/j37k0vVc+GC4wwQWHE3JI2AHb2g3VF X2nvc59UMTCKh2S7fy9lL0HL/RtoS3YiQIu6z4QJTW/OnXdExcbSpKdFGUHQNEdx Xgk0f9qBKLiYAtqEPZE/ZNvjkyUx1ncqVwlJFbCAp7TbVNun+LGYiH5S+nEj6+2V ZCLPdzvZDDJo6NwrTVLIX6msd6+8kAQWuPYe6ghr3pB2XEA+VMLmqwm7D6Yrvvbe k8c74GpisVH9NxDVRPzabZTFzjriDGlOBtz1fAbnB0dElRbAMafnS564Sl6eTNWy a4/+Dckq5b8HOf8DL5lMq3D6fWEkyhSt0vBgogBLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU2qQs4br8aIHhLj88nFs/r5BwDq0wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2EzZGM5NzgwLWVlNDItNDQxNS05MzBhLTRkNzhiYmI0ZTUzMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAIwDQYJKoZIhvcNAQELBQADggEBADF0WKoLxWtK9LkxjOwKBq3k 8GJcE3jK7BgBdIDuRANqYweBs52SLoyFUVVkk0JKMs9D4RrPoMwvy+elORsy/VUZ cn7+3EreSFt70PjRnk5wuPExDTGQXULqW3S1Oy0HusoR6kiuoWx/mYp/TYciPl/5 HjNcpd/Mq30c8w1OgdyEfyvnRJ86Q6Mu8o+m+9/MdTn996zn66NDiQ5jeAeKfoCT dIf7w3d5RNW3F7rzTPNwRvH0EHf7ypglXE+aE6ExTMTvsev/R4fq7KAscwmf+PjT gklajxIJ0MR4s79osY8ShLOhR8/TIkXEeKjuvLb17+LtRfkLiwonxJDT/fpn2fo= -----END CERTIFICATE-----Generated at Tue May 12 23:13:23 2026 by rpki-client