$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bc3c50fc-4993-4c0f-8718-f66fc8fccce0.roa File: bc3c50fc-4993-4c0f-8718-f66fc8fccce0.roa (raw, json) Hash identifier: Xjrje3+DtjioCgcIdp+Dk+U9wSAkTZrhMyNZo0MoNkw= Subject key identifier: 92:CC:C2:F2:7A:7C:8A:F3:A3:AF:C6:A5:ED:10:27:00:9F:B2:48:6C Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 672A71556A355967D80E232F642F2C34F4F9D04D Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bc3c50fc-4993-4c0f-8718-f66fc8fccce0.roa Signing time: Mon 04 May 2026 14:50:46 +0000 ROA not before: Mon 04 May 2026 14:50:46 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:2a:71:55:6a:35:59:67:d8:0e:23:2f:64:2f:2c:34:f4:f9:d0:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 4 14:50:46 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=f665fead7b02c65f5412b34f57795c26e7bac66f99a101509ef4b6e8b89e5677, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c1:ad:af:08:a0:34:74:68:5d:12:bd:05:16: e2:9c:69:01:2e:27:fe:87:79:10:a7:ab:1e:15:09: cd:7f:23:ad:c1:95:e6:36:e5:ce:36:2c:a3:7f:19: e8:3c:69:a5:c7:45:d2:7c:b0:ff:36:6c:dd:73:f9: 7c:e9:fa:44:70:2c:1d:8e:c7:c5:04:16:ec:af:6a: 7e:b7:ab:a8:e6:ee:41:61:d9:73:c7:86:08:3e:8f: be:f2:39:93:1c:25:bc:1d:7f:6a:c2:5c:03:59:06: a3:3a:d1:73:4f:d4:c6:ff:20:a1:b2:5f:0e:a6:ae: aa:41:45:5c:2e:b8:9a:ef:d5:be:e5:b2:04:c8:06: cf:81:0b:a6:00:6a:00:95:c8:0d:64:d6:d1:40:cb: c1:03:59:bc:42:4c:85:33:52:15:a9:6f:be:e6:39: c5:a2:4b:f2:aa:63:f4:34:a7:6e:27:7f:47:99:8d: b3:fc:3d:47:2a:d1:5f:40:86:7d:2d:a5:71:25:9b: 14:da:c3:11:d1:77:80:6d:8a:46:5d:36:86:70:bd: b9:13:e6:0c:73:d5:e1:6d:62:97:a2:0a:c8:68:b2: 65:b0:0b:26:f3:a3:4f:3a:66:07:d6:7d:a7:59:8b: da:88:46:9c:34:b7:4a:b4:64:a0:b1:bb:e4:ff:44: b7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:CC:C2:F2:7A:7C:8A:F3:A3:AF:C6:A5:ED:10:27:00:9F:B2:48:6C X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bc3c50fc-4993-4c0f-8718-f66fc8fccce0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c11::/48 Signature Algorithm: sha256WithRSAEncryption 00:0a:25:a6:2c:1c:23:87:e9:77:58:3c:52:72:52:5c:25:83: 68:63:28:83:26:e3:29:0f:ec:96:d9:15:e4:18:4e:b2:65:6b: 2d:95:92:2f:67:3b:09:84:e8:9d:14:45:2e:d0:92:85:33:73: a9:8b:7b:89:a5:0e:a0:dd:a6:a9:9b:c2:11:65:0c:89:49:32: 5c:2e:67:dd:65:6f:9a:de:61:e9:57:13:4f:34:8b:06:69:37: 9b:f9:0c:d4:47:78:54:0f:fd:9c:f8:b9:e3:89:a1:e8:a7:c8: 59:82:ce:81:d6:df:b5:fd:13:14:75:95:9e:07:21:76:a7:fb: 9c:0f:96:49:8a:b9:32:7b:6b:b7:e9:21:01:bc:b0:74:4d:b6: 2c:f9:9a:f9:4f:13:95:e9:bf:8a:f4:d7:c0:79:40:43:41:d9: 36:e0:65:45:3f:b3:dc:b7:41:70:f8:69:11:38:7d:38:25:f0: 71:28:fb:83:6b:20:5e:e1:9d:36:11:4a:45:74:ad:45:88:9d: 5b:03:f7:69:e1:92:1f:6f:cd:0a:1b:4c:3e:2d:62:2b:da:43: d2:a5:18:0d:3c:8a:65:06:7b:25:ec:eb:f3:22:48:77:f1:58: 16:9a:f5:dd:53:8f:f2:6c:9f:53:c5:50:2a:c7:22:82:0a:1b: 77:aa:ca:39 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZypxVWo1WWfYDiMvZC8sNPT50E0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwNTA0MTQ1MDQ2WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNjY1ZmVhZDdiMDJjNjVmNTQxMmIzNGY1Nzc5NWMyNmU3 YmFjNjZmOTlhMTAxNTA5ZWY0YjZlOGI4OWU1Njc3MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPwa2vCKA0dGhdEr0FFuKcaQEuJ/6HeRCnqx4VCc1/I63B leY25c42LKN/Geg8aaXHRdJ8sP82bN1z+Xzp+kRwLB2Ox8UEFuyvan63q6jm7kFh 2XPHhgg+j77yOZMcJbwdf2rCXANZBqM60XNP1Mb/IKGyXw6mrqpBRVwuuJrv1b7l sgTIBs+BC6YAagCVyA1k1tFAy8EDWbxCTIUzUhWpb77mOcWiS/KqY/Q0p24nf0eZ jbP8PUcq0V9Ahn0tpXElmxTawxHRd4BtikZdNoZwvbkT5gxz1eFtYpeiCshosmWw Cybzo086ZgfWfadZi9qIRpw0t0q0ZKCxu+T/RLefAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUkszC8np8ivOjr8al7RAnAJ+ySGwwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2JjM2M1MGZjLTQ5OTMtNGMwZi04NzE4LWY2NmZjOGZjY2NlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBEwDQYJKoZIhvcNAQELBQADggEBAAAKJaYsHCOH6XdYPFJyUlwl g2hjKIMm4ykP7JbZFeQYTrJlay2Vki9nOwmE6J0URS7QkoUzc6mLe4mlDqDdpqmb whFlDIlJMlwuZ91lb5reYelXE080iwZpN5v5DNRHeFQP/Zz4ueOJoeinyFmCzoHW 37X9ExR1lZ4HIXan+5wPlkmKuTJ7a7fpIQG8sHRNtiz5mvlPE5Xpv4r018B5QENB 2TbgZUU/s9y3QXD4aRE4fTgl8HEo+4NrIF7hnTYRSkV0rUWInVsD92nhkh9vzQob TD4tYivaQ9KlGA08imUGeyXs6/MiSHfxWBaa9d1Tj/Jsn1PFUCrHIoIKG3eqyjk= -----END CERTIFICATE-----Generated at Tue May 12 23:39:41 2026 by rpki-client