$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bf373cb6-3001-4d70-b279-366181775861.roa File: bf373cb6-3001-4d70-b279-366181775861.roa (raw, json) Hash identifier: 10UFqSr04qL4ITFsaihngy7/DBcHylqRQsxy0vIBGHs= Subject key identifier: D1:72:12:CE:52:1D:E8:A5:94:57:14:E3:52:38:3C:C6:07:57:6F:E9 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 7AF404F63C65A3DA1C6F332C2408DD77861279FC Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bf373cb6-3001-4d70-b279-366181775861.roa Signing time: Fri 08 May 2026 02:50:09 +0000 ROA not before: Fri 08 May 2026 02:50:09 +0000 ROA not after: Thu 06 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:c05::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:f4:04:f6:3c:65:a3:da:1c:6f:33:2c:24:08:dd:77:86:12:79:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 8 02:50:09 2026 GMT Not After : Aug 6 23:59:59 2026 GMT Subject: serialNumber=7db6714d0c68543c0b490ae37aa807c3d1dd554118441f1f5d2e5508b46bbbdf, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e3:25:02:bb:c1:67:d5:44:2e:f3:cd:c8:a2: 8e:76:11:df:02:08:3d:e7:86:9e:64:51:dd:d3:6f: b2:b5:0a:90:b6:de:8a:eb:48:c3:3d:9b:c7:c1:f3: 5e:87:33:58:6d:0d:de:9f:b8:e3:73:f1:fd:a1:1a: ab:f7:9d:45:b2:63:1d:45:b8:5a:76:80:5f:cb:41: 95:79:1e:7f:6e:cc:b9:19:f4:a1:2f:41:e6:50:93: f1:c7:48:3d:c2:65:88:c1:69:df:67:b2:04:56:f4: 62:5e:8b:6d:b5:f0:a0:1e:11:9d:7b:dc:60:0b:8c: e7:5b:a9:db:24:e2:4d:80:0d:ca:29:d7:da:41:93: 8d:ba:08:c5:81:31:17:49:ce:54:44:95:0e:f4:f4: b6:5f:52:67:8e:c1:9d:c9:de:f7:26:f9:8e:7b:bf: ca:25:5b:17:55:c3:ff:c4:d1:d2:65:05:8e:24:8e: 03:cd:e3:66:64:55:41:bf:2f:bf:02:47:86:cf:eb: 70:ce:4b:84:5b:24:1d:a4:a6:08:7f:29:71:68:81: 07:8c:74:15:11:ea:5c:d0:4a:41:54:fc:1c:f7:2a: ac:67:c3:93:fa:ab:8a:43:45:09:48:4e:bd:ce:9f: 38:ee:da:60:12:c3:bf:75:77:32:2d:6f:1c:e7:2c: 53:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:72:12:CE:52:1D:E8:A5:94:57:14:E3:52:38:3C:C6:07:57:6F:E9 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bf373cb6-3001-4d70-b279-366181775861.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c05::/48 Signature Algorithm: sha256WithRSAEncryption 87:39:0c:c7:dc:8b:46:9d:c6:8c:a8:72:40:d2:6d:a5:9d:73: a6:a0:41:fd:08:04:d1:86:b0:fb:96:c0:9c:f7:a7:1b:fb:5d: 04:e5:70:d5:4d:ee:f6:46:fa:41:42:75:6b:34:4c:21:83:7a: 7d:b3:d9:4f:71:83:ee:c8:0a:d7:3e:bb:19:dd:0b:27:ad:53: f1:c4:2d:ff:07:51:cd:87:40:75:2f:03:19:e2:30:ec:d4:92: 50:7e:0e:9e:6d:a4:e3:d1:58:9f:db:e7:23:23:c5:b2:6a:c4: 26:66:b3:5b:1f:0f:34:98:14:0d:7f:35:7e:aa:c6:b0:93:f7: 40:d1:0e:6f:35:28:54:7c:f6:a8:37:82:1f:bc:06:58:99:2f: 99:87:40:66:c7:0b:4b:a0:7a:af:aa:28:1c:66:6d:7c:ad:92: c3:ca:32:d1:d5:ca:b3:08:3e:43:a2:fc:aa:fa:03:eb:59:df: 85:fd:3b:90:5d:10:c6:6e:03:38:e4:52:ff:12:af:22:a3:40: ee:f2:94:ec:31:43:9e:89:a1:e7:54:3d:59:ce:72:1b:4a:dd: a3:2b:13:fb:fe:f0:67:d3:7d:f4:22:55:f0:8c:7c:20:2c:33: a6:0f:c6:9e:d2:ed:24:19:78:06:66:48:a8:c8:ed:c2:d7:74: 38:8b:60:e4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUevQE9jxlo9ocbzMsJAjdd4YSefwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwNTA4MDI1MDA5WhcNMjYwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZGI2NzE0ZDBjNjg1NDNjMGI0OTBhZTM3YWE4MDdjM2Qx ZGQ1NTQxMTg0NDFmMWY1ZDJlNTUwOGI0NmJiYmRmMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDL4yUCu8Fn1UQu883Ioo52Ed8CCD3nhp5kUd3Tb7K1CpC2 3orrSMM9m8fB816HM1htDd6fuONz8f2hGqv3nUWyYx1FuFp2gF/LQZV5Hn9uzLkZ 9KEvQeZQk/HHSD3CZYjBad9nsgRW9GJei2218KAeEZ173GALjOdbqdsk4k2ADcop 19pBk426CMWBMRdJzlRElQ709LZfUmeOwZ3J3vcm+Y57v8olWxdVw//E0dJlBY4k jgPN42ZkVUG/L78CR4bP63DOS4RbJB2kpgh/KXFogQeMdBUR6lzQSkFU/Bz3Kqxn w5P6q4pDRQlITr3Onzju2mASw791dzItbxznLFPzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU0XISzlId6KWUVxTjUjg8xgdXb+kwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2JmMzczY2I2LTMwMDEtNGQ3MC1iMjc5LTM2NjE4MTc3NTg2MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAUwDQYJKoZIhvcNAQELBQADggEBAIc5DMfci0adxoyockDSbaWd c6agQf0IBNGGsPuWwJz3pxv7XQTlcNVN7vZG+kFCdWs0TCGDen2z2U9xg+7ICtc+ uxndCyetU/HELf8HUc2HQHUvAxniMOzUklB+Dp5tpOPRWJ/b5yMjxbJqxCZms1sf DzSYFA1/NX6qxrCT90DRDm81KFR89qg3gh+8BliZL5mHQGbHC0ugeq+qKBxmbXyt ksPKMtHVyrMIPkOi/Kr6A+tZ34X9O5BdEMZuAzjkUv8SryKjQO7ylOwxQ56JoedU PVnOchtK3aMrE/v+8GfTffQiVfCMfCAsM6YPxp7S7SQZeAZmSKjI7cLXdDiLYOQ= -----END CERTIFICATE-----Generated at Tue May 12 23:52:59 2026 by rpki-client