$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/8f960b0d-c291-490f-aff5-abe964221bd2.roa File: 8f960b0d-c291-490f-aff5-abe964221bd2.roa (raw, json) Hash identifier: lEVFDGcG50Urbu8ALNST8U29nuSzS5MuuViLJ2LibvM= Subject key identifier: 69:58:38:1C:98:74:7B:C2:70:0F:CD:DC:02:A4:2D:BE:2F:63:19:A7 Certificate issuer: /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Certificate serial: 3EC4BFF7E55C4702373FC28FE52B73765441325B Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/8f960b0d-c291-490f-aff5-abe964221bd2.roa Signing time: Wed 06 May 2026 00:00:21 +0000 ROA not before: Wed 06 May 2026 00:00:21 +0000 ROA not after: Tue 04 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2620:108:7000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:c4:bf:f7:e5:5c:47:02:37:3f:c2:8f:e5:2b:73:76:54:41:32:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3 Validity Not Before: May 6 00:00:21 2026 GMT Not After : Aug 4 23:59:59 2026 GMT Subject: serialNumber=91a53ef4d895360375d0b300955c3635f13828d15f30710a5f0b8972324efbcf, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6e:c0:8d:ca:d6:d3:71:df:ef:b6:e5:66:ce: df:04:b2:e8:e9:ce:05:5b:1b:7f:ee:0d:f7:95:fd: 44:14:f3:d5:a8:14:db:b8:f9:af:26:dc:96:20:bc: f3:ef:32:96:57:cb:d4:dd:0c:6b:9a:80:c1:78:31: ec:1a:e9:87:53:87:75:0c:6a:b2:15:47:9b:78:88: f3:67:3f:59:05:4b:d3:ca:30:07:8c:95:50:38:82: fa:32:c2:f0:d1:ce:e7:4c:5e:b7:7e:b4:e4:b3:21: ad:8a:b4:6d:6c:cd:23:7a:19:f0:06:26:1f:6d:b7: 6b:d6:8c:1a:de:83:4b:0f:bf:e4:6e:c1:34:01:ba: 54:dc:50:4c:37:e5:7c:d1:1e:ef:34:73:bd:8d:96: fb:fb:b7:93:ca:68:70:f8:3b:e0:40:f8:c1:71:2f: a6:d3:08:ee:d3:a3:75:93:ff:20:6d:1d:d0:3d:4d: 30:d8:10:df:f8:0b:f6:2f:db:df:a4:26:9b:0d:64: bd:a7:f0:09:0d:14:1b:f2:43:e5:cc:d6:ae:b8:cf: ae:d4:ec:b0:14:d1:cb:2c:a9:a7:f5:51:b2:1f:81: cb:ab:dc:50:c5:db:8d:ce:1c:bc:c7:72:c1:5b:b6: 1a:ba:f6:e4:59:3a:b2:06:7f:44:d5:b8:fd:8a:3c: 40:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:58:38:1C:98:74:7B:C2:70:0F:CD:DC:02:A4:2D:BE:2F:63:19:A7 X509v3 Authority Key Identifier: keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/8f960b0d-c291-490f-aff5-abe964221bd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2620:108:7000::/44 Signature Algorithm: sha256WithRSAEncryption 7c:41:3d:11:71:f1:38:22:a2:65:06:40:66:28:2f:02:46:8e: be:5f:56:1e:ea:84:b3:f5:42:29:68:f8:59:09:b9:b7:3f:5b: 93:1c:3c:bf:dd:66:b9:de:5c:97:e6:9a:23:d7:ba:97:4f:c9: 17:1e:db:18:86:1f:28:50:08:98:e0:0a:c2:71:22:7a:b6:67: 66:50:e8:ef:71:ee:77:3d:c4:67:7b:65:8f:9d:de:00:ff:1c: b6:08:cc:a8:d0:7b:c4:c1:14:c2:b8:3a:c1:a7:ac:ff:56:e4: d6:75:43:8a:d0:f5:2c:b4:09:b1:2a:22:6d:ad:13:fe:fa:21: 67:04:7d:85:e7:86:9a:b6:73:e0:0f:e1:69:fb:af:3a:f1:35: 6e:4a:e6:f3:ec:3d:28:b0:ed:ae:f7:b0:dc:4e:55:4f:0e:0c: 6b:cb:20:34:f2:fc:50:32:26:b3:c0:34:0f:52:c7:34:76:9a: 59:fe:f2:27:7b:23:62:a1:c4:be:dd:98:68:8c:e5:ce:4a:4f: bd:61:11:7a:71:00:2c:e8:14:21:44:ff:6f:2f:2a:60:64:54: 42:dc:13:79:4f:14:e2:37:f0:b9:3f:33:3b:d8:07:29:31:70: 83:54:9e:5a:2e:d8:af:99:47:7b:8e:b9:fd:39:32:d9:b9:1e: be:b7:b9:b9 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUPsS/9+VcRwI3P8KP5StzdlRBMlswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTE1ZDhhYTEwZDYyZGJkZDM0ODMyNjg3NmJhNTY3NTNj Yjk5YjQ2NGNjNDU1MzI0YjMwHhcNMjYwNTA2MDAwMDIxWhcNMjYwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MWE1M2VmNGQ4OTUzNjAzNzVkMGIzMDA5NTVjMzYzNWYx MzgyOGQxNWYzMDcxMGE1ZjBiODk3MjMyNGVmYmNmMS0wKwYDVQQDEyRkZGZiYzk3 Yy03YmVkLTQwZGYtOTVjYS1lNjY0YjI5ZDdiMjcwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDbsCNytbTcd/vtuVmzt8EsujpzgVbG3/uDfeV/UQU89Wo FNu4+a8m3JYgvPPvMpZXy9TdDGuagMF4Mewa6YdTh3UMarIVR5t4iPNnP1kFS9PK MAeMlVA4gvoywvDRzudMXrd+tOSzIa2KtG1szSN6GfAGJh9tt2vWjBreg0sPv+Ru wTQBulTcUEw35XzRHu80c72Nlvv7t5PKaHD4O+BA+MFxL6bTCO7To3WT/yBtHdA9 TTDYEN/4C/Yv29+kJpsNZL2n8AkNFBvyQ+XM1q64z67U7LAU0cssqaf1UbIfgcur 3FDF243OHLzHcsFbthq69uRZOrIGf0TVuP2KPEAtAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUaVg4HJh0e8JwD83cAqQtvi9jGacwHwYDVR0jBBgwFoAUkS3GDddkKYK8 rn+B/jxMEnKAIh8wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MTg4YWMyNC0w OWNjLTRmMjAtOWRiZC1jZDkwMDVkMjc5N2UvYTE1ZDhhYTEwZDYyZGJkZDM0ODMy Njg3NmJhNTY3NTNjYjk5YjQ2NGNjNDU1MzI0YjMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNjAyYTI2ZTUtNGE5ZS00ZTVlLTg5ZjAtZWY4 OTE0OTBkOWM5LzhmOTYwYjBkLWMyOTEtNDkwZi1hZmY1LWFiZTk2NDIyMWJkMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzYwMmEyNmU1LTRhOWUtNGU1ZS04OWYw LWVmODkxNDkwZDljOS9ZdHZkTklNbWgydWxaMVBMbWJSa3pFVlRKTE0uY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmIAEIcAAwDQYJKoZIhvcNAQELBQADggEBAHxBPRFx8TgiomUGQGYoLwJG jr5fVh7qhLP1Qilo+FkJubc/W5McPL/dZrneXJfmmiPXupdPyRce2xiGHyhQCJjg CsJxInq2Z2ZQ6O9x7nc9xGd7ZY+d3gD/HLYIzKjQe8TBFMK4OsGnrP9W5NZ1Q4rQ 9Sy0CbEqIm2tE/76IWcEfYXnhpq2c+AP4Wn7rzrxNW5K5vPsPSiw7a73sNxOVU8O DGvLIDTy/FAyJrPANA9SxzR2mln+8id7I2KhxL7dmGiM5c5KT71hEXpxACzoFCFE /28vKmBkVELcE3lPFOI38Lk/MzvYBykxcINUnlou2K+ZR3uOuf05Mtm5Hr63ubk= -----END CERTIFICATE-----Generated at Wed May 13 17:22:44 2026 by rpki-client