$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/cd3025ff-3653-4276-a530-1fa2eed87e53.roa File: cd3025ff-3653-4276-a530-1fa2eed87e53.roa (raw, json) Hash identifier: CG1uri3gFeWEOqjWaGIIT4bROyYKMIurwZoB3aLT25E= Subject key identifier: 95:82:C9:7B:8D:22:02:CD:B4:15:78:AB:D7:51:3E:DD:6A:84:02:18 Certificate issuer: /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Certificate serial: 5BD5F11BC84F8FE313AB9FB482D0B26ADCCC0405 Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/cd3025ff-3653-4276-a530-1fa2eed87e53.roa Signing time: Thu 23 Jul 2026 00:00:04 +0000 ROA not before: Thu 23 Jul 2026 00:00:04 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2620:107:3000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:d5:f1:1b:c8:4f:8f:e3:13:ab:9f:b4:82:d0:b2:6a:dc:cc:04:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Validity Not Before: Jul 23 00:00:04 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=7a3edcac2ef8936c2a3cfea28b768f84ed42fde4a749de4ffca75b1c09d5a46e, CN=71c3876e-b944-4600-92c7-cec33d89523f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:43:d3:12:e9:2c:c3:04:fe:4e:dd:db:a3:ca: 86:ad:e5:f0:37:c5:75:23:ca:eb:fa:2b:96:42:82: ef:8b:80:c1:1e:c1:14:d4:03:e0:62:26:21:b5:da: 2b:1a:93:ac:61:cd:54:86:c4:f7:a5:37:0a:25:b2: d2:05:84:9e:7f:88:bc:31:88:fb:17:f2:b8:51:15: 7d:58:c4:9e:f4:46:32:de:bf:fd:96:87:1a:88:13: 98:f5:91:78:d1:c0:ee:74:8c:0c:99:87:bb:27:73: 5c:12:6c:8e:45:ad:b7:a2:f0:92:da:38:87:1b:9f: 63:e7:3b:43:b0:b2:e5:15:a0:cc:6c:89:3d:56:7c: f0:9a:5b:67:e8:8d:4a:92:60:ce:ed:dd:c9:67:da: 0f:75:47:bc:eb:97:63:43:97:a4:08:a7:1a:39:b0: 4a:ff:3d:55:d1:b2:3c:34:69:4a:12:59:9f:f2:ba: 79:59:fa:ce:90:f8:84:51:c3:c3:40:ff:1c:d0:87: cd:67:f8:18:c2:66:9d:a4:33:21:84:ca:3d:47:ac: 2f:d0:4c:92:f2:f3:a9:c2:87:aa:f3:b1:ed:1b:de: 60:4b:18:20:ee:33:5a:92:06:07:de:8d:9b:e7:97: 1c:c7:ba:52:4a:e3:c2:60:1b:66:60:bb:2c:ae:86: 29:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:82:C9:7B:8D:22:02:CD:B4:15:78:AB:D7:51:3E:DD:6A:84:02:18 X509v3 Authority Key Identifier: keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/cd3025ff-3653-4276-a530-1fa2eed87e53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2620:107:3000::/44 Signature Algorithm: sha256WithRSAEncryption 55:36:3f:c4:5c:22:11:43:b4:51:7a:95:bc:35:90:e0:3c:dd: 0b:ed:53:8e:cd:ac:78:33:42:cf:0b:77:38:e1:64:b2:43:4a: 66:4f:01:de:98:85:fe:ae:9a:fc:82:f7:5e:a8:0d:1e:df:0f: 88:a5:f4:06:bd:11:fa:e9:7e:73:01:d9:4b:79:4b:c7:be:72: 5f:ea:11:dd:d5:2c:7b:d4:bf:c7:78:b7:99:92:a1:6f:af:9a: 0b:15:0a:2d:9d:4a:e9:3f:7b:7c:46:05:7e:b9:b3:b6:15:aa: aa:b5:b0:a3:02:87:88:56:2d:2c:83:0b:5d:a3:44:0f:bc:cb: 51:ba:a9:a5:97:a4:d1:95:d5:0f:b8:5e:f4:aa:df:b8:99:ad: 67:a3:ea:1b:bb:9f:f4:bc:dc:04:d4:31:35:26:34:77:12:63: 52:4b:54:bc:84:96:67:c6:b1:1b:b1:62:62:f8:e8:bc:52:8d: 45:24:ec:30:39:d2:9b:a8:7a:4a:b1:51:8e:79:21:73:14:88: ed:9c:ee:84:80:94:1b:5e:29:8f:a6:dc:31:30:77:a7:00:8d: bc:aa:e0:c7:47:24:c0:fb:d8:26:65:84:0f:01:9e:0d:f0:e4: fc:80:0b:61:87:36:c0:88:87:9d:c3:4e:8f:e9:43:29:3b:7f: 7d:cc:07:5a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUW9XxG8hPj+MTq5+0gtCyatzMBAUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNWQ4MDM4MDVlMjE4MjNjOTMxOTg3ZTljOWMzN2YwNDAy MGFhYmFiZjliNGRmZjliNjQwHhcNMjYwNzIzMDAwMDA0WhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3YTNlZGNhYzJlZjg5MzZjMmEzY2ZlYTI4Yjc2OGY4NGVk NDJmZGU0YTc0OWRlNGZmY2E3NWIxYzA5ZDVhNDZlMS0wKwYDVQQDEyQ3MWMzODc2 ZS1iOTQ0LTQ2MDAtOTJjNy1jZWMzM2Q4OTUyM2YwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2Q9MS6SzDBP5O3dujyoat5fA3xXUjyuv6K5ZCgu+LgMEe wRTUA+BiJiG12isak6xhzVSGxPelNwolstIFhJ5/iLwxiPsX8rhRFX1YxJ70RjLe v/2WhxqIE5j1kXjRwO50jAyZh7snc1wSbI5Frbei8JLaOIcbn2PnO0OwsuUVoMxs iT1WfPCaW2fojUqSYM7t3cln2g91R7zrl2NDl6QIpxo5sEr/PVXRsjw0aUoSWZ/y unlZ+s6Q+IRRw8NA/xzQh81n+BjCZp2kMyGEyj1HrC/QTJLy86nCh6rzse0b3mBL GCDuM1qSBgfejZvnlxzHulJK48JgG2ZguyyuhinzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUlYLJe40iAs20FXir11E+3WqEAhgwHwYDVR0jBBgwFoAU/iLg9yLMTwYM WFoSb+aiZQA2XkgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MmIyOTkxZi0y MmM3LTQyZjctOGNmNS00ZjMxMzg4NTk3MzIvNWQ4MDM4MDVlMjE4MjNjOTMxOTg3 ZTljOWMzN2YwNDAyMGFhYmFiZjliNGRmZjliNjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYTg0MTgyM2MtYTEwZC00NzdjLWJmZGYtNDA4 NmYwYjE1OTRjL2NkMzAyNWZmLTM2NTMtNDI3Ni1hNTMwLTFmYTJlZWQ4N2U1My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2E4NDE4MjNjLWExMGQtNDc3Yy1iZmRm LTQwODZmMGIxNTk0Yy9HQ1BKTVpoLW5KdzM4RUFncXJxX20wM19tMlEuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmIAEHMAAwDQYJKoZIhvcNAQELBQADggEBAFU2P8RcIhFDtFF6lbw1kOA8 3QvtU47NrHgzQs8LdzjhZLJDSmZPAd6Yhf6umvyC916oDR7fD4il9Aa9EfrpfnMB 2Ut5S8e+cl/qEd3VLHvUv8d4t5mSoW+vmgsVCi2dSuk/e3xGBX65s7YVqqq1sKMC h4hWLSyDC12jRA+8y1G6qaWXpNGV1Q+4XvSq37iZrWej6hu7n/S83ATUMTUmNHcS Y1JLVLyElmfGsRuxYmL46LxSjUUk7DA50puoekqxUY55IXMUiO2c7oSAlBteKY+m 3DEwd6cAjbyq4MdHJMD72CZlhA8Bng3w5PyAC2GHNsCIh53DTo/pQyk7f33MB1o= -----END CERTIFICATE-----Generated at Sat Jul 25 02:10:50 2026 by rpki-client