$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/173cc917-aed8-4840-82ba-3115e4e87910.roa File: 173cc917-aed8-4840-82ba-3115e4e87910.roa (raw, json) Hash identifier: 98nxRFIIGulQq44qP8b0R0YOiNa8fGEpx4tdt1XfGqc= Subject key identifier: 95:E9:DC:D8:50:56:66:F0:A1:4F:DE:F0:08:76:E5:07:2E:3B:92:60 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 4AF19E2E53B07EBC4590568AA179378238648717 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/173cc917-aed8-4840-82ba-3115e4e87910.roa Signing time: Tue 14 Jul 2026 00:00:07 +0000 ROA not before: Tue 14 Jul 2026 00:00:07 +0000 ROA not after: Mon 12 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2631:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:f1:9e:2e:53:b0:7e:bc:45:90:56:8a:a1:79:37:82:38:64:87:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 14 00:00:07 2026 GMT Not After : Oct 12 23:59:59 2026 GMT Subject: serialNumber=8679a658132a14b4d400d3ab381503f1fa109c4fb44305e248331fe14ee64130, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b3:f6:8c:5d:31:90:2f:56:24:89:09:e3:be: e2:b5:49:1b:9a:5d:69:f8:e6:56:d5:c2:d4:99:45: b3:f8:2e:6c:22:df:30:b0:02:b9:d0:fb:e6:cd:9f: 6c:ae:29:32:ca:db:40:91:09:89:20:43:77:bc:be: bb:4f:79:fc:b9:55:75:a5:68:a2:96:56:b4:5f:57: 94:04:e8:a0:f7:f6:7e:c3:07:63:c0:7f:27:da:ca: e2:96:54:ab:ba:9f:90:1a:cb:c7:74:43:e6:84:9d: b4:1a:0e:b2:2d:69:e5:71:17:1a:d3:cc:3b:5e:6b: 53:46:5c:7d:0a:5a:5e:97:c6:e9:7e:96:05:1d:f4: 47:38:56:d4:a6:b8:e3:e3:d2:b3:a8:fa:d7:d9:aa: b9:bc:5a:76:57:53:c9:ed:48:45:00:4b:4e:a8:18: 12:d5:ff:64:ef:c4:3d:1e:c5:f9:74:56:be:e9:6c: db:3a:cc:c1:9f:6a:19:ff:c5:e1:90:84:89:50:f8: 8f:c0:5b:7f:c6:a8:67:b6:75:b5:03:56:e0:af:af: 33:e9:80:8c:8b:66:fe:04:bf:28:c6:1b:bd:cb:f7: 2c:e6:12:b0:8d:ee:0f:6a:6b:14:36:00:fb:82:40: 8a:ea:08:ad:df:16:0a:1a:30:18:14:eb:d3:06:6b: d7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E9:DC:D8:50:56:66:F0:A1:4F:DE:F0:08:76:E5:07:2E:3B:92:60 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/173cc917-aed8-4840-82ba-3115e4e87910.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2631:1::/48 Signature Algorithm: sha256WithRSAEncryption 41:94:17:4d:1d:9d:2e:c1:c3:b9:0a:71:83:2b:2d:aa:a5:93: 32:c9:3c:5f:02:40:e5:8f:61:9e:f4:7f:89:3c:5a:61:c3:89: 5f:31:37:4c:ea:3a:7a:9b:30:44:b4:5f:32:3b:70:37:61:cb: f6:65:1c:b7:5d:79:1b:71:38:fb:97:08:73:64:db:53:cf:ca: f0:5d:e5:bf:8a:5b:cc:98:38:8d:40:05:04:47:2d:cc:44:95: 88:af:de:69:13:2b:6d:1b:0f:b1:2b:e7:d1:28:1c:2f:bf:ef: 99:bd:7d:57:96:ad:73:80:b0:b2:e2:33:85:14:52:16:dd:4e: ef:fd:e3:2a:c5:3d:98:dd:2d:2c:97:d5:fd:c3:eb:45:a4:f4: 12:68:92:47:5e:92:83:ee:9f:ef:c3:f2:ac:f5:9c:83:a9:57: 92:ec:59:ce:a5:d5:05:d4:c8:b6:3c:fc:19:16:71:f9:f6:53: a1:38:2f:32:1f:0e:b8:84:49:f7:02:2e:1e:76:cb:5e:8e:36: 36:28:79:56:24:c0:da:a2:8b:42:72:f2:84:04:d6:31:08:a5: ce:47:88:a6:8d:48:c3:e0:91:90:9b:3f:94:33:f2:77:36:9e: e8:73:e1:09:ea:c8:75:07:72:fc:b6:17:4f:40:2e:b2:0a:5d: ef:db:15:fe -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSvGeLlOwfrxFkFaKoXk3gjhkhxcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwNzE0MDAwMDA3WhcNMjYxMDEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4Njc5YTY1ODEzMmExNGI0ZDQwMGQzYWIzODE1MDNmMWZh MTA5YzRmYjQ0MzA1ZTI0ODMzMWZlMTRlZTY0MTMwMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5s/aMXTGQL1YkiQnjvuK1SRuaXWn45lbVwtSZRbP4Lmwi 3zCwArnQ++bNn2yuKTLK20CRCYkgQ3e8vrtPefy5VXWlaKKWVrRfV5QE6KD39n7D B2PAfyfayuKWVKu6n5Aay8d0Q+aEnbQaDrItaeVxFxrTzDtea1NGXH0KWl6Xxul+ lgUd9Ec4VtSmuOPj0rOo+tfZqrm8WnZXU8ntSEUAS06oGBLV/2TvxD0exfl0Vr7p bNs6zMGfahn/xeGQhIlQ+I/AW3/GqGe2dbUDVuCvrzPpgIyLZv4EvyjGG73L9yzm ErCN7g9qaxQ2APuCQIrqCK3fFgoaMBgU69MGa9cPAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUlenc2FBWZvChT97wCHblBy47kmAwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzE3M2NjOTE3LWFlZDgtNDg0MC04MmJhLTMxMTVlNGU4NzkxMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmMQABAAAwDQYJKoZIhvcNAQELBQADggEBAEGUF00dnS7Bw7kKcYMrLaql kzLJPF8CQOWPYZ70f4k8WmHDiV8xN0zqOnqbMES0XzI7cDdhy/ZlHLddeRtxOPuX CHNk21PPyvBd5b+KW8yYOI1ABQRHLcxElYiv3mkTK20bD7Er59EoHC+/75m9fVeW rXOAsLLiM4UUUhbdTu/94yrFPZjdLSyX1f3D60Wk9BJokkdekoPun+/D8qz1nIOp V5LsWc6l1QXUyLY8/BkWcfn2U6E4LzIfDriESfcCLh52y16ONjYoeVYkwNqii0Jy 8oQE1jEIpc5HiKaNSMPgkZCbP5Qz8nc2nuhz4QnqyHUHcvy2F09ALrIKXe/bFf4= -----END CERTIFICATE-----Generated at Fri Jul 24 06:29:28 2026 by rpki-client