$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7da7eb3f-5bb5-4bf8-8430-50e8291f4d1e.roa File: 7da7eb3f-5bb5-4bf8-8430-50e8291f4d1e.roa (raw, json) Hash identifier: 33HYHUwINBWcHvRFafLGHtA9mEKzoCXrqkaPR7+CVTo= Subject key identifier: 52:5D:9D:DA:6D:23:7C:64:3C:79:B2:9E:AC:73:C0:27:13:59:C4:94 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 06A45C711A62D970D9E15E0B96B82DD7F4E21D29 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7da7eb3f-5bb5-4bf8-8430-50e8291f4d1e.roa Signing time: Mon 04 May 2026 15:00:05 +0000 ROA not before: Mon 04 May 2026 15:00:05 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2606:8140:500::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:a4:5c:71:1a:62:d9:70:d9:e1:5e:0b:96:b8:2d:d7:f4:e2:1d:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: May 4 15:00:05 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=daa93f9bd3751728368eccbfeadd9f9a770bc0a6776b8f3dfabf1ecb885f1293, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8c:38:e7:51:23:48:b4:fb:54:62:ac:2d:de: 74:cd:5e:d7:31:6f:d2:1c:0b:81:3f:45:b2:f9:31: 6a:de:37:36:fe:03:12:a5:5b:ba:c1:aa:12:57:25: 33:95:16:b4:0f:7e:b6:d8:db:23:c8:ab:d4:c9:2a: d8:46:14:b8:94:d0:5b:24:0d:ff:ec:b1:c1:36:d9: ef:06:62:1d:08:9f:3f:cc:47:a1:b1:13:0b:7a:f8: 11:48:96:49:88:a3:ed:88:c1:09:21:e3:24:fd:a8: 1b:12:db:22:1d:4c:8a:ed:77:e5:a5:63:39:da:55: 28:82:c4:dc:ff:db:7d:4d:90:96:7e:30:87:36:b0: ee:0e:39:a3:63:19:52:c3:9a:cd:6f:98:dd:9a:10: b6:d8:a3:94:ef:e6:86:27:6f:e0:ca:44:1c:7b:b8: 4b:4f:02:28:cd:d0:37:3d:99:c4:24:61:46:35:82: ad:05:18:17:2d:cd:8d:2a:a0:87:93:cf:64:35:4b: c2:da:41:4a:ef:83:d8:13:60:20:71:d2:d3:81:9b: e6:4e:7c:f1:ce:7d:7d:82:f9:cd:d6:77:24:e9:67: 3f:fd:c3:77:24:36:76:6e:b8:98:e9:a1:ea:26:85: 13:f7:54:dd:7a:13:0f:5c:ad:bb:e9:14:be:83:07: dd:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:5D:9D:DA:6D:23:7C:64:3C:79:B2:9E:AC:73:C0:27:13:59:C4:94 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7da7eb3f-5bb5-4bf8-8430-50e8291f4d1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2606:8140:500::/40 Signature Algorithm: sha256WithRSAEncryption 82:64:18:47:89:df:9a:3d:a0:cd:b8:96:3d:4c:50:29:5b:a2: 19:9a:35:25:97:9a:d0:4a:ee:71:6a:ce:66:d2:94:57:47:f5: 5a:b7:e4:63:dc:75:9b:f4:63:5f:f1:bf:d3:0d:c3:42:7f:ce: e2:3f:7e:d0:f9:92:05:05:a1:02:12:cf:30:2c:fb:50:91:d2: 25:ed:f2:d4:e1:64:4f:15:f0:50:16:0b:4b:af:3f:72:44:a7: 2d:11:ab:cd:d7:27:c9:ce:5e:7e:9b:64:7c:d5:f5:e9:64:32: 56:82:56:ea:04:2a:50:00:83:59:76:ee:18:9c:70:c5:89:c7: 56:e1:48:d4:c7:ba:ec:36:6d:19:74:45:77:51:72:d1:2e:b1: b5:39:40:ae:73:16:42:68:01:87:32:50:01:cd:5a:65:e3:0d: 54:54:98:50:8f:5c:0f:05:95:ad:9f:12:7c:44:52:68:db:9a: cd:a9:b9:14:af:96:ee:93:37:83:ec:3d:ea:38:dc:dd:52:de: b5:a4:1d:85:14:a9:1a:56:e6:d4:f4:60:f4:20:dd:d7:7b:78: 7c:a8:5a:30:8b:cc:92:98:99:7c:4c:e4:c8:d5:4e:3a:bf:fa: ff:82:bd:46:0e:0e:92:99:e0:a3:d7:9b:e6:ad:e2:75:b9:8c: 5c:d6:b0:96 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUBqRccRpi2XDZ4V4Llrgt1/TiHSkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwNTA0MTUwMDA1WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkYWE5M2Y5YmQzNzUxNzI4MzY4ZWNjYmZlYWRkOWY5YTc3 MGJjMGE2Nzc2YjhmM2RmYWJmMWVjYjg4NWYxMjkzMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvjDjnUSNItPtUYqwt3nTNXtcxb9IcC4E/RbL5MWreNzb+ AxKlW7rBqhJXJTOVFrQPfrbY2yPIq9TJKthGFLiU0FskDf/sscE22e8GYh0Inz/M R6GxEwt6+BFIlkmIo+2IwQkh4yT9qBsS2yIdTIrtd+WlYznaVSiCxNz/231NkJZ+ MIc2sO4OOaNjGVLDms1vmN2aELbYo5Tv5oYnb+DKRBx7uEtPAijN0Dc9mcQkYUY1 gq0FGBctzY0qoIeTz2Q1S8LaQUrvg9gTYCBx0tOBm+ZOfPHOfX2C+c3WdyTpZz/9 w3ckNnZuuJjpoeomhRP3VN16Ew9crbvpFL6DB93TAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUUl2d2m0jfGQ8ebKerHPAJxNZxJQwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzdkYTdlYjNmLTViYjUtNGJmOC04NDMwLTUwZTgyOTFmNGQxZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBoFABTANBgkqhkiG9w0BAQsFAAOCAQEAgmQYR4nfmj2gzbiWPUxQKVui GZo1JZea0ErucWrOZtKUV0f1WrfkY9x1m/RjX/G/0w3DQn/O4j9+0PmSBQWhAhLP MCz7UJHSJe3y1OFkTxXwUBYLS68/ckSnLRGrzdcnyc5efptkfNX16WQyVoJW6gQq UACDWXbuGJxwxYnHVuFI1Me67DZtGXRFd1Fy0S6xtTlArnMWQmgBhzJQAc1aZeMN VFSYUI9cDwWVrZ8SfERSaNuazam5FK+W7pM3g+w96jjc3VLetaQdhRSpGlbm1PRg 9CDd13t4fKhaMIvMkpiZfEzkyNVOOr/6/4K9Rg4Okpngo9eb5q3idbmMXNawlg== -----END CERTIFICATE-----Generated at Tue May 12 23:16:08 2026 by rpki-client