$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/aa98dcef-bed2-4d89-8256-c5d8b4c03766.roa File: aa98dcef-bed2-4d89-8256-c5d8b4c03766.roa (raw, json) Hash identifier: 8oGQYRVIjvKDsbUAmz4iR2aQtYb7VLF516WELV1y1ys= Subject key identifier: 0E:D4:BF:97:1C:B1:7C:37:1F:16:E9:11:9B:2D:B4:EE:BF:B3:80:7C Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 59A875BF824690249DF18B3D07732A3DE7C12C44 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/aa98dcef-bed2-4d89-8256-c5d8b4c03766.roa Signing time: Sat 25 Apr 2026 00:00:06 +0000 ROA not before: Sat 25 Apr 2026 00:00:06 +0000 ROA not after: Fri 24 Jul 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2631:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:a8:75:bf:82:46:90:24:9d:f1:8b:3d:07:73:2a:3d:e7:c1:2c:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Apr 25 00:00:06 2026 GMT Not After : Jul 24 23:59:59 2026 GMT Subject: serialNumber=fcd646261bb220f61d5877119bca8e2ab5a5e69d4f174db0f3b401126759ce32, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8c:1e:76:83:c5:be:f6:50:04:e8:82:ef:db: b5:21:63:97:2d:1d:33:7d:4d:49:a8:49:30:f3:7b: 7f:06:a3:a4:98:c1:12:cd:ed:4f:2e:10:46:38:2c: 92:dc:d0:25:01:ed:dd:62:f0:b6:41:4f:04:c0:cd: f3:70:f3:b8:6b:b4:97:f4:86:43:5c:ca:4a:89:d2: 30:59:ae:ae:d6:b6:87:21:b1:a6:b3:1d:18:ae:6f: e6:43:e2:6d:e0:51:53:20:a5:62:f0:6a:a5:e9:27: 65:4e:09:0b:01:28:1f:bb:9c:74:eb:32:4c:20:5d: 3a:ac:9d:eb:87:e3:3f:48:9c:d7:f3:92:5f:96:09: ab:bf:1b:ee:19:a7:13:73:56:b0:1f:2d:3e:3d:ad: 4b:2a:5d:f3:8c:ef:9d:2d:dc:4a:06:33:a4:d1:c0: a2:4e:fc:2a:85:05:67:18:c9:6a:e0:1d:0c:26:99: b7:ae:8f:51:10:5f:7f:ad:c3:4d:7e:e1:40:05:65: 9b:4a:7d:31:b9:08:c0:f0:f2:8e:bf:d8:85:34:66: 67:5a:43:25:e9:ea:f3:ee:e7:5b:9f:ac:fd:f2:52: cd:be:a4:a7:cf:00:9e:1f:0e:f8:b4:44:3c:f9:8d: ee:45:5e:67:f0:4e:bb:19:74:01:ba:9c:b7:11:ae: 79:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:D4:BF:97:1C:B1:7C:37:1F:16:E9:11:9B:2D:B4:EE:BF:B3:80:7C X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/aa98dcef-bed2-4d89-8256-c5d8b4c03766.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2631:1::/48 Signature Algorithm: sha256WithRSAEncryption 1d:23:92:97:50:a8:1e:6e:dd:01:65:eb:1f:be:b6:59:a6:58: de:a8:f5:32:ec:2a:58:22:af:07:5b:61:78:42:4f:8e:9a:b9: ec:ff:bf:6c:bd:c9:42:54:f8:fd:d7:04:37:62:43:a6:aa:f5: 00:6c:84:94:7d:4b:d4:cb:36:e6:db:e8:d2:1e:82:1e:7b:76: 5a:8e:71:10:0f:b3:6d:09:03:16:c1:23:1b:3c:b8:6c:d0:5c: 82:85:83:97:ce:f1:e3:4d:43:c1:c2:43:ec:d3:a4:78:f7:7d: 8a:94:c4:bf:95:d6:10:05:94:36:a9:be:0b:c9:4b:52:6d:33: c2:5a:03:37:d2:21:4c:11:e5:27:2f:ea:58:93:80:f8:77:cf: ad:10:a8:46:4c:a4:80:00:23:a9:75:65:d7:9d:92:9e:54:39: df:97:be:30:bd:78:69:fa:75:75:8c:7c:1a:41:8b:cb:15:4d: 01:b0:60:e9:a5:56:30:2f:33:7c:da:22:41:96:c5:74:e8:15: 3d:50:05:9e:0e:fa:d6:93:4e:c5:eb:b7:96:2d:ee:91:f3:41: 73:dc:ec:02:2c:a5:96:f0:b9:68:e3:1d:a0:44:e2:60:46:a3: 70:82:65:13:2f:2e:f1:f5:cb:15:44:e7:a4:a8:0b:f5:87:43: 5a:86:3b:08 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWah1v4JGkCSd8Ys9B3MqPefBLEQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwNDI1MDAwMDA2WhcNMjYwNzI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmY2Q2NDYyNjFiYjIyMGY2MWQ1ODc3MTE5YmNhOGUyYWI1 YTVlNjlkNGYxNzRkYjBmM2I0MDExMjY3NTljZTMyMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCujB52g8W+9lAE6ILv27UhY5ctHTN9TUmoSTDze38Go6SY wRLN7U8uEEY4LJLc0CUB7d1i8LZBTwTAzfNw87hrtJf0hkNcykqJ0jBZrq7Wtoch saazHRiub+ZD4m3gUVMgpWLwaqXpJ2VOCQsBKB+7nHTrMkwgXTqsneuH4z9InNfz kl+WCau/G+4ZpxNzVrAfLT49rUsqXfOM750t3EoGM6TRwKJO/CqFBWcYyWrgHQwm mbeuj1EQX3+tw01+4UAFZZtKfTG5CMDw8o6/2IU0ZmdaQyXp6vPu51ufrP3yUs2+ pKfPAJ4fDvi0RDz5je5FXmfwTrsZdAG6nLcRrnkBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUDtS/lxyxfDcfFukRmy207r+zgHwwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2FhOThkY2VmLWJlZDItNGQ4OS04MjU2LWM1ZDhiNGMwMzc2Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmMQABAAAwDQYJKoZIhvcNAQELBQADggEBAB0jkpdQqB5u3QFl6x++tlmm WN6o9TLsKlgirwdbYXhCT46auez/v2y9yUJU+P3XBDdiQ6aq9QBshJR9S9TLNubb 6NIegh57dlqOcRAPs20JAxbBIxs8uGzQXIKFg5fO8eNNQ8HCQ+zTpHj3fYqUxL+V 1hAFlDapvgvJS1JtM8JaAzfSIUwR5Scv6liTgPh3z60QqEZMpIAAI6l1Zdedkp5U Od+XvjC9eGn6dXWMfBpBi8sVTQGwYOmlVjAvM3zaIkGWxXToFT1QBZ4O+taTTsXr t5Yt7pHzQXPc7AIspZbwuWjjHaBE4mBGo3CCZRMvLvH1yxVE56SoC/WHQ1qGOwg= -----END CERTIFICATE-----Generated at Tue May 12 23:26:38 2026 by rpki-client