$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/9a6ace54-f231-4e25-8a36-c461d49dfa6b.roa File: 9a6ace54-f231-4e25-8a36-c461d49dfa6b.roa (raw, json) Hash identifier: 5+1ccQIGt7LlyQDo8uXSZAlAae1DJxhJDm5FTZwsyY0= Subject key identifier: F8:AB:91:4C:5C:DF:67:2F:61:10:31:BC:71:52:63:8E:B7:43:27:5C Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 433D1A7FB9501C472688CA8BF36E720E47036887 Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/9a6ace54-f231-4e25-8a36-c461d49dfa6b.roa Signing time: Fri 07 Aug 2026 00:50:20 +0000 ROA not before: Fri 07 Aug 2026 00:50:20 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 8987 IP address blocks: 96.127.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:3d:1a:7f:b9:50:1c:47:26:88:ca:8b:f3:6e:72:0e:47:03:68:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: Aug 7 00:50:20 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=41759383d3befe4f4c7fa4908f75bba6c96be2bd3c524dcdbaaaf1a2ad3253b4, CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:18:f6:b2:d8:26:49:56:f1:d9:c8:4a:9e:93: 46:08:9c:78:3e:54:f3:4d:04:c4:c0:fa:cc:62:57: 27:0f:56:7d:2b:43:e7:4a:ce:5b:df:36:de:5a:05: 9f:65:3f:b1:d9:b1:1e:d3:0f:74:30:fc:dd:5b:b1: 25:48:15:e9:26:92:b3:43:de:20:5c:0b:f2:8a:2c: c1:7a:5d:c4:43:f7:5d:a5:38:7d:07:2f:ef:d9:0c: f9:cf:c2:47:68:a2:e8:37:e1:42:f6:79:40:8e:bd: 5d:9e:16:d3:48:d5:84:42:e2:d3:63:63:76:29:c6: 55:8d:79:5f:aa:38:d2:7e:e9:1a:d0:40:2d:75:db: ab:e3:b5:d8:18:9a:64:5a:37:40:25:24:f1:ce:d9: 02:59:9c:a0:db:68:9a:ee:05:03:3d:9c:14:76:4a: 0a:0c:4e:51:5b:0c:02:7a:69:da:80:6d:d5:b2:e9: fb:9a:01:fa:41:9f:d2:bd:cf:df:c5:5b:34:8d:38: e5:64:be:3f:3a:e6:27:7d:73:74:f3:c2:da:ce:78: 51:40:20:e3:44:08:9b:4f:82:f1:ef:65:db:3a:1c: a1:c2:d8:05:b4:f5:e6:17:b9:7b:2e:32:ac:4c:37: 8d:10:28:40:17:66:5e:92:ae:7f:cb:5f:3b:2c:55: 10:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:AB:91:4C:5C:DF:67:2F:61:10:31:BC:71:52:63:8E:B7:43:27:5C X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/9a6ace54-f231-4e25-8a36-c461d49dfa6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.127.4.0/22 Signature Algorithm: sha256WithRSAEncryption 14:d9:b2:31:d6:6c:85:bd:31:44:72:1e:ad:6e:ed:a4:de:6e: 3f:23:13:4c:bb:4f:97:1c:fc:22:ac:3d:19:8e:91:04:4a:37: 77:7e:6f:ad:34:79:a6:58:fd:e7:13:e6:b9:2d:6d:31:f1:70: 2f:9f:8f:c6:b9:68:b5:aa:cd:0a:3e:71:a6:60:b6:45:3c:13: 8a:12:b1:48:cc:1d:05:9b:a4:7b:6f:74:ac:2d:48:26:f4:68: 7f:9a:cf:89:fc:ab:d6:60:a0:77:d6:ab:08:1b:ac:64:c5:ef: 0e:01:13:68:33:8f:5f:f8:db:f8:2d:9f:75:03:ea:1c:e2:3e: 8c:71:84:12:db:13:05:4e:2f:d9:ca:3f:59:4e:0f:3f:95:22: 8c:80:1b:1a:37:a4:06:8b:a1:a2:57:f1:d7:f6:ac:31:8c:d4: 97:b4:8a:da:df:8c:9d:50:33:1a:17:3b:62:da:59:9f:60:e4: 8a:c7:ea:5b:b6:72:93:d6:fe:86:05:8f:85:51:b9:d0:06:8a: 7b:8a:23:cd:79:a0:25:39:39:d1:5f:0f:70:10:80:97:ff:5f: 90:fd:0e:59:2b:63:b4:43:0e:7e:59:55:af:3f:e5:09:85:64: ec:81:7f:20:5f:65:4c:c4:89:8f:41:0b:09:ec:6e:6d:28:0d: 1e:f6:fc:35 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQz0af7lQHEcmiMqL825yDkcDaIcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjYwODA3MDA1MDIwWhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MTc1OTM4M2QzYmVmZTRmNGM3ZmE0OTA4Zjc1YmJhNmM5 NmJlMmJkM2M1MjRkY2RiYWFhZjFhMmFkMzI1M2I0MS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCGPay2CZJVvHZyEqek0YInHg+VPNNBMTA+sxiVycPVn0r Q+dKzlvfNt5aBZ9lP7HZsR7TD3Qw/N1bsSVIFekmkrND3iBcC/KKLMF6XcRD912l OH0HL+/ZDPnPwkdooug34UL2eUCOvV2eFtNI1YRC4tNjY3YpxlWNeV+qONJ+6RrQ QC1126vjtdgYmmRaN0AlJPHO2QJZnKDbaJruBQM9nBR2SgoMTlFbDAJ6adqAbdWy 6fuaAfpBn9K9z9/FWzSNOOVkvj865id9c3TzwtrOeFFAIONECJtPgvHvZds6HKHC 2AW09eYXuXsuMqxMN40QKEAXZl6Srn/LXzssVRBdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+KuRTFzfZy9hEDG8cVJjjrdDJ1wwHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1LzlhNmFjZTU0LWYyMzEtNGUyNS04YTM2LWM0NjFkNDlkZmE2Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJgfwQwDQYJKoZIhvcNAQELBQADggEBABTZsjHWbIW9MURyHq1u7aTebj8j E0y7T5cc/CKsPRmOkQRKN3d+b600eaZY/ecT5rktbTHxcC+fj8a5aLWqzQo+caZg tkU8E4oSsUjMHQWbpHtvdKwtSCb0aH+az4n8q9ZgoHfWqwgbrGTF7w4BE2gzj1/4 2/gtn3UD6hziPoxxhBLbEwVOL9nKP1lODz+VIoyAGxo3pAaLoaJX8df2rDGM1Je0 itrfjJ1QMxoXO2LaWZ9g5IrH6lu2cpPW/oYFj4VRudAGinuKI815oCU5OdFfD3AQ gJf/X5D9DlkrY7RDDn5ZVa8/5QmFZOyBfyBfZUzEiY9BCwnsbm0oDR72/DU= -----END CERTIFICATE-----Generated at Thu Sep 3 12:57:56 2026 by rpki-client