$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/094c2acc-93b4-4a01-ac79-bee984bf842b.roa File: 094c2acc-93b4-4a01-ac79-bee984bf842b.roa (raw, json) Hash identifier: 6W+H4cCd42bVcK9hmy7jAriCVYIGg8bcdFmf8NV0U74= Subject key identifier: 50:81:FD:D2:F0:4A:64:BA:34:C0:8E:1C:45:BA:55:0E:2A:B6:66:C0 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 4291EC5959B3412975141DC458093DEE4FA6A67B Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/094c2acc-93b4-4a01-ac79-bee984bf842b.roa Signing time: Mon 04 May 2026 14:51:21 +0000 ROA not before: Mon 04 May 2026 14:51:21 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c1b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:91:ec:59:59:b3:41:29:75:14:1d:c4:58:09:3d:ee:4f:a6:a6:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 4 14:51:21 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=877d8e471933609f42b904d64f00c106b20acdf679c054a0278baf2e34e77df1, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cb:05:ea:db:e6:ba:0a:8b:ec:da:e2:b1:53: 28:7e:61:0f:7a:db:51:63:15:df:49:8f:b5:95:c8: a9:a4:6f:fa:43:f4:67:14:9e:27:31:f4:29:26:1b: 8a:c0:34:d3:72:4f:cf:7d:5c:f6:96:d1:37:77:c9: bc:b6:fb:46:b9:b6:d3:3d:1d:df:26:ea:5f:39:51: 06:87:b9:aa:8a:d6:00:96:74:4e:24:2d:3b:56:fc: 40:1c:94:95:61:ce:3c:27:64:99:ef:27:d3:06:cd: 32:35:4d:1b:d9:1c:7d:76:ec:cf:6b:5b:e1:0a:1f: 7f:0a:dc:e1:6b:65:e4:66:9c:f2:0c:96:b8:7f:4e: c8:9a:4e:5b:dd:e2:74:cc:82:69:6d:9e:3f:4a:01: d2:ff:a6:84:db:fb:3e:46:a3:4b:d4:09:e1:1a:83: 0b:92:dd:49:26:3e:eb:98:be:ca:9d:bb:ab:64:51: 47:fa:4a:cc:41:51:9c:6d:08:eb:90:ae:09:82:3d: 59:3a:5c:a9:14:de:30:f2:e8:6e:b6:8d:9f:94:02: af:ca:3a:55:03:47:f5:e9:70:f1:6e:75:e7:d1:a9: d6:6d:29:95:f9:fd:18:dd:c3:3e:55:ab:02:d2:10: b2:fb:7c:8b:0a:23:64:1b:86:32:93:c6:32:45:aa: d8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:81:FD:D2:F0:4A:64:BA:34:C0:8E:1C:45:BA:55:0E:2A:B6:66:C0 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/094c2acc-93b4-4a01-ac79-bee984bf842b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c1b::/48 Signature Algorithm: sha256WithRSAEncryption 9d:68:86:fe:b3:b9:97:1c:36:90:d1:e6:73:e6:e4:2d:0f:c8: d7:ca:51:5e:2d:e0:90:3b:4c:bd:51:cf:69:9d:44:b0:a5:00: 42:69:46:af:e3:ac:34:1b:f8:ef:42:c6:ad:37:a7:9d:f3:81: fd:b5:55:5c:8d:f5:dd:13:1c:7b:c2:d1:eb:38:a3:ae:8b:f7: 69:c2:c1:f9:79:20:1c:28:a3:ae:9a:69:9e:5f:a9:d9:dc:e4: 59:98:59:6c:ba:bf:a7:2a:e9:f3:46:e6:69:81:06:04:7a:50: 78:79:16:80:12:db:54:06:68:43:c7:2c:37:b5:25:c3:6f:be: 94:c6:b6:c9:6a:c5:df:63:ad:c6:f4:3f:e0:18:26:56:8d:ec: d5:49:58:24:a1:c3:f5:16:10:46:c3:ac:d5:2a:52:e6:f8:68: b3:4b:41:a2:0e:03:69:1b:2b:4a:d2:08:00:98:a0:4e:12:c3: b1:6d:5d:2f:5b:ff:4c:59:44:c4:b3:af:4e:09:e1:3f:ab:56: f2:98:d6:b9:64:f3:cb:2f:a6:43:35:88:0e:0d:77:80:28:85: 5d:a7:22:3c:5a:05:c2:6f:77:54:d2:4c:cd:6d:73:d2:c1:a5: 80:4b:ab:ab:c8:8b:59:1e:28:3a:b1:6b:62:ad:5f:9b:b9:cc: 8e:04:25:4b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQpHsWVmzQSl1FB3EWAk97k+mpnswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwNTA0MTQ1MTIxWhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NzdkOGU0NzE5MzM2MDlmNDJiOTA0ZDY0ZjAwYzEwNmIy MGFjZGY2NzljMDU0YTAyNzhiYWYyZTM0ZTc3ZGYxMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQywXq2+a6Covs2uKxUyh+YQ9621FjFd9Jj7WVyKmkb/pD 9GcUnicx9CkmG4rANNNyT899XPaW0Td3yby2+0a5ttM9Hd8m6l85UQaHuaqK1gCW dE4kLTtW/EAclJVhzjwnZJnvJ9MGzTI1TRvZHH127M9rW+EKH38K3OFrZeRmnPIM lrh/TsiaTlvd4nTMgmltnj9KAdL/poTb+z5Go0vUCeEagwuS3UkmPuuYvsqdu6tk UUf6SsxBUZxtCOuQrgmCPVk6XKkU3jDy6G62jZ+UAq/KOlUDR/XpcPFudefRqdZt KZX5/Rjdwz5VqwLSELL7fIsKI2QbhjKTxjJFqtjxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUUIH90vBKZLo0wI4cRbpVDiq2ZsAwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzA5NGMyYWNjLTkzYjQtNGEwMS1hYzc5LWJlZTk4NGJmODQyYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBswDQYJKoZIhvcNAQELBQADggEBAJ1ohv6zuZccNpDR5nPm5C0P yNfKUV4t4JA7TL1Rz2mdRLClAEJpRq/jrDQb+O9Cxq03p53zgf21VVyN9d0THHvC 0es4o66L92nCwfl5IBwoo66aaZ5fqdnc5FmYWWy6v6cq6fNG5mmBBgR6UHh5FoAS 21QGaEPHLDe1JcNvvpTGtslqxd9jrcb0P+AYJlaN7NVJWCShw/UWEEbDrNUqUub4 aLNLQaIOA2kbK0rSCACYoE4Sw7FtXS9b/0xZRMSzr04J4T+rVvKY1rlk88svpkM1 iA4Nd4AohV2nIjxaBcJvd1TSTM1tc9LBpYBLq6vIi1keKDqxa2KtX5u5zI4EJUs= -----END CERTIFICATE-----Generated at Mon May 4 23:14:36 2026 by rpki-client