$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/13d5cf6d-ea1d-4f85-b5b3-40b4338e5d76.roa File: 13d5cf6d-ea1d-4f85-b5b3-40b4338e5d76.roa (raw, json) Hash identifier: EM5TFl3vgk1GEe/adTEd65c4qwzrNFTbB1iyBqry2FQ= Subject key identifier: 21:B9:2C:27:1A:9F:DD:99:51:02:83:6E:CC:B3:94:1D:D8:91:89:99 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 4F6F48D11EE4BB71CA02AAC7B8AA5B695D609B75 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/13d5cf6d-ea1d-4f85-b5b3-40b4338e5d76.roa Signing time: Wed 01 Apr 2026 18:21:57 +0000 ROA not before: Wed 01 Apr 2026 18:21:57 +0000 ROA not after: Tue 30 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:41c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:6f:48:d1:1e:e4:bb:71:ca:02:aa:c7:b8:aa:5b:69:5d:60:9b:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 1 18:21:57 2026 GMT Not After : Jun 30 23:59:59 2026 GMT Subject: serialNumber=41bed6f0146fa91e3963c08d99ac602c5c00eec2336185183cb2026f12d6e5ca, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9d:8e:61:b8:6e:c9:95:3e:85:50:e6:e6:4f: df:ba:0f:05:b3:ba:21:95:00:b5:90:26:a1:f0:68: a9:d6:99:69:45:87:77:74:7a:a6:49:bd:b8:3c:90: 30:0c:12:3d:b0:24:65:28:64:a9:4d:de:32:bd:40: 12:1f:59:3e:13:78:f2:9e:5c:9f:90:41:86:ca:8b: 6f:57:84:16:0d:92:1c:f3:2d:a9:eb:5b:da:94:f7: f7:1b:84:8a:31:05:07:52:19:ef:00:67:70:5c:8e: 3e:7a:68:fa:ad:95:af:91:1f:79:c1:33:f8:a8:3d: a3:42:81:a2:b8:76:ac:6e:a2:86:5a:ba:7b:d8:40: 9a:b1:2b:e1:24:1f:84:7b:eb:46:bd:3d:48:20:7b: 95:16:d9:b5:71:69:5d:f0:34:97:83:9b:78:16:f1: 4b:ee:c4:b2:9d:c3:40:40:d3:08:6f:1f:3e:0f:fa: 7e:24:76:5c:ac:61:50:ae:a2:63:83:7f:da:34:35: d2:6e:10:7c:ad:fb:c0:95:48:a6:f8:dd:76:ed:56: 76:48:5b:71:72:fc:b3:0d:f5:13:22:9a:d1:98:a5: ac:cc:db:84:57:f8:48:83:50:94:67:d8:fd:2b:aa: 58:04:95:f9:ef:c3:de:95:35:30:f5:69:8e:2a:47: ee:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B9:2C:27:1A:9F:DD:99:51:02:83:6E:CC:B3:94:1D:D8:91:89:99 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/13d5cf6d-ea1d-4f85-b5b3-40b4338e5d76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:41c::/48 Signature Algorithm: sha256WithRSAEncryption 03:e5:ed:81:82:b1:e2:aa:1d:c6:42:10:11:75:72:bd:0c:66: 16:94:f3:61:a3:7b:e4:5d:95:03:0e:29:25:3d:09:8e:d8:45: ac:af:4b:42:0e:c5:76:5d:ef:fc:77:45:f8:2a:5d:3b:78:db: 82:a4:11:bc:e2:af:0a:73:9d:2b:58:59:a6:07:24:e6:26:66: ae:1e:c1:dd:75:0a:52:1b:c8:67:38:9c:aa:5e:b3:22:a6:36: e3:2f:16:a9:dd:d6:4c:1c:81:7e:68:ca:8f:46:66:8f:16:77: 60:b7:ec:11:4c:35:a1:a3:90:95:fd:2e:08:55:93:65:93:c5: 95:a6:02:eb:35:ed:e6:53:14:cf:3b:0d:9a:62:de:eb:a5:60: 1b:21:e6:2a:ce:0b:e1:11:ec:cf:e2:1f:6b:8e:2c:f7:be:c9: 6d:67:fc:51:c6:18:b9:54:fb:81:93:39:8d:9e:f3:55:2d:2c: 48:a6:36:a5:52:01:9c:7a:63:f5:df:4e:68:f2:1a:64:bc:25: dd:5b:6a:cd:f4:6b:fa:49:10:3a:80:8a:ff:a8:80:ec:fd:33: 77:60:8c:ba:c4:d0:5e:42:c0:63:1e:e6:ad:0c:c8:7f:40:18: eb:cb:9a:02:bd:06:f4:ab:31:ad:ff:7c:3e:dc:99:a4:f8:46: 26:ef:f8:79 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUT29I0R7ku3HKAqrHuKpbaV1gm3UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwNDAxMTgyMTU3WhcNMjYwNjMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MWJlZDZmMDE0NmZhOTFlMzk2M2MwOGQ5OWFjNjAyYzVj MDBlZWMyMzM2MTg1MTgzY2IyMDI2ZjEyZDZlNWNhMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2nY5huG7JlT6FUObmT9+6DwWzuiGVALWQJqHwaKnWmWlF h3d0eqZJvbg8kDAMEj2wJGUoZKlN3jK9QBIfWT4TePKeXJ+QQYbKi29XhBYNkhzz LanrW9qU9/cbhIoxBQdSGe8AZ3Bcjj56aPqtla+RH3nBM/ioPaNCgaK4dqxuooZa unvYQJqxK+EkH4R760a9PUgge5UW2bVxaV3wNJeDm3gW8UvuxLKdw0BA0whvHz4P +n4kdlysYVCuomODf9o0NdJuEHyt+8CVSKb43XbtVnZIW3Fy/LMN9RMimtGYpazM 24RX+EiDUJRn2P0rqlgElfnvw96VNTD1aY4qR+6HAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUIbksJxqf3ZlRAoNuzLOUHdiRiZkwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzEzZDVjZjZkLWVhMWQtNGY4NS1iNWIzLTQwYjQzMzhlNWQ3Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABBwwDQYJKoZIhvcNAQELBQADggEBAAPl7YGCseKqHcZCEBF1cr0M ZhaU82Gje+RdlQMOKSU9CY7YRayvS0IOxXZd7/x3RfgqXTt424KkEbzirwpznStY WaYHJOYmZq4ewd11ClIbyGc4nKpesyKmNuMvFqnd1kwcgX5oyo9GZo8Wd2C37BFM NaGjkJX9LghVk2WTxZWmAus17eZTFM87DZpi3uulYBsh5irOC+ER7M/iH2uOLPe+ yW1n/FHGGLlU+4GTOY2e81UtLEimNqVSAZx6Y/XfTmjyGmS8Jd1bas30a/pJEDqA iv+ogOz9M3dgjLrE0F5CwGMe5q0MyH9AGOvLmgK9BvSrMa3/fD7cmaT4Ribv+Hk= -----END CERTIFICATE-----Generated at Sat Apr 4 12:11:10 2026 by rpki-client