$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/23b3d13b-212f-42f5-9048-2b935e09c423.roa File: 23b3d13b-212f-42f5-9048-2b935e09c423.roa (raw, json) Hash identifier: 5KOruzUvdH0bO9OtlwuOnr8ynRJQF7bbFzEnnBegol4= Subject key identifier: 87:57:8E:E0:3C:CD:B7:B4:AC:D0:82:82:BA:33:61:38:34:A2:A2:88 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 07211E7D900540DC3945DC02D84233ECED740B54 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/23b3d13b-212f-42f5-9048-2b935e09c423.roa Signing time: Fri 15 May 2026 00:20:06 +0000 ROA not before: Fri 15 May 2026 00:20:06 +0000 ROA not after: Thu 13 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:d70::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Jun 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:21:1e:7d:90:05:40:dc:39:45:dc:02:d8:42:33:ec:ed:74:0b:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 15 00:20:06 2026 GMT Not After : Aug 13 23:59:59 2026 GMT Subject: serialNumber=0a3c700cb3eb40bf51c708ad1524b2dfdb06d06584610869bd693fac06c63fb6, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:17:5d:bb:ff:18:6f:14:3e:64:d6:50:8a:c8: 3a:5e:6b:3d:59:31:0e:16:18:44:fb:dc:c0:4a:92: 34:aa:6e:94:96:23:84:94:fb:53:3c:98:35:06:fc: 66:aa:cd:1c:e4:5c:6c:96:6c:07:5f:02:cb:68:57: 61:17:d0:79:e5:9e:74:56:2f:82:c7:cc:12:82:3a: 49:0b:cd:6c:c8:71:cd:1f:22:e1:c3:d9:9c:63:ad: 0e:c0:a3:fa:70:01:36:69:37:13:18:3c:b8:a0:d0: c0:ba:3f:c7:b0:6e:e2:77:3c:8f:5b:0a:c0:c4:09: 22:30:2d:78:d7:dd:4a:7c:e5:af:8f:48:a6:f8:37: 91:d2:43:68:d9:c1:2f:d8:90:3c:81:dd:b4:a9:58: 34:d2:9c:59:aa:dc:a7:bd:d1:c8:d1:d9:31:a7:77: b1:05:1b:c7:76:5b:27:7a:86:15:e4:f1:92:35:77: 1a:cf:cd:2e:e4:a7:de:6e:9c:9f:23:2f:0f:bc:69: 64:12:2d:79:e0:d5:84:88:29:15:99:17:57:b4:e7: ad:4c:e7:39:f8:88:20:59:2b:f8:16:12:5c:3f:3f: e9:2f:de:b4:0c:eb:b7:d7:56:00:ea:5f:0b:c1:e9: 2e:85:b8:b8:be:3f:9d:72:1a:c9:75:c8:7b:ee:08: b6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:57:8E:E0:3C:CD:B7:B4:AC:D0:82:82:BA:33:61:38:34:A2:A2:88 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/23b3d13b-212f-42f5-9048-2b935e09c423.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:d70::/44 Signature Algorithm: sha256WithRSAEncryption 61:3d:1c:5e:83:7f:3e:63:c7:65:8b:73:bb:36:3b:7c:6e:84: b2:96:b9:e6:92:ed:3b:8d:7f:c2:22:72:e7:36:98:ff:31:c4: 06:7b:e0:b5:ec:36:5e:3c:46:f7:8d:2d:7b:41:e3:9f:ba:83: 14:4e:b6:4f:81:b9:f9:0b:74:5f:88:68:3f:6e:84:62:a6:3d: 8c:cf:8b:f5:3d:66:28:bb:90:fc:d0:06:84:e7:ca:e0:67:69: 2f:ff:ce:7e:bd:ea:7b:77:ea:fa:2a:89:1a:fc:2d:1b:91:a1: fe:29:63:1f:8c:07:16:67:76:65:e6:dd:cc:44:97:3b:fb:65: 7e:71:95:05:6b:d1:de:fe:d7:89:d9:32:c7:c7:06:f4:60:28: 88:b6:5c:87:26:e5:8a:fc:d8:cb:29:ce:16:3c:da:65:f5:8c: 8d:31:68:3a:a5:4d:ef:0b:84:32:a3:19:74:4a:2a:87:a4:fe: 10:60:6e:a6:16:26:c1:e7:8f:da:3a:da:ff:da:6c:a4:6a:e9: 9e:16:9b:50:50:d1:dd:30:41:3a:65:47:17:b7:97:c9:c9:15: aa:3d:3d:17:69:79:c9:24:f1:94:ab:58:eb:2c:02:f7:ad:a2: f6:f4:2b:0e:fc:2f:93:85:67:5f:48:58:77:58:47:f5:e2:15: b6:ff:e5:c8 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUByEefZAFQNw5RdwC2EIz7O10C1QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwNTE1MDAyMDA2WhcNMjYwODEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwYTNjNzAwY2IzZWI0MGJmNTFjNzA4YWQxNTI0YjJkZmRi MDZkMDY1ODQ2MTA4NjliZDY5M2ZhYzA2YzYzZmI2MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChF127/xhvFD5k1lCKyDpeaz1ZMQ4WGET73MBKkjSqbpSW I4SU+1M8mDUG/GaqzRzkXGyWbAdfAstoV2EX0HnlnnRWL4LHzBKCOkkLzWzIcc0f IuHD2ZxjrQ7Ao/pwATZpNxMYPLig0MC6P8ewbuJ3PI9bCsDECSIwLXjX3Up85a+P SKb4N5HSQ2jZwS/YkDyB3bSpWDTSnFmq3Ke90cjR2TGnd7EFG8d2Wyd6hhXk8ZI1 dxrPzS7kp95unJ8jLw+8aWQSLXng1YSIKRWZF1e0561M5zn4iCBZK/gWElw/P+kv 3rQM67fXVgDqXwvB6S6FuLi+P51yGsl1yHvuCLZrAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUh1eO4DzNt7Ss0IKCujNhODSioogwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzIzYjNkMTNiLTIxMmYtNDJmNS05MDQ4LTJiOTM1ZTA5YzQyMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmBZzADXAwDQYJKoZIhvcNAQELBQADggEBAGE9HF6Dfz5jx2WLc7s2O3xu hLKWueaS7TuNf8Iicuc2mP8xxAZ74LXsNl48RveNLXtB45+6gxROtk+BufkLdF+I aD9uhGKmPYzPi/U9Zii7kPzQBoTnyuBnaS//zn696nt36voqiRr8LRuRof4pYx+M BxZndmXm3cxElzv7ZX5xlQVr0d7+14nZMsfHBvRgKIi2XIcm5Yr82MspzhY82mX1 jI0xaDqlTe8LhDKjGXRKKoek/hBgbqYWJsHnj9o62v/abKRq6Z4Wm1BQ0d0wQTpl Rxe3l8nJFao9PRdpeckk8ZSrWOssAvetovb0Kw78L5OFZ19IWHdYR/XiFbb/5cg= -----END CERTIFICATE-----Generated at Thu Jun 11 23:36:52 2026 by rpki-client