$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2a9a7e7a-f836-49c4-b98d-bc4e85459b54.roa File: 2a9a7e7a-f836-49c4-b98d-bc4e85459b54.roa (raw, json) Hash identifier: I6NJQs3N20XEtJSyM8UTvTPAjvivSXBDafAM/4Ab/SE= Subject key identifier: 61:4A:B9:28:7B:B7:E4:1B:AB:2F:DA:64:07:8D:CC:25:DF:A5:80:40 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 482FA66F948D6BF92BCBB3EFF264DD65001DFEC1 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2a9a7e7a-f836-49c4-b98d-bc4e85459b54.roa Signing time: Sun 02 Aug 2026 01:40:10 +0000 ROA not before: Sun 02 Aug 2026 01:40:10 +0000 ROA not after: Sat 31 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:3b40::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:2f:a6:6f:94:8d:6b:f9:2b:cb:b3:ef:f2:64:dd:65:00:1d:fe:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Aug 2 01:40:10 2026 GMT Not After : Oct 31 23:59:59 2026 GMT Subject: serialNumber=2a013555414d75b8ef5117461afb0aff05746d588afd361464ac1faea3c4d731, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e7:bc:b4:ae:d3:9e:0a:b5:60:45:0a:4c:62: 71:81:63:a0:8e:5d:6d:0e:76:0a:c0:bc:18:a3:c1: 3d:7a:f5:c8:be:1f:1c:fd:2e:8f:9b:20:78:8b:7e: af:d7:6a:f9:e8:a2:f5:87:8a:69:18:91:d7:0a:42: d4:6e:aa:1a:bf:e6:a2:69:69:2e:f0:86:99:3d:dd: 4f:a8:d9:61:2c:07:ae:75:cf:60:e0:a4:e9:00:0d: a2:6c:0c:43:bb:58:f9:8d:55:76:7b:9b:98:f1:29: 17:20:fb:e4:19:f1:eb:ec:62:92:07:78:34:ee:80: 82:89:00:63:e4:05:d6:30:97:4d:e8:c7:20:ec:a5: 24:43:c2:c9:e2:98:8e:e5:a9:52:41:0b:f6:9e:88: 41:d2:75:d7:89:79:5f:62:44:ab:aa:18:cd:00:8c: b4:f8:99:c7:da:08:91:03:f7:6f:91:10:6d:b1:6d: 95:3a:9c:bb:3b:75:71:d6:50:d7:a1:93:ad:45:6a: ba:ff:87:ac:e4:34:30:89:f9:b4:90:30:4b:ee:72: 86:8a:d4:b7:0c:38:a9:2e:91:ce:43:c8:1a:d4:06: 16:b4:21:6c:5a:2a:8d:d1:e6:47:99:d7:f6:58:7f: a8:23:39:43:48:06:5b:83:65:04:b4:5f:23:32:be: 47:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:4A:B9:28:7B:B7:E4:1B:AB:2F:DA:64:07:8D:CC:25:DF:A5:80:40 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2a9a7e7a-f836-49c4-b98d-bc4e85459b54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:3b40::/46 Signature Algorithm: sha256WithRSAEncryption 00:c3:0e:78:4a:5c:8c:08:3f:8f:0c:b4:5d:f1:72:ba:be:d3: 8c:94:fc:45:0a:b8:d7:e5:33:75:03:1d:36:8f:49:16:69:f5: 2f:54:f9:6e:6a:f0:6e:ba:f2:30:97:14:a0:4f:f3:e8:07:59: d2:6f:12:f7:69:db:6e:93:fc:e6:f9:e1:33:06:22:dc:20:a9: ec:df:c9:85:de:87:58:53:66:a1:cf:dd:18:6f:86:0d:d7:3d: 95:6e:2f:1a:8e:49:c5:81:e2:2b:eb:eb:09:a9:75:01:a3:01: 90:bf:b6:c5:f2:bf:bd:87:b3:52:24:f5:a9:5c:a1:d3:b4:26: 76:ef:93:54:74:f3:47:5c:e0:a6:3a:df:75:6e:f3:ba:9c:81: ab:bd:98:ac:95:14:d9:d9:b9:ab:ad:69:0b:2f:2b:1f:fc:36: 48:57:cb:fa:11:bc:20:9d:95:a4:00:c4:95:68:93:f8:d3:16: f8:05:df:ff:9c:81:c2:6f:47:2d:5e:ca:46:cd:27:d4:04:5e: f6:25:81:26:fa:5f:c8:35:aa:6a:7a:71:96:1b:7e:d7:8c:b0: de:f2:5d:f6:31:59:f6:93:2e:ca:73:96:dd:1a:4c:be:72:32: 63:2c:ee:83:3d:8e:dd:c6:df:51:dd:5b:76:ee:37:11:83:48: 11:76:25:64 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSC+mb5SNa/kry7Pv8mTdZQAd/sEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwODAyMDE0MDEwWhcNMjYxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYTAxMzU1NTQxNGQ3NWI4ZWY1MTE3NDYxYWZiMGFmZjA1 NzQ2ZDU4OGFmZDM2MTQ2NGFjMWZhZWEzYzRkNzMxMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC657y0rtOeCrVgRQpMYnGBY6COXW0OdgrAvBijwT169ci+ Hxz9Lo+bIHiLfq/XavnoovWHimkYkdcKQtRuqhq/5qJpaS7whpk93U+o2WEsB651 z2DgpOkADaJsDEO7WPmNVXZ7m5jxKRcg++QZ8evsYpIHeDTugIKJAGPkBdYwl03o xyDspSRDwsnimI7lqVJBC/aeiEHSddeJeV9iRKuqGM0AjLT4mcfaCJED92+REG2x bZU6nLs7dXHWUNehk61Farr/h6zkNDCJ+bSQMEvucoaK1LcMOKkukc5DyBrUBha0 IWxaKo3R5keZ1/ZYf6gjOUNIBluDZQS0XyMyvkefAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUYUq5KHu35BurL9pkB43MJd+lgEAwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzJhOWE3ZTdhLWY4MzYtNDljNC1iOThkLWJjNGU4NTQ1OWI1NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImBZzAO0AwDQYJKoZIhvcNAQELBQADggEBAADDDnhKXIwIP48MtF3xcrq+ 04yU/EUKuNflM3UDHTaPSRZp9S9U+W5q8G668jCXFKBP8+gHWdJvEvdp226T/Ob5 4TMGItwgqezfyYXeh1hTZqHP3Rhvhg3XPZVuLxqOScWB4ivr6wmpdQGjAZC/tsXy v72Hs1Ik9alcodO0Jnbvk1R080dc4KY633Vu87qcgau9mKyVFNnZuautaQsvKx/8 NkhXy/oRvCCdlaQAxJVok/jTFvgF3/+cgcJvRy1eykbNJ9QEXvYlgSb6X8g1qmp6 cZYbfteMsN7yXfYxWfaTLspzlt0aTL5yMmMs7oM9jt3G31HdW3buNxGDSBF2JWQ= -----END CERTIFICATE-----Generated at Fri Sep 18 21:08:03 2026 by rpki-client