$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2b35ab1a-8001-404a-9285-196aa943aa95.roa File: 2b35ab1a-8001-404a-9285-196aa943aa95.roa (raw, json) Hash identifier: lW0rob2iQWdHV9MkP//AihzxN298SDAK3ymirOmWF9M= Subject key identifier: B9:8C:02:4F:B5:D1:FC:98:61:E0:90:AC:A6:F7:2F:BA:65:77:15:98 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 60792FEBF1C0C0F0C9C8F91915F6BB0A8E1246BA Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2b35ab1a-8001-404a-9285-196aa943aa95.roa Signing time: Fri 07 Aug 2026 04:00:39 +0000 ROA not before: Fri 07 Aug 2026 04:00:39 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:387::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Aug 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:79:2f:eb:f1:c0:c0:f0:c9:c8:f9:19:15:f6:bb:0a:8e:12:46:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Aug 7 04:00:39 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=624a77abac648042d8c9c8fe939582828a5c4fba823ab40da5a3471dff99e05b, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c2:f6:be:59:28:0d:2f:4f:1a:bc:c9:f9:4e: 23:a8:c2:4c:3b:8a:e6:17:7b:77:99:db:80:fa:54: 46:c0:d5:61:73:25:53:f1:9a:bf:54:96:77:d9:73: 94:58:4f:bf:b4:c6:d9:bd:fa:58:13:e9:e3:75:95: 6d:ca:9f:1b:86:71:40:87:6d:8e:29:d8:d7:62:7c: 92:69:a9:d6:46:b2:ad:77:8f:9a:d8:74:02:cb:f8: 11:7b:8a:04:16:6a:ad:40:02:26:35:5a:4e:0b:d1: 85:05:d5:af:8b:16:9f:42:01:b4:93:1c:4d:79:32: e4:0f:31:a9:64:69:4c:32:34:aa:76:7b:45:57:e4: 8a:2c:5d:c2:c2:c1:18:b6:b2:c6:46:a8:0d:a0:6e: ff:fb:ad:8a:48:d2:6b:68:40:e7:3b:fc:40:5c:e1: 21:bd:1b:d4:ba:4e:ec:d9:1f:cf:5d:fb:de:64:75: 7a:fc:d7:d8:39:3b:4f:35:1a:05:55:88:cc:03:9f: 81:22:33:bd:4d:64:78:f3:2e:8d:fa:6b:e6:50:4f: 72:71:b6:60:b5:fd:5e:60:96:ca:ed:e9:e1:7e:0d: b2:e4:fa:89:60:a0:f4:65:66:de:90:c8:c7:61:b9: 85:78:3c:e4:79:41:4d:df:e6:62:ec:11:88:2e:d6: 5e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:8C:02:4F:B5:D1:FC:98:61:E0:90:AC:A6:F7:2F:BA:65:77:15:98 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2b35ab1a-8001-404a-9285-196aa943aa95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:387::/48 Signature Algorithm: sha256WithRSAEncryption a4:75:7c:00:f3:f7:93:d7:37:9a:8b:72:68:93:da:34:e9:71: 44:06:f0:df:e3:04:5e:a1:a1:53:1c:1f:8a:bd:0b:d5:05:b0: c6:87:e9:16:4e:da:47:c9:1f:72:34:9f:21:14:9d:aa:5c:4f: 54:a8:fa:50:bb:04:d1:fd:67:34:ca:d7:78:0a:01:6f:69:d8: 5f:c6:73:8d:69:c1:ff:98:b6:0f:3a:25:aa:99:12:4f:ed:90: 38:9f:b3:64:30:c9:f9:15:89:f7:0a:6b:39:26:98:52:a0:4f: 23:e0:47:db:29:aa:40:7a:ae:e7:82:db:63:38:ca:59:49:74: 01:59:59:c4:1c:fe:c8:ce:01:4d:47:aa:30:ed:c5:70:6c:16: a1:b4:f4:c8:61:16:be:14:59:0e:a3:8f:e6:53:89:57:02:93: 96:85:99:cd:3d:e0:39:a1:96:6f:50:3e:2d:43:b0:ec:e5:1a: 18:3c:e0:29:d6:03:8b:19:78:0a:a9:5d:e0:ac:21:74:42:09: 91:f7:32:88:1d:21:2c:82:9a:3e:c2:2b:23:64:c4:c3:f5:9a: 70:d3:8b:45:e8:c1:62:b3:d9:8a:c4:51:04:29:e8:eb:f9:5f: 1f:64:5f:aa:ad:b0:93:40:39:a4:99:d9:6d:8a:6e:ec:1a:fb: 43:56:ed:bf -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUYHkv6/HAwPDJyPkZFfa7Co4SRrowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwODA3MDQwMDM5WhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MjRhNzdhYmFjNjQ4MDQyZDhjOWM4ZmU5Mzk1ODI4Mjhh NWM0ZmJhODIzYWI0MGRhNWEzNDcxZGZmOTllMDViMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBwva+WSgNL08avMn5TiOowkw7iuYXe3eZ24D6VEbA1WFz JVPxmr9UlnfZc5RYT7+0xtm9+lgT6eN1lW3KnxuGcUCHbY4p2NdifJJpqdZGsq13 j5rYdALL+BF7igQWaq1AAiY1Wk4L0YUF1a+LFp9CAbSTHE15MuQPMalkaUwyNKp2 e0VX5IosXcLCwRi2ssZGqA2gbv/7rYpI0mtoQOc7/EBc4SG9G9S6TuzZH89d+95k dXr819g5O081GgVViMwDn4EiM71NZHjzLo36a+ZQT3JxtmC1/V5glsrt6eF+DbLk +olgoPRlZt6QyMdhuYV4POR5QU3f5mLsEYgu1l5fAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUuYwCT7XR/Jhh4JCspvcvumV3FZgwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzJiMzVhYjFhLTgwMDEtNDA0YS05Mjg1LTE5NmFhOTQzYWE5NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA4cwDQYJKoZIhvcNAQELBQADggEBAKR1fADz95PXN5qLcmiT2jTp cUQG8N/jBF6hoVMcH4q9C9UFsMaH6RZO2kfJH3I0nyEUnapcT1So+lC7BNH9ZzTK 13gKAW9p2F/Gc41pwf+Ytg86JaqZEk/tkDifs2QwyfkVifcKazkmmFKgTyPgR9sp qkB6rueC22M4yllJdAFZWcQc/sjOAU1HqjDtxXBsFqG09MhhFr4UWQ6jj+ZTiVcC k5aFmc094Dmhlm9QPi1DsOzlGhg84CnWA4sZeAqpXeCsIXRCCZH3MogdISyCmj7C KyNkxMP1mnDTi0XowWKz2YrEUQQp6Ov5Xx9kX6qtsJNAOaSZ2W2Kbuwa+0NW7b8= -----END CERTIFICATE-----Generated at Fri Aug 7 07:45:57 2026 by rpki-client