$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2e973700-6f81-4c9f-a259-df30f341580f.roa File: 2e973700-6f81-4c9f-a259-df30f341580f.roa (raw, json) Hash identifier: kLfGhBvSxvHg9IOGduiC+7lv72rNcTzrM2RCcGNvd2M= Subject key identifier: CF:85:05:94:89:37:45:75:DE:D8:85:C0:87:DD:BF:1E:A6:32:2E:E4 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 4EDC27374A45CEB6B4BEA10820B12B15183EADBE Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2e973700-6f81-4c9f-a259-df30f341580f.roa Signing time: Sat 20 Jun 2026 00:00:09 +0000 ROA not before: Sat 20 Jun 2026 00:00:09 +0000 ROA not after: Fri 18 Sep 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:41c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:dc:27:37:4a:45:ce:b6:b4:be:a1:08:20:b1:2b:15:18:3e:ad:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jun 20 00:00:09 2026 GMT Not After : Sep 18 23:59:59 2026 GMT Subject: serialNumber=8b3b8fadd619d3baf9c09074ba49063527c04956713d853494182da03c07e824, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:aa:85:97:d8:86:bc:64:46:aa:d8:63:0b:40: a8:ac:bb:5e:8c:dd:bc:70:82:f2:3d:7f:5b:ed:77: 92:12:a9:75:49:42:93:53:b7:bc:42:3e:0b:14:b3: 97:e3:93:50:0f:f6:11:a9:c7:f1:e6:03:9b:53:99: 2e:d6:fe:45:5b:57:b7:57:cf:dc:8d:44:84:52:fc: a0:36:f4:f1:ee:70:e4:ce:96:44:d7:c5:da:78:44: df:06:e7:67:fe:78:57:5a:ab:8a:f6:a7:96:e5:88: 99:5a:fd:ef:c3:14:9c:58:61:00:88:b0:0f:00:b9: 9b:9e:d4:6c:11:51:64:3d:74:78:b0:60:a4:a9:13: 46:a8:c0:bc:8d:79:55:cf:84:21:62:16:47:d2:b0: bd:9e:59:6d:78:e5:87:7e:b9:d2:fb:02:52:14:31: 72:3e:ad:7e:c0:26:11:0e:c4:43:68:7e:3c:28:35: 6b:ff:5f:04:14:92:d7:41:4f:01:65:29:f5:0d:0c: 1f:73:bc:de:1c:7c:21:0b:65:e0:59:d4:21:80:3b: 6f:dd:44:26:02:a0:d9:aa:63:97:87:a1:90:3a:47: 18:e7:20:7b:af:37:08:9f:2b:e1:b6:26:ce:0a:1a: a0:70:c2:63:ae:89:fc:b0:56:0b:24:e2:d7:d4:69: 79:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:85:05:94:89:37:45:75:DE:D8:85:C0:87:DD:BF:1E:A6:32:2E:E4 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2e973700-6f81-4c9f-a259-df30f341580f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:41c::/48 Signature Algorithm: sha256WithRSAEncryption 6b:f2:d0:cc:2a:77:a7:e7:9e:c6:43:2f:3f:4d:56:6c:30:0f: 9c:82:d1:36:d4:41:56:6c:90:d5:0b:d3:c4:25:c4:d4:07:97: 34:d3:4d:c7:a9:32:ca:29:d0:d0:0d:c1:49:c7:cc:b9:89:0b: e0:c4:46:af:e1:a7:06:82:ad:10:e2:e4:84:36:26:2d:b0:04: e2:15:04:29:36:f1:e7:48:ac:5a:86:d1:d1:e5:5b:07:39:fc: a1:7c:8d:36:3e:17:0c:6b:8b:ed:a4:4a:9b:03:25:bd:7a:71: 9e:bd:fa:c7:77:21:ca:13:ea:8b:b8:8a:ce:b3:e6:45:ee:b7: 48:c5:2c:e9:74:61:d2:fe:69:a3:88:20:98:2c:04:7f:89:ef: 2e:27:2b:77:7e:46:49:05:ba:49:60:b0:99:bc:0c:a4:7c:ac: c6:4b:75:a9:a8:17:f8:21:fa:62:f6:c9:df:1f:40:ab:c2:ad: e4:b1:8e:19:7c:f5:eb:68:c8:30:37:f7:01:62:ec:37:e4:d9: 29:e6:65:ca:ca:57:c4:a5:ed:7e:4e:4e:ae:97:c9:fb:ff:43: c6:21:02:86:be:18:a4:86:39:16:e3:04:80:8f:4c:30:64:3b: 1d:bb:ca:1e:4b:e5:3d:d2:e1:0d:bd:84:0c:12:93:7f:ec:c5: 58:d4:8c:f6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTtwnN0pFzra0vqEIILErFRg+rb4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwNjIwMDAwMDA5WhcNMjYwOTE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A4YjNiOGZhZGQ2MTlkM2JhZjljMDkwNzRiYTQ5MDYzNTI3 YzA0OTU2NzEzZDg1MzQ5NDE4MmRhMDNjMDdlODI0MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRqoWX2Ia8ZEaq2GMLQKisu16M3bxwgvI9f1vtd5ISqXVJ QpNTt7xCPgsUs5fjk1AP9hGpx/HmA5tTmS7W/kVbV7dXz9yNRIRS/KA29PHucOTO lkTXxdp4RN8G52f+eFdaq4r2p5bliJla/e/DFJxYYQCIsA8AuZue1GwRUWQ9dHiw YKSpE0aowLyNeVXPhCFiFkfSsL2eWW145Yd+udL7AlIUMXI+rX7AJhEOxENofjwo NWv/XwQUktdBTwFlKfUNDB9zvN4cfCELZeBZ1CGAO2/dRCYCoNmqY5eHoZA6Rxjn IHuvNwifK+G2Js4KGqBwwmOuifywVgsk4tfUaXlHAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUz4UFlIk3RXXe2IXAh92/HqYyLuQwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzJlOTczNzAwLTZmODEtNGM5Zi1hMjU5LWRmMzBmMzQxNTgwZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABBwwDQYJKoZIhvcNAQELBQADggEBAGvy0Mwqd6fnnsZDLz9NVmww D5yC0TbUQVZskNUL08QlxNQHlzTTTcepMsop0NANwUnHzLmJC+DERq/hpwaCrRDi 5IQ2Ji2wBOIVBCk28edIrFqG0dHlWwc5/KF8jTY+Fwxri+2kSpsDJb16cZ69+sd3 IcoT6ou4is6z5kXut0jFLOl0YdL+aaOIIJgsBH+J7y4nK3d+RkkFuklgsJm8DKR8 rMZLdamoF/gh+mL2yd8fQKvCreSxjhl89etoyDA39wFi7Dfk2SnmZcrKV8Sl7X5O Tq6Xyfv/Q8YhAoa+GKSGORbjBICPTDBkOx27yh5L5T3S4Q29hAwSk3/sxVjUjPY= -----END CERTIFICATE-----Generated at Mon Jul 6 18:15:53 2026 by rpki-client