$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4dac6043-34e0-4357-a5ac-4587a0261982.roa File: 4dac6043-34e0-4357-a5ac-4587a0261982.roa (raw, json) Hash identifier: 27KlcD7Wv4lIg68sKtQP8KGWIuWq9Zmav8vag8Ia82M= Subject key identifier: 3C:56:8E:FC:53:71:40:30:B6:BE:E4:17:50:AF:2E:12:C0:32:C5:E5 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 4F7A0F89440DD843C44B5ACDBDA0F9F5535D7E1A Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4dac6043-34e0-4357-a5ac-4587a0261982.roa Signing time: Tue 19 May 2026 03:40:58 +0000 ROA not before: Tue 19 May 2026 03:40:58 +0000 ROA not after: Mon 17 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:396::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:7a:0f:89:44:0d:d8:43:c4:4b:5a:cd:bd:a0:f9:f5:53:5d:7e:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 19 03:40:58 2026 GMT Not After : Aug 17 23:59:59 2026 GMT Subject: serialNumber=635510b1b800def335d5be8d4df80ba096f2f0a556e28270eca189b6a83f617c, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:6f:d2:72:db:55:4c:fd:f8:d1:06:3d:9d:9b: 80:45:5e:de:6d:de:0e:81:be:79:7e:a6:26:7e:21: 97:ca:6c:b4:c4:47:2d:02:bf:67:e0:b2:eb:12:b0: 42:b0:4d:48:80:5d:9b:ad:19:2f:79:25:e8:98:a6: 14:4c:7c:48:61:ed:32:e9:76:95:3d:7d:a6:1f:88: 64:2d:46:a1:d1:80:55:26:30:3b:69:8d:ab:50:96: 86:41:8f:b8:9b:ea:f5:cf:4b:da:e0:db:90:6a:8b: 7a:1d:79:2b:4d:90:fb:90:cd:4a:90:9c:39:95:d1: e0:ca:08:f0:c1:a3:a5:99:70:5d:2e:15:b8:31:3b: dd:4a:6a:a5:e5:52:7b:03:e6:26:14:d6:dd:98:bf: 2e:2a:72:fb:c0:6f:f8:4b:ae:2a:36:24:9e:c5:0a: 13:24:2c:c2:86:85:b8:61:43:8c:80:03:c6:17:ca: 3c:29:0f:73:04:a5:eb:d1:41:ab:da:7a:54:69:63: 21:3d:81:2c:17:af:69:a4:57:36:39:c9:88:ef:6e: 12:d1:a2:fe:f2:91:4a:b1:1d:1c:d0:77:9d:d6:dc: c3:04:f4:86:e0:e3:2e:49:41:a0:a6:2c:ab:27:6d: 7f:21:f7:9c:11:92:e8:37:56:5e:6f:7a:5b:41:ec: c6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:56:8E:FC:53:71:40:30:B6:BE:E4:17:50:AF:2E:12:C0:32:C5:E5 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4dac6043-34e0-4357-a5ac-4587a0261982.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:396::/48 Signature Algorithm: sha256WithRSAEncryption a1:f8:e4:50:63:57:22:5b:1a:d5:68:c4:83:9c:d0:3e:8f:be: 89:d8:aa:9f:b8:60:d5:17:1f:a2:00:ff:7a:78:92:ab:35:63: 3f:59:27:d2:0f:3d:8f:79:42:28:ec:e5:03:ec:dd:06:80:12: 77:7f:36:6e:dd:7a:b2:6c:d1:2f:95:35:bd:b0:c5:70:68:bb: 17:5a:d6:ac:d5:d7:24:0c:c5:62:4a:09:d4:37:b1:03:46:f0: 97:3f:85:ad:5b:5a:24:a8:f7:0a:76:6a:e1:77:23:68:27:1e: 7a:ce:66:7e:be:c8:7e:f0:68:d9:ea:99:3a:e1:d0:71:9a:be: 9f:4e:74:b9:fd:38:6d:b2:5c:8e:25:90:ae:b6:82:0b:ae:70: 55:37:bb:e0:f9:0b:fd:f9:9d:c6:52:58:20:a3:fc:76:13:dc: 84:11:1b:51:a2:76:52:95:95:2b:1b:dd:4d:06:7b:9e:86:25: 71:00:d7:0b:27:0f:4a:41:09:a9:f3:2a:a1:16:8e:11:f4:62: 9e:c9:2c:2e:0f:d4:1c:09:aa:2c:12:12:e5:16:73:25:d7:f0: 82:9f:08:39:e9:df:fc:7f:74:ee:82:02:fa:db:0d:d0:52:d4: a7:92:7a:08:83:ea:79:16:32:07:7d:64:7f:f0:53:0a:c1:6d: 75:14:55:2e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUT3oPiUQN2EPES1rNvaD59VNdfhowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwNTE5MDM0MDU4WhcNMjYwODE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MzU1MTBiMWI4MDBkZWYzMzVkNWJlOGQ0ZGY4MGJhMDk2 ZjJmMGE1NTZlMjgyNzBlY2ExODliNmE4M2Y2MTdjMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCHb9Jy21VM/fjRBj2dm4BFXt5t3g6Bvnl+piZ+IZfKbLTE Ry0Cv2fgsusSsEKwTUiAXZutGS95JeiYphRMfEhh7TLpdpU9faYfiGQtRqHRgFUm MDtpjatQloZBj7ib6vXPS9rg25Bqi3odeStNkPuQzUqQnDmV0eDKCPDBo6WZcF0u FbgxO91KaqXlUnsD5iYU1t2Yvy4qcvvAb/hLrio2JJ7FChMkLMKGhbhhQ4yAA8YX yjwpD3MEpevRQavaelRpYyE9gSwXr2mkVzY5yYjvbhLRov7ykUqxHRzQd53W3MME 9Ibg4y5JQaCmLKsnbX8h95wRkug3Vl5veltB7MZPAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUPFaO/FNxQDC2vuQXUK8uEsAyxeUwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzRkYWM2MDQzLTM0ZTAtNDM1Ny1hNWFjLTQ1ODdhMDI2MTk4Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA5YwDQYJKoZIhvcNAQELBQADggEBAKH45FBjVyJbGtVoxIOc0D6P vonYqp+4YNUXH6IA/3p4kqs1Yz9ZJ9IPPY95Qijs5QPs3QaAEnd/Nm7derJs0S+V Nb2wxXBouxda1qzV1yQMxWJKCdQ3sQNG8Jc/ha1bWiSo9wp2auF3I2gnHnrOZn6+ yH7waNnqmTrh0HGavp9OdLn9OG2yXI4lkK62gguucFU3u+D5C/35ncZSWCCj/HYT 3IQRG1GidlKVlSsb3U0Ge56GJXEA1wsnD0pBCanzKqEWjhH0Yp7JLC4P1BwJqiwS EuUWcyXX8IKfCDnp3/x/dO6CAvrbDdBS1KeSegiD6nkWMgd9ZH/wUwrBbXUUVS4= -----END CERTIFICATE-----Generated at Thu May 28 21:30:22 2026 by rpki-client