$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5a741f7f-68b8-4f80-a2e2-2198515b5973.roa File: 5a741f7f-68b8-4f80-a2e2-2198515b5973.roa (raw, json) Hash identifier: lnD89ZhzrkAIue/aRSDCLPIZ3guwmB9xtR4kPZ1wKVo= Subject key identifier: AE:57:7F:FB:38:98:D7:FD:65:E0:1F:CB:8D:A4:CB:E7:C1:52:4A:90 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 04F641CC6CAEF443A9AF14E11E914DEB0EB1A55A Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5a741f7f-68b8-4f80-a2e2-2198515b5973.roa Signing time: Fri 08 May 2026 03:10:05 +0000 ROA not before: Fri 08 May 2026 03:10:05 +0000 ROA not after: Thu 06 Aug 2026 23:59:59 +0000 asID: 40045 IP address blocks: 2605:9cc0:c1d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:f6:41:cc:6c:ae:f4:43:a9:af:14:e1:1e:91:4d:eb:0e:b1:a5:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 8 03:10:05 2026 GMT Not After : Aug 6 23:59:59 2026 GMT Subject: serialNumber=4d097625b4fad4a124cc195cdd51774bbffac823933bf828c280a89429745e39, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b9:9c:13:21:e2:8b:b5:22:23:22:24:52:1a: 50:1d:ff:1b:d6:a5:06:15:5e:b8:4e:3c:e1:25:2d: 1e:76:ab:9b:02:ec:4d:2d:87:7f:b5:6e:a8:69:fa: d7:57:d0:3b:6f:a9:50:c7:d2:ad:d3:f0:e2:e5:f8: f1:9b:e4:c5:17:b2:21:3b:f3:cc:a7:1b:a9:49:51: 71:56:d9:f9:da:d5:5c:fd:c6:cb:b5:42:cc:13:8d: 73:7c:11:c3:00:0d:64:96:e2:8f:9d:60:25:de:9a: 77:a9:3d:2a:6b:42:d0:e3:f3:e7:90:b3:50:33:19: 24:31:74:1b:66:e0:81:8f:d1:b8:f6:98:9c:b6:e0: d4:35:5a:2c:d1:20:53:50:9b:fc:ed:0e:3d:83:2c: 56:45:f4:fc:a2:48:ae:91:4b:4a:47:d6:87:53:bc: 59:e3:8d:1e:55:fa:f2:45:03:9c:d5:17:86:2e:4d: 98:fc:57:94:a9:6d:eb:df:fc:00:b5:70:89:45:3b: c1:1c:90:c0:63:40:10:27:c6:98:a6:90:cf:62:aa: 5a:f9:b1:cb:9b:67:f5:f4:73:e0:21:8e:dd:ac:73: 8f:86:88:08:7a:c0:2b:84:7b:ab:4d:a9:97:01:5f: 21:b4:ec:f1:0c:80:e3:61:4d:10:11:94:3b:82:5d: 91:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:57:7F:FB:38:98:D7:FD:65:E0:1F:CB:8D:A4:CB:E7:C1:52:4A:90 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5a741f7f-68b8-4f80-a2e2-2198515b5973.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c1d::/48 Signature Algorithm: sha256WithRSAEncryption 9b:e4:d6:b9:42:0e:cf:a0:aa:dc:52:44:a6:1f:d1:1f:a7:bc: ef:21:67:83:85:3d:b1:8e:bf:a4:ae:1e:0a:0e:ad:d1:38:41: 36:9f:bf:aa:e0:2b:7e:bf:07:52:48:b8:46:c9:e5:12:ed:83: 9a:14:98:49:8e:41:36:46:09:97:d1:de:7f:b7:30:33:e3:d6: 48:fa:c7:67:42:28:34:10:9c:b7:02:65:c8:e4:6a:19:b2:1d: a7:bf:90:c0:8d:b3:5f:b7:58:37:49:c0:f0:db:85:a7:42:4c: d9:24:82:7e:b2:1e:47:8c:05:f2:d3:12:f1:a0:6c:aa:bc:f3: e5:d2:90:ee:ca:da:55:3b:f7:41:51:04:bb:46:bc:6f:12:44: e6:a8:23:64:7b:9e:0b:28:2c:bc:8e:51:46:70:28:9b:55:43: 88:0b:03:c4:22:69:de:ac:91:1a:07:84:aa:8d:ec:a5:c6:61: c0:8e:39:37:18:51:d3:b8:b1:99:a2:cb:d0:1f:cd:0f:87:04: 7f:2e:5b:26:f8:d3:27:92:70:ae:e4:85:d0:6e:88:62:8c:2c: 9e:8b:47:9d:09:d3:2e:1e:59:ad:2c:cb:5b:b7:2f:ef:0c:ef: 47:44:0a:62:d2:af:66:4f:99:23:d4:a3:36:89:80:b1:20:4d: ba:76:9d:e5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBPZBzGyu9EOprxThHpFN6w6xpVowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwNTA4MDMxMDA1WhcNMjYwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZDA5NzYyNWI0ZmFkNGExMjRjYzE5NWNkZDUxNzc0YmJm ZmFjODIzOTMzYmY4MjhjMjgwYTg5NDI5NzQ1ZTM5MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAuZwTIeKLtSIjIiRSGlAd/xvWpQYVXrhOPOElLR52q5sC 7E0th3+1bqhp+tdX0DtvqVDH0q3T8OLl+PGb5MUXsiE788ynG6lJUXFW2fna1Vz9 xsu1QswTjXN8EcMADWSW4o+dYCXemnepPSprQtDj8+eQs1AzGSQxdBtm4IGP0bj2 mJy24NQ1WizRIFNQm/ztDj2DLFZF9PyiSK6RS0pH1odTvFnjjR5V+vJFA5zVF4Yu TZj8V5Spbevf/AC1cIlFO8EckMBjQBAnxpimkM9iqlr5scubZ/X0c+Ahjt2sc4+G iAh6wCuEe6tNqZcBXyG07PEMgONhTRARlDuCXZFXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUrld/+ziY1/1l4B/LjaTL58FSSpAwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzVhNzQxZjdmLTY4YjgtNGY4MC1hMmUyLTIxOTg1MTViNTk3My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADB0wDQYJKoZIhvcNAQELBQADggEBAJvk1rlCDs+gqtxSRKYf0R+n vO8hZ4OFPbGOv6SuHgoOrdE4QTafv6rgK36/B1JIuEbJ5RLtg5oUmEmOQTZGCZfR 3n+3MDPj1kj6x2dCKDQQnLcCZcjkahmyHae/kMCNs1+3WDdJwPDbhadCTNkkgn6y HkeMBfLTEvGgbKq88+XSkO7K2lU790FRBLtGvG8SROaoI2R7ngsoLLyOUUZwKJtV Q4gLA8Qiad6skRoHhKqN7KXGYcCOOTcYUdO4sZmiy9AfzQ+HBH8uWyb40yeScK7k hdBuiGKMLJ6LR50J0y4eWa0sy1u3L+8M70dECmLSr2ZPmSPUozaJgLEgTbp2neU= -----END CERTIFICATE-----Generated at Mon May 11 17:42:21 2026 by rpki-client