$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a3459b28-5505-461b-b15f-b4f61186ef44.roa File: a3459b28-5505-461b-b15f-b4f61186ef44.roa (raw, json) Hash identifier: eYKJEVoZMwMPDtqjgPEK3tWi57mvGg8OSexnd73iFR4= Subject key identifier: 69:16:FA:B2:20:3E:50:2B:71:D9:8B:4E:38:FD:BC:8D:B5:F3:C0:F2 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 5640EE5BFDD8CDF2DCF1E4D5E8011DDEAC64F659 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a3459b28-5505-461b-b15f-b4f61186ef44.roa Signing time: Fri 08 May 2026 03:00:38 +0000 ROA not before: Fri 08 May 2026 03:00:38 +0000 ROA not after: Thu 06 Aug 2026 23:59:59 +0000 asID: 40045 IP address blocks: 2605:9cc0:c1c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:40:ee:5b:fd:d8:cd:f2:dc:f1:e4:d5:e8:01:1d:de:ac:64:f6:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 8 03:00:38 2026 GMT Not After : Aug 6 23:59:59 2026 GMT Subject: serialNumber=b88471a55f420c6021e64589cc12c6bfe998cfd1c3add63bf54e77f440a1bc73, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ca:29:9e:27:7b:01:95:5e:38:47:8b:20:98: 69:0f:06:4e:66:a5:1d:9a:9c:16:02:24:cf:31:4b: f2:72:67:ca:b7:d0:3b:1b:04:99:be:96:b5:db:7b: a6:ca:49:94:28:1a:32:ac:90:1a:6e:c5:6b:88:c0: a2:9c:85:f9:37:d5:4d:8f:5b:28:af:88:fd:f1:0e: 63:84:5b:f3:f4:16:cb:f3:5e:2e:e7:f8:55:79:c3: 3b:c2:90:20:2d:6f:57:63:35:13:04:7f:71:a1:d3: cf:d4:5c:56:9b:00:20:b4:e2:37:64:ec:dc:b2:35: c2:66:cb:c9:94:f9:2d:49:5f:09:4b:79:d1:0b:38: 0b:ba:7b:01:a9:73:a8:1c:ef:2e:b8:a7:91:ff:43: a7:b4:08:0c:01:2c:a8:1e:a9:af:28:aa:8c:07:fa: 80:64:9b:a4:13:72:4d:c6:ef:39:d2:e9:9d:49:00: c5:05:40:0c:c8:f0:d2:09:91:b1:9d:19:23:c4:a2: e0:a1:f4:02:39:3b:e4:39:4c:f5:31:dc:41:8f:35: 2b:d2:3b:8f:93:d5:59:0c:b0:75:60:23:2d:70:92: d4:aa:e5:14:0f:dc:06:2f:eb:fb:37:f4:f4:d2:c0: 2d:90:78:b9:d2:70:55:1a:b7:61:fd:c6:58:ec:84: ed:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:16:FA:B2:20:3E:50:2B:71:D9:8B:4E:38:FD:BC:8D:B5:F3:C0:F2 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a3459b28-5505-461b-b15f-b4f61186ef44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c1c::/48 Signature Algorithm: sha256WithRSAEncryption 6e:50:b0:2b:77:01:62:86:ef:55:06:c0:f9:d4:d1:2c:bc:06: 58:34:5b:70:88:37:00:3e:f1:35:c3:60:0b:f1:a4:0d:23:e0: ea:d7:72:fc:72:89:bc:12:5a:f2:14:e9:71:4d:43:02:ac:15: 88:f8:cf:c7:fb:6f:17:5d:af:ac:eb:02:1a:7e:7f:6a:30:c7: 09:a5:7a:cf:fd:b8:61:a2:28:2c:0e:0b:42:d4:04:fb:9d:fa: 2e:be:10:99:cc:44:a2:97:81:5c:93:c1:38:fa:0b:70:a7:41: 73:7d:6b:c0:33:d5:b6:cf:ca:4f:1f:c7:15:00:86:d3:5b:d9: fd:a5:9f:bc:b7:18:d2:80:c5:b3:e0:86:51:0f:fd:91:40:7d: 4b:15:70:6d:3f:4b:71:f6:6d:e3:8b:b1:d3:05:35:45:d9:cc: 93:1c:65:d0:3d:8d:e0:3e:1f:65:8d:6f:88:0d:6d:16:2c:06: 77:ac:a5:af:9f:e6:2b:0e:a1:95:8d:12:e4:a5:ec:45:ca:70: 22:65:4f:d1:bd:3f:c9:ef:7c:56:60:62:e6:d5:2e:55:06:63: 69:91:01:11:89:d1:65:24:eb:34:09:e0:26:a6:34:56:d4:bb: 6e:ca:c7:02:99:3c:15:fe:eb:8e:4b:e6:4f:53:54:87:d7:96: b1:92:de:ff -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUVkDuW/3YzfLc8eTV6AEd3qxk9lkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwNTA4MDMwMDM4WhcNMjYwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BiODg0NzFhNTVmNDIwYzYwMjFlNjQ1ODljYzEyYzZiZmU5 OThjZmQxYzNhZGQ2M2JmNTRlNzdmNDQwYTFiYzczMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDyimeJ3sBlV44R4sgmGkPBk5mpR2anBYCJM8xS/JyZ8q3 0DsbBJm+lrXbe6bKSZQoGjKskBpuxWuIwKKchfk31U2PWyiviP3xDmOEW/P0Fsvz Xi7n+FV5wzvCkCAtb1djNRMEf3Gh08/UXFabACC04jdk7NyyNcJmy8mU+S1JXwlL edELOAu6ewGpc6gc7y64p5H/Q6e0CAwBLKgeqa8oqowH+oBkm6QTck3G7znS6Z1J AMUFQAzI8NIJkbGdGSPEouCh9AI5O+Q5TPUx3EGPNSvSO4+T1VkMsHVgIy1wktSq 5RQP3AYv6/s39PTSwC2QeLnScFUat2H9xljshO07AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUaRb6siA+UCtx2YtOOP28jbXzwPIwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2EzNDU5YjI4LTU1MDUtNDYxYi1iMTVmLWI0ZjYxMTg2ZWY0NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBwwDQYJKoZIhvcNAQELBQADggEBAG5QsCt3AWKG71UGwPnU0Sy8 Blg0W3CINwA+8TXDYAvxpA0j4OrXcvxyibwSWvIU6XFNQwKsFYj4z8f7bxddr6zr Ahp+f2owxwmles/9uGGiKCwOC0LUBPud+i6+EJnMRKKXgVyTwTj6C3CnQXN9a8Az 1bbPyk8fxxUAhtNb2f2ln7y3GNKAxbPghlEP/ZFAfUsVcG0/S3H2beOLsdMFNUXZ zJMcZdA9jeA+H2WNb4gNbRYsBnespa+f5isOoZWNEuSl7EXKcCJlT9G9P8nvfFZg YubVLlUGY2mRARGJ0WUk6zQJ4CamNFbUu27KxwKZPBX+645L5k9TVIfXlrGS3v8= -----END CERTIFICATE-----Generated at Mon May 11 17:43:23 2026 by rpki-client