$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a4b43ebf-0d93-4470-9ac2-768f9381f392.roa File: a4b43ebf-0d93-4470-9ac2-768f9381f392.roa (raw, json) Hash identifier: XGJzJtcakTInxYzjjQ5kQrgsBrpGrKimqh/w08UG//c= Subject key identifier: B7:20:A7:91:4A:BC:41:FA:28:F9:5B:11:E9:B1:58:FE:DE:4D:0D:32 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 09A0768184B136D61BA9C3E1B052DF9373160C76 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a4b43ebf-0d93-4470-9ac2-768f9381f392.roa Signing time: Sun 02 Aug 2026 01:40:08 +0000 ROA not before: Sun 02 Aug 2026 01:40:08 +0000 ROA not after: Sat 31 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:3c2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Aug 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:a0:76:81:84:b1:36:d6:1b:a9:c3:e1:b0:52:df:93:73:16:0c:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Aug 2 01:40:08 2026 GMT Not After : Oct 31 23:59:59 2026 GMT Subject: serialNumber=dbfe8125db350c6891b5f03fd7e59af93736b537792a96b739abd3d75384fc73, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ba:4f:17:e6:15:04:3c:ac:f1:e7:9f:75:1a: a6:32:2e:e5:b7:33:35:9a:31:a3:b6:91:d2:c4:ed: 66:93:7b:6d:4b:52:26:17:9e:c4:6d:5d:27:82:23: c4:8d:a0:9c:c8:cd:61:bd:09:72:bd:af:aa:ac:47: 9d:68:9e:f9:5d:8d:9d:3d:60:dc:7c:79:d5:f8:25: 18:98:1a:7d:0a:bc:52:e7:b2:4c:16:64:21:ca:b8: a7:56:09:54:a0:91:b5:fd:38:ef:66:3a:8a:e0:ed: 2f:5f:1e:d3:4c:ca:75:45:88:77:62:13:e9:91:b5: 4e:22:8a:1f:d2:ce:cf:11:59:b4:47:ce:04:6b:0f: fe:58:ce:19:6d:8d:e3:4d:34:e2:0a:fc:1e:a7:20: 8e:88:01:37:d0:bb:cc:96:a0:04:df:c1:10:7d:3b: 6a:0b:97:a5:ec:5c:79:8c:d9:ab:e1:23:3c:72:29: aa:a9:ed:53:40:86:81:8e:c6:39:6b:15:1e:47:ec: 66:42:cb:94:d2:45:f8:5a:68:99:a7:84:d8:94:f8: e9:88:e1:9c:eb:29:2e:11:0f:14:53:08:49:c7:d9: e2:f2:19:35:9d:db:bb:1b:8a:bc:67:e4:4d:46:df: b6:e4:a5:09:8e:77:cf:9b:71:03:74:ad:c7:ee:6e: c1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:20:A7:91:4A:BC:41:FA:28:F9:5B:11:E9:B1:58:FE:DE:4D:0D:32 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a4b43ebf-0d93-4470-9ac2-768f9381f392.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:3c2::/48 Signature Algorithm: sha256WithRSAEncryption 6f:e3:d8:15:7f:be:8e:5b:98:68:39:27:dc:58:78:42:05:ab: 50:a3:3b:81:33:65:02:20:42:2a:cd:81:b1:c8:96:eb:e4:f6: 08:ee:c8:28:60:ac:28:2e:3a:55:43:9c:06:d5:d1:e8:14:d3: 99:b9:7c:f2:d1:46:cc:8c:2d:63:a5:56:48:4b:8c:11:e7:c7: 50:9d:31:19:0a:9c:70:5c:9d:4a:03:a5:bf:82:06:c5:05:b6: d6:92:32:78:91:c9:3a:00:ef:11:d1:a2:ae:78:93:49:ff:4b: fd:83:50:29:c0:e7:13:6d:c9:85:53:b1:c5:ba:49:90:f1:12: b1:b1:32:a7:4e:9a:68:d4:f0:84:c9:83:b5:07:f5:72:05:ee: ff:0b:4e:1e:a6:44:3f:82:2c:bd:f6:28:09:86:92:8d:2f:57: b5:63:8b:19:e9:26:51:11:07:ba:a3:c5:e2:0c:ca:04:70:0c: 12:58:23:2a:b5:bc:f9:42:30:91:b1:ab:4f:b7:e3:19:43:40: 47:ae:4f:a9:40:8f:7d:f7:a2:f1:11:75:ce:52:dd:86:72:c0: 84:cf:d3:f1:2d:ac:0b:a2:7f:38:98:d3:42:2b:eb:ef:48:b1: 0a:7a:0f:5b:1a:1c:13:89:70:1d:a7:8b:ef:f7:a9:7f:20:f8: 27:9d:e8:f4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCaB2gYSxNtYbqcPhsFLfk3MWDHYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwODAyMDE0MDA4WhcNMjYxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkYmZlODEyNWRiMzUwYzY4OTFiNWYwM2ZkN2U1OWFmOTM3 MzZiNTM3NzkyYTk2YjczOWFiZDNkNzUzODRmYzczMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGuk8X5hUEPKzx5591GqYyLuW3MzWaMaO2kdLE7WaTe21L UiYXnsRtXSeCI8SNoJzIzWG9CXK9r6qsR51onvldjZ09YNx8edX4JRiYGn0KvFLn skwWZCHKuKdWCVSgkbX9OO9mOorg7S9fHtNMynVFiHdiE+mRtU4iih/Szs8RWbRH zgRrD/5YzhltjeNNNOIK/B6nII6IATfQu8yWoATfwRB9O2oLl6XsXHmM2avhIzxy Kaqp7VNAhoGOxjlrFR5H7GZCy5TSRfhaaJmnhNiU+OmI4ZzrKS4RDxRTCEnH2eLy GTWd27sbirxn5E1G37bkpQmOd8+bcQN0rcfubsG5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUtyCnkUq8Qfoo+VsR6bFY/t5NDTIwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2E0YjQzZWJmLTBkOTMtNDQ3MC05YWMyLTc2OGY5MzgxZjM5Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA8IwDQYJKoZIhvcNAQELBQADggEBAG/j2BV/vo5bmGg5J9xYeEIF q1CjO4EzZQIgQirNgbHIluvk9gjuyChgrCguOlVDnAbV0egU05m5fPLRRsyMLWOl VkhLjBHnx1CdMRkKnHBcnUoDpb+CBsUFttaSMniRyToA7xHRoq54k0n/S/2DUCnA 5xNtyYVTscW6SZDxErGxMqdOmmjU8ITJg7UH9XIF7v8LTh6mRD+CLL32KAmGko0v V7VjixnpJlERB7qjxeIMygRwDBJYIyq1vPlCMJGxq0+34xlDQEeuT6lAj333ovER dc5S3YZywITP0/EtrAuifziY00Ir6+9IsQp6D1saHBOJcB2ni+/3qX8g+Ced6PQ= -----END CERTIFICATE-----Generated at Fri Aug 7 07:45:56 2026 by rpki-client