$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a625c009-eed5-4024-b5c0-469960c8e95e.roa File: a625c009-eed5-4024-b5c0-469960c8e95e.roa (raw, json) Hash identifier: tZ+Is984Vk5uGn1x5OVk/+y+E4gLilcr6R8I1urepH4= Subject key identifier: BD:38:72:B8:19:A7:86:50:03:20:65:FE:C0:9F:CB:FC:17:13:A0:69 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 119C59A24E7AAA9CD0760BDCB49FAA0391EAD914 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a625c009-eed5-4024-b5c0-469960c8e95e.roa Signing time: Fri 07 Aug 2026 03:50:39 +0000 ROA not before: Fri 07 Aug 2026 03:50:39 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:30b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:9c:59:a2:4e:7a:aa:9c:d0:76:0b:dc:b4:9f:aa:03:91:ea:d9:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Aug 7 03:50:39 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=9007743c4cc54027f277f8700101ca8cbc80cf36dd54b176bf41d2fe4661c055, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ae:b6:0a:09:6c:55:99:0f:e4:99:1a:b9:09: 5b:4a:41:2d:35:d4:4c:f6:33:56:65:50:23:e6:ad: a2:7d:a6:80:bc:83:4a:76:67:6e:9d:e8:ed:af:cf: 17:ef:90:48:36:2b:c9:db:09:b4:b9:2e:95:bf:ec: c5:67:8a:67:d1:1d:99:e4:fd:a3:b6:e0:13:00:37: 16:29:5e:60:af:5e:1d:95:e5:ae:8e:d5:02:59:66: db:89:d0:a7:93:d4:bc:59:a1:03:2f:99:8f:4a:ae: 2f:1b:d9:95:23:12:0f:22:1a:e3:2c:e6:35:98:60: 81:a1:93:22:d1:73:8d:1b:da:0c:b9:3f:d3:82:96: 61:fb:6d:b8:74:1d:a0:f6:ab:4a:b4:b9:b3:df:f0: 6f:69:0e:75:d5:7e:a4:d7:3d:86:fb:23:26:94:be: 14:bb:9b:5e:6d:d6:bb:66:27:5b:6d:4d:60:94:a6: 79:24:86:53:5b:47:ed:96:4d:9c:be:c3:8d:0f:41: 7e:25:11:9f:bb:5e:16:b0:88:68:3f:14:59:b1:97: 0a:b8:5a:0a:bd:b2:cc:e1:97:01:16:df:d8:e7:f5: f5:d0:cd:fa:a8:2a:ba:d9:4f:cf:37:0b:66:80:14: 1d:47:d9:fd:91:74:70:c5:21:65:03:2b:6f:69:48: 4e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:38:72:B8:19:A7:86:50:03:20:65:FE:C0:9F:CB:FC:17:13:A0:69 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a625c009-eed5-4024-b5c0-469960c8e95e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:30b::/48 Signature Algorithm: sha256WithRSAEncryption 4d:82:9f:03:a8:24:f2:28:58:fb:11:49:b4:f3:ab:ee:1a:20: 2d:ff:7c:0a:de:b2:f3:14:ab:3f:a4:01:20:df:d0:f0:4d:28: 4f:f4:d3:65:7b:67:54:aa:8b:e6:67:ae:2f:3c:05:6b:d3:b7: 0d:cf:2c:7c:ee:9a:f3:12:91:89:13:0a:f6:85:7f:71:25:1d: f3:57:71:5a:97:0a:45:e8:7f:44:0a:b4:63:60:7e:75:01:da: 41:6f:76:c8:01:16:30:e8:cc:8a:5d:06:ec:0a:f5:c2:6a:f2: e8:cd:b9:72:10:d2:bd:9d:80:59:7e:d2:74:5e:81:2b:fe:b3: 00:aa:9b:4b:3f:81:b1:1b:56:ec:a9:2a:c6:58:81:04:6c:af: f1:8f:44:22:9b:5f:0a:5d:e8:9b:a1:ff:12:3b:01:ae:2b:96: 8d:bc:98:da:dd:09:7b:fc:a9:04:54:df:60:11:00:36:26:40: 32:30:a9:e9:79:a9:66:b3:19:b1:18:4e:3f:a1:a5:5d:68:8d: 12:9b:85:cd:c2:ce:e2:2f:b4:17:cf:2f:36:4c:96:3a:8a:27: c8:53:a0:06:da:bd:98:83:77:d5:48:e1:44:e6:6b:73:0d:08: 47:6c:f6:36:c0:57:f2:ae:aa:06:bf:35:6d:a3:2a:94:cd:cb: fb:74:d3:f9 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEZxZok56qpzQdgvctJ+qA5Hq2RQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwODA3MDM1MDM5WhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MDA3NzQzYzRjYzU0MDI3ZjI3N2Y4NzAwMTAxY2E4Y2Jj ODBjZjM2ZGQ1NGIxNzZiZjQxZDJmZTQ2NjFjMDU1MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbrrYKCWxVmQ/kmRq5CVtKQS011Ez2M1ZlUCPmraJ9poC8 g0p2Z26d6O2vzxfvkEg2K8nbCbS5LpW/7MVnimfRHZnk/aO24BMANxYpXmCvXh2V 5a6O1QJZZtuJ0KeT1LxZoQMvmY9Kri8b2ZUjEg8iGuMs5jWYYIGhkyLRc40b2gy5 P9OClmH7bbh0HaD2q0q0ubPf8G9pDnXVfqTXPYb7IyaUvhS7m15t1rtmJ1ttTWCU pnkkhlNbR+2WTZy+w40PQX4lEZ+7XhawiGg/FFmxlwq4Wgq9sszhlwEW39jn9fXQ zfqoKrrZT883C2aAFB1H2f2RdHDFIWUDK29pSE41AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUvThyuBmnhlADIGX+wJ/L/BcToGkwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2E2MjVjMDA5LWVlZDUtNDAyNC1iNWMwLTQ2OTk2MGM4ZTk1ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAAwswDQYJKoZIhvcNAQELBQADggEBAE2CnwOoJPIoWPsRSbTzq+4a IC3/fAresvMUqz+kASDf0PBNKE/002V7Z1Sqi+Znri88BWvTtw3PLHzumvMSkYkT CvaFf3ElHfNXcVqXCkXof0QKtGNgfnUB2kFvdsgBFjDozIpdBuwK9cJq8ujNuXIQ 0r2dgFl+0nRegSv+swCqm0s/gbEbVuypKsZYgQRsr/GPRCKbXwpd6Juh/xI7Aa4r lo28mNrdCXv8qQRU32ARADYmQDIwqel5qWazGbEYTj+hpV1ojRKbhc3CzuIvtBfP LzZMljqKJ8hToAbavZiDd9VI4UTma3MNCEds9jbAV/Kuqga/NW2jKpTNy/t00/k= -----END CERTIFICATE-----Generated at Fri Sep 18 21:07:48 2026 by rpki-client