$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a94089c1-d8df-4c6a-8169-b038ba987fa1.roa File: a94089c1-d8df-4c6a-8169-b038ba987fa1.roa (raw, json) Hash identifier: 5Qhe4Yk7ru0VGhHX2DfDOspmqDnXekquZJUHcVDNBLs= Subject key identifier: 9C:C7:8F:B0:C8:0B:2C:17:06:01:0A:50:07:1A:12:A4:8B:52:65:0E Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 10B2A655106D7ED0F117DE69F15A6334D6F67F1F Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a94089c1-d8df-4c6a-8169-b038ba987fa1.roa Signing time: Fri 08 May 2026 02:50:43 +0000 ROA not before: Fri 08 May 2026 02:50:43 +0000 ROA not after: Thu 06 Aug 2026 23:59:59 +0000 asID: 40045 IP address blocks: 2605:9cc0:c07::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:b2:a6:55:10:6d:7e:d0:f1:17:de:69:f1:5a:63:34:d6:f6:7f:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 8 02:50:43 2026 GMT Not After : Aug 6 23:59:59 2026 GMT Subject: serialNumber=d86b9cf089602b2f029dfba04992d399108f3569bcd368500146b02eb77c6a0e, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:31:16:3f:3f:ff:fb:8c:d3:53:be:ca:4e:e4: ae:e8:bf:50:94:b1:21:27:d5:0c:53:1d:a8:d9:27: 0b:98:f9:5c:e0:58:cc:f5:3a:a6:47:3b:df:4e:16: 09:5a:72:75:9b:93:b6:1f:46:29:2d:41:ec:25:01: 93:a5:8c:c9:ca:58:83:31:2a:d3:61:e9:cd:29:02: 7f:6e:fb:54:8c:cf:aa:28:31:ec:40:d7:f1:33:74: bd:3b:e6:52:f0:7c:a9:27:14:cb:24:f1:61:dc:83: 05:19:26:9f:c8:ad:62:79:76:3c:7c:cd:fe:7a:ae: 3c:a0:6c:7c:e0:b4:bf:1b:df:7c:d1:10:94:fd:fe: ff:43:07:58:71:0b:72:fb:06:8a:84:b2:4a:11:ab: 3a:2d:33:70:d4:dd:75:89:16:da:c2:c1:d2:4a:f1: e9:d5:a2:df:73:a3:c5:f3:21:5c:7c:06:1a:4e:97: b2:39:36:29:55:e4:46:fb:19:4e:79:e5:3c:e7:be: 94:31:ee:86:a2:f9:3c:ac:33:05:a5:f9:45:04:84: 4b:2d:d3:c3:1e:01:78:f0:de:8c:4e:96:ca:88:c1: 00:81:dc:bb:dc:4b:a9:78:ea:2d:3f:c7:ba:05:16: 11:a5:16:50:f4:07:98:cd:f3:c1:77:d2:99:75:7d: a1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C7:8F:B0:C8:0B:2C:17:06:01:0A:50:07:1A:12:A4:8B:52:65:0E X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a94089c1-d8df-4c6a-8169-b038ba987fa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c07::/48 Signature Algorithm: sha256WithRSAEncryption 8d:f6:3a:59:b5:09:6d:a0:8b:0c:a0:98:26:5e:ee:3f:1f:a4: fe:4c:e5:bf:ad:8f:27:09:7a:7a:bf:59:01:a2:da:b9:ff:0f: f8:ad:da:c1:b8:ed:0b:09:d7:22:c1:d0:f5:b2:8d:7c:f2:ff: 57:29:03:19:6e:bc:24:a0:b6:b0:8c:a6:da:8b:0f:14:02:34: 6e:b6:7f:a9:38:1e:a9:71:49:23:a7:0d:13:73:e6:8e:a6:9a: 20:a9:34:4f:28:23:5d:45:af:02:83:9c:93:8f:4a:47:ea:b8: 1d:7f:87:be:6b:f8:6b:45:ed:d0:02:e1:71:a4:c6:c5:ed:4f: ab:43:34:e0:ce:18:3b:f6:2f:4d:af:12:d5:67:de:3e:65:75: 8d:0c:f7:1a:1f:d9:7d:38:6f:5c:1a:83:7c:c2:37:f3:de:a5: 43:c2:46:6e:c9:16:69:9a:2b:26:98:50:a2:22:58:9e:ca:75: 89:76:a1:4d:f7:8f:75:cd:b1:b7:61:46:25:57:72:50:31:be: d8:89:39:eb:a3:0c:d5:d1:e6:c1:a7:c1:2c:18:07:30:ab:29: c2:da:55:25:71:0d:f2:2c:80:7a:90:b6:17:82:4a:c8:20:19: 87:88:7b:52:87:9e:ca:da:d2:90:6c:f7:b2:e5:d1:6b:a2:18: bf:7a:93:49 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUELKmVRBtftDxF95p8VpjNNb2fx8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwNTA4MDI1MDQzWhcNMjYwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BkODZiOWNmMDg5NjAyYjJmMDI5ZGZiYTA0OTkyZDM5OTEw OGYzNTY5YmNkMzY4NTAwMTQ2YjAyZWI3N2M2YTBlMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBMRY/P//7jNNTvspO5K7ov1CUsSEn1QxTHajZJwuY+Vzg WMz1OqZHO99OFglacnWbk7YfRiktQewlAZOljMnKWIMxKtNh6c0pAn9u+1SMz6oo MexA1/EzdL075lLwfKknFMsk8WHcgwUZJp/IrWJ5djx8zf56rjygbHzgtL8b33zR EJT9/v9DB1hxC3L7BoqEskoRqzotM3DU3XWJFtrCwdJK8enVot9zo8XzIVx8BhpO l7I5NilV5Eb7GU555TznvpQx7oai+TysMwWl+UUEhEst08MeAXjw3oxOlsqIwQCB 3LvcS6l46i0/x7oFFhGlFlD0B5jN88F30pl1faFlAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUnMePsMgLLBcGAQpQBxoSpItSZQ4wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2E5NDA4OWMxLWQ4ZGYtNGM2YS04MTY5LWIwMzhiYTk4N2ZhMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAcwDQYJKoZIhvcNAQELBQADggEBAI32Olm1CW2giwygmCZe7j8f pP5M5b+tjycJenq/WQGi2rn/D/it2sG47QsJ1yLB0PWyjXzy/1cpAxluvCSgtrCM ptqLDxQCNG62f6k4HqlxSSOnDRNz5o6mmiCpNE8oI11FrwKDnJOPSkfquB1/h75r +GtF7dAC4XGkxsXtT6tDNODOGDv2L02vEtVn3j5ldY0M9xof2X04b1wag3zCN/Pe pUPCRm7JFmmaKyaYUKIiWJ7KdYl2oU33j3XNsbdhRiVXclAxvtiJOeujDNXR5sGn wSwYBzCrKcLaVSVxDfIsgHqQtheCSsggGYeIe1KHnsra0pBs97Ll0WuiGL96k0k= -----END CERTIFICATE-----Generated at Mon May 11 17:42:47 2026 by rpki-client