$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/af800973-d2a0-4250-88e7-9c8ae26b16ec.roa File: af800973-d2a0-4250-88e7-9c8ae26b16ec.roa (raw, json) Hash identifier: lbrfL8EqwUX+my7/TZXaxB3sMXDWgGDqFzI3DWTQHtk= Subject key identifier: 0B:E4:77:15:28:5C:5B:61:D6:C7:B0:D5:7E:FD:A7:CA:33:A8:4A:4B Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 6728C457AE2E091E4ECEC3B54B3E266DBAD8A47A Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/af800973-d2a0-4250-88e7-9c8ae26b16ec.roa Signing time: Tue 04 Aug 2026 00:10:11 +0000 ROA not before: Tue 04 Aug 2026 00:10:11 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:d80::/43 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Aug 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:28:c4:57:ae:2e:09:1e:4e:ce:c3:b5:4b:3e:26:6d:ba:d8:a4:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Aug 4 00:10:11 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=a231fe7412a58bf05351084017aaa5ace7fd1bafa7cf0ba3df3cc1595f7d144e, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:88:28:01:3d:45:8b:4c:7f:06:2c:3a:de:9b: 46:3e:e3:99:e7:d8:a0:1f:2c:c8:e8:65:c0:fe:fa: 0e:ce:57:ec:63:49:7d:16:02:82:ec:79:89:ad:57: 09:c1:bf:1f:d9:8d:7c:5e:18:23:d6:e2:e6:3d:85: 39:52:83:f7:42:d6:c9:1c:22:5d:3d:a0:4e:c2:52: b1:d9:c0:25:8a:4f:a2:5e:ce:ed:d9:ef:91:53:1c: 21:7a:1b:a5:11:46:ab:02:76:b7:08:ff:b1:7a:c4: 54:3f:45:6e:d8:1a:01:c1:78:5d:fb:aa:90:55:5b: 5b:67:d3:d1:c9:aa:f0:12:f6:44:3f:f3:e0:96:61: 04:c5:67:32:c6:a2:3f:c7:43:83:01:dc:b0:1a:bc: 7c:c1:d0:74:c5:04:5f:8f:06:70:97:03:98:d5:09: c4:71:1d:45:c3:75:01:1d:89:aa:11:3f:be:b6:66: da:22:1f:dd:71:47:e1:93:e9:6d:db:ce:7f:41:81: c7:bf:d6:d4:f7:af:56:61:ca:de:8b:83:61:e2:a0: ef:64:cb:0c:f2:65:e2:67:4d:57:d2:44:17:0a:a9: 93:5a:ca:97:fa:0a:5d:24:49:ab:82:d7:a3:2a:2f: 97:57:70:b1:5e:2a:d2:02:d3:05:5a:a5:86:ee:87: f5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:E4:77:15:28:5C:5B:61:D6:C7:B0:D5:7E:FD:A7:CA:33:A8:4A:4B X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/af800973-d2a0-4250-88e7-9c8ae26b16ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:d80::/43 Signature Algorithm: sha256WithRSAEncryption 8a:55:ee:93:bc:b1:60:5a:0a:41:04:4c:f3:6a:a2:7c:03:49: ff:66:e4:d4:dc:24:c8:5c:69:28:82:60:e9:14:97:c5:b4:12: 19:87:af:32:c7:0d:d8:06:8e:f1:7e:97:a5:15:dc:3b:fb:83: 64:b1:ea:b1:ee:4f:73:c5:73:07:be:9f:0b:04:c6:09:2b:55: ba:0d:1f:52:a8:18:ca:b6:c1:c6:b7:b4:eb:4c:b0:98:5a:c2: 50:5c:65:a7:61:0d:61:72:65:73:38:30:43:7b:92:2e:1f:d9: d8:ef:dc:ea:45:2a:f8:19:f4:80:95:95:9c:cc:c9:0e:c4:1c: be:fa:8b:36:49:2c:12:9f:6e:41:72:68:7b:bf:83:78:fe:2e: 10:e3:11:ca:99:fe:8e:5b:72:8d:f5:db:5e:d7:0d:2e:65:f1: b6:10:28:49:9c:85:74:0d:0c:c3:fb:93:e4:4b:8e:7c:4c:a7: a9:1a:64:cd:04:4e:b8:8d:80:a7:56:b4:df:6f:e7:14:2e:53: 71:1d:9c:23:84:b7:06:6f:23:cb:a7:80:d1:ce:ce:a5:c5:22: 6a:0c:3f:b8:92:01:5f:2d:8d:79:de:12:d6:a8:35:45:0b:0c: d3:75:f7:e7:31:d4:a8:fa:e0:51:fc:9d:59:2f:74:2f:47:4b: 75:ab:f7:93 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZyjEV64uCR5OzsO1Sz4mbbrYpHowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwODA0MDAxMDExWhcNMjYxMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMjMxZmU3NDEyYTU4YmYwNTM1MTA4NDAxN2FhYTVhY2U3 ZmQxYmFmYTdjZjBiYTNkZjNjYzE1OTVmN2QxNDRlMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLiCgBPUWLTH8GLDrem0Y+45nn2KAfLMjoZcD++g7OV+xj SX0WAoLseYmtVwnBvx/ZjXxeGCPW4uY9hTlSg/dC1skcIl09oE7CUrHZwCWKT6Je zu3Z75FTHCF6G6URRqsCdrcI/7F6xFQ/RW7YGgHBeF37qpBVW1tn09HJqvAS9kQ/ 8+CWYQTFZzLGoj/HQ4MB3LAavHzB0HTFBF+PBnCXA5jVCcRxHUXDdQEdiaoRP762 ZtoiH91xR+GT6W3bzn9Bgce/1tT3r1Zhyt6Lg2HioO9kywzyZeJnTVfSRBcKqZNa ypf6Cl0kSauC16MqL5dXcLFeKtIC0wVapYbuh/V/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUC+R3FShcW2HWx7DVfv2nyjOoSkswHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2FmODAwOTczLWQyYTAtNDI1MC04OGU3LTljOGFlMjZiMTZlYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwUmBZzADYAwDQYJKoZIhvcNAQELBQADggEBAIpV7pO8sWBaCkEETPNqonwD Sf9m5NTcJMhcaSiCYOkUl8W0EhmHrzLHDdgGjvF+l6UV3Dv7g2Sx6rHuT3PFcwe+ nwsExgkrVboNH1KoGMq2wca3tOtMsJhawlBcZadhDWFyZXM4MEN7ki4f2djv3OpF KvgZ9ICVlZzMyQ7EHL76izZJLBKfbkFyaHu/g3j+LhDjEcqZ/o5bco31217XDS5l 8bYQKEmchXQNDMP7k+RLjnxMp6kaZM0ETriNgKdWtN9v5xQuU3EdnCOEtwZvI8un gNHOzqXFImoMP7iSAV8tjXneEtaoNUULDNN19+cx1Kj64FH8nVkvdC9HS3Wr95M= -----END CERTIFICATE-----Generated at Fri Aug 7 07:45:52 2026 by rpki-client