$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bda389ba-82f7-473f-a337-f093368602cc.roa File: bda389ba-82f7-473f-a337-f093368602cc.roa (raw, json) Hash identifier: 3+z2owUDBFts1R7B9u0AiCsVYUiVEIvbAPYwx2r54pE= Subject key identifier: B6:C7:1A:8B:E0:AA:01:71:8E:3C:7F:C3:DA:AA:73:94:82:8C:55:3B Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 74C9B7C129166D58246C39A22D1DCDA57129EE95 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bda389ba-82f7-473f-a337-f093368602cc.roa Signing time: Tue 19 May 2026 03:40:37 +0000 ROA not before: Tue 19 May 2026 03:40:37 +0000 ROA not after: Mon 17 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:307::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Jun 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:c9:b7:c1:29:16:6d:58:24:6c:39:a2:2d:1d:cd:a5:71:29:ee:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 19 03:40:37 2026 GMT Not After : Aug 17 23:59:59 2026 GMT Subject: serialNumber=6289315729a9364722aeb16ed1af21b126034788e4024a21e2b04ab39305e4f7, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0c:5f:f9:6b:f4:da:b2:87:38:61:1c:d6:fc: 21:c9:75:ad:48:df:60:b0:c1:2b:11:b8:e7:fe:12: f1:fc:d4:43:85:74:85:17:b3:ac:c5:46:f2:14:8c: fa:1b:da:16:53:ef:8f:40:8a:c8:f8:5f:ed:74:e6: 04:13:0b:50:0b:f7:a9:5b:c7:40:aa:32:72:b0:8c: 6b:1e:8a:14:a1:e1:e1:a0:59:06:a5:be:f2:0a:bd: 79:40:61:11:ea:9c:e0:89:d0:bd:92:d5:63:76:c5: 1e:e4:53:22:ef:c8:29:1e:16:4a:4f:08:81:ba:fc: b2:5b:71:0b:f9:b4:32:30:ed:48:4a:90:09:70:84: d5:20:54:44:fc:e3:22:19:5f:22:4c:2f:9d:be:1c: 36:40:e1:3b:42:b8:9a:2c:dc:09:12:ca:f2:3f:ca: f2:ca:c0:c5:17:13:b3:3e:bd:9b:a1:b0:7e:bc:7f: e5:8b:95:e2:4e:d7:63:73:1a:48:a3:35:45:e8:73: d2:f1:f7:84:f0:65:69:50:61:e3:b6:66:97:e0:a4: 15:97:5f:5b:f6:37:f4:9f:32:c7:47:69:d4:7d:a6: f6:db:2c:51:03:cf:d4:83:6b:ba:5b:71:89:a2:3e: 64:74:fc:48:0f:bc:2e:8c:ce:33:49:e0:d4:8b:18: 52:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:C7:1A:8B:E0:AA:01:71:8E:3C:7F:C3:DA:AA:73:94:82:8C:55:3B X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bda389ba-82f7-473f-a337-f093368602cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:307::/48 Signature Algorithm: sha256WithRSAEncryption 89:08:f1:bf:38:f9:a0:39:0e:e0:bb:65:6f:d6:37:bc:21:50: f6:c4:b6:a7:49:cf:b9:29:fe:94:fd:00:77:5e:a0:0a:64:ec: 7a:57:93:40:b2:7c:12:bc:94:bd:cc:ce:84:8b:ce:d8:96:f1: ba:0a:5f:aa:be:1d:50:0a:fd:35:81:fa:59:10:f0:fd:48:60: ad:bb:46:e7:da:16:5c:e3:3a:d8:21:4f:0a:55:a5:2e:80:6b: a2:fa:24:7a:91:da:ae:d5:80:3b:8e:ab:92:92:fe:a6:cd:c7: cb:48:f5:3a:4e:dd:19:4b:9a:d4:d2:c2:4c:3c:62:c9:4e:e0: 02:f4:10:6a:7c:fb:57:2f:c9:7a:5f:44:82:b0:a1:0c:aa:c1: 35:2d:96:88:7c:15:61:b3:96:9f:78:03:4f:52:af:94:0b:3a: 73:75:f5:ba:8e:f4:56:0e:38:8c:0c:a5:bb:39:09:1d:cd:63: cc:9e:c3:c2:ea:23:cd:b6:1b:b2:11:0d:89:95:37:0c:10:3c: e2:21:cf:db:8c:a3:2c:93:5f:b4:56:64:80:63:fd:7b:b8:89: 53:f6:40:b6:c6:7c:dd:53:cd:af:05:f5:c7:e1:e0:20:2f:6b: 78:12:c5:83:0c:90:dd:c1:7b:67:ff:31:63:f4:c6:db:9b:67: b8:3d:57:0b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdMm3wSkWbVgkbDmiLR3NpXEp7pUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwNTE5MDM0MDM3WhcNMjYwODE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2Mjg5MzE1NzI5YTkzNjQ3MjJhZWIxNmVkMWFmMjFiMTI2 MDM0Nzg4ZTQwMjRhMjFlMmIwNGFiMzkzMDVlNGY3MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqDF/5a/Tasoc4YRzW/CHJda1I32CwwSsRuOf+EvH81EOF dIUXs6zFRvIUjPob2hZT749Aisj4X+105gQTC1AL96lbx0CqMnKwjGseihSh4eGg WQalvvIKvXlAYRHqnOCJ0L2S1WN2xR7kUyLvyCkeFkpPCIG6/LJbcQv5tDIw7UhK kAlwhNUgVET84yIZXyJML52+HDZA4TtCuJos3AkSyvI/yvLKwMUXE7M+vZuhsH68 f+WLleJO12NzGkijNUXoc9Lx94TwZWlQYeO2ZpfgpBWXX1v2N/SfMsdHadR9pvbb LFEDz9SDa7pbcYmiPmR0/EgPvC6MzjNJ4NSLGFK1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUtscai+CqAXGOPH/D2qpzlIKMVTswHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2JkYTM4OWJhLTgyZjctNDczZi1hMzM3LWYwOTMzNjg2MDJjYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAAwcwDQYJKoZIhvcNAQELBQADggEBAIkI8b84+aA5DuC7ZW/WN7wh UPbEtqdJz7kp/pT9AHdeoApk7HpXk0CyfBK8lL3MzoSLztiW8boKX6q+HVAK/TWB +lkQ8P1IYK27RufaFlzjOtghTwpVpS6Aa6L6JHqR2q7VgDuOq5KS/qbNx8tI9TpO 3RlLmtTSwkw8YslO4AL0EGp8+1cvyXpfRIKwoQyqwTUtloh8FWGzlp94A09Sr5QL OnN19bqO9FYOOIwMpbs5CR3NY8yew8LqI822G7IRDYmVNwwQPOIhz9uMoyyTX7RW ZIBj/Xu4iVP2QLbGfN1Tza8F9cfh4CAva3gSxYMMkN3Be2f/MWP0xtubZ7g9Vws= -----END CERTIFICATE-----Generated at Thu Jun 11 23:37:48 2026 by rpki-client