$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bf76eee1-81c6-4018-9264-f7eddc9e8c2f.roa File: bf76eee1-81c6-4018-9264-f7eddc9e8c2f.roa (raw, json) Hash identifier: pRAgaK46TO56lZ4dVF1TGYJ5DRIMY+FJy7pJf4qUC+c= Subject key identifier: 83:B6:8C:1C:E4:F0:72:83:67:CA:27:68:E8:A8:15:80:63:80:CC:A9 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 464920F6BB59D9902B43664686B13118522C88FA Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bf76eee1-81c6-4018-9264-f7eddc9e8c2f.roa Signing time: Mon 27 Apr 2026 00:10:07 +0000 ROA not before: Mon 27 Apr 2026 00:10:07 +0000 ROA not after: Sun 26 Jul 2026 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:3b3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:49:20:f6:bb:59:d9:90:2b:43:66:46:86:b1:31:18:52:2c:88:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 27 00:10:07 2026 GMT Not After : Jul 26 23:59:59 2026 GMT Subject: serialNumber=6c711a84b22aac6805ee201fa2eecd6196a5a3fd38b798f7603dfef119721c9d, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:c3:03:ac:65:d0:aa:8c:bb:1d:54:ee:ce:fd: 21:70:a5:c0:50:de:9d:6a:23:4a:1d:af:13:e7:2f: fa:1c:a4:54:49:c1:48:7d:0b:ac:36:25:28:6b:74: 44:0a:47:f9:d0:ca:58:ac:17:33:9f:18:3a:ee:45: da:d5:81:86:4b:d7:37:35:fc:5a:b2:8b:6c:08:01: 11:dd:a9:fd:ee:eb:e5:fd:02:a2:68:30:78:a1:83: 29:47:f1:62:b1:f9:30:62:ee:d2:9f:02:32:a5:c8: 2c:f4:d4:f8:56:9c:51:16:03:5f:8a:cf:22:63:08: 9a:85:8b:f8:90:03:60:38:72:f8:86:80:89:12:51: 4e:e2:ef:f0:7a:95:1e:7b:be:e4:9e:43:62:3d:7e: 80:a6:ec:76:94:fd:1d:37:47:24:7c:67:02:d8:2e: 3e:f9:8f:c3:ad:59:84:6c:bd:c7:64:b6:4c:2c:d9: 94:ae:91:b9:8a:71:e7:ad:fa:46:da:ee:89:14:16: df:58:01:df:e8:e4:3d:d5:15:27:6e:da:8a:8a:64: a0:b3:94:d9:58:04:be:27:6e:7e:ea:76:77:3d:3a: 1e:55:b0:67:f7:f7:cd:71:c0:c0:e6:b5:da:62:2e: 9e:95:f9:63:34:30:dd:42:a1:55:41:87:9a:03:e4: df:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:B6:8C:1C:E4:F0:72:83:67:CA:27:68:E8:A8:15:80:63:80:CC:A9 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bf76eee1-81c6-4018-9264-f7eddc9e8c2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:3b3::/48 Signature Algorithm: sha256WithRSAEncryption 68:f3:45:83:5a:a7:b6:86:3d:e7:db:47:d4:b8:43:7c:26:71: 3c:63:87:ba:3a:ce:79:20:aa:85:8a:51:58:b8:36:86:33:04: 88:83:2c:72:22:b5:9b:19:7e:9a:ae:13:db:db:86:10:ed:39: 22:45:dc:d1:84:75:90:8d:8d:6e:9f:02:d6:92:fa:1a:70:dd: e3:31:d8:f1:9f:aa:23:a4:70:e8:12:a0:20:90:47:f9:bd:60: e0:1f:d4:25:9e:02:3f:6e:5f:5c:79:58:81:58:f3:e6:74:54: 92:c3:01:b8:0d:98:28:d5:ca:e2:c4:e3:47:0f:ec:8c:7a:95: 93:7f:6b:c3:c3:15:68:90:ea:7b:36:9c:32:80:36:cd:46:28: 85:5a:58:f4:62:27:a7:24:f9:51:25:e0:53:a5:9e:e6:33:c2: 5b:71:07:83:c9:07:99:dd:46:f8:37:61:7b:0d:e2:4a:ee:b1: 57:ba:68:bd:30:f2:87:33:96:d3:2d:17:91:ef:b7:ee:a5:60: b2:c7:96:65:70:c1:d7:7d:44:e3:0b:2b:d3:df:1c:55:8b:00: 90:ee:37:4f:6b:46:e5:5b:58:bc:76:3b:d7:9b:30:37:fb:a3: 4e:ac:02:3f:c7:c4:b9:82:d2:fb:7a:a2:76:59:98:07:ad:a2: 80:29:4d:d5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURkkg9rtZ2ZArQ2ZGhrExGFIsiPowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwNDI3MDAxMDA3WhcNMjYwNzI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A2YzcxMWE4NGIyMmFhYzY4MDVlZTIwMWZhMmVlY2Q2MTk2 YTVhM2ZkMzhiNzk4Zjc2MDNkZmVmMTE5NzIxYzlkMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD0wwOsZdCqjLsdVO7O/SFwpcBQ3p1qI0odrxPnL/ocpFRJ wUh9C6w2JShrdEQKR/nQylisFzOfGDruRdrVgYZL1zc1/Fqyi2wIARHdqf3u6+X9 AqJoMHihgylH8WKx+TBi7tKfAjKlyCz01PhWnFEWA1+KzyJjCJqFi/iQA2A4cviG gIkSUU7i7/B6lR57vuSeQ2I9foCm7HaU/R03RyR8ZwLYLj75j8OtWYRsvcdktkws 2ZSukbmKceet+kba7okUFt9YAd/o5D3VFSdu2oqKZKCzlNlYBL4nbn7qdnc9Oh5V sGf3981xwMDmtdpiLp6V+WM0MN1CoVVBh5oD5N8rAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUg7aMHOTwcoNnyido6KgVgGOAzKkwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2JmNzZlZWUxLTgxYzYtNDAxOC05MjY0LWY3ZWRkYzllOGMyZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA7MwDQYJKoZIhvcNAQELBQADggEBAGjzRYNap7aGPefbR9S4Q3wm cTxjh7o6znkgqoWKUVi4NoYzBIiDLHIitZsZfpquE9vbhhDtOSJF3NGEdZCNjW6f AtaS+hpw3eMx2PGfqiOkcOgSoCCQR/m9YOAf1CWeAj9uX1x5WIFY8+Z0VJLDAbgN mCjVyuLE40cP7Ix6lZN/a8PDFWiQ6ns2nDKANs1GKIVaWPRiJ6ck+VEl4FOlnuYz wltxB4PJB5ndRvg3YXsN4krusVe6aL0w8oczltMtF5Hvt+6lYLLHlmVwwdd9ROML K9PfHFWLAJDuN09rRuVbWLx2O9ebMDf7o06sAj/HxLmC0vt6onZZmAetooApTdU= -----END CERTIFICATE-----Generated at Mon May 4 23:16:01 2026 by rpki-client