$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d4e0833b-3ace-4211-a7aa-b56839feaad7.roa File: d4e0833b-3ace-4211-a7aa-b56839feaad7.roa (raw, json) Hash identifier: u/BuIvFtYVru4DB3lY5V99NHrohCSGYwV4yE1jEyBCU= Subject key identifier: 08:F6:86:6B:D5:B2:BC:14:F8:9F:41:28:40:25:37:AB:08:81:18:A5 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 25D197BC49E9640082624EED771F936EDFBFD17B Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d4e0833b-3ace-4211-a7aa-b56839feaad7.roa Signing time: Mon 04 May 2026 14:51:05 +0000 ROA not before: Mon 04 May 2026 14:51:05 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 40045 IP address blocks: 2605:9cc0:c1e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:d1:97:bc:49:e9:64:00:82:62:4e:ed:77:1f:93:6e:df:bf:d1:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 4 14:51:05 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=908fe7a797bc5f58803b74e2dd14e34b5565caba65899f39af540576a03bbbc8, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:09:ec:67:59:8e:a6:c1:13:60:af:a9:8b:d3: dc:94:25:e1:d8:24:24:a7:4d:a3:a7:e6:c3:49:a4: 1e:ab:b1:51:81:1b:9c:ca:3a:d7:17:f1:c1:40:2d: ae:81:73:f3:7f:76:2d:a8:a0:d2:6f:a1:53:cd:e9: 97:ea:61:69:17:90:20:f8:ae:5f:b9:e7:90:28:6f: 04:c9:b3:be:41:0d:d3:8b:01:26:61:df:ad:da:60: 21:92:e5:45:e1:cf:47:49:41:c2:f5:77:19:02:b0: fa:a8:f3:98:7e:e9:06:49:6f:63:ec:31:3f:e6:bd: 09:74:6c:92:9b:b3:16:fd:dd:3a:1a:42:3a:06:d3: 68:c9:37:18:9f:44:1f:77:66:69:d5:bb:f1:3e:d4: 52:b7:a8:18:64:c0:a2:94:f0:92:c7:15:0a:47:ed: c1:0a:b9:6a:53:dd:7e:43:c6:d7:86:b6:54:db:ad: 1b:07:82:11:a5:09:c6:21:ee:fd:00:b5:b6:df:a0: 9a:c7:9d:d7:19:60:dc:58:21:b3:e7:e0:51:80:2a: 2f:fe:6c:d2:b8:9a:3e:9b:3b:5b:31:53:b3:c5:d9: 31:44:44:95:70:fa:71:2b:a3:05:2e:b3:c5:c1:64: 7b:09:e6:03:53:26:c2:3c:f6:a4:14:8a:fc:d4:07: 70:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F6:86:6B:D5:B2:BC:14:F8:9F:41:28:40:25:37:AB:08:81:18:A5 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d4e0833b-3ace-4211-a7aa-b56839feaad7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c1e::/48 Signature Algorithm: sha256WithRSAEncryption a2:84:c3:5f:01:45:6d:65:df:99:85:ee:0b:92:ca:1d:7e:f9: 5b:d2:40:43:c8:25:e7:fb:6d:b1:62:b9:c2:0c:c5:22:b6:3e: ad:43:84:09:b8:84:6a:b3:95:e3:93:01:e3:7a:ab:2d:92:ac: d8:44:80:f0:17:af:a3:dd:75:a5:d2:e1:8b:23:9c:14:9e:3b: 3a:1b:e5:63:4d:6e:5f:c8:74:16:6f:6c:52:87:9d:09:f8:bb: da:8e:a2:b4:89:c4:0c:ec:24:3c:f4:96:dc:ac:d0:95:27:c1: 73:2c:b5:07:79:90:04:c4:da:d1:cc:73:90:0a:49:ea:0f:a4: 6e:b1:20:86:20:79:de:fb:ca:5d:e5:63:44:c5:67:9d:f0:3b: c7:83:42:e5:2e:2e:1b:45:83:d1:88:13:18:f0:5b:d8:93:d9: 04:a0:e9:26:d2:e5:6d:71:30:1d:a3:a9:6a:18:ea:2f:cb:bd: 81:55:18:01:8e:3a:cd:ac:b5:5a:71:b5:59:ef:cc:1c:7e:38: 29:6d:77:4c:46:20:9f:65:e9:f1:8b:a5:eb:f4:1b:df:42:3f: ab:5b:ea:64:72:3c:0a:c7:5c:62:4c:65:92:4a:29:88:34:8b: af:e1:d3:d4:f0:91:67:6a:22:79:72:c2:9a:d4:31:62:28:49: 2a:ec:bb:75 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJdGXvEnpZACCYk7tdx+Tbt+/0XswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwNTA0MTQ1MTA1WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MDhmZTdhNzk3YmM1ZjU4ODAzYjc0ZTJkZDE0ZTM0YjU1 NjVjYWJhNjU4OTlmMzlhZjU0MDU3NmEwM2JiYmM4MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9CexnWY6mwRNgr6mL09yUJeHYJCSnTaOn5sNJpB6rsVGB G5zKOtcX8cFALa6Bc/N/di2ooNJvoVPN6ZfqYWkXkCD4rl+555AobwTJs75BDdOL ASZh363aYCGS5UXhz0dJQcL1dxkCsPqo85h+6QZJb2PsMT/mvQl0bJKbsxb93Toa QjoG02jJNxifRB93ZmnVu/E+1FK3qBhkwKKU8JLHFQpH7cEKuWpT3X5DxteGtlTb rRsHghGlCcYh7v0AtbbfoJrHndcZYNxYIbPn4FGAKi/+bNK4mj6bO1sxU7PF2TFE RJVw+nErowUus8XBZHsJ5gNTJsI89qQUivzUB3DjAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUCPaGa9WyvBT4n0EoQCU3qwiBGKUwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2Q0ZTA4MzNiLTNhY2UtNDIxMS1hN2FhLWI1NjgzOWZlYWFkNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADB4wDQYJKoZIhvcNAQELBQADggEBAKKEw18BRW1l35mF7guSyh1+ +VvSQEPIJef7bbFiucIMxSK2Pq1DhAm4hGqzleOTAeN6qy2SrNhEgPAXr6PddaXS 4YsjnBSeOzob5WNNbl/IdBZvbFKHnQn4u9qOorSJxAzsJDz0ltys0JUnwXMstQd5 kATE2tHMc5AKSeoPpG6xIIYged77yl3lY0TFZ53wO8eDQuUuLhtFg9GIExjwW9iT 2QSg6SbS5W1xMB2jqWoY6i/LvYFVGAGOOs2stVpxtVnvzBx+OCltd0xGIJ9l6fGL pev0G99CP6tb6mRyPArHXGJMZZJKKYg0i6/h09TwkWdqInlywprUMWIoSSrsu3U= -----END CERTIFICATE-----Generated at Mon May 11 17:42:15 2026 by rpki-client