$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e7be52a8-6c07-498d-bbf3-127d89979e51.roa File: e7be52a8-6c07-498d-bbf3-127d89979e51.roa (raw, json) Hash identifier: mDsh81DDTInce7k202xG0e1dxGAhB5WPKA3ttf7niLM= Subject key identifier: C5:87:EB:30:F0:96:00:62:6D:3F:EF:B3:A9:26:D1:F0:95:3A:7B:A9 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 022DA3CAA61C551269368FABCAFF93219A30B91A Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e7be52a8-6c07-498d-bbf3-127d89979e51.roa Signing time: Fri 08 May 2026 02:50:06 +0000 ROA not before: Fri 08 May 2026 02:50:06 +0000 ROA not after: Thu 06 Aug 2026 23:59:59 +0000 asID: 40045 IP address blocks: 2605:9cc0:c10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:2d:a3:ca:a6:1c:55:12:69:36:8f:ab:ca:ff:93:21:9a:30:b9:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 8 02:50:06 2026 GMT Not After : Aug 6 23:59:59 2026 GMT Subject: serialNumber=4790a5016fafa45fa9b1ad7eae1bec0140ea7aa71101949d84c2de0c36616a9d, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:48:51:c4:3e:91:66:dc:55:0d:c5:34:b0:eb: 5d:ce:21:0e:da:76:a3:19:28:e2:8d:af:ad:ff:e6: 22:8d:fc:18:4b:d0:82:40:c1:65:92:f5:d9:c9:6f: cd:cf:4f:a3:21:a1:ed:d3:de:de:31:da:a2:d2:bd: e8:fd:fa:57:60:09:f8:c4:ec:3b:c0:d7:b7:c8:e1: 73:27:05:1b:3e:b4:b6:5f:a2:e8:f0:c9:82:bc:a8: 39:a5:ef:c5:6b:a5:a6:c3:0a:03:b8:a1:19:ee:74: 63:c7:88:45:f2:52:ef:6c:cc:eb:45:3a:40:7d:37: fc:e5:bd:b4:c2:c3:ce:24:d9:44:88:a2:3c:52:a0: 74:29:e7:36:66:34:37:5d:56:60:22:c9:2e:df:ed: ba:c6:20:87:52:02:1f:90:56:a5:6d:1a:87:13:bd: a3:cd:34:d0:11:66:2f:e7:ff:6b:30:87:33:c5:0c: 41:01:97:6a:51:4f:8a:67:a8:03:13:cc:44:d4:07: 13:ab:1c:0e:72:4b:df:89:34:f8:c0:c0:af:7a:bb: ae:a8:2f:77:3b:9d:e3:bd:83:ee:05:e3:22:00:10: fd:17:e2:24:76:36:7e:81:ac:5d:d3:b2:4c:46:74: f4:f4:df:28:8b:76:8f:47:e5:57:04:3f:9c:a4:cb: 08:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:87:EB:30:F0:96:00:62:6D:3F:EF:B3:A9:26:D1:F0:95:3A:7B:A9 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e7be52a8-6c07-498d-bbf3-127d89979e51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c10::/48 Signature Algorithm: sha256WithRSAEncryption 90:61:a6:b6:a9:03:00:06:98:c9:f0:fb:a4:36:e6:4e:d6:a7: 1d:72:18:2b:0a:4f:20:12:82:b9:77:de:1e:64:a0:ab:8c:78: 23:02:b5:85:35:fd:53:b3:d1:5c:2b:32:91:83:24:2e:e9:67: 8b:a7:01:fd:37:8a:45:18:a8:41:89:32:10:8c:f6:00:bd:26: 38:fa:34:dd:35:1c:8f:60:7c:61:76:51:9c:80:d2:5e:13:65: e6:20:d5:a3:83:78:bb:00:a1:54:d2:8a:c5:2b:38:22:97:d9: d0:43:df:f9:3b:68:37:85:1d:e3:91:48:36:0b:e3:a4:36:20: d4:c4:36:9f:76:6d:9b:66:54:c7:c7:6a:18:b4:22:d7:34:59: 4e:ad:9e:ee:a6:78:65:bf:25:1f:b4:4f:94:01:14:df:65:78: 22:37:87:6c:30:28:07:dc:74:b7:12:20:a7:5e:b7:03:75:b8: 06:6c:4b:9f:5b:2c:42:aa:96:c5:a7:2e:87:cb:a4:bb:5a:5d: af:4c:00:ff:63:d7:0c:9b:76:08:78:74:b2:25:24:65:81:07: fe:9a:b3:f4:2f:15:7f:69:b3:37:18:00:cc:35:a0:44:78:75: c9:ff:78:88:16:4a:46:8c:1e:54:a8:eb:4d:86:80:6f:61:b2: b0:77:7d:4b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUAi2jyqYcVRJpNo+ryv+TIZowuRowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwNTA4MDI1MDA2WhcNMjYwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NzkwYTUwMTZmYWZhNDVmYTliMWFkN2VhZTFiZWMwMTQw ZWE3YWE3MTEwMTk0OWQ4NGMyZGUwYzM2NjE2YTlkMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjSFHEPpFm3FUNxTSw613OIQ7adqMZKOKNr63/5iKN/BhL 0IJAwWWS9dnJb83PT6Mhoe3T3t4x2qLSvej9+ldgCfjE7DvA17fI4XMnBRs+tLZf oujwyYK8qDml78VrpabDCgO4oRnudGPHiEXyUu9szOtFOkB9N/zlvbTCw84k2USI ojxSoHQp5zZmNDddVmAiyS7f7brGIIdSAh+QVqVtGocTvaPNNNARZi/n/2swhzPF DEEBl2pRT4pnqAMTzETUBxOrHA5yS9+JNPjAwK96u66oL3c7neO9g+4F4yIAEP0X 4iR2Nn6BrF3TskxGdPT03yiLdo9H5VcEP5ykywjZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUxYfrMPCWAGJtP++zqSbR8JU6e6kwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2U3YmU1MmE4LTZjMDctNDk4ZC1iYmYzLTEyN2Q4OTk3OWU1MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBAwDQYJKoZIhvcNAQELBQADggEBAJBhprapAwAGmMnw+6Q25k7W px1yGCsKTyASgrl33h5koKuMeCMCtYU1/VOz0VwrMpGDJC7pZ4unAf03ikUYqEGJ MhCM9gC9Jjj6NN01HI9gfGF2UZyA0l4TZeYg1aODeLsAoVTSisUrOCKX2dBD3/k7 aDeFHeORSDYL46Q2INTENp92bZtmVMfHahi0Itc0WU6tnu6meGW/JR+0T5QBFN9l eCI3h2wwKAfcdLcSIKdetwN1uAZsS59bLEKqlsWnLofLpLtaXa9MAP9j1wybdgh4 dLIlJGWBB/6as/QvFX9pszcYAMw1oER4dcn/eIgWSkaMHlSo602GgG9hsrB3fUs= -----END CERTIFICATE-----Generated at Mon May 11 17:42:20 2026 by rpki-client