$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e8ec01c4-9a70-468a-827a-592d1f84b491.roa File: e8ec01c4-9a70-468a-827a-592d1f84b491.roa (raw, json) Hash identifier: X0r9aZsOPXE+RL58CTs4lhbZe8LCHZqMge3Sxu+uBZs= Subject key identifier: BE:C8:93:45:E1:8C:CB:A6:4C:13:C0:5A:69:B9:9E:12:7A:7B:D8:F4 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 590B8CD55701772926D63D3FBF809EA50314B9B1 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e8ec01c4-9a70-468a-827a-592d1f84b491.roa Signing time: Fri 08 May 2026 03:00:34 +0000 ROA not before: Fri 08 May 2026 03:00:34 +0000 ROA not after: Thu 06 Aug 2026 23:59:59 +0000 asID: 40045 IP address blocks: 2605:9cc0:c09::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:0b:8c:d5:57:01:77:29:26:d6:3d:3f:bf:80:9e:a5:03:14:b9:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 8 03:00:34 2026 GMT Not After : Aug 6 23:59:59 2026 GMT Subject: serialNumber=4b1ecf5e224ffe30043cd43b493dc76fea556b853a0d8586fccd912e857d7afa, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:45:36:ad:25:03:8f:24:ca:ca:c3:5c:15:c9: ac:35:8e:c8:0b:93:df:68:0c:c2:9d:09:cd:23:42: c8:cc:73:ed:79:e2:8f:37:ee:89:e2:24:03:5e:e7: 7f:47:93:18:f5:5a:ab:5e:9a:2b:20:f8:30:b9:e8: bf:ec:e5:e7:fc:b0:07:0c:a5:f7:29:4a:c8:cc:28: 26:c1:ab:76:c8:61:21:8f:c3:b1:37:04:7e:4b:9a: 14:05:39:9d:33:52:88:dc:75:a3:ad:f0:78:fa:e3: bb:fc:92:38:17:27:9d:10:38:37:40:66:7f:49:66: 61:df:37:bc:39:4f:de:47:00:d7:6b:97:bc:ca:c0: fd:27:71:fe:00:93:af:3d:f6:64:4f:c1:65:93:83: d9:9d:32:3a:02:6a:ae:7a:48:1f:bb:ec:54:c6:32: 3f:2f:38:b6:4f:e9:53:1c:00:ef:0f:0c:eb:40:fb: 69:da:e1:45:84:83:62:cd:5b:08:12:28:2a:06:02: ae:69:06:48:2d:4b:b8:74:6a:a0:c6:99:36:a2:97: 7f:03:30:a1:e3:0e:42:0f:04:ac:f8:56:ae:90:a5: 1a:68:7f:22:dd:86:65:dc:83:2c:f4:79:29:a7:a8: 2d:f2:e7:b4:22:ae:e6:fa:55:70:ca:a3:46:90:4e: de:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:C8:93:45:E1:8C:CB:A6:4C:13:C0:5A:69:B9:9E:12:7A:7B:D8:F4 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e8ec01c4-9a70-468a-827a-592d1f84b491.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c09::/48 Signature Algorithm: sha256WithRSAEncryption 0c:9b:32:6c:54:25:76:c0:3f:e9:89:02:77:eb:ac:75:34:aa: a3:3b:cb:f7:fd:97:3d:a9:77:04:2b:a4:89:91:9a:7a:52:56: 6f:b2:fb:2b:39:f5:98:a2:9a:af:cc:c7:ef:64:1d:8a:58:64: eb:a1:52:80:ae:63:a7:91:bf:8d:ab:59:73:0b:68:8a:c3:9c: 12:bb:7e:4f:74:27:61:cd:c5:75:ad:15:fb:35:0d:7c:62:6e: 6a:75:07:a7:96:2a:78:c4:8c:93:70:c6:c5:70:d6:9e:cd:2f: 11:ae:26:e8:c7:b4:17:2e:9d:a0:05:d1:77:58:c0:39:4b:67: e5:03:da:4e:65:a6:1c:54:f1:b0:cf:69:5b:88:35:fa:ea:18: 86:3b:7e:4e:d7:59:b6:f6:7f:f1:26:07:38:37:e5:ea:c3:62: 7f:e0:0a:f5:51:f1:7e:9d:07:05:d1:62:aa:f7:51:a0:f2:65: 83:af:d3:52:1d:d0:26:91:8d:4f:e0:ee:01:24:08:c8:54:17: 7c:da:69:5c:6e:95:79:df:65:7b:41:de:0c:17:ea:54:dd:90: 27:b2:69:fb:22:e3:c9:ca:2d:39:e9:52:fa:8f:bc:52:02:46: 14:02:cd:40:ef:8a:a5:6a:aa:8c:49:79:25:6d:2c:fa:df:ce: ee:98:65:ab -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWQuM1VcBdykm1j0/v4CepQMUubEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwNTA4MDMwMDM0WhcNMjYwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YjFlY2Y1ZTIyNGZmZTMwMDQzY2Q0M2I0OTNkYzc2ZmVh NTU2Yjg1M2EwZDg1ODZmY2NkOTEyZTg1N2Q3YWZhMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDeRTatJQOPJMrKw1wVyaw1jsgLk99oDMKdCc0jQsjMc+15 4o837oniJANe539Hkxj1Wqtemisg+DC56L/s5ef8sAcMpfcpSsjMKCbBq3bIYSGP w7E3BH5LmhQFOZ0zUojcdaOt8Hj647v8kjgXJ50QODdAZn9JZmHfN7w5T95HANdr l7zKwP0ncf4Ak6899mRPwWWTg9mdMjoCaq56SB+77FTGMj8vOLZP6VMcAO8PDOtA +2na4UWEg2LNWwgSKCoGAq5pBkgtS7h0aqDGmTail38DMKHjDkIPBKz4Vq6QpRpo fyLdhmXcgyz0eSmnqC3y57Qirub6VXDKo0aQTt4PAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUvsiTReGMy6ZME8BaabmeEnp72PQwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2U4ZWMwMWM0LTlhNzAtNDY4YS04MjdhLTU5MmQxZjg0YjQ5MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAkwDQYJKoZIhvcNAQELBQADggEBAAybMmxUJXbAP+mJAnfrrHU0 qqM7y/f9lz2pdwQrpImRmnpSVm+y+ys59Ziimq/Mx+9kHYpYZOuhUoCuY6eRv42r WXMLaIrDnBK7fk90J2HNxXWtFfs1DXxibmp1B6eWKnjEjJNwxsVw1p7NLxGuJujH tBcunaAF0XdYwDlLZ+UD2k5lphxU8bDPaVuINfrqGIY7fk7XWbb2f/EmBzg35erD Yn/gCvVR8X6dBwXRYqr3UaDyZYOv01Id0CaRjU/g7gEkCMhUF3zaaVxulXnfZXtB 3gwX6lTdkCeyafsi48nKLTnpUvqPvFICRhQCzUDviqVqqoxJeSVtLPrfzu6YZas= -----END CERTIFICATE-----Generated at Mon May 11 17:43:24 2026 by rpki-client