$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/ef9566d5-9096-4d00-ac93-f3df448013d9.roa File: ef9566d5-9096-4d00-ac93-f3df448013d9.roa (raw, json) Hash identifier: REWq7NkaMFKQs9RwPiXozUtF7YvrYENg1EEI2fK/3GU= Subject key identifier: D3:01:86:0B:07:B8:73:F4:7E:1C:B9:92:A0:67:DE:25:14:29:6A:02 Certificate issuer: /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Certificate serial: 64A8455625216FDB4826DD08BD5701AED3ED36F4 Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/ef9566d5-9096-4d00-ac93-f3df448013d9.roa Signing time: Fri 07 Aug 2026 00:00:14 +0000 ROA not before: Fri 07 Aug 2026 00:00:14 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2620:107:3002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:a8:45:56:25:21:6f:db:48:26:dd:08:bd:57:01:ae:d3:ed:36:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64 Validity Not Before: Aug 7 00:00:14 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=c8709170aaf0c76a7d459f6867a8b410c39118109c56cfff55aa080a5a8bfcb7, CN=71c3876e-b944-4600-92c7-cec33d89523f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fa:d4:76:a2:dd:68:69:02:ec:b0:ab:53:57: 7b:99:bc:88:3a:ec:1e:0d:13:c6:3c:4b:2f:e2:1b: 6f:03:52:9a:45:13:2b:da:16:97:c4:6b:d1:0d:c4: f5:b1:61:4a:d9:d7:30:4f:4b:4f:67:69:3f:df:b9: 2b:09:21:a2:23:28:0e:c7:28:fe:bd:73:82:58:19: 24:7a:0d:3f:64:a7:8c:ee:c6:2a:d3:c4:4d:58:3d: b1:6b:e6:f8:5e:b7:9d:41:ba:05:20:77:e4:9e:6a: 11:d8:fb:f4:23:52:7b:1e:eb:1e:2a:69:94:c0:38: 2a:38:46:a0:06:b5:6b:00:ff:47:1b:e0:1a:8f:da: 45:40:3c:8a:78:59:48:89:8a:fd:c2:94:b9:0e:84: b6:ec:c4:52:29:8f:c6:97:27:53:67:4b:f2:76:c3: 79:7c:86:bf:1b:03:a9:28:64:c0:3a:1f:92:f0:72: 0f:08:b3:f0:a0:41:22:38:a9:9c:5d:e8:35:77:cd: 02:a8:c8:71:b9:98:73:a9:0d:9a:08:cf:e2:d0:02: 45:fc:84:2a:b3:fe:20:9d:44:4d:cd:55:68:90:18: fd:6d:b2:b5:92:2b:85:46:af:26:a2:36:4d:a3:25: e9:f0:30:00:12:f0:6e:c4:61:f9:fa:7a:dd:b4:e8: 39:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:01:86:0B:07:B8:73:F4:7E:1C:B9:92:A0:67:DE:25:14:29:6A:02 X509v3 Authority Key Identifier: keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/ef9566d5-9096-4d00-ac93-f3df448013d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2620:107:3002::/48 Signature Algorithm: sha256WithRSAEncryption 66:32:53:75:3d:82:99:82:f2:2e:e1:4f:5f:17:7d:2a:50:e6: b7:42:de:65:67:d9:04:89:19:0d:15:a7:1c:4a:67:49:fc:2b: 25:eb:24:1c:83:fb:3e:45:62:ff:55:cb:49:07:dd:a4:19:64: 5c:1a:ab:b0:7e:e2:a5:86:4a:dd:94:a9:d5:8b:5a:bd:66:a2: 5a:25:00:30:e8:ac:0b:2d:a2:41:dc:f9:94:b5:77:97:8e:3d: 7b:90:15:fd:9b:fd:09:44:6b:db:7f:5e:30:94:a9:d5:2d:ee: 32:ad:f5:de:87:ae:b6:81:96:46:c1:4e:b8:80:90:33:7f:31: c3:14:2c:58:c4:43:3a:2b:9e:a3:65:d1:77:e4:41:96:a1:e0: 0a:b1:8d:06:47:95:c5:4b:33:ba:94:90:61:00:b6:36:29:95: bb:01:5e:ec:f0:65:94:0f:f3:79:01:a4:2f:a4:5c:ca:64:f7: 90:94:fc:8a:b5:4b:dc:9a:1e:ae:05:9c:b0:49:29:b3:fb:1c: ad:48:f1:2b:54:f3:da:7d:40:a3:a6:84:85:6e:17:c9:39:9b: 1b:ad:ad:2d:fc:75:95:b1:4a:0d:b7:ca:b9:f3:c1:b5:1e:4d: 24:f9:49:04:6b:21:5c:00:8a:60:b0:6e:12:88:80:03:d8:1b: 7c:e9:91:46 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZKhFViUhb9tIJt0IvVcBrtPtNvQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNWQ4MDM4MDVlMjE4MjNjOTMxOTg3ZTljOWMzN2YwNDAy MGFhYmFiZjliNGRmZjliNjQwHhcNMjYwODA3MDAwMDE0WhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjODcwOTE3MGFhZjBjNzZhN2Q0NTlmNjg2N2E4YjQxMGMz OTExODEwOWM1NmNmZmY1NWFhMDgwYTVhOGJmY2I3MS0wKwYDVQQDEyQ3MWMzODc2 ZS1iOTQ0LTQ2MDAtOTJjNy1jZWMzM2Q4OTUyM2YwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDK+tR2ot1oaQLssKtTV3uZvIg67B4NE8Y8Sy/iG28DUppF EyvaFpfEa9ENxPWxYUrZ1zBPS09naT/fuSsJIaIjKA7HKP69c4JYGSR6DT9kp4zu xirTxE1YPbFr5vhet51BugUgd+SeahHY+/QjUnse6x4qaZTAOCo4RqAGtWsA/0cb 4BqP2kVAPIp4WUiJiv3ClLkOhLbsxFIpj8aXJ1NnS/J2w3l8hr8bA6koZMA6H5Lw cg8Is/CgQSI4qZxd6DV3zQKoyHG5mHOpDZoIz+LQAkX8hCqz/iCdRE3NVWiQGP1t srWSK4VGryaiNk2jJenwMAAS8G7EYfn6et206DljAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU0wGGCwe4c/R+HLmSoGfeJRQpagIwHwYDVR0jBBgwFoAU/iLg9yLMTwYM WFoSb+aiZQA2XkgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MmIyOTkxZi0y MmM3LTQyZjctOGNmNS00ZjMxMzg4NTk3MzIvNWQ4MDM4MDVlMjE4MjNjOTMxOTg3 ZTljOWMzN2YwNDAyMGFhYmFiZjliNGRmZjliNjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYTg0MTgyM2MtYTEwZC00NzdjLWJmZGYtNDA4 NmYwYjE1OTRjL2VmOTU2NmQ1LTkwOTYtNGQwMC1hYzkzLWYzZGY0NDgwMTNkOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2E4NDE4MjNjLWExMGQtNDc3Yy1iZmRm LTQwODZmMGIxNTk0Yy9HQ1BKTVpoLW5KdzM4RUFncXJxX20wM19tMlEuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmIAEHMAIwDQYJKoZIhvcNAQELBQADggEBAGYyU3U9gpmC8i7hT18XfSpQ 5rdC3mVn2QSJGQ0VpxxKZ0n8KyXrJByD+z5FYv9Vy0kH3aQZZFwaq7B+4qWGSt2U qdWLWr1mololADDorAstokHc+ZS1d5eOPXuQFf2b/QlEa9t/XjCUqdUt7jKt9d6H rraBlkbBTriAkDN/McMULFjEQzornqNl0XfkQZah4AqxjQZHlcVLM7qUkGEAtjYp lbsBXuzwZZQP83kBpC+kXMpk95CU/Iq1S9yaHq4FnLBJKbP7HK1I8StU89p9QKOm hIVuF8k5mxutrS38dZWxSg23yrnzwbUeTST5SQRrIVwAimCwbhKIgAPYG3zpkUY= -----END CERTIFICATE-----Generated at Sun Aug 16 18:56:09 2026 by rpki-client