$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0e4e4e09-de1b-4dfe-ba50-5a5abf40de13.roa File: 0e4e4e09-de1b-4dfe-ba50-5a5abf40de13.roa (raw, json) Hash identifier: 3Zj0rXKPrctoWuoS5DJhSeOrge8R3iF3A66RGQU8kmg= Subject key identifier: 44:D1:17:91:95:3E:16:EA:6B:99:89:9E:29:59:F7:E0:E1:3C:32:AD Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 7197B6FBB568FE626C47D1E3EC9F36C99785D0B6 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0e4e4e09-de1b-4dfe-ba50-5a5abf40de13.roa Signing time: Tue 10 Mar 2026 14:51:55 +0000 ROA not before: Tue 10 Mar 2026 14:51:55 +0000 ROA not after: Mon 08 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2606:8140::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:97:b6:fb:b5:68:fe:62:6c:47:d1:e3:ec:9f:36:c9:97:85:d0:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Mar 10 14:51:55 2026 GMT Not After : Jun 8 23:59:59 2026 GMT Subject: serialNumber=b10fb49e0a9e03566f5eb0a2b7e3dad05d4539cc1fedc44c8d7062684790c204, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:62:b1:cd:ea:25:be:80:11:12:86:0b:63:82: e9:da:c1:14:c0:37:00:3f:20:f9:5a:ed:fd:a0:1c: 8e:0a:d9:62:6e:e3:1d:ca:30:30:68:5c:67:82:74: 63:78:0d:14:93:3e:39:ab:30:37:c7:52:1a:f9:11: ca:f7:94:a6:e8:75:88:54:55:8a:b3:33:ae:4c:b0: c2:09:4c:9b:e1:8d:f6:45:75:c6:e7:70:c4:2e:b4: f7:58:84:a1:58:18:76:a1:27:12:ef:3e:5f:59:4b: 64:7b:0d:7e:87:b2:31:e5:b5:e7:d5:43:be:15:68: 73:d9:1b:79:c7:fb:4a:b5:18:3f:eb:18:5b:75:55: 8a:66:1b:e8:68:f3:5b:e4:9c:86:3e:b9:b1:87:04: 70:14:1b:ef:c7:ae:30:d2:03:70:f1:35:3f:99:7e: 8c:92:a7:42:de:6e:1e:ed:aa:bc:d5:3e:38:b4:38: 6a:2d:11:50:93:0a:0a:02:87:94:80:43:a1:1d:df: 69:27:db:f2:90:f8:19:57:5d:10:92:4b:04:5e:96: 8f:b4:6e:67:b0:9b:b0:dc:d7:4e:29:c0:20:01:bb: 60:1c:9f:d4:14:56:4e:ea:4b:f3:29:20:d8:ff:1d: ce:4c:82:d0:cd:80:69:2d:ed:82:18:21:c7:bb:12: ed:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D1:17:91:95:3E:16:EA:6B:99:89:9E:29:59:F7:E0:E1:3C:32:AD X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0e4e4e09-de1b-4dfe-ba50-5a5abf40de13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2606:8140::/32 Signature Algorithm: sha256WithRSAEncryption 5b:64:6a:b6:b4:4c:84:00:89:67:ad:06:94:2d:3a:85:f8:af: 0d:79:78:94:12:e3:e7:f9:9a:ba:c6:21:3b:b7:bf:6a:35:a2: b6:2f:84:31:67:db:b1:11:e5:59:46:9a:ed:56:ce:9b:ba:07: f0:28:8c:ed:09:d6:95:86:2b:3c:70:22:d3:bb:5e:5a:c7:6c: 78:c4:e3:10:f1:50:f9:ec:2b:31:9e:36:a1:c4:27:6a:92:3d: 37:bb:47:82:93:8e:78:81:4b:35:fc:37:34:a1:b2:88:83:de: c9:6d:ef:c5:a9:3c:c2:61:35:a8:9d:1d:82:70:5c:f8:ef:c6: cb:d9:c8:23:9f:b7:a7:44:62:de:a5:04:25:ba:a7:94:43:57: 72:ab:48:3e:23:02:86:d7:3c:7b:4c:ff:45:34:ac:f0:a9:ea: d9:74:90:20:eb:b0:b8:7e:fa:8e:af:c0:1a:19:5d:85:8d:9a: c1:d4:c4:b2:40:00:ce:12:22:cb:59:40:89:d3:dc:50:b8:d2: cb:44:51:74:88:4c:92:e7:38:8d:78:d0:1e:07:e3:a7:bb:c1: c3:0e:98:a6:69:c7:6e:aa:cf:28:e1:83:22:49:57:41:f1:d3: c8:a1:ba:59:8c:2f:bd:1e:54:54:40:fe:50:5d:3f:a1:f6:56: 80:76:49:e9 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUcZe2+7Vo/mJsR9Hj7J82yZeF0LYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwMzEwMTQ1MTU1WhcNMjYwNjA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMTBmYjQ5ZTBhOWUwMzU2NmY1ZWIwYTJiN2UzZGFkMDVk NDUzOWNjMWZlZGM0NGM4ZDcwNjI2ODQ3OTBjMjA0MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjYrHN6iW+gBEShgtjgunawRTANwA/IPla7f2gHI4K2WJu 4x3KMDBoXGeCdGN4DRSTPjmrMDfHUhr5Ecr3lKbodYhUVYqzM65MsMIJTJvhjfZF dcbncMQutPdYhKFYGHahJxLvPl9ZS2R7DX6HsjHltefVQ74VaHPZG3nH+0q1GD/r GFt1VYpmG+ho81vknIY+ubGHBHAUG+/HrjDSA3DxNT+ZfoySp0Lebh7tqrzVPji0 OGotEVCTCgoCh5SAQ6Ed32kn2/KQ+BlXXRCSSwRelo+0bmewm7Dc104pwCABu2Ac n9QUVk7qS/MpINj/Hc5MgtDNgGkt7YIYIce7Eu0PAgMBAAGjggKyMIICrjAdBgNV HQ4EFgQURNEXkZU+FuprmYmeKVn34OE8Mq0wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzBlNGU0ZTA5LWRlMWItNGRmZS1iYTUwLTVhNWFiZjQwZGUxMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAmBoFAMA0GCSqGSIb3DQEBCwUAA4IBAQBbZGq2tEyEAIlnrQaULTqF+K8N eXiUEuPn+Zq6xiE7t79qNaK2L4QxZ9uxEeVZRprtVs6bugfwKIztCdaVhis8cCLT u15ax2x4xOMQ8VD57CsxnjahxCdqkj03u0eCk454gUs1/Dc0obKIg97Jbe/FqTzC YTWonR2CcFz478bL2cgjn7enRGLepQQluqeUQ1dyq0g+IwKG1zx7TP9FNKzwqerZ dJAg67C4fvqOr8AaGV2FjZrB1MSyQADOEiLLWUCJ09xQuNLLRFF0iEyS5ziNeNAe B+Onu8HDDpimacduqs8o4YMiSVdB8dPIobpZjC+9HlRUQP5QXT+h9laAdknp -----END CERTIFICATE-----Generated at Wed Mar 11 11:40:33 2026 by rpki-client