$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/00a20eb1-4ba3-4e14-b587-1b2f0ebdc6ec.roa File: 00a20eb1-4ba3-4e14-b587-1b2f0ebdc6ec.roa (raw, json) Hash identifier: kH+Rq8hZD16aoB/Xl5DnwFMan5L5nOtxEADAJChLDUA= Subject key identifier: 71:EF:3C:78:85:01:6F:0C:2B:51:B4:1F:14:3A:A1:79:49:5D:11:76 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 3B0A232259D42AEC5FDB4174D5E5F817521294C5 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/00a20eb1-4ba3-4e14-b587-1b2f0ebdc6ec.roa Signing time: Mon 27 Jul 2026 03:10:40 +0000 ROA not before: Mon 27 Jul 2026 03:10:40 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 40045 IP address blocks: 2605:9cc0:c14::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:0a:23:22:59:d4:2a:ec:5f:db:41:74:d5:e5:f8:17:52:12:94:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 27 03:10:40 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=c410aa4163219a1271dc5e653ee34f4be62efe2d7b233dc1629f15326ed59508, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:25:61:3c:42:6a:59:08:c9:61:f2:a7:6e:83: 60:df:12:5e:f5:ec:f9:d2:9d:13:28:da:c1:9a:06: f7:bb:b5:2a:06:b8:1b:d6:2e:71:66:ea:69:0b:88: 03:26:93:ec:f7:13:3d:b8:04:44:f4:a3:13:08:90: d5:c9:50:20:bb:90:d4:68:b6:36:b9:d3:db:e0:4b: f4:1d:8f:96:0e:af:76:8a:54:aa:d5:64:49:ad:68: 19:b8:0d:5d:f2:42:da:47:3d:64:a5:24:62:fd:50: 21:5e:5e:8a:54:78:bb:a3:64:8c:66:50:c5:59:61: 50:81:73:be:46:f9:e1:7d:2a:15:a2:de:8e:64:2f: 63:82:2c:95:5d:3b:ac:14:ba:4b:a4:b7:d8:c4:87: af:ae:ab:f4:a8:03:4d:94:35:0c:fe:9d:0f:ea:dc: 6d:be:8a:6d:2d:98:30:06:37:86:f3:de:2e:7a:e1: f3:30:c5:6b:84:92:46:dc:e7:01:3b:4e:40:4b:e3: 8a:81:e6:29:4a:44:ed:20:96:98:14:4d:9f:83:ec: 8d:80:d7:6c:8e:46:01:0d:79:a8:bb:a2:64:7f:f7: f1:0c:3a:c6:67:7b:49:a1:8a:74:b4:88:90:ab:82: d9:e4:95:2d:4e:7a:f2:98:f6:38:5e:ca:4f:1d:1d: cf:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:EF:3C:78:85:01:6F:0C:2B:51:B4:1F:14:3A:A1:79:49:5D:11:76 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/00a20eb1-4ba3-4e14-b587-1b2f0ebdc6ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c14::/48 Signature Algorithm: sha256WithRSAEncryption 96:bf:a3:b7:e4:77:68:f3:10:2a:38:4d:db:cf:14:d9:d5:f4: a6:c0:b0:28:4a:d3:51:cd:be:a5:88:b8:f7:d4:b1:26:90:b5: 60:38:0d:45:4c:fa:40:c6:36:e0:0c:09:88:36:cc:79:4b:fa: e3:f4:c5:6d:a6:d9:64:ed:38:8b:74:4d:8b:62:61:cf:3d:cf: 66:6d:67:0d:98:88:e6:97:db:c1:82:84:73:96:d7:49:99:93: e2:76:70:34:ee:7e:b6:f7:59:12:b2:4d:15:2d:87:34:6f:f8: fc:0d:59:e0:a2:62:a1:80:1d:a4:d6:26:65:dc:19:5e:1e:07: fa:24:59:5b:25:23:d6:fc:2f:12:c1:03:88:0e:ad:12:a4:2b: 4a:5c:00:ef:52:75:58:b8:a2:7b:a2:12:00:32:e7:d2:ad:1a: 25:d2:2f:33:6c:5e:45:58:b1:ee:fa:60:24:db:8e:a2:20:f4: c7:5d:83:53:2e:23:0c:63:d1:f9:9a:70:16:d4:0f:53:55:7a: 3a:34:d9:7c:f0:23:8a:7d:49:c8:07:a4:97:13:9f:90:3b:6e: 7e:6c:6a:4a:71:73:9d:1c:26:36:4a:55:a0:f2:35:0a:0d:59: 97:3e:7b:c5:d8:e0:13:4d:0c:09:16:b1:90:23:be:48:ff:36: 17:b8:66:39 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUOwojIlnUKuxf20F01eX4F1ISlMUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwNzI3MDMxMDQwWhcNMjYxMDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNDEwYWE0MTYzMjE5YTEyNzFkYzVlNjUzZWUzNGY0YmU2 MmVmZTJkN2IyMzNkYzE2MjlmMTUzMjZlZDU5NTA4MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyJWE8QmpZCMlh8qdug2DfEl717PnSnRMo2sGaBve7tSoG uBvWLnFm6mkLiAMmk+z3Ez24BET0oxMIkNXJUCC7kNRotja509vgS/Qdj5YOr3aK VKrVZEmtaBm4DV3yQtpHPWSlJGL9UCFeXopUeLujZIxmUMVZYVCBc75G+eF9KhWi 3o5kL2OCLJVdO6wUukukt9jEh6+uq/SoA02UNQz+nQ/q3G2+im0tmDAGN4bz3i56 4fMwxWuEkkbc5wE7TkBL44qB5ilKRO0glpgUTZ+D7I2A12yORgENeai7omR/9/EM OsZne0mhinS0iJCrgtnklS1OevKY9jheyk8dHc9hAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUce88eIUBbwwrUbQfFDqheUldEXYwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzAwYTIwZWIxLTRiYTMtNGUxNC1iNTg3LTFiMmYwZWJkYzZlYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBQwDQYJKoZIhvcNAQELBQADggEBAJa/o7fkd2jzECo4TdvPFNnV 9KbAsChK01HNvqWIuPfUsSaQtWA4DUVM+kDGNuAMCYg2zHlL+uP0xW2m2WTtOIt0 TYtiYc89z2ZtZw2YiOaX28GChHOW10mZk+J2cDTufrb3WRKyTRUthzRv+PwNWeCi YqGAHaTWJmXcGV4eB/okWVslI9b8LxLBA4gOrRKkK0pcAO9SdVi4onuiEgAy59Kt GiXSLzNsXkVYse76YCTbjqIg9Mddg1MuIwxj0fmacBbUD1NVejo02XzwI4p9ScgH pJcTn5A7bn5sakpxc50cJjZKVaDyNQoNWZc+e8XY4BNNDAkWsZAjvkj/Nhe4Zjk= -----END CERTIFICATE-----Generated at Tue Jul 28 21:27:18 2026 by rpki-client