$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1471cd7d-f4dc-4f9e-9097-188dfdebcc7e.roa File: 1471cd7d-f4dc-4f9e-9097-188dfdebcc7e.roa (raw, json) Hash identifier: Nf+FXOcmo6Mzn1ppBSk0dH5rpEIaDpJEq7dcI9Z1I9Q= Subject key identifier: 79:EF:1E:D2:11:1A:07:24:D7:CF:5B:9C:86:C5:5E:0F:4E:0C:DE:8B Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 2D2B0861F9115C98915A78F4C975BBE576579EC7 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1471cd7d-f4dc-4f9e-9097-188dfdebcc7e.roa Signing time: Mon 27 Jul 2026 03:10:56 +0000 ROA not before: Mon 27 Jul 2026 03:10:56 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:402::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:2b:08:61:f9:11:5c:98:91:5a:78:f4:c9:75:bb:e5:76:57:9e:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 27 03:10:56 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=668de3964f17278f7bb14db3818e9353b0b3957218468e5d9a4440af0151bce9, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e8:f2:52:d1:8a:a4:4a:39:08:2d:24:e5:82: 57:15:be:65:ad:20:17:bb:4f:89:4d:1f:fb:8e:3b: bf:cc:62:3d:ef:3e:16:aa:50:33:52:77:99:2b:b1: f9:75:29:a0:04:64:9e:a1:4b:ad:dc:ca:a7:f1:1d: 6b:64:f0:ce:0b:47:ff:0a:0e:3d:36:c7:73:ee:52: 9a:d4:26:73:06:b9:98:dc:c1:a4:ad:f6:06:fb:49: 70:1d:2f:1d:c7:23:fb:97:88:61:54:53:21:f8:db: a0:da:51:24:98:06:a6:5e:2a:77:5b:d6:f3:66:ed: 12:d9:4a:76:dc:f6:8e:97:a6:58:12:8d:24:f1:d6: 98:27:04:7e:15:61:99:6a:4b:59:9e:d3:b0:55:81: fa:30:ab:f4:19:6d:9e:d4:c6:27:b4:73:fd:4a:ec: 05:af:63:c7:90:43:f9:a6:cb:93:97:98:27:55:51: 33:13:f7:11:26:4b:56:61:c7:7d:f1:2d:64:6c:65: df:e0:47:26:a4:69:09:a2:8d:8f:72:09:78:17:a7: f8:b9:b2:36:ee:0b:3b:d6:db:c8:08:68:8e:63:9a: eb:45:72:27:59:9d:a9:c1:48:10:22:20:87:4a:90: 99:23:d6:ed:8e:00:6d:9d:9a:67:d7:3c:51:64:76: 53:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:EF:1E:D2:11:1A:07:24:D7:CF:5B:9C:86:C5:5E:0F:4E:0C:DE:8B X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1471cd7d-f4dc-4f9e-9097-188dfdebcc7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:402::/47 Signature Algorithm: sha256WithRSAEncryption 60:6a:14:e0:a9:87:8e:01:89:74:45:a0:44:79:55:dc:3c:60: e8:5d:d8:60:05:26:e6:33:c6:be:5d:a4:72:78:53:20:7b:30: 0b:9e:2b:19:46:61:70:71:a3:33:d2:45:d5:54:7d:f2:5b:f1: c6:7b:6a:ad:71:b2:06:e7:4e:18:fe:6f:65:b4:0c:c9:b6:bc: 3b:ea:5d:2f:99:36:aa:85:25:41:29:28:ea:ab:e3:7a:94:10: f2:b7:12:83:8d:56:77:a5:c8:8c:b0:5f:68:49:f7:e1:d6:13: 14:56:4f:c9:e2:18:fa:20:20:6a:74:44:30:b9:62:1d:3a:f4: bc:78:f1:32:e0:45:52:c4:f9:30:5c:02:57:49:52:81:1e:16: e9:b3:70:0e:1c:e4:5a:ee:58:18:c2:da:57:49:7d:87:b6:57: 34:69:25:91:4d:e9:c8:b0:bf:fb:0a:08:e4:57:b6:e9:27:74: 8f:ca:5a:88:a5:3a:78:53:25:a2:3d:92:6d:c0:3d:42:cf:14: 15:d5:5d:6b:24:35:8e:62:05:fe:70:3d:a9:2a:67:0f:3c:95: b5:bc:a4:1b:10:48:76:2c:f4:65:5f:e7:54:62:54:6f:88:d0: 65:ef:39:f8:d4:3e:be:c1:d8:70:8c:e9:8f:21:5a:1e:fe:54: 21:02:01:fe -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIULSsIYfkRXJiRWnj0yXW75XZXnscwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwNzI3MDMxMDU2WhcNMjYxMDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NjhkZTM5NjRmMTcyNzhmN2JiMTRkYjM4MThlOTM1M2Iw YjM5NTcyMTg0NjhlNWQ5YTQ0NDBhZjAxNTFiY2U5MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC96PJS0YqkSjkILSTlglcVvmWtIBe7T4lNH/uOO7/MYj3v PhaqUDNSd5krsfl1KaAEZJ6hS63cyqfxHWtk8M4LR/8KDj02x3PuUprUJnMGuZjc waSt9gb7SXAdLx3HI/uXiGFUUyH426DaUSSYBqZeKndb1vNm7RLZSnbc9o6XplgS jSTx1pgnBH4VYZlqS1me07BVgfowq/QZbZ7Uxie0c/1K7AWvY8eQQ/mmy5OXmCdV UTMT9xEmS1Zhx33xLWRsZd/gRyakaQmijY9yCXgXp/i5sjbuCzvW28gIaI5jmutF cidZnanBSBAiIIdKkJkj1u2OAG2dmmfXPFFkdlM5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUee8e0hEaByTXz1uchsVeD04M3oswHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzE0NzFjZDdkLWY0ZGMtNGY5ZS05MDk3LTE4OGRmZGViY2M3ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmBZzABAIwDQYJKoZIhvcNAQELBQADggEBAGBqFOCph44BiXRFoER5Vdw8 YOhd2GAFJuYzxr5dpHJ4UyB7MAueKxlGYXBxozPSRdVUffJb8cZ7aq1xsgbnThj+ b2W0DMm2vDvqXS+ZNqqFJUEpKOqr43qUEPK3EoONVnelyIywX2hJ9+HWExRWT8ni GPogIGp0RDC5Yh069Lx48TLgRVLE+TBcAldJUoEeFumzcA4c5FruWBjC2ldJfYe2 VzRpJZFN6ciwv/sKCORXtukndI/KWoilOnhTJaI9km3APULPFBXVXWskNY5iBf5w PakqZw88lbW8pBsQSHYs9GVf51RiVG+I0GXvOfjUPr7B2HCM6Y8hWh7+VCECAf4= -----END CERTIFICATE-----Generated at Tue Jul 28 21:17:03 2026 by rpki-client