$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2670b4ad-d5fa-4ff1-996f-3c0ad4046b82.roa File: 2670b4ad-d5fa-4ff1-996f-3c0ad4046b82.roa (raw, json) Hash identifier: QKQ/ftIwFqkvANJAGHYq+m3m88agtS0FlCWB/75hW2Q= Subject key identifier: 5B:D1:14:3F:AD:5C:65:44:88:F8:91:90:0B:34:B1:09:D7:37:78:BA Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 3957A5388EC6127B37456130F75447E18480404D Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2670b4ad-d5fa-4ff1-996f-3c0ad4046b82.roa Signing time: Mon 27 Jul 2026 02:50:12 +0000 ROA not before: Mon 27 Jul 2026 02:50:12 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c05::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:57:a5:38:8e:c6:12:7b:37:45:61:30:f7:54:47:e1:84:80:40:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 27 02:50:12 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=1b0cc9536fadaac7c23d35ffb575f4b3d82d1d157d718f81107f9dddbd147ffa, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e4:47:46:cb:c2:91:d3:8a:24:e5:05:a5:d4: ef:51:d4:5c:0a:bb:8d:cb:29:31:5d:6c:bf:23:32: 63:9b:78:03:90:7b:18:ef:aa:05:55:ba:d9:dd:9f: df:f6:19:f1:b0:e0:67:aa:56:fc:58:ab:b9:70:8a: 87:68:59:13:24:ea:ef:90:88:16:23:86:0d:54:28: 1c:84:fb:16:f0:c0:14:91:9a:58:fc:07:1a:3c:ba: a9:4b:54:6c:ef:7c:2a:c5:ff:be:c0:d2:6c:7e:2e: 4f:30:ba:f7:16:f9:a1:a4:cc:74:01:8d:d8:ca:ca: de:ec:5f:dd:3e:dc:6e:59:e5:60:75:22:64:41:ed: 7b:33:73:b2:b5:d2:e5:a7:bc:3f:1b:26:4a:4a:47: 5c:2c:3c:1d:45:fa:2f:d3:14:bc:73:3b:e9:9c:06: 18:eb:94:f4:59:26:73:13:d5:b5:a9:29:0c:32:c6: 48:5e:9a:38:99:5f:a2:ca:89:24:5d:cd:75:c4:c3: 7d:0d:c3:bf:29:5e:8a:fc:9b:04:d0:e1:a4:df:50: 76:be:37:21:10:f2:77:cb:0e:01:3e:a4:25:ac:22: ef:62:27:5f:bc:11:f4:7d:bf:9a:b3:78:7b:5a:7f: 6f:fa:52:67:dc:df:69:8c:77:3c:ff:72:66:7f:f3: 63:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D1:14:3F:AD:5C:65:44:88:F8:91:90:0B:34:B1:09:D7:37:78:BA X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2670b4ad-d5fa-4ff1-996f-3c0ad4046b82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c05::/48 Signature Algorithm: sha256WithRSAEncryption 99:4d:2f:7d:36:27:a2:6d:41:3f:4b:5b:0f:55:9a:52:a1:d2: 5d:bb:ba:4f:a4:e7:2d:e0:09:4b:bf:43:51:5e:24:f2:c4:11: f0:fb:26:a0:ab:88:3b:e2:34:62:3d:53:bf:82:02:01:06:1b: 08:9d:86:4d:d9:f2:bb:a6:60:d5:13:25:11:8b:89:a5:00:c0: c8:c7:e1:25:93:07:df:a4:ec:2a:67:30:51:f5:1e:22:89:13: e2:c2:a2:c7:b2:bf:e3:23:74:a1:89:41:af:c2:3c:f8:bf:70: c1:c4:13:61:49:2d:b3:8a:a5:e6:3a:f8:cb:c7:be:81:b9:ca: 8f:ed:c6:bd:6d:26:aa:8c:72:4a:51:95:7a:b8:08:47:a5:07: 60:42:b1:92:90:32:6e:5e:38:e1:b4:74:f1:d6:d5:c1:5c:70: 5f:15:e4:e7:5c:88:dc:5b:4c:cd:a8:52:15:00:2b:f3:d9:7d: c4:8e:2f:fc:10:05:8d:7c:1b:d3:b3:a4:cd:01:d9:c9:fa:a5: 71:4d:ed:21:f7:ad:f0:50:49:13:59:c4:4d:72:73:9e:f4:bb: b7:b5:ef:43:81:6a:6c:c9:4c:79:ac:54:ba:bc:b8:6c:72:b0: a0:ca:18:63:39:16:7e:8b:76:02:ca:d1:b5:be:b7:6c:4e:ba: f4:95:23:09 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUOVelOI7GEns3RWEw91RH4YSAQE0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwNzI3MDI1MDEyWhcNMjYxMDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxYjBjYzk1MzZmYWRhYWM3YzIzZDM1ZmZiNTc1ZjRiM2Q4 MmQxZDE1N2Q3MThmODExMDdmOWRkZGJkMTQ3ZmZhMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDX5EdGy8KR04ok5QWl1O9R1FwKu43LKTFdbL8jMmObeAOQ exjvqgVVutndn9/2GfGw4GeqVvxYq7lwiodoWRMk6u+QiBYjhg1UKByE+xbwwBSR mlj8Bxo8uqlLVGzvfCrF/77A0mx+Lk8wuvcW+aGkzHQBjdjKyt7sX90+3G5Z5WB1 ImRB7Xszc7K10uWnvD8bJkpKR1wsPB1F+i/TFLxzO+mcBhjrlPRZJnMT1bWpKQwy xkhemjiZX6LKiSRdzXXEw30Nw78pXor8mwTQ4aTfUHa+NyEQ8nfLDgE+pCWsIu9i J1+8EfR9v5qzeHtaf2/6Umfc32mMdzz/cmZ/82NbAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUW9EUP61cZUSI+JGQCzSxCdc3eLowHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzI2NzBiNGFkLWQ1ZmEtNGZmMS05OTZmLTNjMGFkNDA0NmI4Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAUwDQYJKoZIhvcNAQELBQADggEBAJlNL302J6JtQT9LWw9VmlKh 0l27uk+k5y3gCUu/Q1FeJPLEEfD7JqCriDviNGI9U7+CAgEGGwidhk3Z8rumYNUT JRGLiaUAwMjH4SWTB9+k7CpnMFH1HiKJE+LCoseyv+MjdKGJQa/CPPi/cMHEE2FJ LbOKpeY6+MvHvoG5yo/txr1tJqqMckpRlXq4CEelB2BCsZKQMm5eOOG0dPHW1cFc cF8V5OdciNxbTM2oUhUAK/PZfcSOL/wQBY18G9OzpM0B2cn6pXFN7SH3rfBQSRNZ xE1yc570u7e170OBamzJTHmsVLq8uGxysKDKGGM5Fn6LdgLK0bW+t2xOuvSVIwk= -----END CERTIFICATE-----Generated at Tue Jul 28 19:20:20 2026 by rpki-client