$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2b35ab1a-8001-404a-9285-196aa943aa95.roa File: 2b35ab1a-8001-404a-9285-196aa943aa95.roa (raw, json) Hash identifier: 8Igb/yZrGlw7H9Dnzq0QU1nk7zbA8xBcBthZuOi0ZYg= Subject key identifier: 35:80:5B:48:18:E9:45:D6:CA:C2:70:29:83:0D:1F:61:AB:FF:67:A9 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 291E39145F644CD407EC585D1885045C36E18376 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2b35ab1a-8001-404a-9285-196aa943aa95.roa Signing time: Tue 19 May 2026 04:00:58 +0000 ROA not before: Tue 19 May 2026 04:00:58 +0000 ROA not after: Mon 17 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:387::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:1e:39:14:5f:64:4c:d4:07:ec:58:5d:18:85:04:5c:36:e1:83:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 19 04:00:58 2026 GMT Not After : Aug 17 23:59:59 2026 GMT Subject: serialNumber=226c07f0ee51e2901a259eec3d94acfcd02474dab338cb847ea6a62211825be8, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:49:f5:9e:99:ae:d9:2c:d3:61:f8:35:1a:8e: 16:59:dc:b7:bb:0c:b4:bb:ff:7c:0e:3b:f1:a1:bd: 94:27:46:4c:38:14:6f:64:a2:66:a8:13:01:05:da: c6:46:36:4d:be:d8:10:fc:dc:59:66:00:09:b8:78: 69:ca:5b:b7:cf:2f:60:6c:eb:b2:fa:87:ea:5a:37: 4e:81:30:c5:f3:0e:36:2a:28:62:42:9d:f5:a5:56: 1d:71:2e:45:dc:e7:ee:57:89:d2:0c:54:56:fd:84: 9e:28:6d:e0:dc:6c:7c:90:49:0f:c9:7d:18:aa:61: 33:c4:98:88:76:17:a7:16:ad:91:53:11:bf:4b:fe: 67:9b:23:e4:fc:69:93:60:75:c4:e0:85:e2:8a:82: f9:5d:9b:07:ef:28:4b:8d:0f:78:fc:66:31:86:02: ad:48:75:00:34:80:34:96:84:14:37:d6:17:96:2c: 3f:0a:a7:67:c7:3a:93:18:2c:de:f4:b6:64:8a:19: 08:a3:c8:f1:8d:5c:f1:5e:00:e8:0d:52:c0:1b:6e: 03:da:ff:78:b0:72:31:fb:02:5d:ad:fb:d0:27:7a: 2e:6a:da:a2:7c:21:25:c1:c9:b2:df:cf:11:62:a1: 67:6a:fb:57:01:39:10:eb:b8:98:7b:5a:c9:ab:ad: ea:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:80:5B:48:18:E9:45:D6:CA:C2:70:29:83:0D:1F:61:AB:FF:67:A9 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2b35ab1a-8001-404a-9285-196aa943aa95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:387::/48 Signature Algorithm: sha256WithRSAEncryption ad:ac:12:63:cc:41:3c:5c:45:2c:f8:4b:85:88:b5:ba:b6:54: f9:c5:85:b9:aa:70:d7:45:7d:6a:db:65:a3:30:be:d0:7f:56: ef:a4:83:17:85:43:67:f2:e2:2f:98:18:4c:46:f6:fb:bf:99: 84:59:0c:d6:81:5c:29:b0:af:ab:a3:85:7a:d4:68:b7:5e:2c: 36:a4:13:09:c5:26:50:ff:a0:87:79:0f:6f:8a:6b:15:79:19: 6e:0d:9a:38:c1:37:ad:69:ad:32:9e:f3:02:ba:e0:7a:41:94: f8:a2:23:fb:09:14:be:a2:68:f3:b9:e0:49:2c:c6:7b:23:a7: 85:09:1b:e0:6e:00:eb:86:c6:8d:93:7d:ef:fe:e3:73:25:28: cc:cf:07:7d:2a:db:63:79:2f:cd:ea:7d:4b:53:99:32:b4:9c: 8f:ac:08:c8:d9:aa:80:9e:76:86:26:53:5e:64:72:40:f6:a5: 91:28:0c:65:2a:ae:b0:ef:43:30:df:74:c5:15:da:b5:aa:7f: 5a:8c:60:40:b4:10:e3:9e:3a:29:d2:43:61:43:2e:ad:41:76: e6:9a:97:12:f6:dd:19:d2:e2:2d:a5:a6:4a:9d:00:1f:2c:ed: 2a:ed:2e:25:a9:55:c0:97:3c:ab:3c:bf:1b:04:35:3d:8f:07: d3:f7:4c:46 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKR45FF9kTNQH7FhdGIUEXDbhg3YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwNTE5MDQwMDU4WhcNMjYwODE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMjZjMDdmMGVlNTFlMjkwMWEyNTllZWMzZDk0YWNmY2Qw MjQ3NGRhYjMzOGNiODQ3ZWE2YTYyMjExODI1YmU4MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD3SfWema7ZLNNh+DUajhZZ3Le7DLS7/3wOO/GhvZQnRkw4 FG9komaoEwEF2sZGNk2+2BD83FlmAAm4eGnKW7fPL2Bs67L6h+paN06BMMXzDjYq KGJCnfWlVh1xLkXc5+5XidIMVFb9hJ4obeDcbHyQSQ/JfRiqYTPEmIh2F6cWrZFT Eb9L/mebI+T8aZNgdcTgheKKgvldmwfvKEuND3j8ZjGGAq1IdQA0gDSWhBQ31heW LD8Kp2fHOpMYLN70tmSKGQijyPGNXPFeAOgNUsAbbgPa/3iwcjH7Al2t+9Anei5q 2qJ8ISXBybLfzxFioWdq+1cBORDruJh7WsmrrerlAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUNYBbSBjpRdbKwnApgw0fYav/Z6kwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzJiMzVhYjFhLTgwMDEtNDA0YS05Mjg1LTE5NmFhOTQzYWE5NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA4cwDQYJKoZIhvcNAQELBQADggEBAK2sEmPMQTxcRSz4S4WItbq2 VPnFhbmqcNdFfWrbZaMwvtB/Vu+kgxeFQ2fy4i+YGExG9vu/mYRZDNaBXCmwr6uj hXrUaLdeLDakEwnFJlD/oId5D2+KaxV5GW4NmjjBN61prTKe8wK64HpBlPiiI/sJ FL6iaPO54Eksxnsjp4UJG+BuAOuGxo2Tfe/+43MlKMzPB30q22N5L83qfUtTmTK0 nI+sCMjZqoCedoYmU15kckD2pZEoDGUqrrDvQzDfdMUV2rWqf1qMYEC0EOOeOinS Q2FDLq1BduaalxL23RnS4i2lpkqdAB8s7SrtLiWpVcCXPKs8vxsENT2PB9P3TEY= -----END CERTIFICATE-----Generated at Sat Jun 13 09:12:28 2026 by rpki-client