$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2f789924-a980-48eb-b42e-463688379f41.roa File: 2f789924-a980-48eb-b42e-463688379f41.roa (raw, json) Hash identifier: CEZI2dmYCy8V2OKxQei7bi+PWZrzcdEELH/0vuTiWWE= Subject key identifier: 17:8C:EA:ED:88:71:E7:DB:3C:A6:C9:3F:98:A5:BA:10:D6:81:B1:DF Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 4B26AD15B57F31FE364383D9A59A8337B71DD133 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2f789924-a980-48eb-b42e-463688379f41.roa Signing time: Mon 27 Jul 2026 03:00:25 +0000 ROA not before: Mon 27 Jul 2026 03:00:25 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:64c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:26:ad:15:b5:7f:31:fe:36:43:83:d9:a5:9a:83:37:b7:1d:d1:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 27 03:00:25 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=b0c24cda707f3853c6a8c66b1e7aad475ca37a2f33b22f3526938e7d2829ae1e, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ed:c2:de:61:67:96:5f:e1:28:53:7c:a4:b3: 87:f6:64:cd:b7:f7:cb:f3:63:8a:4e:67:84:76:ef: b0:3b:93:83:ed:1f:e8:bf:3a:a2:42:37:60:ed:5a: 91:5a:ad:c7:21:2d:5d:25:7e:a3:6f:b3:77:f7:be: 00:73:62:a2:f5:5a:6c:d7:5b:90:e4:aa:af:ad:16: 63:0f:e2:fb:cb:43:3c:97:40:69:33:80:8a:92:24: a3:b1:1c:00:19:90:f4:1f:bf:bd:b3:c2:71:7e:67: 39:4b:a0:92:8d:8e:87:be:d2:5f:ca:dc:ef:1e:b6: c2:0a:b7:b2:dd:24:bc:1b:10:ae:1c:17:fb:e1:b2: 61:14:1c:1e:91:d5:40:93:f8:22:27:09:cf:1f:09: 00:da:db:fc:18:fd:90:ba:c2:fa:6e:c5:ef:1a:f3: 70:65:9e:b1:35:45:8d:b9:f4:02:c0:fd:27:b1:b0: cc:fb:53:a6:81:46:28:0d:7d:3a:4c:c0:3d:6b:1f: f0:e8:58:71:f0:82:0a:a9:98:69:28:d8:c2:d2:04: 2d:70:ad:f6:f8:d8:f5:b9:e3:1e:41:b9:f1:3c:6e: 15:df:c3:b6:2e:f3:22:8f:f5:67:79:b7:0a:3f:e2: 05:36:dc:86:fe:62:82:ad:50:c9:72:4b:74:e8:42: 51:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:8C:EA:ED:88:71:E7:DB:3C:A6:C9:3F:98:A5:BA:10:D6:81:B1:DF X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2f789924-a980-48eb-b42e-463688379f41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:64c::/48 Signature Algorithm: sha256WithRSAEncryption 0a:38:0e:0c:00:ee:e6:ca:40:e4:94:35:eb:aa:ce:eb:40:fd: 47:6c:9f:91:3e:6d:a6:3b:e2:32:f5:78:38:77:41:33:97:91: 2f:f3:3f:ae:4e:34:84:2d:c1:16:83:d6:96:58:e4:8d:2b:12: 26:2c:78:ce:23:ed:35:e1:97:95:18:e3:da:11:be:26:32:a6: d6:0e:ec:0a:1a:bf:40:64:a9:80:49:28:e4:83:e3:6c:98:4d: 10:c9:5c:82:e0:c4:05:6f:72:b5:ce:ed:e7:36:09:f7:a2:ed: 97:bd:36:da:c6:af:fe:2d:7a:1b:7b:29:9d:6b:88:ce:b0:24: 2f:79:e9:db:21:10:ea:5a:a5:a0:f2:fe:7a:09:86:29:6f:6d: 99:16:c7:ce:a9:57:24:2d:f9:17:d6:a9:dd:72:c2:db:18:f1: f5:97:5a:10:dc:ba:ef:ad:58:3c:56:e4:07:9d:5f:ab:43:cb: af:5f:9f:fb:37:0b:d6:12:e7:b6:99:31:09:69:41:1b:3b:0b: 7f:1e:e0:da:92:19:72:bd:39:ca:4e:cc:d7:5a:48:2c:e7:f6: 13:2e:3b:c7:39:33:67:95:c8:e1:bd:4c:f0:18:e5:60:16:eb: a1:4e:76:eb:3d:c2:4a:e2:b9:e0:66:97:c6:df:ae:54:37:b9: e5:40:0a:8e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSyatFbV/Mf42Q4PZpZqDN7cd0TMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwNzI3MDMwMDI1WhcNMjYxMDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMGMyNGNkYTcwN2YzODUzYzZhOGM2NmIxZTdhYWQ0NzVj YTM3YTJmMzNiMjJmMzUyNjkzOGU3ZDI4MjlhZTFlMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/7cLeYWeWX+EoU3yks4f2ZM2398vzY4pOZ4R277A7k4Pt H+i/OqJCN2DtWpFarcchLV0lfqNvs3f3vgBzYqL1WmzXW5Dkqq+tFmMP4vvLQzyX QGkzgIqSJKOxHAAZkPQfv72zwnF+ZzlLoJKNjoe+0l/K3O8etsIKt7LdJLwbEK4c F/vhsmEUHB6R1UCT+CInCc8fCQDa2/wY/ZC6wvpuxe8a83BlnrE1RY259ALA/Sex sMz7U6aBRigNfTpMwD1rH/DoWHHwggqpmGko2MLSBC1wrfb42PW54x5BufE8bhXf w7Yu8yKP9Wd5two/4gU23Ib+YoKtUMlyS3ToQlHRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUF4zq7Yhx59s8psk/mKW6ENaBsd8wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzJmNzg5OTI0LWE5ODAtNDhlYi1iNDJlLTQ2MzY4ODM3OWY0MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABkwwDQYJKoZIhvcNAQELBQADggEBAAo4DgwA7ubKQOSUNeuqzutA /Udsn5E+baY74jL1eDh3QTOXkS/zP65ONIQtwRaD1pZY5I0rEiYseM4j7TXhl5UY 49oRviYyptYO7Aoav0BkqYBJKOSD42yYTRDJXILgxAVvcrXO7ec2Cfei7Ze9NtrG r/4teht7KZ1riM6wJC956dshEOpapaDy/noJhilvbZkWx86pVyQt+RfWqd1ywtsY 8fWXWhDcuu+tWDxW5AedX6tDy69fn/s3C9YS57aZMQlpQRs7C38e4NqSGXK9OcpO zNdaSCzn9hMuO8c5M2eVyOG9TPAY5WAW66FOdus9wkriueBml8bfrlQ3ueVACo4= -----END CERTIFICATE-----Generated at Tue Jul 28 18:06:55 2026 by rpki-client