$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/43f38a90-941c-4e61-8aa5-ead957bf6ae6.roa File: 43f38a90-941c-4e61-8aa5-ead957bf6ae6.roa (raw, json) Hash identifier: 2R3v2anrRmpUrluAllMK6aCTAlJCTROv81O1gneEhRw= Subject key identifier: 92:39:EE:DE:60:32:3D:AF:0B:B7:9E:C6:44:A7:EF:7C:7E:64:AF:D7 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 15DF26241EE780FA86E575F454514A41C86AD01A Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/43f38a90-941c-4e61-8aa5-ead957bf6ae6.roa Signing time: Mon 27 Jul 2026 03:00:09 +0000 ROA not before: Mon 27 Jul 2026 03:00:09 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:c1a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:df:26:24:1e:e7:80:fa:86:e5:75:f4:54:51:4a:41:c8:6a:d0:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 27 03:00:09 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=68336ce7d75bc8db8cb7830a80dda9e38cb29ae9559ebdd3efcdf672832dc111, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:05:95:ec:7b:2e:44:0c:c4:d3:ff:3c:47:1c: 80:99:60:f2:e5:d6:90:49:1f:94:12:50:08:77:19: 17:eb:3b:21:27:d5:60:7f:a2:8e:79:09:a3:18:7c: 11:c6:45:5b:1f:56:7d:cd:5b:c0:c0:77:a1:95:45: 05:73:29:3f:29:fb:74:d9:d4:01:80:4a:a8:b2:d0: 47:18:6a:aa:2e:33:98:27:76:27:3b:e7:81:9b:25: 70:b2:37:20:08:44:4a:0b:dc:b9:89:ce:40:15:9b: d7:7d:26:cd:5b:8c:e2:b6:d6:c3:0c:a3:c7:e5:c4: a1:7a:ee:90:90:e4:67:34:0f:f2:b4:5b:df:cb:64: 6e:d2:51:4f:df:2b:92:65:1c:09:f9:80:bf:93:d6: 99:cd:fc:b7:94:34:d2:7a:44:95:9c:1f:b9:87:8d: 33:57:91:57:ab:4c:53:69:b6:cc:12:26:80:2a:9a: d1:7a:30:c0:a5:59:4f:8d:e3:f4:a0:43:00:ab:f4: 6e:30:3f:6e:66:32:f0:75:30:0c:fa:c0:b8:e8:c3: 60:eb:e4:02:b2:6d:e1:16:9b:95:76:0c:f8:eb:eb: f3:99:c2:26:e7:02:2e:2f:e2:97:eb:78:a7:c3:9b: 4c:76:ad:1f:a4:7c:82:df:97:59:d1:ba:21:8e:f4: 7a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:39:EE:DE:60:32:3D:AF:0B:B7:9E:C6:44:A7:EF:7C:7E:64:AF:D7 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/43f38a90-941c-4e61-8aa5-ead957bf6ae6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c1a::/48 Signature Algorithm: sha256WithRSAEncryption 38:7c:37:ca:fe:a6:4f:95:0c:0f:9c:52:7a:94:ff:48:37:2f: 1d:fb:6c:15:af:a7:4c:ba:e5:06:57:eb:80:98:96:5c:bb:b1: 88:b6:5f:e2:c4:f1:97:fd:8a:77:6f:d6:56:84:d1:cb:b2:b5: f7:96:6c:ca:95:e7:ec:52:e6:e3:73:53:5f:cf:93:e1:a4:b9: d9:61:88:f7:49:ae:78:fd:df:b2:08:66:2e:2c:d4:a1:f9:2f: 1e:72:29:9d:e7:2f:15:2e:08:70:db:4d:9a:52:bb:70:0f:81: 3d:e4:8f:f3:57:ae:b3:d0:e4:78:01:c4:71:6f:99:05:c8:d6: 3d:38:f1:79:31:3e:44:e3:9a:ab:cd:2d:9a:f8:90:3a:28:3e: df:a8:b2:0c:a0:52:c5:cb:35:e2:4c:c8:a0:1e:dd:9f:61:61: 31:4c:a6:07:1d:c9:ab:32:d9:39:f5:c7:f8:85:ed:d5:9f:9d: 68:fa:ca:45:78:58:72:e0:15:88:7f:92:e8:3c:81:47:1c:a8: 95:63:8e:35:0f:a5:32:58:49:ef:47:09:e1:13:01:fb:3c:f5: 96:2b:10:94:f8:76:d0:36:29:ff:98:10:f1:2f:dd:e9:15:25: 9f:7a:87:83:e2:0b:d8:dc:e9:1c:a9:ba:fc:f5:41:ce:62:29: f7:c2:4b:24 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUFd8mJB7ngPqG5XX0VFFKQchq0BowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwNzI3MDMwMDA5WhcNMjYxMDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ODMzNmNlN2Q3NWJjOGRiOGNiNzgzMGE4MGRkYTllMzhj YjI5YWU5NTU5ZWJkZDNlZmNkZjY3MjgzMmRjMTExMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6BZXsey5EDMTT/zxHHICZYPLl1pBJH5QSUAh3GRfrOyEn 1WB/oo55CaMYfBHGRVsfVn3NW8DAd6GVRQVzKT8p+3TZ1AGASqiy0EcYaqouM5gn dic754GbJXCyNyAIREoL3LmJzkAVm9d9Js1bjOK21sMMo8flxKF67pCQ5Gc0D/K0 W9/LZG7SUU/fK5JlHAn5gL+T1pnN/LeUNNJ6RJWcH7mHjTNXkVerTFNptswSJoAq mtF6MMClWU+N4/SgQwCr9G4wP25mMvB1MAz6wLjow2Dr5AKybeEWm5V2DPjr6/OZ wibnAi4v4pfreKfDm0x2rR+kfILfl1nRuiGO9HqNAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUkjnu3mAyPa8Lt57GRKfvfH5kr9cwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzQzZjM4YTkwLTk0MWMtNGU2MS04YWE1LWVhZDk1N2JmNmFlNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBowDQYJKoZIhvcNAQELBQADggEBADh8N8r+pk+VDA+cUnqU/0g3 Lx37bBWvp0y65QZX64CYlly7sYi2X+LE8Zf9indv1laE0cuytfeWbMqV5+xS5uNz U1/Pk+GkudlhiPdJrnj937IIZi4s1KH5Lx5yKZ3nLxUuCHDbTZpSu3APgT3kj/NX rrPQ5HgBxHFvmQXI1j048XkxPkTjmqvNLZr4kDooPt+osgygUsXLNeJMyKAe3Z9h YTFMpgcdyasy2Tn1x/iF7dWfnWj6ykV4WHLgFYh/kug8gUccqJVjjjUPpTJYSe9H CeETAfs89ZYrEJT4dtA2Kf+YEPEv3ekVJZ96h4PiC9jc6Rypuvz1Qc5iKffCSyQ= -----END CERTIFICATE-----Generated at Tue Jul 28 19:20:20 2026 by rpki-client