$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/86af0cc4-d9cd-4257-a45a-89c1f975bf72.roa File: 86af0cc4-d9cd-4257-a45a-89c1f975bf72.roa (raw, json) Hash identifier: Sa/vINtgHB/BQKIrt4jQ8qRrC4l41sNR/WwCfzE1pU4= Subject key identifier: 8E:80:2B:AD:B1:07:F8:57:7C:E0:90:27:A4:86:A8:4B:79:AF:43:77 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 351D510740E84B8DE2DBF5C1F5AA31CFDD8474BE Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/86af0cc4-d9cd-4257-a45a-89c1f975bf72.roa Signing time: Mon 27 Jul 2026 03:00:44 +0000 ROA not before: Mon 27 Jul 2026 03:00:44 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:c0c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:1d:51:07:40:e8:4b:8d:e2:db:f5:c1:f5:aa:31:cf:dd:84:74:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 27 03:00:44 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=98de8df3d6fb5d5b32a0756450f33c8264218cfa7617cdc5972e566edaf9f60f, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b5:2f:09:5f:00:de:e5:fe:64:1c:08:d5:68: 6d:2c:e7:a6:e5:43:9e:75:17:7d:6d:e0:2a:60:11: 24:4b:b5:01:b9:49:7b:5e:39:34:11:ea:76:20:e0: f9:0b:ed:17:f2:3d:49:62:5c:6c:bc:5f:c4:03:ee: b5:5d:d8:e1:3a:ea:bf:bd:44:29:ed:23:97:2f:35: 03:5f:91:8f:50:fb:8e:2c:49:74:bf:b1:0d:12:74: 78:77:67:91:0f:87:78:b0:da:32:86:ef:77:67:9b: 92:a0:2f:0b:ac:a6:dd:92:c1:bd:b9:5d:24:72:ff: 13:fe:d1:7c:28:db:e6:28:81:28:05:37:82:d7:fe: ee:7a:2e:7f:cb:cc:4d:42:b7:9d:4a:a4:90:f7:2c: 0a:88:c5:ab:3f:1b:ad:73:a9:f5:81:40:80:01:fe: 05:16:d3:96:04:f6:9a:c7:66:00:74:77:60:cc:76: 48:f3:46:1d:6c:00:82:cc:5c:5a:e8:ee:d5:a9:5a: 45:94:88:97:d1:78:69:67:46:df:6d:66:64:d8:25: 6b:b5:b0:49:34:60:a6:69:8e:dc:25:07:e1:47:a8: 4f:a4:67:26:38:49:c1:f1:ef:c0:3e:0a:2d:2d:14: 2a:fa:bc:f8:62:d5:79:af:bf:44:aa:ea:2d:8e:6a: f9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:80:2B:AD:B1:07:F8:57:7C:E0:90:27:A4:86:A8:4B:79:AF:43:77 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/86af0cc4-d9cd-4257-a45a-89c1f975bf72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c0c::/48 Signature Algorithm: sha256WithRSAEncryption 0d:94:d2:d2:23:f2:c3:14:14:21:d9:cd:b1:46:5d:b3:14:10: c2:60:0f:7c:86:12:eb:80:98:8a:e6:e1:77:b4:90:67:79:67: 9f:1c:ad:6e:ac:85:a0:ae:ed:f9:15:cf:0b:c4:74:e6:ca:44: 1f:4f:c0:98:57:e8:e8:5b:e6:88:be:92:d1:6c:94:a4:ed:66: 36:fd:50:9b:4a:e6:0e:fa:da:06:99:9c:d7:39:7d:9a:23:b4: 85:32:80:df:19:fd:e3:02:7a:e9:5a:11:81:9a:02:d3:da:df: d7:b0:1a:1e:ae:9d:0f:f9:82:34:4e:ca:fb:66:e3:ee:15:17: d0:10:b7:98:12:ad:c8:c6:72:12:57:4d:ea:64:f6:ab:4f:98: 3f:05:72:74:ca:99:86:d0:c7:6d:d3:b7:18:5e:f9:1b:7c:32: a8:55:dd:f4:52:7b:fe:5a:8a:24:6b:cc:fd:b3:21:eb:17:7e: de:6e:e6:e8:c2:26:8d:47:ef:39:1f:49:1d:a9:8e:dc:3c:24: 09:51:c6:aa:5d:ae:f5:9b:e4:d8:67:dd:40:6f:17:d2:56:a3: 99:40:42:3e:ab:df:43:af:f9:3e:a8:b9:4c:1b:37:0e:e2:b3: 4c:c9:4b:3c:3c:f2:e9:fb:8f:62:8a:73:e6:9c:ca:a8:45:80: f0:6b:fa:6c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUNR1RB0DoS43i2/XB9aoxz92EdL4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwNzI3MDMwMDQ0WhcNMjYxMDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5OGRlOGRmM2Q2ZmI1ZDViMzJhMDc1NjQ1MGYzM2M4MjY0 MjE4Y2ZhNzYxN2NkYzU5NzJlNTY2ZWRhZjlmNjBmMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTtS8JXwDe5f5kHAjVaG0s56blQ551F31t4CpgESRLtQG5 SXteOTQR6nYg4PkL7RfyPUliXGy8X8QD7rVd2OE66r+9RCntI5cvNQNfkY9Q+44s SXS/sQ0SdHh3Z5EPh3iw2jKG73dnm5KgLwuspt2Swb25XSRy/xP+0Xwo2+YogSgF N4LX/u56Ln/LzE1Ct51KpJD3LAqIxas/G61zqfWBQIAB/gUW05YE9prHZgB0d2DM dkjzRh1sAILMXFro7tWpWkWUiJfReGlnRt9tZmTYJWu1sEk0YKZpjtwlB+FHqE+k ZyY4ScHx78A+Ci0tFCr6vPhi1Xmvv0Sq6i2OavmjAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUjoArrbEH+Fd84JAnpIaoS3mvQ3cwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzg2YWYwY2M0LWQ5Y2QtNDI1Ny1hNDVhLTg5YzFmOTc1YmY3Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAwwDQYJKoZIhvcNAQELBQADggEBAA2U0tIj8sMUFCHZzbFGXbMU EMJgD3yGEuuAmIrm4Xe0kGd5Z58crW6shaCu7fkVzwvEdObKRB9PwJhX6Ohb5oi+ ktFslKTtZjb9UJtK5g762gaZnNc5fZojtIUygN8Z/eMCeulaEYGaAtPa39ewGh6u nQ/5gjROyvtm4+4VF9AQt5gSrcjGchJXTepk9qtPmD8FcnTKmYbQx23Ttxhe+Rt8 MqhV3fRSe/5aiiRrzP2zIesXft5u5ujCJo1H7zkfSR2pjtw8JAlRxqpdrvWb5Nhn 3UBvF9JWo5lAQj6r30Ov+T6ouUwbNw7is0zJSzw88un7j2KKc+acyqhFgPBr+mw= -----END CERTIFICATE-----Generated at Tue Jul 28 19:20:37 2026 by rpki-client