$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/89848d84-ccf0-40c8-b12a-ac4d8910d997.roa File: 89848d84-ccf0-40c8-b12a-ac4d8910d997.roa (raw, json) Hash identifier: wGfoiTSblMs6/iHtJoCJqX89l+utuKa3ErS7faCbSzw= Subject key identifier: 39:40:79:55:28:48:88:06:04:08:2F:89:33:11:7E:9F:A4:C7:95:4B Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 41860C2A400FA9BD84AF818F9083B5E8FAD84990 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/89848d84-ccf0-40c8-b12a-ac4d8910d997.roa Signing time: Tue 19 May 2026 03:40:05 +0000 ROA not before: Tue 19 May 2026 03:40:05 +0000 ROA not after: Mon 17 Aug 2026 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:3a7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:86:0c:2a:40:0f:a9:bd:84:af:81:8f:90:83:b5:e8:fa:d8:49:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 19 03:40:05 2026 GMT Not After : Aug 17 23:59:59 2026 GMT Subject: serialNumber=67399f8571d53a554a8778da5ea8e1d7d2ef540794c7d9385e6ed25c7cffe50f, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:8b:fa:cb:da:7e:96:82:3c:6a:b2:52:aa:bc: e5:c2:cb:79:0c:5e:dd:50:d2:a8:1b:5e:2b:c8:f3: 7b:e4:ec:78:f2:d9:53:32:cb:31:76:14:96:05:f9: 54:cb:20:82:05:c4:45:2b:10:91:f2:49:72:5f:f8: a4:89:a8:b8:0e:6b:3c:c2:78:fd:5e:85:72:fe:5b: a4:26:2c:42:76:5c:eb:05:e1:6e:b5:72:29:79:53: 83:c0:6f:f2:a7:14:f8:49:32:03:fa:87:56:41:89: 00:93:b4:53:22:9f:c2:32:e6:f2:1d:5e:d9:c3:d5: 0d:d9:f5:dd:e9:ee:21:fd:44:2d:84:43:d0:1b:70: 4b:54:4f:64:7a:bc:5f:e1:fa:1d:79:d6:5f:3f:e2: 30:6e:48:91:ce:ce:48:6b:3a:72:7e:28:c1:74:50: a6:f1:33:3d:38:cc:c4:1a:fe:f3:c5:7b:de:a4:e2: 30:c7:21:6b:01:1e:f2:60:e6:d7:93:f3:31:7a:f2: ae:fd:80:fb:35:dc:9f:44:ef:9f:65:b9:fd:e6:64: 76:ea:3e:1c:53:ba:ca:c4:92:5e:0c:92:55:de:98: 6d:87:de:f7:dc:65:ad:36:94:ac:fe:54:0f:61:a3: a5:81:0a:ce:86:20:7f:fe:d2:3c:57:a0:4b:d6:eb: 01:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:40:79:55:28:48:88:06:04:08:2F:89:33:11:7E:9F:A4:C7:95:4B X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/89848d84-ccf0-40c8-b12a-ac4d8910d997.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:3a7::/48 Signature Algorithm: sha256WithRSAEncryption 26:18:ed:cd:41:2d:ac:ec:0b:e2:ba:50:8c:24:cd:e5:2b:8e: d8:f7:34:05:fe:90:a7:27:05:a1:d5:9c:0a:e3:63:2b:5b:34: 17:80:c0:90:73:fc:c6:cf:10:87:e5:cd:5d:41:17:2d:a8:10: 95:07:47:0e:1e:8c:50:b5:e4:a4:2c:81:24:bf:ac:4e:f2:ee: 9a:0b:fb:f6:24:59:d6:a7:ce:53:ac:43:9f:87:be:c7:f6:03: 46:3d:f5:e9:bc:9a:3a:a3:a9:a1:b5:d7:8e:9a:97:71:e6:6b: 4f:64:82:a6:d6:39:1d:ab:f0:47:c5:af:55:1e:c3:6a:36:62: dd:d5:21:a7:2b:f1:2e:44:81:81:48:5e:7c:a2:36:ad:1a:7d: 92:81:97:52:57:24:e1:95:bc:71:6a:18:b1:4e:47:0f:cd:0b: 43:d0:b0:c9:c7:80:fa:30:1f:70:52:27:84:53:13:94:6a:de: 98:3f:06:e0:17:17:79:2d:5a:d3:35:b9:9e:e0:da:01:27:34: b1:c2:67:f6:36:0e:c9:92:53:d4:4a:24:1f:1d:07:9b:26:7b: 22:a5:e1:91:7c:34:87:5b:5d:8d:1c:ee:e4:4c:10:c4:37:d8: b2:dc:34:fd:b1:6c:7f:df:54:3d:a4:d1:c4:3b:93:3c:d2:b2: 71:b9:58:c6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQYYMKkAPqb2Er4GPkIO16PrYSZAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwNTE5MDM0MDA1WhcNMjYwODE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NzM5OWY4NTcxZDUzYTU1NGE4Nzc4ZGE1ZWE4ZTFkN2Qy ZWY1NDA3OTRjN2Q5Mzg1ZTZlZDI1YzdjZmZlNTBmMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCSi/rL2n6WgjxqslKqvOXCy3kMXt1Q0qgbXivI83vk7Hjy 2VMyyzF2FJYF+VTLIIIFxEUrEJHySXJf+KSJqLgOazzCeP1ehXL+W6QmLEJ2XOsF 4W61cil5U4PAb/KnFPhJMgP6h1ZBiQCTtFMin8Iy5vIdXtnD1Q3Z9d3p7iH9RC2E Q9AbcEtUT2R6vF/h+h151l8/4jBuSJHOzkhrOnJ+KMF0UKbxMz04zMQa/vPFe96k 4jDHIWsBHvJg5teT8zF68q79gPs13J9E759luf3mZHbqPhxTusrEkl4MklXemG2H 3vfcZa02lKz+VA9ho6WBCs6GIH/+0jxXoEvW6wFTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUOUB5VShIiAYECC+JMxF+n6THlUswHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzg5ODQ4ZDg0LWNjZjAtNDBjOC1iMTJhLWFjNGQ4OTEwZDk5Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA6cwDQYJKoZIhvcNAQELBQADggEBACYY7c1BLazsC+K6UIwkzeUr jtj3NAX+kKcnBaHVnArjYytbNBeAwJBz/MbPEIflzV1BFy2oEJUHRw4ejFC15KQs gSS/rE7y7poL+/YkWdanzlOsQ5+Hvsf2A0Y99em8mjqjqaG1146al3Hma09kgqbW OR2r8EfFr1Uew2o2Yt3VIacr8S5EgYFIXnyiNq0afZKBl1JXJOGVvHFqGLFORw/N C0PQsMnHgPowH3BSJ4RTE5Rq3pg/BuAXF3ktWtM1uZ7g2gEnNLHCZ/Y2DsmSU9RK JB8dB5smeyKl4ZF8NIdbXY0c7uRMEMQ32LLcNP2xbH/fVD2k0cQ7kzzSsnG5WMY= -----END CERTIFICATE-----Generated at Sat Jun 13 07:59:59 2026 by rpki-client