$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/8c01e09a-126a-48af-967e-1f65dc772ace.roa File: 8c01e09a-126a-48af-967e-1f65dc772ace.roa (raw, json) Hash identifier: wq8Eu92vlSxIvPLZ3A9zpWwkpVdEwjrSBPTOBWpskJU= Subject key identifier: 19:B2:83:6F:A2:CC:CD:64:81:26:B0:03:D0:30:A9:47:6F:90:B3:70 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 29A4201689687FF68CF8EDAB7960D35F1F2498A8 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/8c01e09a-126a-48af-967e-1f65dc772ace.roa Signing time: Mon 27 Jul 2026 03:11:03 +0000 ROA not before: Mon 27 Jul 2026 03:11:03 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:492::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:a4:20:16:89:68:7f:f6:8c:f8:ed:ab:79:60:d3:5f:1f:24:98:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 27 03:11:03 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=f61f5c179c17c0cad7e26e2f61a8834df49a1a4273e1a741ebac38b8de5e48e1, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8f:27:57:b6:ab:f8:00:6d:2d:f3:39:f4:a4: 3b:dc:31:9b:02:af:6d:a4:4f:04:e4:8f:13:dc:f7: 5e:89:ba:f8:b1:b4:0d:96:55:09:db:d8:19:fd:b2: ef:93:73:bf:81:57:89:1f:b2:04:34:fb:26:c0:73: 20:d2:cc:97:50:be:a3:a3:d3:a5:7c:b0:e8:1b:40: 37:b8:d5:9c:1f:64:dc:94:60:c7:44:f7:28:c1:02: c1:59:7a:15:a4:54:62:fa:44:d8:92:e2:22:88:ef: a2:39:26:d8:18:de:d8:7b:6e:f7:ac:be:7c:45:4e: 98:98:7e:2e:98:42:15:6a:f7:3c:21:89:8c:e7:21: 1c:ac:5c:dc:92:e1:de:ff:e5:e5:71:3c:db:ba:82: 1c:42:21:6a:fd:d1:87:f5:4b:4f:e8:a0:5b:fc:13: 6d:94:00:3d:8e:7e:68:a4:ea:27:63:b7:03:14:f3: 48:6f:3e:05:d7:14:fb:82:58:1e:b3:e4:c9:bd:7b: 0f:d6:b7:2d:ed:ec:52:97:0c:86:74:92:09:e7:f7: 41:49:29:48:c0:aa:b9:b5:b0:73:df:26:20:0b:cc: 9b:13:ab:a0:47:ff:75:4b:95:62:34:6e:1b:cc:2c: 22:77:5d:2b:7b:1e:f8:af:4d:89:35:6f:c3:5f:66: 8f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:B2:83:6F:A2:CC:CD:64:81:26:B0:03:D0:30:A9:47:6F:90:B3:70 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/8c01e09a-126a-48af-967e-1f65dc772ace.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:492::/47 Signature Algorithm: sha256WithRSAEncryption 8c:c6:26:84:69:e8:82:cb:97:ff:61:ec:80:00:8e:53:1b:e3: 05:02:d5:87:c1:3b:df:ca:94:df:83:3f:d1:71:c6:2a:7a:c0: 1d:7b:51:37:1b:c7:05:09:7a:c0:6a:d3:6d:dd:e5:40:dd:f8: aa:05:4c:5f:a7:15:46:2a:8f:3e:96:59:75:6d:78:db:d7:4a: 2e:e1:26:4a:5f:97:80:24:d0:3b:7d:3d:2f:a8:fa:cc:20:78: f9:f1:9d:33:af:f6:4f:85:4e:8c:6d:da:01:f6:dc:1b:18:e8: 0b:b5:f6:3c:ad:1b:fb:33:41:7b:be:84:c3:fb:d5:17:2f:5b: be:ae:3f:a2:8a:d3:1a:3d:f4:da:70:19:ef:85:fd:47:75:c9: e6:f7:59:04:1c:f3:67:70:cb:eb:eb:c0:b5:d5:b4:ff:8e:00: 0e:25:69:3e:d7:ac:c8:37:e7:40:9b:07:1e:0a:47:92:ac:29: d1:42:6f:07:2e:26:35:60:83:35:f5:9e:d9:69:24:f6:1e:3b: db:ea:c4:46:d6:68:4e:4b:48:dc:43:51:ce:c3:bf:94:68:85: 72:11:1d:23:0b:b8:80:3b:d0:f0:7a:23:7b:fb:13:27:33:49: db:83:e2:fd:fa:ee:c4:9a:93:78:80:5b:a8:29:b2:83:fb:b6: 75:49:a4:01 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKaQgFolof/aM+O2reWDTXx8kmKgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwNzI3MDMxMTAzWhcNMjYxMDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNjFmNWMxNzljMTdjMGNhZDdlMjZlMmY2MWE4ODM0ZGY0 OWExYTQyNzNlMWE3NDFlYmFjMzhiOGRlNWU0OGUxMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5jydXtqv4AG0t8zn0pDvcMZsCr22kTwTkjxPc916Juvix tA2WVQnb2Bn9su+Tc7+BV4kfsgQ0+ybAcyDSzJdQvqOj06V8sOgbQDe41ZwfZNyU YMdE9yjBAsFZehWkVGL6RNiS4iKI76I5JtgY3th7bvesvnxFTpiYfi6YQhVq9zwh iYznIRysXNyS4d7/5eVxPNu6ghxCIWr90Yf1S0/ooFv8E22UAD2Ofmik6idjtwMU 80hvPgXXFPuCWB6z5Mm9ew/Wty3t7FKXDIZ0kgnn90FJKUjAqrm1sHPfJiALzJsT q6BH/3VLlWI0bhvMLCJ3XSt7HvivTYk1b8NfZo9rAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUGbKDb6LMzWSBJrAD0DCpR2+Qs3AwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzhjMDFlMDlhLTEyNmEtNDhhZi05NjdlLTFmNjVkYzc3MmFjZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmBZzABJIwDQYJKoZIhvcNAQELBQADggEBAIzGJoRp6ILLl/9h7IAAjlMb 4wUC1YfBO9/KlN+DP9Fxxip6wB17UTcbxwUJesBq023d5UDd+KoFTF+nFUYqjz6W WXVteNvXSi7hJkpfl4Ak0Dt9PS+o+swgePnxnTOv9k+FToxt2gH23BsY6Au19jyt G/szQXu+hMP71RcvW76uP6KK0xo99NpwGe+F/Ud1yeb3WQQc82dwy+vrwLXVtP+O AA4laT7XrMg350CbBx4KR5KsKdFCbwcuJjVggzX1ntlpJPYeO9vqxEbWaE5LSNxD Uc7Dv5RohXIRHSMLuIA70PB6I3v7EyczSduD4v367sSak3iAW6gpsoP7tnVJpAE= -----END CERTIFICATE-----Generated at Tue Jul 28 20:28:13 2026 by rpki-client