$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/941f79ce-715f-49f4-a576-333c065d82c6.roa File: 941f79ce-715f-49f4-a576-333c065d82c6.roa (raw, json) Hash identifier: yAmtInGg02IvBJXTFy8nfFvqxFay1T3hbSBF6qXwWzk= Subject key identifier: 31:FB:5E:AA:99:2B:E1:1F:73:7C:36:27:4C:95:32:0A:25:3B:FC:4E Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 634EC3B8EBB176DE8CF542107381382D0D1566A3 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/941f79ce-715f-49f4-a576-333c065d82c6.roa Signing time: Tue 19 May 2026 03:40:10 +0000 ROA not before: Tue 19 May 2026 03:40:10 +0000 ROA not after: Mon 17 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:48f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:4e:c3:b8:eb:b1:76:de:8c:f5:42:10:73:81:38:2d:0d:15:66:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 19 03:40:10 2026 GMT Not After : Aug 17 23:59:59 2026 GMT Subject: serialNumber=bbc85d57800dccdad2f3096fe8400d6454c4e94194d434eca72f017e875418da, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8d:4e:e4:52:27:11:06:4b:cf:ce:69:b9:b6: f2:94:6a:fc:ad:dd:65:24:10:3d:b8:7f:94:20:a5: ba:c3:f7:c5:d9:dc:44:d6:b3:f5:ae:02:ab:24:2c: d0:ab:43:39:da:02:b6:5e:6d:6c:cd:14:22:80:29: aa:a9:53:97:d0:76:ff:99:f9:2b:21:bb:fe:df:6d: d6:da:6e:a2:67:e4:8e:93:66:a2:4b:65:fa:3a:31: 02:bd:9a:e9:c6:28:06:ec:9e:f4:1c:a0:02:6b:64: d9:dd:5e:80:09:3d:15:c8:f5:36:b0:82:a8:ac:1f: bd:4b:17:4e:85:4d:b6:0d:5c:41:23:aa:5c:f7:99: ce:c4:b8:41:54:6d:d3:b3:fc:68:86:3c:0a:4c:94: 89:ed:f6:3b:04:84:b8:6b:f8:51:48:ef:e8:4c:fb: b0:fe:90:4b:fe:14:b7:65:6f:2a:b4:ee:7c:55:c2: 6b:94:ce:a4:11:b4:a1:e7:53:3f:f8:cd:a4:51:a4: 86:bb:ad:8e:86:74:67:8f:71:bd:dc:23:f9:25:35: 70:84:c9:c4:ae:d6:bd:bc:a2:22:f3:22:0a:1b:1d: 31:41:ab:c5:0b:dc:c7:bd:77:22:a3:58:9f:b9:50: a7:4b:49:ec:40:28:87:5b:71:15:af:07:08:52:28: 1b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:FB:5E:AA:99:2B:E1:1F:73:7C:36:27:4C:95:32:0A:25:3B:FC:4E X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/941f79ce-715f-49f4-a576-333c065d82c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:48f::/48 Signature Algorithm: sha256WithRSAEncryption 7f:b7:fb:dc:e7:e8:07:27:4f:0b:99:54:99:7a:2e:32:70:74: 55:5f:b1:13:f2:1b:e5:ba:38:19:ef:28:71:b1:89:22:43:b7: 22:86:3f:e1:82:be:2a:7c:c0:68:6c:5c:05:7d:57:12:88:16: ba:cc:2b:b4:eb:7c:fc:2d:ef:11:41:e4:ae:5a:23:64:88:b5: 38:6e:c7:86:69:ef:47:3a:d0:b3:be:62:b4:4b:9b:30:3d:c8: 07:9b:9f:54:da:77:1b:cc:fa:b0:8f:76:3d:08:33:3b:a0:b3: 38:90:47:85:9b:d6:3e:96:10:be:aa:90:e3:60:a4:4c:93:3d: 81:7d:94:33:9c:4a:96:64:1a:46:6c:1b:4b:1b:2b:23:0f:7d: f0:c1:a5:11:11:3b:b6:70:a2:d9:48:b4:bd:00:88:ba:5d:d2: a1:ce:9b:cc:4b:42:17:20:f6:c0:04:81:4c:4d:4f:c1:ea:85: ca:20:5b:18:44:4a:56:ef:d9:08:b9:38:9d:f2:b2:04:e6:69: e6:8b:0d:85:d5:dc:7c:d9:12:26:40:1e:4c:e3:0a:8e:af:2f: 4b:a8:3e:db:06:89:ef:80:74:9b:c4:ba:a4:5e:27:31:ce:6c: 0e:a6:3b:dc:63:e6:89:82:dd:78:ae:b2:fa:fd:1f:68:d4:ee: 1a:38:ab:f1 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUY07DuOuxdt6M9UIQc4E4LQ0VZqMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwNTE5MDM0MDEwWhcNMjYwODE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYmM4NWQ1NzgwMGRjY2RhZDJmMzA5NmZlODQwMGQ2NDU0 YzRlOTQxOTRkNDM0ZWNhNzJmMDE3ZTg3NTQxOGRhMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDejU7kUicRBkvPzmm5tvKUavyt3WUkED24f5QgpbrD98XZ 3ETWs/WuAqskLNCrQznaArZebWzNFCKAKaqpU5fQdv+Z+Sshu/7fbdbabqJn5I6T ZqJLZfo6MQK9munGKAbsnvQcoAJrZNndXoAJPRXI9TawgqisH71LF06FTbYNXEEj qlz3mc7EuEFUbdOz/GiGPApMlInt9jsEhLhr+FFI7+hM+7D+kEv+FLdlbyq07nxV wmuUzqQRtKHnUz/4zaRRpIa7rY6GdGePcb3cI/klNXCEycSu1r28oiLzIgobHTFB q8UL3Me9dyKjWJ+5UKdLSexAKIdbcRWvBwhSKBs/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUMfteqpkr4R9zfDYnTJUyCiU7/E4wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzk0MWY3OWNlLTcxNWYtNDlmNC1hNTc2LTMzM2MwNjVkODJjNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABI8wDQYJKoZIhvcNAQELBQADggEBAH+3+9zn6AcnTwuZVJl6LjJw dFVfsRPyG+W6OBnvKHGxiSJDtyKGP+GCvip8wGhsXAV9VxKIFrrMK7TrfPwt7xFB 5K5aI2SItThux4Zp70c60LO+YrRLmzA9yAebn1TadxvM+rCPdj0IMzugsziQR4Wb 1j6WEL6qkONgpEyTPYF9lDOcSpZkGkZsG0sbKyMPffDBpRERO7ZwotlItL0AiLpd 0qHOm8xLQhcg9sAEgUxNT8HqhcogWxhESlbv2Qi5OJ3ysgTmaeaLDYXV3HzZEiZA HkzjCo6vL0uoPtsGie+AdJvEuqReJzHObA6mO9xj5omC3Xiusvr9H2jU7ho4q/E= -----END CERTIFICATE-----Generated at Sat Jun 13 10:24:11 2026 by rpki-client