$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a0fcdd7b-5a94-4608-9bca-0e3cf554937a.roa File: a0fcdd7b-5a94-4608-9bca-0e3cf554937a.roa (raw, json) Hash identifier: UqFasne1ei944EOcy6PLOxPUhzXK8egHzV9VlEUXtgM= Subject key identifier: BC:A7:B1:EA:87:B8:A6:D9:C1:48:71:43:38:E9:0D:23:21:9E:62:E6 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 27AE4D090A726BEB7E183C4D5356320407FE827B Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a0fcdd7b-5a94-4608-9bca-0e3cf554937a.roa Signing time: Mon 27 Jul 2026 02:50:05 +0000 ROA not before: Mon 27 Jul 2026 02:50:05 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:c0e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:ae:4d:09:0a:72:6b:eb:7e:18:3c:4d:53:56:32:04:07:fe:82:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 27 02:50:05 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=f4d6ebb41850b81ff477fa72f93ea2b4e5b91428772c6a8391fb5d6ff2413def, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bd:37:2d:3c:90:32:74:ca:23:9b:b2:01:09: 79:45:96:d9:6e:a1:63:2b:2e:fa:83:c5:53:62:35: 37:1c:08:a9:de:bf:bd:ac:e6:40:83:07:29:04:cd: 88:3b:de:75:ca:d1:5d:ed:07:b7:14:f6:44:5c:5a: 5d:e3:b5:ed:7e:64:73:9d:d7:5b:0d:57:a3:a9:69: 17:fc:0b:ef:95:1d:e7:56:ae:0f:1f:dd:d2:27:a9: 69:62:ac:19:a9:18:22:b2:70:8b:2d:2a:33:81:f6: 5f:19:6c:b4:9f:3e:97:02:e2:fe:06:66:bc:00:eb: 18:0f:be:e2:dd:67:4e:43:9f:72:a7:eb:c9:8f:b8: 55:f1:3e:ad:a5:cc:2b:4b:06:eb:80:30:d7:1a:9c: f4:dd:f3:72:2e:c9:6a:a7:c9:9e:04:e8:bf:7f:29: 52:3e:b5:94:d8:58:95:cb:60:20:55:d6:11:2d:b1: 9a:b3:3c:a3:8a:85:4f:df:5d:0c:a4:de:06:0f:3c: b2:2c:2b:4e:2b:6e:b1:e8:e5:5b:1d:1a:43:e3:5d: eb:86:d8:93:3e:d7:0e:ed:32:1a:89:08:e2:33:4d: 3b:46:20:4d:3d:e0:97:b7:22:bb:06:22:29:87:60: 42:d3:6a:cf:d2:d5:ec:72:1f:cf:44:64:89:71:5f: 80:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:A7:B1:EA:87:B8:A6:D9:C1:48:71:43:38:E9:0D:23:21:9E:62:E6 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a0fcdd7b-5a94-4608-9bca-0e3cf554937a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c0e::/48 Signature Algorithm: sha256WithRSAEncryption 70:3f:3b:c7:4e:2a:85:f7:c5:2d:77:36:a1:d0:ce:28:52:c9: 28:57:05:6e:a4:b2:97:ae:5a:69:b4:1d:f7:79:a0:10:38:86: 55:ee:99:ac:31:b2:48:c7:48:23:66:58:4f:9e:ee:db:37:0f: c7:7e:fe:51:e9:cc:44:a0:8c:98:5b:eb:d0:d0:cd:5e:39:29: 73:17:0f:da:99:b8:e2:ba:a6:cc:f5:33:69:2a:b7:3a:92:bc: 16:59:c9:ce:e1:ef:0a:25:a5:ee:cb:a9:e6:9c:c7:57:4d:79: a2:d4:62:9a:59:25:03:99:e6:48:89:6f:d7:c0:ec:4f:28:71: 6f:83:83:7b:48:17:ab:a6:cc:b8:78:2e:ae:16:96:23:36:c9: 55:0c:87:c9:10:8b:2a:35:45:43:3a:c5:6c:fd:68:50:f5:58: c9:30:a2:ef:0a:b6:77:1d:c7:67:3b:11:a0:36:a6:28:cd:a5: 71:34:dd:e3:58:d0:16:3e:e9:3b:a5:21:06:6a:6d:37:10:75: 1b:c3:21:e5:36:24:89:be:0c:18:5e:8c:1b:2d:6d:b0:0d:24: f3:f9:e9:ca:44:3a:96:92:16:ea:d8:cc:98:b6:8f:29:32:e6: 52:a3:ba:cd:a5:12:6c:1a:a7:1e:c9:93:9c:5f:f2:a6:eb:6e: 9c:44:49:4d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJ65NCQpya+t+GDxNU1YyBAf+gnswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwNzI3MDI1MDA1WhcNMjYxMDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNGQ2ZWJiNDE4NTBiODFmZjQ3N2ZhNzJmOTNlYTJiNGU1 YjkxNDI4NzcyYzZhODM5MWZiNWQ2ZmYyNDEzZGVmMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4vTctPJAydMojm7IBCXlFltluoWMrLvqDxVNiNTccCKne v72s5kCDBykEzYg73nXK0V3tB7cU9kRcWl3jte1+ZHOd11sNV6OpaRf8C++VHedW rg8f3dInqWlirBmpGCKycIstKjOB9l8ZbLSfPpcC4v4GZrwA6xgPvuLdZ05Dn3Kn 68mPuFXxPq2lzCtLBuuAMNcanPTd83IuyWqnyZ4E6L9/KVI+tZTYWJXLYCBV1hEt sZqzPKOKhU/fXQyk3gYPPLIsK04rbrHo5VsdGkPjXeuG2JM+1w7tMhqJCOIzTTtG IE094Je3IrsGIimHYELTas/S1exyH89EZIlxX4CfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUvKex6oe4ptnBSHFDOOkNIyGeYuYwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2EwZmNkZDdiLTVhOTQtNDYwOC05YmNhLTBlM2NmNTU0OTM3YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADA4wDQYJKoZIhvcNAQELBQADggEBAHA/O8dOKoX3xS13NqHQzihS yShXBW6kspeuWmm0Hfd5oBA4hlXumawxskjHSCNmWE+e7ts3D8d+/lHpzESgjJhb 69DQzV45KXMXD9qZuOK6psz1M2kqtzqSvBZZyc7h7wolpe7Lqeacx1dNeaLUYppZ JQOZ5kiJb9fA7E8ocW+Dg3tIF6umzLh4Lq4WliM2yVUMh8kQiyo1RUM6xWz9aFD1 WMkwou8Ktncdx2c7EaA2pijNpXE03eNY0BY+6TulIQZqbTcQdRvDIeU2JIm+DBhe jBstbbANJPP56cpEOpaSFurYzJi2jyky5lKjus2lEmwapx7Jk5xf8qbrbpxESU0= -----END CERTIFICATE-----Generated at Tue Jul 28 19:20:33 2026 by rpki-client