$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a61e3a10-1e13-4280-abdc-c7f8cb80da8d.roa File: a61e3a10-1e13-4280-abdc-c7f8cb80da8d.roa (raw, json) Hash identifier: RirvIEFc4KJuUV4kJbiFvC+CP0BTAbu7rt3u79S67sw= Subject key identifier: E7:06:E7:07:3A:DF:45:DA:61:BE:6F:A7:79:C0:57:84:0A:C1:D2:83 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 6BF0931A125336B15F9A5795583E0E7F7EC10BF3 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a61e3a10-1e13-4280-abdc-c7f8cb80da8d.roa Signing time: Mon 27 Jul 2026 03:00:09 +0000 ROA not before: Mon 27 Jul 2026 03:00:09 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c1a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:f0:93:1a:12:53:36:b1:5f:9a:57:95:58:3e:0e:7f:7e:c1:0b:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 27 03:00:09 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=155da699a1d0f4acea3f905c3dc4cb130eda4d4abf5d7fb8bd0791c6d211377c, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b1:2c:32:95:37:9a:a6:b9:1c:40:cf:06:b6: 53:7c:d6:9f:bc:2a:81:f1:d1:51:63:46:87:31:d6: 71:93:17:12:1b:a0:74:84:24:b4:b8:13:2c:71:39: 42:d9:86:5a:68:97:73:bc:cb:c4:8e:d3:32:11:23: 93:d7:49:29:3d:d2:8a:32:e3:7b:07:47:9b:3a:77: 61:6b:53:2a:18:ff:bd:ff:f8:29:0c:8c:33:63:d5: ca:7c:a9:35:7c:99:64:d6:17:d4:3b:11:12:ab:9d: e1:5e:68:b2:ea:1b:60:01:d2:7a:9f:73:e5:ca:53: b1:ec:24:d6:cb:cf:8e:16:d2:9e:8b:06:b1:e4:72: 8c:b7:47:4e:ad:21:72:80:85:f9:89:00:93:88:1d: bc:43:f1:aa:4f:5b:1a:96:90:b9:d2:d2:c0:1f:cd: d7:91:31:d8:f4:2f:19:02:2d:27:3e:19:51:ab:40: 88:f8:db:d9:00:c4:57:47:f7:85:c8:3c:31:d0:13: ba:44:dd:20:d8:37:c3:79:ed:62:28:88:d8:8c:a3: 72:84:18:4d:5e:20:db:c0:d4:91:b0:e7:38:e0:ef: 78:e5:28:8f:95:7b:8b:54:d0:4e:41:1f:c4:0b:8e: 2f:ba:2e:4f:b6:69:d5:af:15:f7:01:f0:38:fb:78: 3d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:06:E7:07:3A:DF:45:DA:61:BE:6F:A7:79:C0:57:84:0A:C1:D2:83 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a61e3a10-1e13-4280-abdc-c7f8cb80da8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c1a::/48 Signature Algorithm: sha256WithRSAEncryption 59:ec:b5:02:0a:a6:35:71:7c:c0:bd:79:26:60:b3:c7:28:ae: b5:c5:07:7b:f9:4f:40:ab:0d:8a:07:18:56:c8:0f:af:26:5b: 51:8d:50:84:e3:ab:29:3d:d6:eb:18:74:14:92:e9:c7:09:5a: 46:8b:0c:05:49:37:8f:68:59:1b:bb:f1:94:48:7a:51:ef:17: f4:32:00:9f:96:65:96:44:ab:42:c6:9a:c8:10:a6:46:9a:8d: 60:bb:af:f9:31:59:e5:f2:b5:57:64:f0:10:36:71:fe:b0:c6: 65:57:39:7c:5d:18:e6:49:52:40:41:e1:1c:6c:6c:57:88:ae: 5d:e5:58:a8:e1:c2:94:9e:e7:06:6d:d9:cf:cc:91:47:2b:32: fc:54:b3:76:74:11:23:df:8d:ee:36:69:c9:fd:6c:39:4c:8b: 19:77:81:72:2b:3c:f0:34:14:07:07:7c:90:0d:8f:e2:43:1e: 80:23:6a:95:ea:39:38:5c:e9:24:3e:97:e7:f1:41:3b:67:21: 99:84:e7:48:9c:a4:76:a6:48:27:10:25:ef:89:56:f3:15:88: 92:52:a7:fb:78:37:b8:7c:ea:bd:28:7f:40:48:28:4a:9b:26: 33:d8:4e:48:f8:5e:91:9d:b6:6c:de:76:ac:8a:b5:e8:db:76: 2b:ef:e3:f4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUa/CTGhJTNrFfmleVWD4Of37BC/MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwNzI3MDMwMDA5WhcNMjYxMDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNTVkYTY5OWExZDBmNGFjZWEzZjkwNWMzZGM0Y2IxMzBl ZGE0ZDRhYmY1ZDdmYjhiZDA3OTFjNmQyMTEzNzdjMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZsSwylTeaprkcQM8GtlN81p+8KoHx0VFjRocx1nGTFxIb oHSEJLS4EyxxOULZhlpol3O8y8SO0zIRI5PXSSk90ooy43sHR5s6d2FrUyoY/73/ +CkMjDNj1cp8qTV8mWTWF9Q7ERKrneFeaLLqG2AB0nqfc+XKU7HsJNbLz44W0p6L BrHkcoy3R06tIXKAhfmJAJOIHbxD8apPWxqWkLnS0sAfzdeRMdj0LxkCLSc+GVGr QIj429kAxFdH94XIPDHQE7pE3SDYN8N57WIoiNiMo3KEGE1eINvA1JGw5zjg73jl KI+Ve4tU0E5BH8QLji+6Lk+2adWvFfcB8Dj7eD25AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU5wbnBzrfRdphvm+necBXhArB0oMwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2E2MWUzYTEwLTFlMTMtNDI4MC1hYmRjLWM3ZjhjYjgwZGE4ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBowDQYJKoZIhvcNAQELBQADggEBAFnstQIKpjVxfMC9eSZgs8co rrXFB3v5T0CrDYoHGFbID68mW1GNUITjqyk91usYdBSS6ccJWkaLDAVJN49oWRu7 8ZRIelHvF/QyAJ+WZZZEq0LGmsgQpkaajWC7r/kxWeXytVdk8BA2cf6wxmVXOXxd GOZJUkBB4RxsbFeIrl3lWKjhwpSe5wZt2c/MkUcrMvxUs3Z0ESPfje42acn9bDlM ixl3gXIrPPA0FAcHfJANj+JDHoAjapXqOThc6SQ+l+fxQTtnIZmE50icpHamSCcQ Je+JVvMViJJSp/t4N7h86r0of0BIKEqbJjPYTkj4XpGdtmzedqyKtejbdivv4/Q= -----END CERTIFICATE-----Generated at Tue Jul 28 20:26:48 2026 by rpki-client