$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b07256c3-b97b-471b-a0c0-0d299c636138.roa File: b07256c3-b97b-471b-a0c0-0d299c636138.roa (raw, json) Hash identifier: IYoplIwxJirRvNehnXqDoU/2q9WhEVAWGpT+FE8yne4= Subject key identifier: 9B:C5:82:8A:4D:0E:A2:37:FE:C0:25:7E:FA:74:86:28:E5:F6:CB:52 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 1AD748BC4BC07E4F54C81DF91AAB3505FEA9C506 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b07256c3-b97b-471b-a0c0-0d299c636138.roa Signing time: Mon 27 Jul 2026 03:00:28 +0000 ROA not before: Mon 27 Jul 2026 03:00:28 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c08::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:d7:48:bc:4b:c0:7e:4f:54:c8:1d:f9:1a:ab:35:05:fe:a9:c5:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 27 03:00:28 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=0b23b1c1d4e0caff7d1c24adc918322e05aef033748d84a5313087b58f537981, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:89:ed:50:57:aa:ea:e6:59:a5:c7:c7:d8:a8: 03:5b:f7:a8:fc:4e:e2:ce:e0:e7:62:d5:9d:a3:a8: c4:16:44:0c:b3:7f:eb:cd:c5:82:74:2b:ed:bd:26: 38:24:f9:a8:c8:be:75:4a:28:57:f9:52:18:ef:b1: 32:02:f5:33:fb:a1:9d:26:e7:07:d4:dc:cb:76:12: 3b:3e:1b:c4:cd:0b:43:da:3c:3a:da:28:1f:04:51: ec:9d:b6:11:27:34:85:04:6b:00:61:15:c1:14:07: f6:33:21:7c:97:c5:9e:f3:4e:81:db:c0:4c:7d:58: 45:a5:f8:61:17:ec:5b:51:5d:c3:8f:a0:67:d8:05: fb:a3:89:22:24:8b:fb:33:29:a9:5e:a2:96:4d:60: cf:af:05:ce:5d:6e:a0:cb:c4:74:fc:29:3f:74:9d: 67:f1:91:c8:56:38:64:2a:91:18:f8:c0:3d:0f:7a: 62:dc:25:52:18:b4:dd:3c:0b:b4:d3:44:27:95:fb: b3:5f:54:b2:b0:87:32:9e:79:6a:6e:b6:f6:dd:df: ad:42:4a:0a:f7:b0:c0:12:11:93:bc:4f:50:59:0c: a4:36:5b:32:76:73:35:1b:a7:59:3e:9b:a3:e8:80: bc:72:47:ca:94:6b:90:2c:02:f8:ea:95:56:e0:dc: 5b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C5:82:8A:4D:0E:A2:37:FE:C0:25:7E:FA:74:86:28:E5:F6:CB:52 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b07256c3-b97b-471b-a0c0-0d299c636138.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c08::/48 Signature Algorithm: sha256WithRSAEncryption 24:4c:66:ef:b4:3d:32:ac:9e:b1:a6:45:5c:81:6e:6f:df:9f: 1c:cc:73:f0:5f:fe:da:35:0b:df:3d:75:d6:c9:cc:c8:a6:cc: 46:31:18:7f:6d:90:45:ee:dd:47:35:95:1e:13:e1:91:c6:1a: dd:70:29:35:7b:79:83:26:a8:8b:e1:e6:ab:1f:b6:21:35:0b: 14:c6:b3:65:bb:54:79:b0:10:83:20:08:da:ff:4b:88:c1:94: b9:89:2c:83:24:23:66:7a:4b:02:70:0f:80:cc:be:c2:2f:a8: b0:d8:99:30:c2:17:fb:00:ea:29:c3:d5:83:05:db:62:35:67: a1:94:43:59:ce:13:eb:64:58:b2:38:e2:75:49:3c:b2:06:0d: 42:87:4d:53:35:d8:c2:11:0e:fa:cb:e6:cd:7a:8d:f3:e8:68: 15:21:71:18:c5:1d:1a:37:4b:c0:fb:b1:63:92:80:98:30:0f: 91:54:1d:da:e6:da:93:f2:87:46:31:e8:e1:b0:83:eb:86:5a: a7:b7:a8:0b:85:39:6a:26:24:f1:64:40:a6:c5:b1:39:a9:7d: 39:5e:16:1a:9c:b8:4c:7c:e0:81:0e:b0:23:0e:1b:64:ff:5d: 0d:d6:7f:4c:a3:23:37:b4:ee:a0:9d:9c:97:c9:ee:ef:9a:41: ae:62:05:1e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUGtdIvEvAfk9UyB35Gqs1Bf6pxQYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwNzI3MDMwMDI4WhcNMjYxMDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwYjIzYjFjMWQ0ZTBjYWZmN2QxYzI0YWRjOTE4MzIyZTA1 YWVmMDMzNzQ4ZDg0YTUzMTMwODdiNThmNTM3OTgxMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDnie1QV6rq5lmlx8fYqANb96j8TuLO4Odi1Z2jqMQWRAyz f+vNxYJ0K+29Jjgk+ajIvnVKKFf5UhjvsTIC9TP7oZ0m5wfU3Mt2Ejs+G8TNC0Pa PDraKB8EUeydthEnNIUEawBhFcEUB/YzIXyXxZ7zToHbwEx9WEWl+GEX7FtRXcOP oGfYBfujiSIki/szKaleopZNYM+vBc5dbqDLxHT8KT90nWfxkchWOGQqkRj4wD0P emLcJVIYtN08C7TTRCeV+7NfVLKwhzKeeWputvbd361CSgr3sMASEZO8T1BZDKQ2 WzJ2czUbp1k+m6PogLxyR8qUa5AsAvjqlVbg3FvhAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUm8WCik0Oojf+wCV++nSGKOX2y1IwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2IwNzI1NmMzLWI5N2ItNDcxYi1hMGMwLTBkMjk5YzYzNjEzOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAgwDQYJKoZIhvcNAQELBQADggEBACRMZu+0PTKsnrGmRVyBbm/f nxzMc/Bf/to1C989ddbJzMimzEYxGH9tkEXu3Uc1lR4T4ZHGGt1wKTV7eYMmqIvh 5qsftiE1CxTGs2W7VHmwEIMgCNr/S4jBlLmJLIMkI2Z6SwJwD4DMvsIvqLDYmTDC F/sA6inD1YMF22I1Z6GUQ1nOE+tkWLI44nVJPLIGDUKHTVM12MIRDvrL5s16jfPo aBUhcRjFHRo3S8D7sWOSgJgwD5FUHdrm2pPyh0Yx6OGwg+uGWqe3qAuFOWomJPFk QKbFsTmpfTleFhqcuEx84IEOsCMOG2T/XQ3Wf0yjIze07qCdnJfJ7u+aQa5iBR4= -----END CERTIFICATE-----Generated at Tue Jul 28 22:40:47 2026 by rpki-client