$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/cf62b964-3d33-414c-b4ce-9c3db9218363.roa File: cf62b964-3d33-414c-b4ce-9c3db9218363.roa (raw, json) Hash identifier: KEfa4YJfn1f+o15rDeSmwFXNclqd89X5D0jm/4ZCyXA= Subject key identifier: F8:10:86:A4:93:AB:26:B4:13:66:E4:92:A9:C0:44:AE:FA:BF:2D:EA Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 10960291640B8557934ED4860BC381098A5D0E71 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/cf62b964-3d33-414c-b4ce-9c3db9218363.roa Signing time: Fri 15 May 2026 00:20:07 +0000 ROA not before: Fri 15 May 2026 00:20:07 +0000 ROA not after: Thu 13 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:3cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:96:02:91:64:0b:85:57:93:4e:d4:86:0b:c3:81:09:8a:5d:0e:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 15 00:20:07 2026 GMT Not After : Aug 13 23:59:59 2026 GMT Subject: serialNumber=98892c1157ba68565efb753fa8a739173498a9a9e59809cee94c35bae90564a6, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f4:1f:0c:a0:45:c0:f7:75:b9:72:66:ca:d0: c2:c7:b5:fa:44:c8:32:6a:36:be:78:53:44:02:02: 9c:af:ee:4d:60:18:c6:2c:a4:5b:c2:31:c5:e5:ee: 16:cd:27:a4:97:6a:8d:c7:d5:23:12:ed:6c:3f:a6: b9:68:76:08:2d:04:cf:4b:0f:5f:c7:b8:5e:5d:33: 11:35:b3:9a:71:05:ae:1c:b5:7d:e4:51:1c:11:39: 3d:e7:ff:71:86:81:e6:c8:b2:bc:0d:60:54:01:67: 4f:f2:5e:28:3b:00:f2:0c:87:0b:16:d2:b3:86:57: a1:03:94:71:e8:5f:c2:1e:6d:64:db:07:e8:b8:d0: 6d:26:f8:03:a9:ba:04:69:7f:42:f4:f3:72:b8:b3: d0:93:9d:c2:20:c9:3f:bc:e8:dd:0e:ad:d9:f7:6a: f5:0b:6e:86:48:cf:bc:61:1d:a9:f2:6a:4d:27:6f: 90:88:f3:37:c8:50:74:e9:55:b3:ba:ec:1a:40:53: ee:c3:b4:e1:5b:bd:b4:c1:90:46:a3:7c:bf:da:c5: df:27:b3:d8:38:0b:57:de:c4:d1:f5:c5:96:4e:91: c0:49:6c:dc:13:97:95:3c:7b:66:19:96:9a:f6:8c: 14:a5:df:07:78:c6:89:e2:ac:90:ca:63:8f:1a:5e: 55:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:10:86:A4:93:AB:26:B4:13:66:E4:92:A9:C0:44:AE:FA:BF:2D:EA X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/cf62b964-3d33-414c-b4ce-9c3db9218363.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:3cc::/48 Signature Algorithm: sha256WithRSAEncryption 81:cc:e3:dc:9b:31:18:0f:82:51:b0:b4:7a:d7:da:8f:d4:26: 54:09:45:93:3b:75:b1:ca:92:d0:2d:72:4d:02:2f:2d:2f:1c: fc:c6:52:d5:53:bb:60:58:c8:78:f8:c3:c7:b2:56:c4:9a:7e: 67:42:06:2d:fa:f3:a9:d4:d8:0c:a7:aa:49:fa:0b:ec:7b:24: f4:3a:19:5e:71:11:a8:cd:27:66:74:32:93:6e:aa:dd:c6:67: 87:fb:2a:32:a5:08:42:7f:fd:24:ee:13:71:47:98:62:4a:3e: ff:76:eb:70:58:bc:af:1f:b4:59:e8:3a:f3:ad:71:8f:02:f9: 76:c2:a4:f6:88:d4:03:3f:83:a1:c6:a1:ea:5e:5d:07:94:63: 5e:a0:50:c6:4f:de:15:66:39:c0:17:32:a0:86:25:18:f9:43: 4e:e3:b2:97:55:ff:fe:e6:a4:00:da:1f:4c:d9:ab:7e:70:f6: 8e:1b:f8:89:74:36:fc:17:9f:77:48:48:b3:55:7e:11:97:10: 51:8c:65:ce:44:83:07:7a:6f:4d:29:45:c5:24:f1:2c:88:2d: 7e:09:b9:11:bd:13:04:52:05:3b:09:ba:98:f8:02:fa:b4:1a: a1:57:57:c0:27:64:83:ad:df:00:fc:35:34:b6:eb:0a:b7:c8: 12:f9:c6:f5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEJYCkWQLhVeTTtSGC8OBCYpdDnEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwNTE1MDAyMDA3WhcNMjYwODEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ODg5MmMxMTU3YmE2ODU2NWVmYjc1M2ZhOGE3MzkxNzM0 OThhOWE5ZTU5ODA5Y2VlOTRjMzViYWU5MDU2NGE2MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDI9B8MoEXA93W5cmbK0MLHtfpEyDJqNr54U0QCApyv7k1g GMYspFvCMcXl7hbNJ6SXao3H1SMS7Ww/prlodggtBM9LD1/HuF5dMxE1s5pxBa4c tX3kURwROT3n/3GGgebIsrwNYFQBZ0/yXig7APIMhwsW0rOGV6EDlHHoX8IebWTb B+i40G0m+AOpugRpf0L083K4s9CTncIgyT+86N0Ordn3avULboZIz7xhHanyak0n b5CI8zfIUHTpVbO67BpAU+7DtOFbvbTBkEajfL/axd8ns9g4C1fexNH1xZZOkcBJ bNwTl5U8e2YZlpr2jBSl3wd4xonirJDKY48aXlV5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU+BCGpJOrJrQTZuSSqcBErvq/LeowHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2NmNjJiOTY0LTNkMzMtNDE0Yy1iNGNlLTljM2RiOTIxODM2My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA8wwDQYJKoZIhvcNAQELBQADggEBAIHM49ybMRgPglGwtHrX2o/U JlQJRZM7dbHKktAtck0CLy0vHPzGUtVTu2BYyHj4w8eyVsSafmdCBi3686nU2Ayn qkn6C+x7JPQ6GV5xEajNJ2Z0MpNuqt3GZ4f7KjKlCEJ//STuE3FHmGJKPv9263BY vK8ftFnoOvOtcY8C+XbCpPaI1AM/g6HGoepeXQeUY16gUMZP3hVmOcAXMqCGJRj5 Q07jspdV//7mpADaH0zZq35w9o4b+Il0NvwXn3dISLNVfhGXEFGMZc5Egwd6b00p RcUk8SyILX4JuRG9EwRSBTsJupj4Avq0GqFXV8AnZIOt3wD8NTS26wq3yBL5xvU= -----END CERTIFICATE-----Generated at Sat Jun 13 06:44:45 2026 by rpki-client