$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d50b4be5-b548-4743-92e1-1e17267f722d.roa File: d50b4be5-b548-4743-92e1-1e17267f722d.roa (raw, json) Hash identifier: 9dB820x0sc4fpweQ57OVA7kcmwc4L1teZn7ilQeTc+U= Subject key identifier: E5:B7:17:A6:03:8F:FE:99:02:DA:EB:19:33:CB:BF:FE:3B:D9:FD:5A Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 6860079921783CCB8A63A2086466C6321ECD5F97 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d50b4be5-b548-4743-92e1-1e17267f722d.roa Signing time: Tue 19 May 2026 04:01:01 +0000 ROA not before: Tue 19 May 2026 04:01:01 +0000 ROA not after: Mon 17 Aug 2026 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:548::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:60:07:99:21:78:3c:cb:8a:63:a2:08:64:66:c6:32:1e:cd:5f:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 19 04:01:01 2026 GMT Not After : Aug 17 23:59:59 2026 GMT Subject: serialNumber=ae4286c0da24100ccbb30c6e235b3d2bbffd0bdadb11e0085da863ddc3949db5, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1a:31:af:83:69:d9:5b:d5:1b:f0:0d:33:19: 93:ab:11:03:19:44:a1:d3:cd:3b:22:42:4d:bc:fe: fe:18:de:92:98:82:85:e2:3e:8c:a7:1a:14:e5:4c: 23:1b:b3:56:24:67:9b:75:bc:31:a3:b8:00:82:82: 43:91:b3:08:97:d3:59:d7:48:b0:30:b2:99:a9:ee: 60:a3:b8:aa:ab:d0:8a:30:ae:b2:e4:07:5e:d3:a6: 19:6d:5d:9e:51:e5:37:34:62:d4:93:4d:a7:ae:a8: 16:68:86:09:1b:d0:9f:71:5e:b1:e2:7e:d5:4c:af: 52:f5:91:91:55:0d:53:3d:0f:21:86:40:25:7a:6a: 0d:e5:bb:00:07:94:48:d3:c3:a4:fd:70:00:92:d0: 69:97:3c:bd:71:c4:0a:a0:9c:ff:a5:67:68:51:c4: 0a:76:3c:e5:8c:0e:28:d8:d1:c3:c2:9c:d7:c2:a9: a2:39:da:96:b8:ca:f1:64:3b:2a:23:d5:99:21:67: 17:f2:82:10:92:3d:a1:6b:87:53:87:42:07:0e:6e: 91:d5:39:81:44:cb:82:ed:e7:f8:7a:06:f0:36:73: eb:0d:7b:80:0b:de:3c:ac:af:64:63:b9:be:5c:0c: 46:30:3c:89:b1:43:49:13:17:93:15:75:b6:ac:fe: ea:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B7:17:A6:03:8F:FE:99:02:DA:EB:19:33:CB:BF:FE:3B:D9:FD:5A X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d50b4be5-b548-4743-92e1-1e17267f722d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:548::/48 Signature Algorithm: sha256WithRSAEncryption 21:92:5f:a2:4c:b9:1c:3a:ec:71:2c:ae:74:3e:c2:31:a2:8e: 75:6b:4b:cf:69:6b:9a:d8:76:c4:6c:91:46:b4:6f:ae:a1:01: 54:0f:2e:88:ba:f9:99:fa:9d:ad:28:58:41:37:e6:b7:40:5d: c0:da:87:a8:8d:ec:0b:7b:1c:da:0a:fb:33:c8:61:d0:6e:60: 52:92:d0:4f:b1:b1:2a:e5:31:a4:98:26:16:e4:9b:7d:32:00: 3e:51:a5:6f:a8:a2:54:5d:9e:51:df:53:8b:77:04:68:40:1b: c8:83:39:ae:47:1e:9d:0c:70:44:a4:8f:3c:28:7e:74:55:a8: 44:b3:1e:fd:07:d5:8d:4c:e3:4a:fb:15:88:c2:14:14:9a:88: 92:61:ec:14:a0:5f:ec:07:6a:ce:f4:a9:97:23:e0:7a:fb:9f: c0:f9:3b:d2:b2:ac:54:bb:ec:33:50:29:5d:7a:1f:8a:14:82: 75:73:2c:cd:ca:fd:83:29:c5:9f:4a:14:c3:58:7e:5d:b8:15: 35:20:81:6b:76:51:56:c9:39:99:2a:9e:9a:84:e6:b4:8b:62: da:7f:ea:1f:5c:fc:90:ff:a2:ff:00:18:d7:5f:8e:16:7f:7c: 41:bb:c8:0d:d2:da:94:eb:5e:84:52:43:78:16:4c:c3:5c:28: b6:2b:4f:21 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUaGAHmSF4PMuKY6IIZGbGMh7NX5cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwNTE5MDQwMTAxWhcNMjYwODE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZTQyODZjMGRhMjQxMDBjY2JiMzBjNmUyMzViM2QyYmJm ZmQwYmRhZGIxMWUwMDg1ZGE4NjNkZGMzOTQ5ZGI1MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDaGjGvg2nZW9Ub8A0zGZOrEQMZRKHTzTsiQk28/v4Y3pKY goXiPoynGhTlTCMbs1YkZ5t1vDGjuACCgkORswiX01nXSLAwspmp7mCjuKqr0Iow rrLkB17TphltXZ5R5Tc0YtSTTaeuqBZohgkb0J9xXrHiftVMr1L1kZFVDVM9DyGG QCV6ag3luwAHlEjTw6T9cACS0GmXPL1xxAqgnP+lZ2hRxAp2POWMDijY0cPCnNfC qaI52pa4yvFkOyoj1ZkhZxfyghCSPaFrh1OHQgcObpHVOYFEy4Lt5/h6BvA2c+sN e4AL3jysr2Rjub5cDEYwPImxQ0kTF5MVdbas/uqrAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU5bcXpgOP/pkC2usZM8u//jvZ/VowHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2Q1MGI0YmU1LWI1NDgtNDc0My05MmUxLTFlMTcyNjdmNzIyZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABUgwDQYJKoZIhvcNAQELBQADggEBACGSX6JMuRw67HEsrnQ+wjGi jnVrS89pa5rYdsRskUa0b66hAVQPLoi6+Zn6na0oWEE35rdAXcDah6iN7At7HNoK +zPIYdBuYFKS0E+xsSrlMaSYJhbkm30yAD5RpW+oolRdnlHfU4t3BGhAG8iDOa5H Hp0McESkjzwofnRVqESzHv0H1Y1M40r7FYjCFBSaiJJh7BSgX+wHas70qZcj4Hr7 n8D5O9KyrFS77DNQKV16H4oUgnVzLM3K/YMpxZ9KFMNYfl24FTUggWt2UVbJOZkq npqE5rSLYtp/6h9c/JD/ov8AGNdfjhZ/fEG7yA3S2pTrXoRSQ3gWTMNcKLYrTyE= -----END CERTIFICATE-----Generated at Sat Jun 13 08:00:38 2026 by rpki-client