$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/dd6f8923-ba0b-407d-a9e8-8c832583a0dd.roa File: dd6f8923-ba0b-407d-a9e8-8c832583a0dd.roa (raw, json) Hash identifier: xVqvkNm2x/jQ0A3+ritKmU5vBx65Hwmgq+Sq+Yfo+bM= Subject key identifier: 43:14:64:C8:83:6D:CE:D0:DD:1F:4A:C5:CF:F0:70:84:42:30:AA:A2 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 14E2DD875ACED20B4A7393D14280760D619D8E67 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/dd6f8923-ba0b-407d-a9e8-8c832583a0dd.roa Signing time: Tue 19 May 2026 04:01:00 +0000 ROA not before: Tue 19 May 2026 04:01:00 +0000 ROA not after: Mon 17 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:544::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:e2:dd:87:5a:ce:d2:0b:4a:73:93:d1:42:80:76:0d:61:9d:8e:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 19 04:01:00 2026 GMT Not After : Aug 17 23:59:59 2026 GMT Subject: serialNumber=403f10387a15260f0dbbdee249ab5015e169feb5348f9f13c7d1503187cc086b, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b8:a7:03:1b:1d:cf:c6:d4:51:5c:e1:40:52: 9e:6d:25:bb:7c:ab:00:8e:d3:1b:3f:f6:39:74:cb: 73:ec:e9:14:82:54:7f:65:7b:4e:e5:31:95:de:14: 2c:40:d5:11:59:57:82:50:d9:28:aa:f3:27:68:c9: 7c:fb:8c:66:07:2a:77:34:6b:dd:4c:8a:fb:d0:d4: 56:16:33:4e:21:89:9a:5d:ca:ba:f7:d7:21:a0:0f: 13:ab:ec:a9:c6:ec:11:03:7e:32:be:33:25:dc:b5: 24:85:7d:fd:9a:ad:64:1c:6b:a5:5e:21:2e:18:07: 38:a8:09:61:42:a5:bc:8f:43:af:fe:a3:65:cf:3c: c5:a0:55:ba:43:77:a1:16:8e:57:5c:ad:3d:5b:e7: 83:9d:5d:0c:9e:b3:3d:84:e3:fa:a6:d3:49:58:07: d6:c5:b9:3f:f0:ff:b6:38:eb:35:30:b6:58:6a:2a: eb:d5:ab:de:e0:7d:68:b1:45:bb:33:94:75:dc:4c: 32:25:1c:0e:74:c5:dc:97:f5:80:b5:8e:9f:e7:6d: f3:47:9e:c7:aa:88:1d:7a:4c:23:6e:96:f3:0b:24: 1c:ac:3d:30:2e:86:cb:db:d1:31:52:e2:79:4e:c4: c9:4e:3b:60:17:e1:37:ac:21:98:43:e0:90:21:94: 51:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:14:64:C8:83:6D:CE:D0:DD:1F:4A:C5:CF:F0:70:84:42:30:AA:A2 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/dd6f8923-ba0b-407d-a9e8-8c832583a0dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:544::/48 Signature Algorithm: sha256WithRSAEncryption 95:16:74:c8:cd:9f:a0:c2:23:5d:25:b7:bc:d7:6c:98:90:98: 54:00:2f:3e:f2:6d:8e:7b:52:85:a2:13:27:61:77:37:d7:d3: d6:25:a3:59:6e:e9:8e:aa:3e:7f:8c:7c:70:fb:51:50:59:67: ff:ce:3c:24:11:53:3f:b4:36:36:cb:c8:7e:87:b5:e9:06:2d: 52:47:5b:38:97:a7:c0:a9:24:ad:df:42:12:2d:e4:36:06:56: 79:cc:61:04:08:70:12:9f:ab:5f:a6:ff:f7:87:e9:c7:55:bc: e9:c4:f8:37:e0:d3:a3:df:6c:f1:90:00:34:73:88:31:fc:04: d4:2a:9d:a1:f3:f1:b2:c5:bf:43:4d:33:b4:ed:c9:a9:6d:e5: cc:45:96:e0:34:91:d5:d3:38:55:46:aa:3c:6f:75:55:bc:1c: b8:3e:a1:13:f8:1e:d6:e5:40:51:b9:d4:fb:45:24:ea:be:58: 41:3f:c5:27:7a:6e:fe:d2:4d:a1:57:71:64:58:94:74:cc:c0: b0:b7:ce:fa:06:32:93:b1:0c:ec:46:4a:47:72:b1:31:b2:7c: e1:b4:4e:9b:c6:04:de:4c:fd:7d:f7:29:80:4a:f5:45:2b:14: bc:62:ca:6d:18:f8:87:6f:f4:eb:92:a5:0e:ee:93:24:12:61: 1b:80:77:f1 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUFOLdh1rO0gtKc5PRQoB2DWGdjmcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwNTE5MDQwMTAwWhcNMjYwODE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MDNmMTAzODdhMTUyNjBmMGRiYmRlZTI0OWFiNTAxNWUx NjlmZWI1MzQ4ZjlmMTNjN2QxNTAzMTg3Y2MwODZiMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3uKcDGx3PxtRRXOFAUp5tJbt8qwCO0xs/9jl0y3Ps6RSC VH9le07lMZXeFCxA1RFZV4JQ2Siq8ydoyXz7jGYHKnc0a91MivvQ1FYWM04hiZpd yrr31yGgDxOr7KnG7BEDfjK+MyXctSSFff2arWQca6VeIS4YBzioCWFCpbyPQ6/+ o2XPPMWgVbpDd6EWjldcrT1b54OdXQyesz2E4/qm00lYB9bFuT/w/7Y46zUwtlhq KuvVq97gfWixRbszlHXcTDIlHA50xdyX9YC1jp/nbfNHnseqiB16TCNulvMLJBys PTAuhsvb0TFS4nlOxMlOO2AX4TesIZhD4JAhlFFRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUQxRkyINtztDdH0rFz/BwhEIwqqIwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2RkNmY4OTIzLWJhMGItNDA3ZC1hOWU4LThjODMyNTgzYTBkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABUQwDQYJKoZIhvcNAQELBQADggEBAJUWdMjNn6DCI10lt7zXbJiQ mFQALz7ybY57UoWiEydhdzfX09Ylo1lu6Y6qPn+MfHD7UVBZZ//OPCQRUz+0NjbL yH6HtekGLVJHWziXp8CpJK3fQhIt5DYGVnnMYQQIcBKfq1+m//eH6cdVvOnE+Dfg 06PfbPGQADRziDH8BNQqnaHz8bLFv0NNM7Ttyalt5cxFluA0kdXTOFVGqjxvdVW8 HLg+oRP4HtblQFG51PtFJOq+WEE/xSd6bv7STaFXcWRYlHTMwLC3zvoGMpOxDOxG SkdysTGyfOG0TpvGBN5M/X33KYBK9UUrFLxiym0Y+Idv9OuSpQ7ukyQSYRuAd/E= -----END CERTIFICATE-----Generated at Sat Jun 13 08:00:34 2026 by rpki-client