$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0a8c0f6d-d3df-4586-a874-ee20de7d1e0b.roa File: 0a8c0f6d-d3df-4586-a874-ee20de7d1e0b.roa (raw, json) Hash identifier: J1KSUvEm2yfmNJTyGIAotRjvvqQbOEdCrUSSb82siEc= Subject key identifier: 98:2D:9F:45:BD:FF:28:C2:C0:3B:50:0A:EE:7A:77:89:C8:FD:2D:8E Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 4968A9FD892897685D799F7E2E3DD2B240B118D8 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0a8c0f6d-d3df-4586-a874-ee20de7d1e0b.roa Signing time: Sun 26 Jul 2026 00:00:31 +0000 ROA not before: Sun 26 Jul 2026 00:00:31 +0000 ROA not after: Sat 24 Oct 2026 23:59:59 +0000 asID: 801 IP address blocks: 2631::/24 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:68:a9:fd:89:28:97:68:5d:79:9f:7e:2e:3d:d2:b2:40:b1:18:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 26 00:00:31 2026 GMT Not After : Oct 24 23:59:59 2026 GMT Subject: serialNumber=1d3aa5a9cc9a3ce7069973626bab89bc9260584a5ed434e6dda7725399b633bc, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:60:53:87:fc:c5:82:74:96:32:a7:cb:06:19: 16:dd:66:c3:70:1f:12:10:bd:53:ab:a0:1e:f8:4a: c7:4f:c8:28:59:74:54:28:f4:a2:b3:a4:90:9c:ac: 50:59:b9:5e:60:1e:03:be:c5:45:c5:58:6d:7c:6e: 84:46:79:80:ec:fc:8a:8e:54:74:99:80:91:f6:ac: 98:73:15:39:3c:0a:1e:24:e3:7b:87:5a:7d:e0:21: 98:35:85:52:be:88:ff:8b:07:4c:cc:9a:57:24:67: e9:11:dc:23:6d:54:12:26:84:21:50:84:a4:26:7d: f8:2e:68:a8:d1:d9:91:2c:71:6b:ab:ff:fd:0c:27: a7:0d:2a:63:e0:f5:cb:b7:84:c2:4b:28:40:24:9b: 67:61:5c:70:9c:87:54:4b:34:39:f3:0c:e3:1a:0f: 8b:2b:ba:ef:5c:e4:4e:76:cd:86:fb:e7:e1:33:ab: 45:47:d9:4d:79:00:8f:f0:47:f3:a4:36:5e:f0:d5: 75:89:4b:23:a2:8e:71:0c:1b:9f:79:df:34:b4:92: 78:c2:59:00:71:99:57:ed:cf:8e:ee:c7:6a:b9:9b: 67:9d:2d:00:57:d5:fd:82:c8:fd:49:cc:db:ab:2d: 86:b3:32:f5:ce:31:11:17:ae:49:c1:65:de:b5:1b: 5c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:2D:9F:45:BD:FF:28:C2:C0:3B:50:0A:EE:7A:77:89:C8:FD:2D:8E X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0a8c0f6d-d3df-4586-a874-ee20de7d1e0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2631::/24 Signature Algorithm: sha256WithRSAEncryption 61:42:d6:a8:7c:0f:86:56:ce:97:f5:aa:62:bf:e1:0d:88:3e: 53:2c:27:5e:fa:92:47:61:d1:1a:b0:bc:9d:aa:d2:c4:e3:3f: da:da:39:da:53:a5:73:e8:b6:2a:0d:4d:d2:a4:89:95:a5:61: 2d:c1:5a:c8:9d:d6:2d:39:75:86:d7:95:f1:7b:6d:25:ed:d7: d9:62:97:84:83:12:25:f1:71:b5:a2:0b:54:30:bf:16:64:d4: 4e:c9:27:45:e2:04:af:04:89:30:b0:03:aa:4e:00:ad:66:45: e5:e9:50:d0:4b:68:90:d5:f1:06:80:bf:cd:ad:67:48:8f:e8: ea:55:a2:fa:5a:9d:4e:33:cf:73:fb:5c:d9:a2:a4:be:51:a6: 45:e1:05:d6:26:4c:91:66:52:71:98:d9:01:d9:d1:04:b0:c0: 8c:cc:d1:74:c7:7d:c4:ab:82:cd:14:ed:6e:72:65:e7:ee:d5: 61:0c:3a:38:33:1a:ca:bb:92:38:71:53:04:a0:f5:2c:43:a8: 5d:46:5c:a0:43:a7:1f:2b:fd:97:72:dc:61:7c:ac:79:f9:7c: 3c:9e:46:10:58:d9:ec:37:ce:22:40:6b:b5:1a:03:bf:7f:b1: ab:28:08:8a:04:33:f4:5c:08:3b:65:0c:d9:de:1c:92:71:0d: d7:12:20:64 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSWip/Ykol2hdeZ9+Lj3SskCxGNgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwNzI2MDAwMDMxWhcNMjYxMDI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZDNhYTVhOWNjOWEzY2U3MDY5OTczNjI2YmFiODliYzky NjA1ODRhNWVkNDM0ZTZkZGE3NzI1Mzk5YjYzM2JjMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8YFOH/MWCdJYyp8sGGRbdZsNwHxIQvVOroB74SsdPyChZ dFQo9KKzpJCcrFBZuV5gHgO+xUXFWG18boRGeYDs/IqOVHSZgJH2rJhzFTk8Ch4k 43uHWn3gIZg1hVK+iP+LB0zMmlckZ+kR3CNtVBImhCFQhKQmffguaKjR2ZEscWur //0MJ6cNKmPg9cu3hMJLKEAkm2dhXHCch1RLNDnzDOMaD4sruu9c5E52zYb75+Ez q0VH2U15AI/wR/OkNl7w1XWJSyOijnEMG5953zS0knjCWQBxmVftz47ux2q5m2ed LQBX1f2CyP1JzNurLYazMvXOMREXrknBZd61G1yvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmC2fRb3/KMLAO1AK7np3icj9LY4wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzBhOGMwZjZkLWQzZGYtNDU4Ni1hODc0LWVlMjBkZTdkMWUwYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAC MAYDBAAmMQAwDQYJKoZIhvcNAQELBQADggEBAGFC1qh8D4ZWzpf1qmK/4Q2IPlMs J176kkdh0RqwvJ2q0sTjP9raOdpTpXPotioNTdKkiZWlYS3BWsid1i05dYbXlfF7 bSXt19lil4SDEiXxcbWiC1QwvxZk1E7JJ0XiBK8EiTCwA6pOAK1mReXpUNBLaJDV 8QaAv82tZ0iP6OpVovpanU4zz3P7XNmipL5RpkXhBdYmTJFmUnGY2QHZ0QSwwIzM 0XTHfcSrgs0U7W5yZefu1WEMOjgzGsq7kjhxUwSg9SxDqF1GXKBDpx8r/Zdy3GF8 rHn5fDyeRhBY2ew3ziJAa7UaA79/sasoCIoEM/RcCDtlDNneHJJxDdcSIGQ= -----END CERTIFICATE-----Generated at Wed Jul 29 00:42:06 2026 by rpki-client