$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/81b84b72-b720-494f-b1f4-ec011eb6a41b.roa File: 81b84b72-b720-494f-b1f4-ec011eb6a41b.roa (raw, json) Hash identifier: vP0aDLi/xzWuikVpbmiCuvOhk2rdGC+kXuccqRSPfu0= Subject key identifier: 48:A2:6D:55:BC:A0:C7:9C:2B:92:87:C0:25:F0:C7:01:88:EE:4B:69 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 25A444A8957DC3F56C7E5BF9D5C46405C20B6E4E Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/81b84b72-b720-494f-b1f4-ec011eb6a41b.roa Signing time: Thu 26 Feb 2026 01:50:27 +0000 ROA not before: Thu 26 Feb 2026 01:50:27 +0000 ROA not after: Wed 27 May 2026 23:59:59 +0000 asID: 801 IP address blocks: 2606:7b40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:a4:44:a8:95:7d:c3:f5:6c:7e:5b:f9:d5:c4:64:05:c2:0b:6e:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Feb 26 01:50:27 2026 GMT Not After : May 27 23:59:59 2026 GMT Subject: serialNumber=24f4b9226fb7c3d42b12c4c6898e0cde1202a60a591f0ae2aca7943a660f8532, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b9:66:a8:d4:17:b4:9a:c4:58:72:e8:e5:bf: df:b3:a9:71:3e:60:4b:13:8b:f3:19:98:3b:26:5a: 5f:99:31:d8:f2:16:9b:43:76:63:92:24:d7:b1:8c: e8:e6:6a:f1:be:97:0e:ab:9f:4a:30:c1:57:80:9e: e7:2e:dc:ae:d6:a1:99:30:71:22:82:b6:b3:43:7c: f6:8b:a7:db:03:b9:bf:48:f6:29:d7:ef:8e:e2:a5: ef:44:ff:59:22:f0:c3:d5:dd:22:c5:d6:90:fc:c1: d6:d9:29:4f:99:32:f4:dd:c0:5c:7a:98:33:6e:7b: 37:93:21:8c:85:15:83:7e:45:57:03:36:5e:76:1a: be:9c:5d:53:4e:90:9e:75:19:4e:11:b5:af:c0:59: c9:40:73:c8:49:0a:72:d5:53:41:91:9f:65:55:62: 40:a3:19:e3:6e:e5:b2:1b:0b:b8:51:bc:72:ab:ca: 9e:49:ce:d1:48:5c:38:9d:28:c3:5a:02:7d:e7:a7: e8:23:8f:81:dc:e8:91:a1:4e:1e:08:d4:12:61:f6: 1e:94:cb:11:f6:53:ed:0e:1d:fc:a5:7e:ad:3c:33: 3f:bd:d6:9c:ae:df:b8:46:86:57:72:eb:f2:37:4d: a1:de:13:af:45:e4:55:a1:2f:d7:eb:ea:e8:01:34: 6f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:A2:6D:55:BC:A0:C7:9C:2B:92:87:C0:25:F0:C7:01:88:EE:4B:69 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/81b84b72-b720-494f-b1f4-ec011eb6a41b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2606:7b40::/32 Signature Algorithm: sha256WithRSAEncryption 02:f3:4d:cc:61:1a:3b:81:78:ca:80:b5:b1:fb:b7:e0:5a:24: 26:71:54:4a:4f:de:f9:7b:35:16:a6:70:05:e8:39:e7:07:76: 94:98:61:8d:7d:4a:32:94:29:ef:dc:8e:8d:51:58:8d:13:dd: 23:86:ee:e5:c8:a3:b1:21:92:91:b6:16:ca:f8:ee:6d:95:62: 69:ed:62:70:c1:c0:06:f3:c3:75:f4:0c:b7:8e:c0:b4:ca:b6: 17:59:c6:db:47:7d:3e:aa:71:96:78:46:10:51:d4:71:05:ef: 0f:a5:40:17:4c:3f:19:8a:ab:04:fe:c4:03:70:81:d7:93:0e: e4:90:7b:05:f4:7f:d5:a0:fb:d2:a5:30:07:08:fa:46:1f:35: 88:b4:a4:ee:61:7f:20:f6:56:fb:35:80:66:f7:7a:9b:ce:6a: 80:53:ff:47:63:4f:39:0b:03:92:93:f9:ab:dc:b2:c1:2b:40: e7:9a:db:cc:8f:ce:45:ef:75:6f:45:9b:62:aa:65:9b:e0:fd: ac:12:8b:41:27:31:02:6f:d6:a2:05:97:0c:c2:c8:67:34:e7: 8d:ed:c1:f3:40:ba:37:b4:cf:dd:4f:7b:d8:68:34:62:1d:26: e4:d2:30:f3:9d:f6:43:ce:13:fc:d7:03:bc:f6:1c:91:69:e9: 37:61:3c:ac -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUJaREqJV9w/Vsflv51cRkBcILbk4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwMjI2MDE1MDI3WhcNMjYwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNGY0YjkyMjZmYjdjM2Q0MmIxMmM0YzY4OThlMGNkZTEy MDJhNjBhNTkxZjBhZTJhY2E3OTQzYTY2MGY4NTMyMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWuWao1Be0msRYcujlv9+zqXE+YEsTi/MZmDsmWl+ZMdjy FptDdmOSJNexjOjmavG+lw6rn0owwVeAnucu3K7WoZkwcSKCtrNDfPaLp9sDub9I 9inX747ipe9E/1ki8MPV3SLF1pD8wdbZKU+ZMvTdwFx6mDNuezeTIYyFFYN+RVcD Nl52Gr6cXVNOkJ51GU4Rta/AWclAc8hJCnLVU0GRn2VVYkCjGeNu5bIbC7hRvHKr yp5JztFIXDidKMNaAn3np+gjj4Hc6JGhTh4I1BJh9h6UyxH2U+0OHfylfq08Mz+9 1pyu37hGhldy6/I3TaHeE69F5FWhL9fr6ugBNG9tAgMBAAGjggKyMIICrjAdBgNV HQ4EFgQUSKJtVbygx5wrkofAJfDHAYjuS2kwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzgxYjg0YjcyLWI3MjAtNDk0Zi1iMWY0LWVjMDExZWI2YTQxYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAmBntAMA0GCSqGSIb3DQEBCwUAA4IBAQAC803MYRo7gXjKgLWx+7fgWiQm cVRKT975ezUWpnAF6DnnB3aUmGGNfUoylCnv3I6NUViNE90jhu7lyKOxIZKRthbK +O5tlWJp7WJwwcAG88N19Ay3jsC0yrYXWcbbR30+qnGWeEYQUdRxBe8PpUAXTD8Z iqsE/sQDcIHXkw7kkHsF9H/VoPvSpTAHCPpGHzWItKTuYX8g9lb7NYBm93qbzmqA U/9HY085CwOSk/mr3LLBK0DnmtvMj85F73VvRZtiqmWb4P2sEotBJzECb9aiBZcM wshnNOeN7cHzQLo3tM/dT3vYaDRiHSbk0jDznfZDzhP81wO89hyRaek3YTys -----END CERTIFICATE-----Generated at Mon Mar 2 04:28:52 2026 by rpki-client