$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a5584f6d-cac4-4271-8828-61528ae33bee.roa File: a5584f6d-cac4-4271-8828-61528ae33bee.roa (raw, json) Hash identifier: IqP+oXyJ8Vq4hqYGPIwbcXAX4X9XcSewuXIgJ7C8au4= Subject key identifier: CE:2D:73:EC:1E:92:80:6E:88:B3:51:39:28:66:B7:04:46:E0:DC:BB Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 01D2225534DFE60EB8B171EEF74A0FC5A99A13F4 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a5584f6d-cac4-4271-8828-61528ae33bee.roa Signing time: Sat 25 Jul 2026 17:02:19 +0000 ROA not before: Sat 25 Jul 2026 17:02:19 +0000 ROA not after: Fri 23 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2631:1:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:d2:22:55:34:df:e6:0e:b8:b1:71:ee:f7:4a:0f:c5:a9:9a:13:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 25 17:02:19 2026 GMT Not After : Oct 23 23:59:59 2026 GMT Subject: serialNumber=290cdc1cd5a7a2a0e049aa1724d6a49bbd816ecacdda1ffa773245eefcc53137, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fe:fd:97:14:e0:ae:4a:b8:26:93:2c:1c:6f: 48:e8:50:f9:f0:6b:7b:79:41:3e:8d:01:08:2e:e0: 6e:cb:aa:42:b7:bc:58:7d:31:3c:fc:1c:d0:1a:40: 01:d7:b4:3a:46:82:50:ee:95:b0:82:9f:93:1d:00: 62:85:04:2e:1d:40:0d:e4:02:ba:36:19:55:1b:aa: 4e:bb:c3:f7:6f:f5:2a:d5:bd:a6:ce:9b:6a:35:cc: 2b:bd:c7:2e:13:48:60:9d:2f:4c:37:34:6b:d0:64: db:12:d6:57:70:93:46:f9:56:ec:9b:ae:73:a2:c7: df:80:1d:f1:02:ab:1a:52:f4:5d:cc:6f:66:12:8f: 48:aa:18:4b:94:cd:e9:d9:7e:96:de:57:6d:0f:6a: 7e:5d:c3:6c:27:7b:6b:6e:16:4c:d7:ba:14:c4:d9: 77:71:d7:44:08:9b:f3:12:16:a0:9f:5f:e4:9c:1c: 20:89:10:47:4c:a9:c9:96:53:72:8a:17:50:81:77: 4a:e0:c8:15:22:b6:e9:20:28:8c:4e:e9:d6:ae:d2: d9:3f:96:e0:06:a9:3c:1f:bd:73:80:66:96:64:04: 28:1b:a1:32:6b:85:8c:18:01:f3:cc:df:e7:d7:95: bd:3e:be:ca:98:c3:f9:d0:6e:30:c6:5c:63:f0:7b: 18:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:2D:73:EC:1E:92:80:6E:88:B3:51:39:28:66:B7:04:46:E0:DC:BB X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a5584f6d-cac4-4271-8828-61528ae33bee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2631:1:100::/48 Signature Algorithm: sha256WithRSAEncryption 75:21:36:cd:54:a4:da:93:00:ec:9f:24:7a:fb:67:99:28:35: ca:95:c9:72:27:a3:3b:3a:07:54:a2:fa:9b:20:ad:59:59:fe: ef:d4:e3:fb:e4:0d:93:72:81:01:b2:d8:db:eb:07:5a:51:5c: 88:ca:46:8c:a0:a6:16:eb:cf:81:7a:3d:8d:2c:c4:82:a5:0c: e0:a4:06:5e:26:88:94:34:3c:0e:5a:de:70:09:d9:dc:8d:fd: 4d:4c:79:79:a5:2b:64:77:95:47:8e:ae:fe:79:3e:62:a1:21: ed:9c:6a:18:44:8c:03:2a:d6:8d:c8:ba:f4:a2:62:9c:d0:33: e3:60:71:f9:56:e5:b9:c1:9a:a6:eb:9d:92:1e:29:ba:05:e8: cf:df:ca:83:bc:4b:2d:03:8b:ff:8f:2b:e8:70:6f:3c:a7:07: 09:ef:48:ae:0f:c0:94:31:a9:41:0e:0c:94:75:6b:e2:30:20: 17:21:69:bc:92:19:e3:6f:f2:5e:14:10:e8:88:3e:2d:b4:d5: 07:35:d3:aa:74:3e:47:95:63:f4:a8:ad:4c:09:b9:ae:21:61: 31:7c:4f:97:28:fb:d1:c3:12:d7:ec:9f:52:cd:52:ef:b8:77: fb:55:ef:81:98:4b:2b:65:63:a1:5e:48:e4:96:8f:3f:ea:a8: f1:b1:4d:73 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUAdIiVTTf5g64sXHu90oPxamaE/QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwNzI1MTcwMjE5WhcNMjYxMDIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyOTBjZGMxY2Q1YTdhMmEwZTA0OWFhMTcyNGQ2YTQ5YmJk ODE2ZWNhY2RkYTFmZmE3NzMyNDVlZWZjYzUzMTM3MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCt/v2XFOCuSrgmkywcb0joUPnwa3t5QT6NAQgu4G7LqkK3 vFh9MTz8HNAaQAHXtDpGglDulbCCn5MdAGKFBC4dQA3kAro2GVUbqk67w/dv9SrV vabOm2o1zCu9xy4TSGCdL0w3NGvQZNsS1ldwk0b5VuybrnOix9+AHfECqxpS9F3M b2YSj0iqGEuUzenZfpbeV20Pan5dw2wne2tuFkzXuhTE2Xdx10QIm/MSFqCfX+Sc HCCJEEdMqcmWU3KKF1CBd0rgyBUitukgKIxO6dau0tk/luAGqTwfvXOAZpZkBCgb oTJrhYwYAfPM3+fXlb0+vsqYw/nQbjDGXGPwexi9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUzi1z7B6SgG6Is1E5KGa3BEbg3LswHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2E1NTg0ZjZkLWNhYzQtNDI3MS04ODI4LTYxNTI4YWUzM2JlZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmMQABAQAwDQYJKoZIhvcNAQELBQADggEBAHUhNs1UpNqTAOyfJHr7Z5ko NcqVyXInozs6B1Si+psgrVlZ/u/U4/vkDZNygQGy2NvrB1pRXIjKRoygphbrz4F6 PY0sxIKlDOCkBl4miJQ0PA5a3nAJ2dyN/U1MeXmlK2R3lUeOrv55PmKhIe2cahhE jAMq1o3IuvSiYpzQM+NgcflW5bnBmqbrnZIeKboF6M/fyoO8Sy0Di/+PK+hwbzyn BwnvSK4PwJQxqUEODJR1a+IwIBchabySGeNv8l4UEOiIPi201Qc106p0PkeVY/So rUwJua4hYTF8T5co+9HDEtfsn1LNUu+4d/tV74GYSytlY6FeSOSWjz/qqPGxTXM= -----END CERTIFICATE-----Generated at Wed Jul 29 04:13:37 2026 by rpki-client