$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/07653354-62e0-4912-98f0-2c22354ec38a.roa File: 07653354-62e0-4912-98f0-2c22354ec38a.roa (raw, json) Hash identifier: pFFKYxaVY01wtXHzal5BbBuaqaN5kczRLfX2Y9ykKiQ= Subject key identifier: AE:D0:55:23:47:D2:4A:70:3A:1C:35:50:60:7E:BA:4E:85:F6:6C:1A Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 06DD9BFBBBA385E828A38BE73E3B78487C85A2B0 Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/07653354-62e0-4912-98f0-2c22354ec38a.roa Signing time: Mon 26 Oct 2026 00:50:08 +0000 ROA not before: Mon 26 Oct 2026 00:50:08 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 96.127.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:dd:9b:fb:bb:a3:85:e8:28:a3:8b:e7:3e:3b:78:48:7c:85:a2:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: Oct 26 00:50:08 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=8960fee89404b40838c6fc1a41d319ff2933e134db46bfaf32bd1ed922d4b76a, CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c8:4c:fc:35:96:78:00:32:50:35:68:bd:78: fa:f6:fe:9d:b9:c5:2b:29:dd:5d:c3:13:9c:06:44: 00:47:fd:79:77:93:6c:15:4e:9f:3f:1a:c4:ff:16: b9:3c:98:75:f4:3e:da:20:22:1c:08:c2:cc:17:07: 3e:87:61:47:17:1c:61:20:7b:fa:0b:55:a9:68:d6: ef:c7:8e:6e:29:ff:4a:c3:ef:dc:c2:0d:f7:f9:c4: e4:d7:76:d3:7b:aa:e4:95:d8:23:50:62:f1:36:b1: 3f:12:e9:ce:0a:1f:ec:0d:b8:35:13:36:1c:29:ee: d3:d2:af:2b:22:66:06:ee:5e:6a:e4:0f:10:c8:67: 14:7d:7a:e2:35:fb:f5:83:5a:a1:ae:83:94:d1:cb: 13:ec:4b:12:0e:1b:6a:79:ce:61:ae:fa:0c:8d:89: 57:02:77:2c:5f:06:0f:ed:47:2f:0a:57:4c:59:21: 6e:ca:57:0b:c8:60:23:5a:eb:63:b0:7c:fc:ed:e8: f4:8a:f7:99:d1:27:bd:a5:9b:56:2c:70:32:ab:9e: cc:5e:27:31:11:7b:96:bd:0a:87:32:3b:d0:ae:a0: 6d:f9:1f:38:a0:2c:39:a5:54:6d:b3:88:6a:26:92: 49:ba:e0:c3:bb:07:fa:cc:24:11:e7:11:ca:b9:38: a9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:D0:55:23:47:D2:4A:70:3A:1C:35:50:60:7E:BA:4E:85:F6:6C:1A X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/07653354-62e0-4912-98f0-2c22354ec38a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.127.32.0/19 Signature Algorithm: sha256WithRSAEncryption 6b:07:ae:e5:d8:e2:b0:6c:22:59:79:be:9d:97:31:8f:39:e3: 15:a2:18:08:b1:7f:5a:39:32:d5:b8:23:67:7b:9e:ce:bb:7a: b0:cc:5e:60:1b:45:16:62:09:d9:f9:d1:e7:15:e2:dd:67:b1: b8:a7:de:b4:d0:62:96:ab:40:62:c2:42:9e:33:a9:4e:f1:85: 9d:d7:7b:67:0a:e0:e2:83:b4:05:77:d3:8f:e1:fa:fd:f0:72: 1b:75:06:88:f3:9b:10:f6:13:62:a7:77:ea:98:94:3e:10:cc: 44:44:d9:bd:d4:7d:08:9b:c9:91:59:93:20:5c:d4:71:3b:73: 58:ff:40:70:60:e3:14:0e:0b:ad:55:e1:59:41:2d:fb:d9:28: c3:13:d1:e6:33:12:2a:38:b1:0c:30:04:87:45:03:4a:27:ae: 31:2d:74:08:0e:cb:fb:9a:50:94:74:b5:05:36:ca:82:35:47: 49:d7:00:cf:05:3c:6a:fe:ad:36:74:bb:a3:cf:95:18:b0:fe: 59:9b:85:cf:58:fe:56:be:38:a3:bd:37:bb:f0:8d:fb:b9:6d: 5a:c8:e2:5b:9d:ff:37:da:45:19:f3:20:db:e7:88:07:c5:af: 9d:2e:3b:88:fd:88:68:a4:68:78:de:6a:98:d3:80:30:d3:fa: 0b:bf:b2:b2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBt2b+7ujhegoo4vnPjt4SHyForAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjYxMDI2MDA1MDA4WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A4OTYwZmVlODk0MDRiNDA4MzhjNmZjMWE0MWQzMTlmZjI5 MzNlMTM0ZGI0NmJmYWYzMmJkMWVkOTIyZDRiNzZhMS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCayEz8NZZ4ADJQNWi9ePr2/p25xSsp3V3DE5wGRABH/Xl3 k2wVTp8/GsT/Frk8mHX0PtogIhwIwswXBz6HYUcXHGEge/oLValo1u/Hjm4p/0rD 79zCDff5xOTXdtN7quSV2CNQYvE2sT8S6c4KH+wNuDUTNhwp7tPSrysiZgbuXmrk DxDIZxR9euI1+/WDWqGug5TRyxPsSxIOG2p5zmGu+gyNiVcCdyxfBg/tRy8KV0xZ IW7KVwvIYCNa62OwfPzt6PSK95nRJ72lm1YscDKrnsxeJzERe5a9CocyO9CuoG35 HzigLDmlVG2ziGomkkm64MO7B/rMJBHnEcq5OKmHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrtBVI0fSSnA6HDVQYH66ToX2bBowHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1LzA3NjUzMzU0LTYyZTAtNDkxMi05OGYwLTJjMjIzNTRlYzM4YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAVgfyAwDQYJKoZIhvcNAQELBQADggEBAGsHruXY4rBsIll5vp2XMY854xWi GAixf1o5MtW4I2d7ns67erDMXmAbRRZiCdn50ecV4t1nsbin3rTQYparQGLCQp4z qU7xhZ3Xe2cK4OKDtAV304/h+v3wcht1BojzmxD2E2Knd+qYlD4QzERE2b3UfQib yZFZkyBc1HE7c1j/QHBg4xQOC61V4VlBLfvZKMMT0eYzEio4sQwwBIdFA0onrjEt dAgOy/uaUJR0tQU2yoI1R0nXAM8FPGr+rTZ0u6PPlRiw/lmbhc9Y/la+OKO9N7vw jfu5bVrI4lud/zfaRRnzINvniAfFr50uO4j9iGikaHjeapjTgDDT+gu/srI= -----END CERTIFICATE-----Generated at Sun Nov 8 17:22:18 2026 by rpki-client