$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/254b4192-a38e-41eb-a28b-d01a7ee37964.roa File: 254b4192-a38e-41eb-a28b-d01a7ee37964.roa (raw, json) Hash identifier: 56wzEXyvfqFR8g505qsMME3rkM/6ScHCkLy+DKmLM4k= Subject key identifier: ED:DA:9A:C9:15:B1:05:C7:E2:C0:F5:0F:11:C3:BD:F5:C4:0A:50:EB Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 51637C960206B76078CCCB0549BD68D35BB21E00 Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/254b4192-a38e-41eb-a28b-d01a7ee37964.roa Signing time: Tue 13 Oct 2026 00:08:58 +0000 ROA not before: Tue 13 Oct 2026 00:08:58 +0000 ROA not after: Mon 11 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2620:108:d000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:63:7c:96:02:06:b7:60:78:cc:cb:05:49:bd:68:d3:5b:b2:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: Oct 13 00:08:58 2026 GMT Not After : Jan 11 23:59:59 2027 GMT Subject: serialNumber=33a678daf940e337b5cc8972b91d1b9283811c1a066637cd1b17e7903abf50db, CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0e:f2:96:9a:d0:08:4d:b1:d9:23:ad:9e:53: ff:46:32:56:6c:30:2b:7e:64:b6:99:1e:c6:d7:c2: a3:f6:fa:ec:16:17:11:1a:69:62:5d:31:23:f7:ef: 06:b6:2d:21:3c:03:42:94:83:01:18:e9:aa:6d:1a: ed:8b:91:10:57:8c:51:d2:cd:17:f6:34:15:7a:45: c5:e9:81:a1:f7:70:23:05:a3:b2:1d:0e:4c:77:2d: 94:84:68:6f:92:db:f2:f9:72:45:46:b3:28:81:c8: c0:12:ec:40:2b:5d:40:bd:d2:ef:f3:e1:51:60:88: 50:01:b3:02:88:6c:09:c3:4a:99:24:ae:71:aa:9f: 67:88:88:f6:f1:e3:d1:c3:3b:b8:6e:e2:f6:21:47: 39:0e:a7:87:2e:11:53:db:df:c5:7a:7d:62:f5:8e: 4d:d7:50:4e:18:5b:7e:17:37:ab:e5:fc:32:79:03: 76:50:71:72:7d:19:d2:1d:9d:1b:d7:05:a9:a7:52: d1:0a:33:65:44:ab:19:1b:b0:22:20:72:7d:e0:2f: 6a:0d:8c:40:b4:7e:c0:c4:b3:43:6d:de:74:23:90: 8c:e2:75:f6:7a:a4:00:85:b1:0d:19:ee:4f:3b:75: 1d:ea:1a:d7:25:6b:ef:6a:f9:17:66:8c:70:f2:6e: e1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:DA:9A:C9:15:B1:05:C7:E2:C0:F5:0F:11:C3:BD:F5:C4:0A:50:EB X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/254b4192-a38e-41eb-a28b-d01a7ee37964.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2620:108:d000::/44 Signature Algorithm: sha256WithRSAEncryption 1f:13:93:f9:5f:7a:15:fa:5f:44:fe:33:15:64:89:c2:7f:65: 22:6b:de:f6:fd:ef:36:10:15:9d:e2:7e:ff:2b:94:67:0c:80: 9e:ee:3a:5b:bf:b5:cc:9c:e4:da:43:e0:e8:17:9b:b0:b6:31: 1e:85:0f:74:3c:76:c6:38:60:70:39:bb:48:be:8e:92:21:ce: 65:a7:32:15:24:57:f5:66:29:eb:fc:b2:c6:98:90:93:90:e1: 1e:31:00:45:ae:0a:85:3e:91:1c:3c:06:ad:19:34:dd:2f:a6: d6:c0:8c:3e:66:a7:91:e4:36:03:5f:ed:87:c8:d8:4a:63:a9: d8:b6:ab:4a:d2:71:e7:cf:4a:b7:9c:7a:cd:77:53:45:de:42: fc:6d:82:e1:a0:4b:6b:09:d2:ee:60:dd:f4:de:0e:0f:82:c6: 9e:e6:bc:93:11:8a:9c:09:ec:20:7d:fa:16:2d:ba:db:63:dd: 1c:14:cd:ff:72:0f:2b:6c:d1:e7:bb:23:24:df:c3:79:0e:dd: 84:3b:99:09:ec:ed:5f:9c:65:d6:58:34:b1:31:4b:bb:9f:26: 79:80:73:59:7b:0e:46:b0:cd:cc:60:a7:cf:00:48:99:5c:b9: e6:58:d2:a2:c0:78:80:6e:69:b9:0c:10:8c:dc:a9:f8:a0:07: 85:21:d1:9c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUWN8lgIGt2B4zMsFSb1o01uyHgAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjYxMDEzMDAwODU4WhcNMjcwMTExMjM1OTU5 WjB6MUkwRwYDVQQFE0AzM2E2NzhkYWY5NDBlMzM3YjVjYzg5NzJiOTFkMWI5Mjgz ODExYzFhMDY2NjM3Y2QxYjE3ZTc5MDNhYmY1MGRiMS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUDvKWmtAITbHZI62eU/9GMlZsMCt+ZLaZHsbXwqP2+uwW FxEaaWJdMSP37wa2LSE8A0KUgwEY6aptGu2LkRBXjFHSzRf2NBV6RcXpgaH3cCMF o7IdDkx3LZSEaG+S2/L5ckVGsyiByMAS7EArXUC90u/z4VFgiFABswKIbAnDSpkk rnGqn2eIiPbx49HDO7hu4vYhRzkOp4cuEVPb38V6fWL1jk3XUE4YW34XN6vl/DJ5 A3ZQcXJ9GdIdnRvXBamnUtEKM2VEqxkbsCIgcn3gL2oNjEC0fsDEs0Nt3nQjkIzi dfZ6pACFsQ0Z7k87dR3qGtcla+9q+RdmjHDybuFbAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU7dqayRWxBcfiwPUPEcO99cQKUOswHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1LzI1NGI0MTkyLWEzOGUtNDFlYi1hMjhiLWQwMWE3ZWUzNzk2NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYw LWU5N2U1NTJjNmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmIAEI0AAwDQYJKoZIhvcNAQELBQADggEBAB8Tk/lfehX6X0T+MxVkicJ/ ZSJr3vb97zYQFZ3ifv8rlGcMgJ7uOlu/tcyc5NpD4OgXm7C2MR6FD3Q8dsY4YHA5 u0i+jpIhzmWnMhUkV/VmKev8ssaYkJOQ4R4xAEWuCoU+kRw8Bq0ZNN0vptbAjD5m p5HkNgNf7YfI2Epjqdi2q0rScefPSreces13U0XeQvxtguGgS2sJ0u5g3fTeDg+C xp7mvJMRipwJ7CB9+hYtuttj3RwUzf9yDyts0ee7IyTfw3kO3YQ7mQns7V+cZdZY NLExS7ufJnmAc1l7Dkawzcxgp88ASJlcueZY0qLAeIBuabkMEIzcqfigB4Uh0Zw= -----END CERTIFICATE-----Generated at Tue Nov 10 04:08:29 2026 by rpki-client