$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1fdd1f5d-ca2a-40b7-8516-8e8b74e0eace.roa File: 1fdd1f5d-ca2a-40b7-8516-8e8b74e0eace.roa (raw, json) Hash identifier: h0koCd4d4JTVnXLuIes+MQF2qGzvMOieFfL4jWgQlr4= Subject key identifier: E1:4F:DD:D7:FC:50:5C:A0:47:2C:0A:41:82:96:5D:24:0B:46:6F:8B Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 6D25278694184906C2BC4CCE1C61C4BB0C077BF4 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1fdd1f5d-ca2a-40b7-8516-8e8b74e0eace.roa Signing time: Mon 26 Oct 2026 03:40:11 +0000 ROA not before: Mon 26 Oct 2026 03:40:11 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:f03e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:25:27:86:94:18:49:06:c2:bc:4c:ce:1c:61:c4:bb:0c:07:7b:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 26 03:40:11 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=288f4783d8526b60b16482def3528c858315a1d706cedce26270d4b8b9f17fe1, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ad:65:e5:9b:fa:42:bf:6a:c0:6c:92:0f:06: c0:c3:ab:13:ee:cf:98:2a:99:cc:e8:b8:24:14:90: 11:15:ce:f4:5a:5e:e0:69:e6:6e:31:07:59:de:62: 93:d7:5c:52:49:a4:e4:0e:31:4d:30:f7:3b:40:0b: df:88:48:cb:c1:e0:72:73:ab:aa:91:68:4f:ad:90: b4:2b:50:3c:c9:f8:79:e2:93:57:ae:1f:29:c0:82: b6:9e:7f:77:4f:68:df:5b:fa:0d:e8:e2:6e:b1:3f: 17:12:0d:bd:f1:77:ce:bd:7e:00:e1:11:cb:df:da: f2:b3:42:29:0d:b8:c8:f1:32:88:44:e5:8f:6e:0d: f9:9b:a9:9e:47:c9:e9:2d:2e:26:67:0e:ed:da:b4: 4c:50:51:24:97:41:57:9c:61:ad:6a:9e:76:3a:d1: 95:a8:da:d5:22:ce:84:96:0b:e9:a7:f1:91:09:28: 5a:9d:4a:dd:38:59:e9:51:17:93:ec:63:62:8d:12: 27:c6:4e:23:f1:27:3b:a5:80:10:c6:d8:0b:ac:8d: 6b:5c:d0:74:f1:d2:3d:bf:30:e5:96:bb:09:d2:4f: 81:e3:0b:0e:0c:84:82:d5:e6:34:52:69:26:da:24: d7:b9:e0:6a:a5:42:7a:24:0e:89:13:a0:d1:09:eb: 63:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:4F:DD:D7:FC:50:5C:A0:47:2C:0A:41:82:96:5D:24:0B:46:6F:8B X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1fdd1f5d-ca2a-40b7-8516-8e8b74e0eace.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:f03e::/48 Signature Algorithm: sha256WithRSAEncryption 90:94:3d:1a:74:0f:06:1c:e2:e5:b0:9b:fa:68:40:c7:77:44: 4f:22:56:79:94:0f:ed:03:b6:18:36:14:68:b1:3a:36:9a:5e: 6d:7e:46:34:e9:50:93:b0:0b:c9:5b:4d:04:46:b2:5d:c7:7e: fc:16:d4:4b:23:82:6d:e3:0f:d3:48:41:0b:84:a4:48:de:9d: f0:38:13:21:3e:65:a3:76:83:1c:c2:ea:e7:ae:d1:84:ad:35: 90:3b:be:48:b4:09:72:ff:b3:a6:57:a9:e9:4d:74:8a:d9:cb: 41:54:0b:cf:96:a4:d7:31:fb:93:ed:83:db:b4:5c:fb:63:40: ae:68:e4:c7:c9:c2:31:39:87:bc:c1:69:ec:87:79:5e:c3:c3: 2d:30:9b:27:32:62:ef:87:a6:2d:7d:d9:40:b7:74:1c:8e:37: 48:9b:38:7a:e6:cb:d2:f4:c4:4b:e8:a0:71:04:76:81:41:e9: 94:61:ac:b4:2e:02:d9:e6:ba:a8:b1:e1:e8:b8:17:ba:d1:79: 32:e2:38:06:58:d3:33:23:62:53:1f:a1:72:8a:03:c3:88:8f: a6:42:11:b2:b6:f0:6c:b9:c7:61:a5:f0:d5:55:f8:bd:9f:50: f0:d8:10:d9:1d:76:7e:53:0a:72:e7:1b:ef:6b:c1:fe:5a:36: 18:e3:27:b7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUbSUnhpQYSQbCvEzOHGHEuwwHe/QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYxMDI2MDM0MDExWhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AyODhmNDc4M2Q4NTI2YjYwYjE2NDgyZGVmMzUyOGM4NTgz MTVhMWQ3MDZjZWRjZTI2MjcwZDRiOGI5ZjE3ZmUxMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVrWXlm/pCv2rAbJIPBsDDqxPuz5gqmczouCQUkBEVzvRa XuBp5m4xB1neYpPXXFJJpOQOMU0w9ztAC9+ISMvB4HJzq6qRaE+tkLQrUDzJ+Hni k1euHynAgraef3dPaN9b+g3o4m6xPxcSDb3xd869fgDhEcvf2vKzQikNuMjxMohE 5Y9uDfmbqZ5HyektLiZnDu3atExQUSSXQVecYa1qnnY60ZWo2tUizoSWC+mn8ZEJ KFqdSt04WelRF5PsY2KNEifGTiPxJzulgBDG2AusjWtc0HTx0j2/MOWWuwnST4Hj Cw4MhILV5jRSaSbaJNe54GqlQnokDokToNEJ62M9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU4U/d1/xQXKBHLApBgpZdJAtGb4swHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzFmZGQxZjVkLWNhMmEtNDBiNy04NTE2LThlOGI3NGUwZWFjZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzA8D4wDQYJKoZIhvcNAQELBQADggEBAJCUPRp0DwYc4uWwm/poQMd3 RE8iVnmUD+0Dthg2FGixOjaaXm1+RjTpUJOwC8lbTQRGsl3HfvwW1Esjgm3jD9NI QQuEpEjenfA4EyE+ZaN2gxzC6ueu0YStNZA7vki0CXL/s6ZXqelNdIrZy0FUC8+W pNcx+5Ptg9u0XPtjQK5o5MfJwjE5h7zBaeyHeV7Dwy0wmycyYu+Hpi192UC3dByO N0ibOHrmy9L0xEvooHEEdoFB6ZRhrLQuAtnmuqix4ei4F7rReTLiOAZY0zMjYlMf oXKKA8OIj6ZCEbK28Gy5x2Gl8NVV+L2fUPDYENkddn5TCnLnG+9rwf5aNhjjJ7c= -----END CERTIFICATE-----Generated at Thu Nov 5 11:27:55 2026 by rpki-client