$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/23b3d13b-212f-42f5-9048-2b935e09c423.roa File: 23b3d13b-212f-42f5-9048-2b935e09c423.roa (raw, json) Hash identifier: ZEzQ3CwSNHJz4EctS7ZagtEtyhZbO70KsuTkK9UhQZE= Subject key identifier: A8:4A:82:9D:16:37:C4:8C:D5:3A:42:0F:85:E3:B8:7E:89:A2:06:AC Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 49E6E6C45EE57FC34DA52E1C87031EE0E300D44B Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/23b3d13b-212f-42f5-9048-2b935e09c423.roa Signing time: Thu 22 Oct 2026 00:20:09 +0000 ROA not before: Thu 22 Oct 2026 00:20:09 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:d70::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:e6:e6:c4:5e:e5:7f:c3:4d:a5:2e:1c:87:03:1e:e0:e3:00:d4:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 22 00:20:09 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=112ebdba2f6d79331e5125e16c40b82ad024d476e7c94c2139cf3195f84a04ea, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:35:bd:23:e5:55:74:40:89:95:2a:de:1f:18: c8:9f:8c:1d:71:8a:38:fa:cd:fb:39:cd:45:99:63: 78:8f:a6:bb:5f:c8:f4:61:76:7b:64:57:1a:f5:bf: b7:79:7b:9a:ac:35:75:a7:b3:96:41:9f:7b:bb:24: 7c:f7:13:98:f0:bd:fa:86:58:0c:a1:a2:78:c1:7d: 3a:ba:49:bf:51:2c:7e:bf:cf:b6:70:85:7b:6a:f1: d2:6d:ce:96:15:40:53:b0:de:3a:b8:e5:21:22:46: 90:cd:cf:e3:19:c1:c1:5c:d5:23:24:fb:12:86:0c: 60:0d:ac:bd:56:d2:bd:8d:19:23:e6:0b:b7:8d:73: 4b:d5:75:9f:9a:61:ec:1c:92:13:b7:1d:30:81:90: 36:b6:72:9c:62:b9:5c:da:2e:01:97:80:7e:b0:c4: 3b:f2:d4:fa:51:f7:1c:56:9a:ab:c6:14:80:c1:8b: 70:df:7d:8b:63:d2:7a:41:74:00:48:2a:6f:a7:05: b8:90:c6:d5:2c:29:9d:47:32:a0:f5:f2:50:dd:cf: 43:87:81:d6:f0:5a:61:cd:ff:00:4e:00:25:c0:05: cc:51:3e:8a:53:aa:ca:d3:a3:51:71:ac:63:05:a3: af:26:e0:0a:69:5a:30:ec:9b:4e:55:44:d9:be:7d: 45:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:4A:82:9D:16:37:C4:8C:D5:3A:42:0F:85:E3:B8:7E:89:A2:06:AC X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/23b3d13b-212f-42f5-9048-2b935e09c423.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:d70::/44 Signature Algorithm: sha256WithRSAEncryption 87:c3:91:11:94:99:15:76:8e:e8:89:61:fb:18:30:0c:92:ba: dd:38:43:15:a0:3c:d5:49:59:96:a3:29:66:61:f4:a8:5a:75: 20:c0:36:26:c5:bf:31:4c:ca:83:3a:89:0a:97:bc:e0:e1:07: 29:d4:63:e5:93:b3:e6:4b:d2:2f:04:1c:f3:0c:c3:06:d3:e4: bc:48:24:98:fd:21:24:c3:ab:f7:01:aa:67:08:c2:86:1e:f3: 91:44:11:76:4d:75:9f:5e:11:11:b9:1f:9a:1c:30:e7:d0:eb: a1:23:87:f1:bb:fb:d0:24:eb:47:73:3a:62:81:c5:d0:28:f1: 58:38:23:c4:c2:eb:00:2c:d1:03:64:62:ac:cc:c7:0f:d6:7c: 13:65:05:09:0a:c3:eb:b2:16:99:23:09:21:c0:2b:7a:70:22: a8:d7:c5:41:42:f9:dd:14:f5:d8:d0:af:39:fe:fd:18:2d:13: ba:c6:d9:f5:fe:f7:bc:e9:fb:89:ad:e1:a2:5c:8b:f2:35:27: 94:3a:a0:19:fd:01:69:a9:27:99:24:4c:78:4f:10:f8:f0:0c: bd:d8:e3:92:4d:f4:56:74:c1:14:43:6e:43:68:fb:8b:73:f1: 64:28:77:27:58:40:53:d4:04:84:42:71:bf:ca:a7:95:58:aa: c9:73:4b:7e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSebmxF7lf8NNpS4chwMe4OMA1EswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYxMDIyMDAyMDA5WhcNMjcwMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMTJlYmRiYTJmNmQ3OTMzMWU1MTI1ZTE2YzQwYjgyYWQw MjRkNDc2ZTdjOTRjMjEzOWNmMzE5NWY4NGEwNGVhMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDxNb0j5VV0QImVKt4fGMifjB1xijj6zfs5zUWZY3iPprtf yPRhdntkVxr1v7d5e5qsNXWns5ZBn3u7JHz3E5jwvfqGWAyhonjBfTq6Sb9RLH6/ z7ZwhXtq8dJtzpYVQFOw3jq45SEiRpDNz+MZwcFc1SMk+xKGDGANrL1W0r2NGSPm C7eNc0vVdZ+aYewckhO3HTCBkDa2cpxiuVzaLgGXgH6wxDvy1PpR9xxWmqvGFIDB i3DffYtj0npBdABIKm+nBbiQxtUsKZ1HMqD18lDdz0OHgdbwWmHN/wBOACXABcxR PopTqsrTo1FxrGMFo68m4AppWjDsm05VRNm+fUXfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUqEqCnRY3xIzVOkIPheO4fomiBqwwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzIzYjNkMTNiLTIxMmYtNDJmNS05MDQ4LTJiOTM1ZTA5YzQyMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmBZzADXAwDQYJKoZIhvcNAQELBQADggEBAIfDkRGUmRV2juiJYfsYMAyS ut04QxWgPNVJWZajKWZh9KhadSDANibFvzFMyoM6iQqXvODhBynUY+WTs+ZL0i8E HPMMwwbT5LxIJJj9ISTDq/cBqmcIwoYe85FEEXZNdZ9eERG5H5ocMOfQ66Ejh/G7 +9Ak60dzOmKBxdAo8Vg4I8TC6wAs0QNkYqzMxw/WfBNlBQkKw+uyFpkjCSHAK3pw IqjXxUFC+d0U9djQrzn+/RgtE7rG2fX+97zp+4mt4aJci/I1J5Q6oBn9AWmpJ5kk THhPEPjwDL3Y45JN9FZ0wRRDbkNo+4tz8WQodydYQFPUBIRCcb/Kp5VYqslzS34= -----END CERTIFICATE-----Generated at Thu Nov 5 11:18:43 2026 by rpki-client