$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/25b4b762-234e-4d63-9f1b-49bdd82029e1.roa File: 25b4b762-234e-4d63-9f1b-49bdd82029e1.roa (raw, json) Hash identifier: Q8+9wfXuTd0LZVkMSBy9jKnKylhQ1d2m06eCdmkWMtM= Subject key identifier: 31:2D:EB:21:CB:BB:FD:20:D1:E4:7E:9A:A6:84:C9:A4:D6:41:EC:F0 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 28C7E005DA8A4A37FBE36830EBEF779D1323A381 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/25b4b762-234e-4d63-9f1b-49bdd82029e1.roa Signing time: Mon 26 Oct 2026 04:02:44 +0000 ROA not before: Mon 26 Oct 2026 04:02:44 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:386::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:c7:e0:05:da:8a:4a:37:fb:e3:68:30:eb:ef:77:9d:13:23:a3:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 26 04:02:44 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=275e607e08ac6f138c5e586acd555c44ff0b4a87756938d9e66788fcc8fb47ba, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8e:00:ef:29:e1:e6:72:8c:2a:9e:2f:bb:f7: aa:22:52:80:5f:b4:de:dc:c7:1e:d6:e3:f1:d9:d4: 96:5d:46:b3:4e:eb:fb:02:ae:a3:17:41:78:7e:2e: b1:64:f1:c8:3a:86:dd:e3:bd:24:a7:72:cd:1c:6a: 39:1d:63:61:4c:fc:f5:f2:0c:32:16:f5:1a:29:50: 82:04:d2:31:e9:73:2e:9a:97:0b:28:0d:b2:db:d4: 8a:4d:37:3d:b0:8f:fa:c9:e5:d6:a7:7b:c0:66:64: cc:84:38:ad:3b:21:8f:42:bc:3f:f9:63:b2:ec:8c: ff:6a:6e:15:66:8c:c1:80:fc:10:53:55:4a:39:e0: 93:6f:1c:70:ff:90:bf:8f:99:25:1d:d6:c5:65:ce: 77:44:43:b9:63:ff:c1:41:f0:0a:13:fe:6c:7b:65: 2f:26:1c:31:7e:db:08:5b:c9:a9:ae:31:e5:b3:d1: d8:5a:cb:b1:bf:13:26:81:55:a0:1a:34:89:ae:9f: ca:77:c7:b9:18:f8:20:52:12:08:df:3c:12:8d:d6: 10:26:3e:b0:0a:0d:13:d6:34:77:9d:d2:67:d9:0f: 27:13:88:1e:31:cf:a0:55:80:6a:51:92:f6:ee:f6: 24:8d:3c:4a:56:cf:79:f5:8d:98:66:0f:0d:f5:6c: 4a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:2D:EB:21:CB:BB:FD:20:D1:E4:7E:9A:A6:84:C9:A4:D6:41:EC:F0 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/25b4b762-234e-4d63-9f1b-49bdd82029e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:386::/48 Signature Algorithm: sha256WithRSAEncryption ab:03:54:46:34:28:09:fd:aa:bd:ac:1f:ca:92:dd:ad:26:b1: e8:d8:c0:42:21:2b:02:27:ae:12:c8:97:2b:2f:50:68:f7:89: 8a:30:00:33:ab:3b:12:da:d5:8d:00:89:09:32:dc:c2:b3:eb: 94:21:2e:89:9f:54:f3:18:78:a3:1b:27:59:53:c6:f9:1a:e2: 20:1b:45:d8:d8:b6:a7:be:8f:25:df:7c:d3:95:5d:74:29:10: 76:45:cc:94:a5:aa:04:d5:67:a5:54:c5:17:2d:31:ae:d6:46: a4:1a:5b:21:ed:78:f3:59:1b:5b:8a:a1:b5:4a:32:35:e2:61: 55:63:27:c7:6c:e7:5e:6e:d4:83:6a:41:e1:a9:66:1b:63:35: b1:f9:72:34:2d:f1:f9:ca:01:f0:c6:63:a0:83:80:3d:b6:22: 47:64:ae:09:ec:3d:7b:7b:02:82:d3:c7:ff:e8:e2:8b:fb:5a: a5:ae:4d:e8:b1:ee:4a:a8:37:71:23:9b:00:1b:14:42:fd:ae: 81:cc:c5:e4:66:3e:06:9f:08:a5:19:3e:31:d6:74:49:ee:75: 82:10:b9:83:54:01:90:e3:e9:f7:02:34:2a:31:2d:ad:ff:11: be:cd:49:ba:85:14:a2:3e:92:c2:e0:f0:27:35:38:d5:81:a7: c9:79:21:b2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKMfgBdqKSjf742gw6+93nRMjo4EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYxMDI2MDQwMjQ0WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNzVlNjA3ZTA4YWM2ZjEzOGM1ZTU4NmFjZDU1NWM0NGZm MGI0YTg3NzU2OTM4ZDllNjY3ODhmY2M4ZmI0N2JhMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsjgDvKeHmcowqni+796oiUoBftN7cxx7W4/HZ1JZdRrNO 6/sCrqMXQXh+LrFk8cg6ht3jvSSncs0cajkdY2FM/PXyDDIW9RopUIIE0jHpcy6a lwsoDbLb1IpNNz2wj/rJ5dane8BmZMyEOK07IY9CvD/5Y7LsjP9qbhVmjMGA/BBT VUo54JNvHHD/kL+PmSUd1sVlzndEQ7lj/8FB8AoT/mx7ZS8mHDF+2whbyamuMeWz 0dhay7G/EyaBVaAaNImun8p3x7kY+CBSEgjfPBKN1hAmPrAKDRPWNHed0mfZDycT iB4xz6BVgGpRkvbu9iSNPEpWz3n1jZhmDw31bEorAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUMS3rIcu7/SDR5H6apoTJpNZB7PAwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzI1YjRiNzYyLTIzNGUtNGQ2My05ZjFiLTQ5YmRkODIwMjllMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA4YwDQYJKoZIhvcNAQELBQADggEBAKsDVEY0KAn9qr2sH8qS3a0m sejYwEIhKwInrhLIlysvUGj3iYowADOrOxLa1Y0AiQky3MKz65QhLomfVPMYeKMb J1lTxvka4iAbRdjYtqe+jyXffNOVXXQpEHZFzJSlqgTVZ6VUxRctMa7WRqQaWyHt ePNZG1uKobVKMjXiYVVjJ8ds515u1INqQeGpZhtjNbH5cjQt8fnKAfDGY6CDgD22 IkdkrgnsPXt7AoLTx//o4ov7WqWuTeix7kqoN3EjmwAbFEL9roHMxeRmPgafCKUZ PjHWdEnudYIQuYNUAZDj6fcCNCoxLa3/Eb7NSbqFFKI+ksLg8Cc1ONWBp8l5IbI= -----END CERTIFICATE-----Generated at Thu Nov 5 14:18:05 2026 by rpki-client