$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2f789924-a980-48eb-b42e-463688379f41.roa File: 2f789924-a980-48eb-b42e-463688379f41.roa (raw, json) Hash identifier: fR2WmUohOVuFJNnSleTvYdx2jrkkTUuyt5y2YjRor+I= Subject key identifier: 63:5C:24:FE:57:02:B7:10:39:1B:1D:85:42:96:29:12:4B:2F:CF:B4 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 0C8C718F96B2FDD238085CB2420188127CB4EBC7 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2f789924-a980-48eb-b42e-463688379f41.roa Signing time: Thu 15 Oct 2026 03:07:18 +0000 ROA not before: Thu 15 Oct 2026 03:07:18 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:64c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:8c:71:8f:96:b2:fd:d2:38:08:5c:b2:42:01:88:12:7c:b4:eb:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 15 03:07:18 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=f7c917dd4c9b1f21ae55a38dcc4e5a5a0a5045ddf285904f63ee49536c970e9e, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b6:d7:35:87:5e:6f:b9:e8:e8:db:88:77:24: 40:96:0b:e4:06:0e:a4:a7:d5:6e:b2:04:22:cb:f1: 67:29:d1:91:52:7a:9e:87:8b:90:d5:43:4f:ed:1d: 17:6a:a0:0d:54:c1:bd:72:a3:82:90:df:57:f0:04: 8f:79:6b:cd:d5:de:be:cb:fd:26:0d:61:bb:94:b3: fe:c7:fb:c6:95:21:fd:20:d7:2e:f2:7b:a1:fb:26: 0b:f4:c5:27:0d:9b:24:ac:82:d4:d0:d2:56:ae:65: d4:66:68:82:3b:71:e0:77:3d:68:86:d2:30:bb:f6: 2c:f8:27:51:0f:9b:6a:ef:27:df:f1:2f:08:99:76: ef:f9:d4:7b:6f:52:25:69:41:9f:de:8d:1a:48:d7: c5:30:96:2c:c2:42:e7:70:5e:ec:b4:95:7d:2a:66: 09:fd:3c:c2:5e:98:52:f9:de:00:88:0b:21:36:c5: f8:06:83:7b:70:5f:f1:38:50:ad:67:b2:82:b0:80: b4:44:46:fd:b8:ab:b0:1e:ed:d0:46:8d:84:41:cc: ae:a2:6e:da:eb:aa:18:23:2b:13:82:5f:00:5b:0a: 54:ba:aa:cd:6c:15:82:a9:b7:3e:13:3d:49:69:6f: a9:07:4d:bc:54:81:bf:73:58:82:b0:3f:04:fd:ac: 34:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:5C:24:FE:57:02:B7:10:39:1B:1D:85:42:96:29:12:4B:2F:CF:B4 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2f789924-a980-48eb-b42e-463688379f41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:64c::/48 Signature Algorithm: sha256WithRSAEncryption 0d:ee:f2:7a:86:8b:04:78:00:74:60:5e:e3:9d:cf:18:59:43: ae:f3:68:f6:c8:4c:5e:6e:98:69:06:fa:b0:6a:59:d3:18:ec: 09:94:78:03:18:50:d6:13:7a:73:e1:b8:c4:ff:51:64:29:c4: b9:e4:8d:4b:f0:4b:97:bf:35:2d:2e:e4:df:f5:02:2d:00:9b: f2:23:35:ed:72:43:db:69:06:ab:d5:96:67:34:94:65:1e:1b: 32:d3:19:aa:8a:48:d9:52:d5:af:bf:3a:f7:f9:18:5f:32:48: 9d:5c:8f:87:2d:4d:4b:5a:39:a5:1f:e0:ba:2f:23:c1:0b:5a: 99:b0:ef:71:bb:c0:47:48:ce:52:d9:cf:f5:dd:5b:93:c9:fe: 48:18:17:63:ed:61:bb:8c:ba:e8:f6:66:53:3b:3a:63:30:6f: 5d:f1:4e:c4:61:72:0d:96:5b:41:0a:df:90:c5:79:a6:22:4d: 49:e0:a1:cc:df:61:d3:b4:5f:34:d4:51:5d:c6:02:5a:60:05: df:f5:21:fc:a7:b0:68:13:2a:2e:1a:f9:c1:50:1a:55:cd:b1: 8c:89:a1:77:c1:fb:6c:41:c9:42:4d:ef:43:de:3a:69:17:42: 97:d0:24:55:13:33:d2:f6:ab:2c:ff:21:04:5a:29:97:15:04: aa:54:11:4b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDIxxj5ay/dI4CFyyQgGIEny068cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYxMDE1MDMwNzE4WhcNMjcwMTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BmN2M5MTdkZDRjOWIxZjIxYWU1NWEzOGRjYzRlNWE1YTBh NTA0NWRkZjI4NTkwNGY2M2VlNDk1MzZjOTcwZTllMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMttc1h15vuejo24h3JECWC+QGDqSn1W6yBCLL8Wcp0ZFS ep6Hi5DVQ0/tHRdqoA1Uwb1yo4KQ31fwBI95a83V3r7L/SYNYbuUs/7H+8aVIf0g 1y7ye6H7Jgv0xScNmySsgtTQ0lauZdRmaII7ceB3PWiG0jC79iz4J1EPm2rvJ9/x LwiZdu/51HtvUiVpQZ/ejRpI18UwlizCQudwXuy0lX0qZgn9PMJemFL53gCICyE2 xfgGg3twX/E4UK1nsoKwgLRERv24q7Ae7dBGjYRBzK6ibtrrqhgjKxOCXwBbClS6 qs1sFYKptz4TPUlpb6kHTbxUgb9zWIKwPwT9rDSRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUY1wk/lcCtxA5Gx2FQpYpEksvz7QwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzJmNzg5OTI0LWE5ODAtNDhlYi1iNDJlLTQ2MzY4ODM3OWY0MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABkwwDQYJKoZIhvcNAQELBQADggEBAA3u8nqGiwR4AHRgXuOdzxhZ Q67zaPbITF5umGkG+rBqWdMY7AmUeAMYUNYTenPhuMT/UWQpxLnkjUvwS5e/NS0u 5N/1Ai0Am/IjNe1yQ9tpBqvVlmc0lGUeGzLTGaqKSNlS1a+/Ovf5GF8ySJ1cj4ct TUtaOaUf4LovI8ELWpmw73G7wEdIzlLZz/XdW5PJ/kgYF2PtYbuMuuj2ZlM7OmMw b13xTsRhcg2WW0EK35DFeaYiTUngoczfYdO0XzTUUV3GAlpgBd/1IfynsGgTKi4a +cFQGlXNsYyJoXfB+2xByUJN70PeOmkXQpfQJFUTM9L2qyz/IQRaKZcVBKpUEUs= -----END CERTIFICATE-----Generated at Thu Nov 5 07:17:05 2026 by rpki-client