$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/35efcf72-708d-4456-b1d1-8419a2636e00.roa File: 35efcf72-708d-4456-b1d1-8419a2636e00.roa (raw, json) Hash identifier: YyvI9v3NUT2HKCC43KdYc33SLtv31GJua9sX8Jq825M= Subject key identifier: 0C:39:1A:A4:19:91:3F:C1:42:63:ED:46:40:BA:DD:35:AC:58:99:68 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 35E8D9CE3D0B59FEB8AF94E635FF496306BD11D0 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/35efcf72-708d-4456-b1d1-8419a2636e00.roa Signing time: Mon 26 Oct 2026 03:40:08 +0000 ROA not before: Mon 26 Oct 2026 03:40:08 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:f03d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:e8:d9:ce:3d:0b:59:fe:b8:af:94:e6:35:ff:49:63:06:bd:11:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 26 03:40:08 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=410402c21220101527fafe1c51ce689011e25eae67a27c8c8e1cdb43b9099b39, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:93:78:68:27:a0:e3:46:f8:14:67:9b:70:23: 57:81:34:1a:ae:89:dd:3c:1a:ed:51:22:ff:f6:f1: 90:ba:30:b5:95:ae:e8:73:47:67:f2:9f:17:b8:21: 01:d1:c8:b1:02:f5:7f:61:49:df:d0:7b:75:14:da: 72:ef:7d:e1:cb:f8:61:5f:ad:3d:8d:06:14:09:c7: 41:ee:2d:ac:7f:88:d1:88:6a:9d:bb:5d:31:56:72: 85:dc:b4:b0:81:07:23:35:c7:be:3d:53:35:b4:07: 37:bb:b2:26:5f:dc:52:a3:b0:5d:f2:31:e7:80:d2: 7d:23:f6:1b:92:05:0e:85:08:43:a2:15:f9:d6:c6: 39:a1:af:2b:98:d2:54:8a:c5:52:0a:73:3d:e3:b3: 99:ce:56:b4:ff:e4:da:de:ce:2f:7d:fc:52:a8:da: ad:7e:c3:60:f2:36:be:a5:1e:33:67:c9:79:ce:da: e4:bd:4c:69:21:bf:f2:d2:fe:53:7a:b8:b2:ce:5f: 7d:c5:a7:16:9d:d1:a3:6a:02:d6:71:6e:31:80:f1: 0d:86:a5:8c:d7:d6:94:a1:2f:dd:54:59:1a:72:a2: d2:9c:37:e3:36:1a:75:21:b5:0a:69:24:f7:e9:65: 06:4c:e6:fa:00:8c:53:8d:4e:61:62:a6:0c:b5:b4: 9e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:39:1A:A4:19:91:3F:C1:42:63:ED:46:40:BA:DD:35:AC:58:99:68 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/35efcf72-708d-4456-b1d1-8419a2636e00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:f03d::/48 Signature Algorithm: sha256WithRSAEncryption 62:06:36:67:1c:85:ba:10:dd:31:2f:bc:9f:f5:b4:49:79:51: 7b:b4:ff:77:0c:2e:b1:7b:0c:30:76:c3:a6:91:48:e6:a3:cf: ae:94:ef:d7:93:aa:33:86:c6:d4:83:9c:1e:53:5e:68:55:23: 39:3c:19:7c:e0:af:23:14:60:3b:87:fd:e1:6b:65:94:f1:93: fe:da:45:78:f1:d4:1b:6f:19:4a:5a:04:01:f2:46:0b:66:a4: 99:f5:09:77:e1:01:14:b2:22:be:17:f9:26:08:ff:e6:2d:75: 8c:96:5e:be:b9:7a:e3:a7:82:da:25:e8:0d:02:6b:81:1f:c8: 22:a1:7c:e9:1a:d9:b3:ef:d4:4d:21:7f:3e:0a:3e:01:4b:a9: 5c:fa:df:4b:e2:41:27:b1:8f:f8:c2:72:e0:bc:89:f3:dc:aa: 18:48:27:5b:fa:e9:e8:60:a8:d9:e1:5b:8f:4c:7a:a9:49:9e: 3f:bd:65:e8:f2:9e:c1:48:28:ca:b0:c4:30:3e:25:2b:34:07: 97:b4:84:b7:f3:0d:b1:ef:44:7a:53:7d:73:04:16:3f:57:2c: 70:2d:10:c8:c5:9c:90:a3:b7:7a:0a:95:fb:8e:d5:4c:86:aa: 1e:a0:ad:10:44:f4:21:30:4f:49:93:a6:94:1c:a5:74:72:58: c5:5f:5f:41 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUNejZzj0LWf64r5TmNf9JYwa9EdAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYxMDI2MDM0MDA4WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MTA0MDJjMjEyMjAxMDE1MjdmYWZlMWM1MWNlNjg5MDEx ZTI1ZWFlNjdhMjdjOGM4ZTFjZGI0M2I5MDk5YjM5MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCRk3hoJ6DjRvgUZ5twI1eBNBquid08Gu1RIv/28ZC6MLWV ruhzR2fynxe4IQHRyLEC9X9hSd/Qe3UU2nLvfeHL+GFfrT2NBhQJx0HuLax/iNGI ap27XTFWcoXctLCBByM1x749UzW0Bze7siZf3FKjsF3yMeeA0n0j9huSBQ6FCEOi FfnWxjmhryuY0lSKxVIKcz3js5nOVrT/5Nrezi99/FKo2q1+w2DyNr6lHjNnyXnO 2uS9TGkhv/LS/lN6uLLOX33Fpxad0aNqAtZxbjGA8Q2GpYzX1pShL91UWRpyotKc N+M2GnUhtQppJPfpZQZM5voAjFONTmFipgy1tJ5tAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUDDkapBmRP8FCY+1GQLrdNaxYmWgwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzM1ZWZjZjcyLTcwOGQtNDQ1Ni1iMWQxLTg0MTlhMjYzNmUwMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzA8D0wDQYJKoZIhvcNAQELBQADggEBAGIGNmcchboQ3TEvvJ/1tEl5 UXu0/3cMLrF7DDB2w6aRSOajz66U79eTqjOGxtSDnB5TXmhVIzk8GXzgryMUYDuH /eFrZZTxk/7aRXjx1BtvGUpaBAHyRgtmpJn1CXfhARSyIr4X+SYI/+YtdYyWXr65 euOngtol6A0Ca4EfyCKhfOka2bPv1E0hfz4KPgFLqVz630viQSexj/jCcuC8ifPc qhhIJ1v66ehgqNnhW49MeqlJnj+9ZejynsFIKMqwxDA+JSs0B5e0hLfzDbHvRHpT fXMEFj9XLHAtEMjFnJCjt3oKlfuO1UyGqh6grRBE9CEwT0mTppQcpXRyWMVfX0E= -----END CERTIFICATE-----Generated at Thu Nov 5 12:15:00 2026 by rpki-client