$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3c38dcd5-4b4b-4691-8d95-60276cc88d61.roa File: 3c38dcd5-4b4b-4691-8d95-60276cc88d61.roa (raw, json) Hash identifier: qLhXb1MXB5ULxjLOeqikk1slYQfFHwSaO1uW13GxO5s= Subject key identifier: BF:42:EC:86:64:85:44:21:0A:AF:F0:9D:03:50:B3:45:68:26:FF:35 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 60635DD2AEE97F04A4680F4016B13E947122DBF4 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3c38dcd5-4b4b-4691-8d95-60276cc88d61.roa Signing time: Tue 08 Sep 2026 00:00:09 +0000 ROA not before: Tue 08 Sep 2026 00:00:09 +0000 ROA not after: Mon 07 Dec 2026 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:41a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:63:5d:d2:ae:e9:7f:04:a4:68:0f:40:16:b1:3e:94:71:22:db:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Sep 8 00:00:09 2026 GMT Not After : Dec 7 23:59:59 2026 GMT Subject: serialNumber=9d9e854056e2bb736e085fb4fb4e9a2cad2bf9e2147d56459eb691b9ee87fa1f, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6c:da:b4:62:0c:40:3d:c6:e5:b3:92:a9:a1: 72:2e:07:6a:b4:d2:ea:c6:07:f2:d0:4d:cc:99:9f: ff:b5:1b:7e:c0:2e:0f:e4:22:b0:60:ab:9c:bd:df: eb:54:c8:04:ac:9e:d3:1b:29:d3:f8:0d:43:9d:2d: 18:d7:a1:38:b2:fb:be:99:dc:02:6d:db:97:39:3f: 1f:7e:b6:6a:ff:c5:ab:dc:64:6d:0b:4a:31:1d:b6: a6:b0:98:89:96:86:be:5d:96:34:44:97:86:9e:58: 6b:b1:41:26:ae:47:a9:28:10:9d:d4:5f:36:04:aa: 81:7b:a5:cf:07:40:af:9c:e5:b6:61:28:26:80:df: bb:0f:76:7c:4b:43:ad:98:77:9c:5a:62:9b:fd:da: a8:96:0c:02:9e:ae:e0:24:03:99:9d:da:8a:ef:99: e7:9f:51:bf:bd:71:ca:d1:0e:b1:f7:b3:00:9b:29: 9b:09:58:64:14:31:db:3f:6d:6b:23:f8:a4:d1:aa: 83:4d:29:cd:b5:1d:1e:4c:13:d7:a1:bb:c9:55:60: 6a:ba:1d:4b:78:73:d9:3a:f3:e5:18:f9:3d:97:9b: 9e:b4:6e:6f:66:e9:0a:09:e9:cd:8c:26:7d:32:95: b5:56:71:a3:93:48:9d:b3:aa:5e:60:d9:a0:04:ba: 70:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:42:EC:86:64:85:44:21:0A:AF:F0:9D:03:50:B3:45:68:26:FF:35 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3c38dcd5-4b4b-4691-8d95-60276cc88d61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:41a::/48 Signature Algorithm: sha256WithRSAEncryption 55:ef:51:fd:f3:0f:4e:c5:0e:3c:ea:72:4d:ac:39:43:11:b6: e9:b9:56:40:80:dc:03:3e:e2:ef:5d:39:67:0a:7f:22:41:20: 39:21:b6:97:7f:59:1a:91:fd:a1:fa:09:fd:2d:47:2d:3c:0d: 26:75:f1:30:bc:df:43:55:e0:13:06:6c:fe:1c:ed:2e:9e:3d: 11:1c:39:e6:3d:a7:b8:c8:df:d4:b1:22:90:0f:26:c1:1a:af: 23:10:df:e5:67:1a:b2:ec:e2:db:66:fe:c6:e6:f6:39:c5:73: af:c3:ed:d7:aa:14:4a:ff:d8:bf:de:4d:be:f9:d7:59:0f:5e: d3:82:ed:bd:86:87:d6:be:bf:76:7e:66:cb:d5:a2:e7:30:73: 5c:0d:58:38:ec:f4:8c:ca:c0:9a:8e:e1:30:1a:7f:77:0e:25: fe:84:44:c8:df:9d:bf:4e:c7:af:ea:4f:f2:b7:cb:83:92:fb: 66:57:c7:fd:3a:e8:c4:57:0c:11:67:69:ef:03:6a:f9:62:ae: 64:95:fb:14:0e:e2:44:53:b5:02:a3:f4:f5:f4:8c:e5:51:20: 34:62:c4:d6:8e:4b:05:2a:9f:9e:bd:dc:c9:4d:f5:20:62:a1: 85:d8:98:8d:35:b8:f3:84:44:bf:f2:d6:bc:33:72:31:fd:31: 87:b4:85:6a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUYGNd0q7pfwSkaA9AFrE+lHEi2/QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwOTA4MDAwMDA5WhcNMjYxMjA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZDllODU0MDU2ZTJiYjczNmUwODVmYjRmYjRlOWEyY2Fk MmJmOWUyMTQ3ZDU2NDU5ZWI2OTFiOWVlODdmYTFmMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdbNq0YgxAPcbls5KpoXIuB2q00urGB/LQTcyZn/+1G37A Lg/kIrBgq5y93+tUyASsntMbKdP4DUOdLRjXoTiy+76Z3AJt25c5Px9+tmr/xavc ZG0LSjEdtqawmImWhr5dljREl4aeWGuxQSauR6koEJ3UXzYEqoF7pc8HQK+c5bZh KCaA37sPdnxLQ62Yd5xaYpv92qiWDAKeruAkA5md2orvmeefUb+9ccrRDrH3swCb KZsJWGQUMds/bWsj+KTRqoNNKc21HR5ME9ehu8lVYGq6HUt4c9k68+UY+T2Xm560 bm9m6QoJ6c2MJn0ylbVWcaOTSJ2zql5g2aAEunCFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUv0LshmSFRCEKr/CdA1CzRWgm/zUwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzNjMzhkY2Q1LTRiNGItNDY5MS04ZDk1LTYwMjc2Y2M4OGQ2MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABBowDQYJKoZIhvcNAQELBQADggEBAFXvUf3zD07FDjzqck2sOUMR tum5VkCA3AM+4u9dOWcKfyJBIDkhtpd/WRqR/aH6Cf0tRy08DSZ18TC830NV4BMG bP4c7S6ePREcOeY9p7jI39SxIpAPJsEaryMQ3+VnGrLs4ttm/sbm9jnFc6/D7deq FEr/2L/eTb7511kPXtOC7b2Gh9a+v3Z+ZsvVoucwc1wNWDjs9IzKwJqO4TAaf3cO Jf6ERMjfnb9Ox6/qT/K3y4OS+2ZXx/066MRXDBFnae8DavlirmSV+xQO4kRTtQKj 9PX0jOVRIDRixNaOSwUqn5693MlN9SBioYXYmI01uPOERL/y1rwzcjH9MYe0hWo= -----END CERTIFICATE-----Generated at Sun Sep 20 12:31:30 2026 by rpki-client