$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3d91fd95-199d-41dd-9b67-db7495ce3d1c.roa File: 3d91fd95-199d-41dd-9b67-db7495ce3d1c.roa (raw, json) Hash identifier: hHdrctO/fw3b7H2N53W93tIEdUk1MzjJ49gCAVxHmUo= Subject key identifier: 4D:43:D0:62:2F:FA:05:06:61:03:38:AF:5B:41:47:C4:65:85:1F:AF Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 6FB7F7DF3F51FBEDFBFAF6A9E1839F77641F1D8B Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3d91fd95-199d-41dd-9b67-db7495ce3d1c.roa Signing time: Mon 26 Oct 2026 04:02:54 +0000 ROA not before: Mon 26 Oct 2026 04:02:54 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c24::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:b7:f7:df:3f:51:fb:ed:fb:fa:f6:a9:e1:83:9f:77:64:1f:1d:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 26 04:02:54 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=a0eb528f33ae9666e8302c58af9bbf45b2ca70fd5ff33d9d38179723f451bfda, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e0:5e:bc:2b:13:75:01:33:6f:a4:f7:2c:b9: c8:b7:2a:d1:54:5e:10:fe:6b:6d:ff:f6:67:5d:02: d0:c2:d9:88:73:17:35:ea:a2:ae:ae:e1:25:7e:e7: a9:89:f7:48:fa:65:d7:a0:f5:d3:15:c4:58:e8:16: 89:00:2a:c0:96:1f:9a:57:f9:2a:6c:65:4f:5c:88: 76:64:f2:aa:00:93:db:1b:e6:8d:85:55:f7:9e:b2: 5c:85:e7:5a:af:d6:fc:2d:e7:ed:7a:6f:c7:04:2a: 5f:af:4b:9e:0b:0a:41:c6:33:72:da:08:b6:61:e2: 67:b1:40:23:d6:8f:98:26:87:6e:e6:0b:e4:c2:0f: 39:a3:be:08:98:1f:9e:92:8b:92:20:78:5b:5e:b8: 61:f6:ba:f4:59:ab:f6:67:01:0e:dd:1e:cd:1e:5a: 2f:f7:ca:08:63:1f:f5:ef:2a:59:54:4b:7e:44:4a: b2:3d:96:ec:92:03:df:15:c6:51:60:b5:c0:b7:d3: 6a:ec:7b:d7:e1:10:d9:ce:18:af:94:0f:23:79:c0: bd:61:ff:8e:cb:24:01:78:e2:46:48:50:3f:e0:73: e5:ba:12:52:6a:14:24:e2:25:17:bb:4d:f8:ff:c5: d2:cc:b9:1a:0f:bc:14:62:d2:5d:f6:d5:45:a2:e0: 50:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:43:D0:62:2F:FA:05:06:61:03:38:AF:5B:41:47:C4:65:85:1F:AF X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3d91fd95-199d-41dd-9b67-db7495ce3d1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c24::/46 Signature Algorithm: sha256WithRSAEncryption 25:f5:64:56:1f:5c:0c:77:68:0b:65:e5:ac:1e:7e:bd:f9:f4: 3a:0e:42:e1:57:70:87:2f:8e:5b:e4:ae:56:71:57:10:06:34: 5a:fa:a0:37:8c:48:5c:d9:a7:67:79:eb:62:7f:86:b7:c8:26: 58:a0:eb:1e:bb:d1:ba:e1:e6:47:af:cc:23:98:91:28:c7:5b: 7b:79:4f:e8:e5:20:e2:10:49:e0:3d:11:47:a1:77:bf:a9:30: 04:d7:cc:fd:fc:81:d9:0a:13:8a:18:bc:ae:ec:c9:38:b7:c4: c8:7f:be:bb:70:0b:a9:53:45:74:2d:96:d3:7c:3b:3c:6d:03: 20:15:9e:62:7f:59:4e:a6:ba:7d:2a:af:fc:93:f6:e9:47:9f: 8a:38:8f:fd:57:99:42:9e:39:99:2c:cf:1a:62:3b:1e:58:fd: 8e:55:30:82:be:a3:65:da:b6:e2:c2:c8:9c:13:02:0e:7a:25: fc:17:dc:06:fd:91:58:db:a5:0d:1d:70:5c:00:a9:fc:81:4a: c7:7f:58:7f:78:d6:72:b1:d7:b6:9c:de:fd:35:32:85:0b:99: bd:a3:34:ba:36:1b:b7:51:18:a6:07:a1:a8:b0:c8:5f:96:8c: 22:6f:c5:0f:f1:fb:63:7c:c6:4b:8b:ef:d7:75:e3:fb:62:b8: ee:bf:8d:8f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUb7f33z9R++37+vap4YOfd2QfHYswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYxMDI2MDQwMjU0WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMGViNTI4ZjMzYWU5NjY2ZTgzMDJjNThhZjliYmY0NWIy Y2E3MGZkNWZmMzNkOWQzODE3OTcyM2Y0NTFiZmRhMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDS4F68KxN1ATNvpPcsuci3KtFUXhD+a23/9mddAtDC2Yhz FzXqoq6u4SV+56mJ90j6Zdeg9dMVxFjoFokAKsCWH5pX+SpsZU9ciHZk8qoAk9sb 5o2FVfeeslyF51qv1vwt5+16b8cEKl+vS54LCkHGM3LaCLZh4mexQCPWj5gmh27m C+TCDzmjvgiYH56Si5IgeFteuGH2uvRZq/ZnAQ7dHs0eWi/3yghjH/XvKllUS35E SrI9luySA98VxlFgtcC302rse9fhENnOGK+UDyN5wL1h/47LJAF44kZIUD/gc+W6 ElJqFCTiJRe7Tfj/xdLMuRoPvBRi0l321UWi4FDXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUTUPQYi/6BQZhAzivW0FHxGWFH68wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzNkOTFmZDk1LTE5OWQtNDFkZC05YjY3LWRiNzQ5NWNlM2QxYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImBZzADCQwDQYJKoZIhvcNAQELBQADggEBACX1ZFYfXAx3aAtl5awefr35 9DoOQuFXcIcvjlvkrlZxVxAGNFr6oDeMSFzZp2d562J/hrfIJlig6x670brh5kev zCOYkSjHW3t5T+jlIOIQSeA9EUehd7+pMATXzP38gdkKE4oYvK7syTi3xMh/vrtw C6lTRXQtltN8OzxtAyAVnmJ/WU6mun0qr/yT9ulHn4o4j/1XmUKeOZkszxpiOx5Y /Y5VMIK+o2XatuLCyJwTAg56JfwX3Ab9kVjbpQ0dcFwAqfyBSsd/WH941nKx17ac 3v01MoULmb2jNLo2G7dRGKYHoaiwyF+WjCJvxQ/x+2N8xkuL79d14/tiuO6/jY8= -----END CERTIFICATE-----Generated at Thu Nov 5 11:15:42 2026 by rpki-client