$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/43f38a90-941c-4e61-8aa5-ead957bf6ae6.roa File: 43f38a90-941c-4e61-8aa5-ead957bf6ae6.roa (raw, json) Hash identifier: gYWMOFBtNCI9lzE1E2ZxpfAKza6fCK4PobU+77TfwnU= Subject key identifier: 03:48:61:D3:24:19:2F:F0:DC:85:F0:51:93:B8:04:5E:8E:6A:54:FD Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 2117070627389C06BAD64B440D1B6F2E1B84AB7D Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/43f38a90-941c-4e61-8aa5-ead957bf6ae6.roa Signing time: Thu 15 Oct 2026 03:07:04 +0000 ROA not before: Thu 15 Oct 2026 03:07:04 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:c1a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:17:07:06:27:38:9c:06:ba:d6:4b:44:0d:1b:6f:2e:1b:84:ab:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 15 03:07:04 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=0f798eba4ec2cef2824912712f769b0a9e2b5a0e2f48897c54981a0650baa7fb, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c9:b5:f8:1d:fc:af:93:ee:a0:04:38:67:43: a1:12:2f:a9:dc:ef:dd:74:e3:e2:bf:1e:87:7d:a8: fb:b2:27:b6:20:88:6d:7e:71:b7:4a:ac:e6:16:72: 7a:48:f6:be:d5:94:59:bd:d6:5e:92:e5:01:9f:2d: a1:7d:51:bd:cf:51:aa:c3:5e:a3:20:dc:e1:83:0d: f3:3d:29:cc:bc:c0:27:15:ca:1d:1e:2a:a1:5f:48: 87:18:10:5c:5e:14:62:f8:ab:a8:54:27:d2:19:1f: d9:fc:bb:18:65:f8:b3:d9:9e:5d:5f:7c:cd:f1:20: a6:ed:78:9a:7c:4c:5f:4d:e5:df:5e:cb:1f:06:9b: 45:28:2f:2f:9a:4c:83:c5:b4:02:a2:86:cb:9c:bb: b0:e2:5e:bb:e4:75:64:83:5b:18:66:c1:ae:77:f0: 77:45:9a:8b:99:a3:59:c5:35:33:05:38:39:8a:12: 07:ca:b6:18:ca:20:46:34:97:b4:36:22:c8:0f:7e: 50:4f:39:6d:fb:03:82:8b:af:9b:23:a4:61:7c:4e: 70:14:e0:85:af:92:f7:27:fd:98:22:1c:8f:a7:67: 7f:85:94:1e:3b:12:be:57:32:44:b3:21:f3:33:e7: 12:5a:af:bd:00:c9:db:3a:9b:0c:17:87:24:2d:5c: 47:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:48:61:D3:24:19:2F:F0:DC:85:F0:51:93:B8:04:5E:8E:6A:54:FD X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/43f38a90-941c-4e61-8aa5-ead957bf6ae6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c1a::/48 Signature Algorithm: sha256WithRSAEncryption 8c:c3:ef:89:e4:09:61:0f:cc:5b:5f:74:bd:f0:a2:05:5b:61: 8d:03:a7:1f:db:1f:4a:50:95:47:60:d2:89:df:c0:00:09:76: 13:70:e6:dc:e7:71:0b:ac:24:b4:bc:ab:35:60:fa:f0:24:f9: f4:5a:f6:e5:e4:0f:7e:0e:a2:f2:45:e2:2a:92:ae:3a:e9:3b: 15:f6:6f:4a:94:5c:64:bb:eb:ca:46:64:7c:45:c3:1d:b9:67: a9:26:4a:53:e6:fd:f6:ed:ef:87:4c:ba:e2:cd:fb:0a:73:b4: 29:db:b2:48:4d:db:64:7f:f0:6b:6d:1a:ee:23:66:5c:d9:8c: 21:c3:c4:02:19:93:05:a9:6f:4e:00:31:c1:b6:16:70:4a:31: fd:9e:4c:6f:b5:34:3a:cd:ec:36:95:5c:cd:36:23:9d:32:7e: cc:0d:e2:2a:d6:39:ad:f0:4b:80:f4:8b:d4:02:51:79:5a:1f: 9d:9a:d6:53:ca:2d:c9:d2:8c:c2:a4:27:12:de:72:2e:35:17: 8e:50:de:32:5e:27:88:17:fd:76:77:b0:f4:37:e2:f4:ce:9c: bd:d4:60:b7:98:2d:24:a2:89:ef:5a:a7:2f:ee:ed:2a:68:8f: c3:06:23:f6:a2:3a:6f:c9:da:69:69:28:c1:45:00:c5:23:5b: 80:1e:b6:75 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUIRcHBic4nAa61ktEDRtvLhuEq30wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYxMDE1MDMwNzA0WhcNMjcwMTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZjc5OGViYTRlYzJjZWYyODI0OTEyNzEyZjc2OWIwYTll MmI1YTBlMmY0ODg5N2M1NDk4MWEwNjUwYmFhN2ZiMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjybX4Hfyvk+6gBDhnQ6ESL6nc79104+K/Hod9qPuyJ7Yg iG1+cbdKrOYWcnpI9r7VlFm91l6S5QGfLaF9Ub3PUarDXqMg3OGDDfM9Kcy8wCcV yh0eKqFfSIcYEFxeFGL4q6hUJ9IZH9n8uxhl+LPZnl1ffM3xIKbteJp8TF9N5d9e yx8Gm0UoLy+aTIPFtAKihsucu7DiXrvkdWSDWxhmwa538HdFmouZo1nFNTMFODmK EgfKthjKIEY0l7Q2IsgPflBPOW37A4KLr5sjpGF8TnAU4IWvkvcn/ZgiHI+nZ3+F lB47Er5XMkSzIfMz5xJar70Ayds6mwwXhyQtXEdRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUA0hh0yQZL/DchfBRk7gEXo5qVP0wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzQzZjM4YTkwLTk0MWMtNGU2MS04YWE1LWVhZDk1N2JmNmFlNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBowDQYJKoZIhvcNAQELBQADggEBAIzD74nkCWEPzFtfdL3wogVb YY0Dpx/bH0pQlUdg0onfwAAJdhNw5tzncQusJLS8qzVg+vAk+fRa9uXkD34OovJF 4iqSrjrpOxX2b0qUXGS768pGZHxFwx25Z6kmSlPm/fbt74dMuuLN+wpztCnbskhN 22R/8GttGu4jZlzZjCHDxAIZkwWpb04AMcG2FnBKMf2eTG+1NDrN7DaVXM02I50y fswN4irWOa3wS4D0i9QCUXlaH52a1lPKLcnSjMKkJxLeci41F45Q3jJeJ4gX/XZ3 sPQ34vTOnL3UYLeYLSSiie9apy/u7Spoj8MGI/aiOm/J2mlpKMFFAMUjW4AetnU= -----END CERTIFICATE-----Generated at Sun Nov 8 04:22:54 2026 by rpki-client