$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/93350be4-62f9-446b-8f62-f45964ad92b1.roa File: 93350be4-62f9-446b-8f62-f45964ad92b1.roa (raw, json) Hash identifier: VD/M4mgGruAPsd0OwlOBkZOFW3MGCRFfmKsXvDfMfeo= Subject key identifier: 85:BC:3D:1E:A3:1D:61:E8:76:69:F4:BB:2B:32:80:14:B2:24:86:68 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 519C343165A519B42319143DA945D5C3516C1318 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/93350be4-62f9-446b-8f62-f45964ad92b1.roa Signing time: Thu 22 Oct 2026 00:20:10 +0000 ROA not before: Thu 22 Oct 2026 00:20:10 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 40045 IP address blocks: 2605:9cc0:3cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Nov 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:9c:34:31:65:a5:19:b4:23:19:14:3d:a9:45:d5:c3:51:6c:13:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 22 00:20:10 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=408dd957c6245c4b0ccb52c3ef0866b67777221160158a24c27ab11b23e008ba, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d5:f3:c2:b9:f0:8d:de:49:76:2f:02:b9:ea: 57:6e:fe:a6:6b:df:d3:c8:c0:ac:4e:25:78:1d:69: 6e:39:56:53:5d:f1:6d:a7:14:a1:40:70:b7:d4:52: cc:94:1a:5c:bd:84:74:ff:c6:3a:04:85:75:f7:0f: 74:6e:8a:41:db:68:1b:0c:97:33:db:3a:39:4a:23: b2:5b:58:b1:d1:93:e9:34:03:5a:0e:da:f9:a5:25: fa:5c:66:f1:52:0f:10:cf:60:b4:7d:ad:ed:5a:0d: d5:94:d7:c8:2b:de:f1:c3:49:bc:44:89:26:4b:6c: e2:45:be:18:e7:1f:22:9d:b5:a7:8d:36:2c:3c:42: 13:c2:2a:b3:0d:71:62:b7:23:71:94:b7:64:c5:eb: 27:62:ee:19:f3:14:91:fe:b2:81:c6:6b:10:ef:ed: 0b:4d:77:dc:c0:9d:77:40:63:e5:6a:6d:f2:f5:c1: 46:23:89:f6:95:ff:2d:77:46:eb:79:36:df:f1:86: da:1c:cc:4b:40:35:ad:87:ce:aa:d4:6f:00:26:fa: 2d:83:a1:60:34:53:37:bb:15:d6:dc:31:97:f6:ed: ef:62:7b:b7:a6:b7:f2:ae:7f:28:b6:e8:77:94:25: 00:6f:8a:36:9f:6a:78:07:c3:b0:51:1a:7a:53:6e: 4d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:BC:3D:1E:A3:1D:61:E8:76:69:F4:BB:2B:32:80:14:B2:24:86:68 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/93350be4-62f9-446b-8f62-f45964ad92b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:3cc::/48 Signature Algorithm: sha256WithRSAEncryption 91:2e:a3:01:83:d5:79:a9:16:05:e7:ff:f4:f1:9e:29:6e:a3: bd:cc:61:42:de:a3:d6:9b:c6:58:a4:80:b4:fe:43:03:22:39: 66:41:72:08:31:fd:e1:cd:cc:c9:cd:c1:b8:29:ec:bd:58:f5: 34:cb:e7:f3:81:e6:3c:1a:16:82:bc:d7:ec:f8:65:ad:7e:8c: 53:e3:25:2a:ec:42:19:ce:e4:4b:2f:6c:db:f5:8b:00:9c:2a: c4:66:dd:25:21:5f:53:ad:a2:24:8a:54:74:0d:3f:9a:ff:22: 79:4a:b2:32:bd:eb:3b:22:92:f4:4e:7a:3c:31:bb:e5:63:d3: b0:37:be:df:cb:21:5b:56:1d:70:1a:fc:85:64:26:fd:31:93: 3b:95:ed:d5:ef:9c:f9:4b:e1:15:db:c9:4b:a5:a4:82:96:85: 59:d7:e4:a6:a0:e6:8f:d6:23:c3:32:0a:af:89:fd:10:51:af: 10:8c:92:5e:93:f1:59:fc:f1:a9:6f:af:9a:63:6f:24:22:aa: 9c:63:89:04:9c:f1:77:c0:58:50:11:8d:89:76:81:4d:a2:92: 81:ab:40:ff:42:c6:32:48:36:6f:c8:fd:1e:bc:e3:80:18:f4: 69:28:0b:9a:b5:8e:3e:37:f8:25:a8:bb:13:33:a7:8f:85:76: 93:19:4c:2d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUZw0MWWlGbQjGRQ9qUXVw1FsExgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYxMDIyMDAyMDEwWhcNMjcwMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MDhkZDk1N2M2MjQ1YzRiMGNjYjUyYzNlZjA4NjZiNjc3 NzcyMjExNjAxNThhMjRjMjdhYjExYjIzZTAwOGJhMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCS1fPCufCN3kl2LwK56ldu/qZr39PIwKxOJXgdaW45VlNd 8W2nFKFAcLfUUsyUGly9hHT/xjoEhXX3D3RuikHbaBsMlzPbOjlKI7JbWLHRk+k0 A1oO2vmlJfpcZvFSDxDPYLR9re1aDdWU18gr3vHDSbxEiSZLbOJFvhjnHyKdtaeN Niw8QhPCKrMNcWK3I3GUt2TF6ydi7hnzFJH+soHGaxDv7QtNd9zAnXdAY+VqbfL1 wUYjifaV/y13Rut5Nt/xhtoczEtANa2HzqrUbwAm+i2DoWA0Uze7FdbcMZf27e9i e7emt/Kufyi26HeUJQBvijafangHw7BRGnpTbk0LAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUhbw9HqMdYeh2afS7KzKAFLIkhmgwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzkzMzUwYmU0LTYyZjktNDQ2Yi04ZjYyLWY0NTk2NGFkOTJiMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA8wwDQYJKoZIhvcNAQELBQADggEBAJEuowGD1XmpFgXn//Txnilu o73MYULeo9abxlikgLT+QwMiOWZBcggx/eHNzMnNwbgp7L1Y9TTL5/OB5jwaFoK8 1+z4Za1+jFPjJSrsQhnO5EsvbNv1iwCcKsRm3SUhX1OtoiSKVHQNP5r/InlKsjK9 6zsikvROejwxu+Vj07A3vt/LIVtWHXAa/IVkJv0xkzuV7dXvnPlL4RXbyUulpIKW hVnX5Kag5o/WI8MyCq+J/RBRrxCMkl6T8Vn88alvr5pjbyQiqpxjiQSc8XfAWFAR jYl2gU2ikoGrQP9CxjJINm/I/R6844AY9GkoC5q1jj43+CWouxMzp4+FdpMZTC0= -----END CERTIFICATE-----Generated at Mon Nov 9 10:54:23 2026 by rpki-client