$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a4b43ebf-0d93-4470-9ac2-768f9381f392.roa File: a4b43ebf-0d93-4470-9ac2-768f9381f392.roa (raw, json) Hash identifier: VY6HVkqSPqfpuXK+iPr88y0nBpAZ4kUfQ2kKJNeSB3Q= Subject key identifier: 55:A6:CD:46:10:3A:D5:F7:17:EE:87:FC:9E:62:A4:F5:91:89:C6:8D Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 269F495150743435FF832A9BCF524BC99C968873 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a4b43ebf-0d93-4470-9ac2-768f9381f392.roa Signing time: Wed 21 Oct 2026 01:40:10 +0000 ROA not before: Wed 21 Oct 2026 01:40:10 +0000 ROA not after: Tue 19 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:3c2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:9f:49:51:50:74:34:35:ff:83:2a:9b:cf:52:4b:c9:9c:96:88:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 21 01:40:10 2026 GMT Not After : Jan 19 23:59:59 2027 GMT Subject: serialNumber=0614ef3d87b8356e333baece138ceb9ad1d209de45ecb244f1f42b0ae5f41b59, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c4:af:53:4c:d8:6b:e6:e3:79:f4:5c:24:71: 48:e3:f9:70:3e:d8:da:fe:fc:d6:a6:ae:28:23:8e: 95:63:a5:3e:65:81:78:55:a0:04:88:26:ab:0f:c3: c4:7d:f8:d5:99:fd:68:27:4d:79:64:a2:f0:4c:42: 39:7a:1a:61:e8:c3:4f:b2:08:ab:a1:39:34:c9:66: 4d:81:41:8d:a5:11:96:e5:6b:90:48:0e:7d:45:4f: da:86:b3:b1:b2:72:a1:25:1f:72:e2:2d:5b:3e:f8: 24:38:0e:f4:05:45:a3:e5:bf:27:27:0b:b3:9c:45: bb:d8:13:d3:e8:4e:d4:ab:d2:c5:3c:77:55:51:1c: ca:32:78:d4:83:ab:80:f1:6e:87:62:4c:b8:77:3c: 43:06:41:e5:cc:ad:e6:e5:da:c2:53:90:98:ea:11: 94:e3:d4:cd:5d:ac:b7:e0:96:1e:03:e1:fd:77:a3: be:13:12:1b:be:42:b0:35:ed:88:6c:76:dc:8e:8b: 36:18:fd:65:23:9f:96:94:54:e5:df:09:a2:ad:be: 2d:0d:89:e1:75:b5:7c:9d:6d:7b:b8:75:63:fd:16: 83:cb:0f:76:ea:06:a3:cd:7b:fe:91:78:d1:55:5e: 16:5a:e1:fe:64:54:31:36:9a:78:7e:79:53:9b:d8: 30:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:A6:CD:46:10:3A:D5:F7:17:EE:87:FC:9E:62:A4:F5:91:89:C6:8D X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a4b43ebf-0d93-4470-9ac2-768f9381f392.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:3c2::/48 Signature Algorithm: sha256WithRSAEncryption 54:65:83:99:70:c5:8b:6a:12:45:6a:a2:5b:fe:4d:a0:10:2d: ec:87:0d:f3:6a:5a:fb:4a:6a:d0:7e:9d:64:50:53:95:a8:e8: 8c:49:e9:cc:ea:3c:76:d4:26:56:e4:d7:62:91:77:65:3f:88: 61:60:14:6f:74:0f:49:78:ed:34:cd:0d:58:90:65:d2:63:dc: b3:38:33:3b:b1:3d:1e:e4:52:35:ed:97:4e:76:89:f1:a8:20: cd:2d:8e:0b:d3:2e:d7:27:3a:f5:fc:ca:ab:82:c5:29:d7:2e: b1:bd:e3:f0:e5:ae:37:4f:53:b0:b6:a9:13:93:d1:c9:7d:27: 79:21:98:6b:47:25:8a:03:fb:3f:97:db:93:b4:70:6a:f6:61: 7d:33:f8:2b:30:b1:1c:cb:3d:a7:ac:50:7f:5e:9d:07:52:04: 88:dd:a9:5d:4b:58:c4:40:be:b9:f0:a0:10:e6:23:0d:38:2c: fd:5c:7a:df:77:7e:36:61:54:76:b2:ad:72:da:f6:f0:e9:ea: e4:57:7a:35:19:a9:f4:4a:c5:ea:3e:39:fb:5c:8d:ab:97:d4: 9e:f8:7b:c8:37:00:bc:6a:1a:c6:11:c4:0e:72:3d:38:20:f3: 10:cf:d8:a0:2b:7d:7b:8f:e6:8c:34:82:43:c8:69:25:e0:a9: 81:f6:29:b5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJp9JUVB0NDX/gyqbz1JLyZyWiHMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYxMDIxMDE0MDEwWhcNMjcwMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNjE0ZWYzZDg3YjgzNTZlMzMzYmFlY2UxMzhjZWI5YWQx ZDIwOWRlNDVlY2IyNDRmMWY0MmIwYWU1ZjQxYjU5MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXxK9TTNhr5uN59FwkcUjj+XA+2Nr+/NamrigjjpVjpT5l gXhVoASIJqsPw8R9+NWZ/WgnTXlkovBMQjl6GmHow0+yCKuhOTTJZk2BQY2lEZbl a5BIDn1FT9qGs7GycqElH3LiLVs++CQ4DvQFRaPlvycnC7OcRbvYE9PoTtSr0sU8 d1VRHMoyeNSDq4DxbodiTLh3PEMGQeXMrebl2sJTkJjqEZTj1M1drLfglh4D4f13 o74TEhu+QrA17YhsdtyOizYY/WUjn5aUVOXfCaKtvi0NieF1tXydbXu4dWP9FoPL D3bqBqPNe/6ReNFVXhZa4f5kVDE2mnh+eVOb2DA5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUVabNRhA61fcX7of8nmKk9ZGJxo0wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2E0YjQzZWJmLTBkOTMtNDQ3MC05YWMyLTc2OGY5MzgxZjM5Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA8IwDQYJKoZIhvcNAQELBQADggEBAFRlg5lwxYtqEkVqolv+TaAQ LeyHDfNqWvtKatB+nWRQU5Wo6IxJ6czqPHbUJlbk12KRd2U/iGFgFG90D0l47TTN DViQZdJj3LM4MzuxPR7kUjXtl052ifGoIM0tjgvTLtcnOvX8yquCxSnXLrG94/Dl rjdPU7C2qROT0cl9J3khmGtHJYoD+z+X25O0cGr2YX0z+CswsRzLPaesUH9enQdS BIjdqV1LWMRAvrnwoBDmIw04LP1cet93fjZhVHayrXLa9vDp6uRXejUZqfRKxeo+ OftcjauX1J74e8g3ALxqGsYRxA5yPTgg8xDP2KArfXuP5ow0gkPIaSXgqYH2KbU= -----END CERTIFICATE-----Generated at Sun Nov 8 05:59:14 2026 by rpki-client