$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a625c009-eed5-4024-b5c0-469960c8e95e.roa File: a625c009-eed5-4024-b5c0-469960c8e95e.roa (raw, json) Hash identifier: IXGrjWx3nUJpHWBG8y0Es5RoXrU7f7wv2k99maYQwHA= Subject key identifier: 85:9E:D8:ED:ED:8E:EB:36:EA:6B:F1:16:63:C7:A5:43:7E:5F:9C:FC Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 4330E559A32422B0640A8382EAFA9E6FA58425ED Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a625c009-eed5-4024-b5c0-469960c8e95e.roa Signing time: Mon 26 Oct 2026 04:03:06 +0000 ROA not before: Mon 26 Oct 2026 04:03:06 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:30b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:30:e5:59:a3:24:22:b0:64:0a:83:82:ea:fa:9e:6f:a5:84:25:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 26 04:03:06 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=b20480814a3a1898df46438143532203b75702f8767eafdd36a8b75017c0e0b3, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8a:95:56:51:5d:77:9b:84:8c:4e:7f:9b:bd: 73:62:9a:f1:8d:88:76:4b:4d:43:40:76:40:46:dd: 43:65:87:52:bf:40:6f:b9:db:22:d1:af:13:e2:9c: f6:43:0e:f1:95:53:34:3a:de:08:0f:a7:c4:3c:63: c9:fe:ed:c9:db:83:38:13:62:d2:33:af:d5:65:c6: 44:48:1e:b9:e1:75:99:79:20:3a:74:27:d5:7f:48: 6a:6e:e2:1b:ce:a8:93:b3:98:84:f0:32:da:4e:b2: 33:cb:8a:99:76:fd:ac:43:aa:9d:bb:24:ab:99:08: 49:59:3f:48:2a:fc:bb:b4:af:3c:15:84:af:af:2c: aa:82:68:be:c8:ce:44:93:70:ea:11:ad:e6:f6:93: 1d:e0:10:6f:ee:cf:f0:de:a3:ab:83:30:de:0a:42: ea:eb:06:02:72:97:0f:e4:33:66:bb:b7:6b:1b:b4: a3:cc:3e:cb:85:ac:66:83:2f:22:3c:80:9d:47:e3: 82:e0:31:3a:29:68:35:ee:d5:8c:c7:fa:89:b7:df: f3:01:bf:c0:4f:2e:d9:97:a6:8e:c4:46:b9:ae:86: 67:ca:d0:9f:cb:00:63:64:54:5e:08:04:a8:76:55: 75:6d:3e:b3:bb:6d:16:4a:aa:d7:74:6e:7e:42:e1: cd:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:9E:D8:ED:ED:8E:EB:36:EA:6B:F1:16:63:C7:A5:43:7E:5F:9C:FC X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a625c009-eed5-4024-b5c0-469960c8e95e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:30b::/48 Signature Algorithm: sha256WithRSAEncryption 51:c6:fb:cd:c7:81:29:59:69:71:d2:8a:bb:69:57:51:20:64: fe:42:77:61:08:47:1d:68:12:f8:39:c8:27:cf:c3:e5:f4:0e: d8:2e:59:1f:aa:4d:44:eb:35:cd:cd:e9:99:7e:d0:99:8f:8b: 7b:ff:c3:81:0b:ed:99:4e:e6:69:6b:66:9b:78:70:26:e1:8c: fe:3b:55:95:93:40:c7:75:3f:7b:72:2f:b7:4e:61:ee:f2:16: b0:81:57:18:0f:60:0c:d8:df:49:23:00:c2:ea:b3:33:d0:cd: 62:7f:28:8f:97:48:f2:2a:f5:7c:4d:6d:9f:06:e8:e4:08:f9: 4f:81:e4:4a:a8:51:0b:ad:88:6e:a3:37:92:cb:99:d9:e4:f5: 06:6f:35:62:bc:64:dc:71:96:29:64:66:70:a8:d7:34:01:11: 6e:f9:98:8e:ad:32:6e:d2:c6:ab:ab:2e:cd:8e:fd:15:90:4f: 2c:3c:3c:f9:b8:64:a5:15:cd:3b:d9:05:df:6d:31:86:18:c8: f6:c1:6e:2a:04:dc:02:53:43:cd:ae:83:6e:bf:1c:65:8d:85: 5e:ef:90:75:9f:88:6c:7a:da:4e:d7:3f:8d:4a:eb:f0:46:0b: 9c:0b:5e:5e:3d:bd:a8:ed:69:49:45:fd:74:44:87:ea:d2:7e: c7:1c:0a:fe -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQzDlWaMkIrBkCoOC6vqeb6WEJe0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYxMDI2MDQwMzA2WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMjA0ODA4MTRhM2ExODk4ZGY0NjQzODE0MzUzMjIwM2I3 NTcwMmY4NzY3ZWFmZGQzNmE4Yjc1MDE3YzBlMGIzMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYipVWUV13m4SMTn+bvXNimvGNiHZLTUNAdkBG3UNlh1K/ QG+52yLRrxPinPZDDvGVUzQ63ggPp8Q8Y8n+7cnbgzgTYtIzr9VlxkRIHrnhdZl5 IDp0J9V/SGpu4hvOqJOzmITwMtpOsjPLipl2/axDqp27JKuZCElZP0gq/Lu0rzwV hK+vLKqCaL7IzkSTcOoRreb2kx3gEG/uz/Deo6uDMN4KQurrBgJylw/kM2a7t2sb tKPMPsuFrGaDLyI8gJ1H44LgMTopaDXu1YzH+om33/MBv8BPLtmXpo7ERrmuhmfK 0J/LAGNkVF4IBKh2VXVtPrO7bRZKqtd0bn5C4c3zAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUhZ7Y7e2O6zbqa/EWY8elQ35fnPwwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2E2MjVjMDA5LWVlZDUtNDAyNC1iNWMwLTQ2OTk2MGM4ZTk1ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAAwswDQYJKoZIhvcNAQELBQADggEBAFHG+83HgSlZaXHSirtpV1Eg ZP5Cd2EIRx1oEvg5yCfPw+X0DtguWR+qTUTrNc3N6Zl+0JmPi3v/w4EL7ZlO5mlr Zpt4cCbhjP47VZWTQMd1P3tyL7dOYe7yFrCBVxgPYAzY30kjAMLqszPQzWJ/KI+X SPIq9XxNbZ8G6OQI+U+B5EqoUQutiG6jN5LLmdnk9QZvNWK8ZNxxlilkZnCo1zQB EW75mI6tMm7SxqurLs2O/RWQTyw8PPm4ZKUVzTvZBd9tMYYYyPbBbioE3AJTQ82u g26/HGWNhV7vkHWfiGx62k7XP41K6/BGC5wLXl49vajtaUlF/XREh+rSfsccCv4= -----END CERTIFICATE-----Generated at Thu Nov 5 07:17:09 2026 by rpki-client