$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ce035316-a06e-4b49-a04d-0f1a5ca31246.roa File: ce035316-a06e-4b49-a04d-0f1a5ca31246.roa (raw, json) Hash identifier: QiHrJsjai3X5+EauQB9XO08Ks3oikZw5cYbhou7vlgw= Subject key identifier: 7B:D1:83:91:AF:7D:19:E4:2F:6F:FB:19:E9:2E:4A:A7:64:A2:A2:AB Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 6F480C84C509CB421AFE54643387152AF8F87E25 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ce035316-a06e-4b49-a04d-0f1a5ca31246.roa Signing time: Thu 15 Oct 2026 03:07:14 +0000 ROA not before: Thu 15 Oct 2026 03:07:14 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:c18::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:48:0c:84:c5:09:cb:42:1a:fe:54:64:33:87:15:2a:f8:f8:7e:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 15 03:07:14 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=a41ec7e48dadb323fd1c92643842db76eb6a9532a40c62380a7c1ad66add95b0, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:22:e2:84:e9:eb:4c:ea:91:bc:69:5c:83:de: 7a:63:64:04:2c:60:23:f0:99:c3:0d:52:87:9f:d2: c5:bc:c4:03:24:ce:07:c4:7b:5b:91:dd:11:fb:94: 12:a5:50:d8:66:8a:c4:f9:fe:a6:d6:56:49:9f:67: c4:c3:8c:f5:14:f2:ac:6b:1a:70:ab:c8:07:55:fb: bb:36:54:ea:1d:11:88:b1:d0:0e:44:93:b8:9d:b8: d3:ee:06:39:b3:c7:3f:8e:c3:fb:1c:ec:7c:40:93: 65:34:cf:93:33:5e:3d:22:09:56:83:42:86:77:d5: 82:01:92:bd:d0:9a:cd:57:b0:dd:c9:b0:40:a3:4e: e3:e8:d5:e1:31:b8:9e:64:66:cf:67:c9:76:90:c4: b0:4f:40:7e:0d:ba:03:0d:e2:ae:61:4d:bd:c7:a4: e7:0f:77:67:24:98:08:90:41:ec:11:ef:58:16:17: 8b:44:ca:74:ef:99:d7:df:52:a2:ce:95:71:d3:9d: f5:b2:bf:13:5e:f6:48:b7:7c:d3:ec:5f:8d:ce:b9: 8b:5e:c9:19:95:15:20:35:e7:7e:ea:f4:1e:e9:68: b3:72:17:de:27:71:87:d9:92:04:0a:5f:be:61:ba: ae:ac:c8:ba:1b:b3:f7:eb:1f:c1:30:df:84:3f:a0: bb:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D1:83:91:AF:7D:19:E4:2F:6F:FB:19:E9:2E:4A:A7:64:A2:A2:AB X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ce035316-a06e-4b49-a04d-0f1a5ca31246.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c18::/48 Signature Algorithm: sha256WithRSAEncryption 6e:c7:a7:d1:72:93:22:33:ef:ce:b9:15:1c:f1:0d:5f:cc:40: b9:5c:fb:1e:17:f9:a8:0d:b4:38:69:35:c4:10:7f:33:20:e0: 9e:d3:d9:ab:3c:fc:ba:e2:2d:28:3a:41:b9:fb:04:ab:91:80: 12:2b:71:1f:7f:f0:05:d3:23:c2:11:34:b4:c3:c9:e8:44:9b: cd:50:41:b4:3c:ae:f3:50:74:e8:a1:3e:f3:6e:95:81:81:2d: 6a:b4:b1:04:54:13:ed:4e:59:dd:5a:e8:a5:f8:d8:87:89:7f: 3e:44:6a:d8:46:db:ca:86:9e:e2:c4:7e:24:05:ee:4a:22:be: c7:bb:b9:d7:79:c3:67:ca:fd:ef:4f:29:ea:6f:45:bf:60:4d: af:43:da:a4:af:89:7a:cb:76:92:9a:a8:d8:1a:90:17:28:9c: 7d:ba:77:33:f1:f9:e5:65:76:99:d2:cb:4d:37:ad:4b:45:84: 52:72:04:5f:5b:72:2f:11:7d:08:1c:d8:7b:11:6e:fa:56:fa: 82:33:dc:0c:3d:d7:6a:6f:d1:27:8d:4f:b6:0d:44:7f:1e:e2: 9f:cd:2f:e5:e1:d9:15:11:74:7c:9e:bc:61:db:8c:ec:62:91: e6:68:c8:1c:48:ca:3e:04:6e:cc:f4:c2:41:aa:df:50:91:d4: 43:70:44:12 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUb0gMhMUJy0Ia/lRkM4cVKvj4fiUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYxMDE1MDMwNzE0WhcNMjcwMTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNDFlYzdlNDhkYWRiMzIzZmQxYzkyNjQzODQyZGI3NmVi NmE5NTMyYTQwYzYyMzgwYTdjMWFkNjZhZGQ5NWIwMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLIuKE6etM6pG8aVyD3npjZAQsYCPwmcMNUoef0sW8xAMk zgfEe1uR3RH7lBKlUNhmisT5/qbWVkmfZ8TDjPUU8qxrGnCryAdV+7s2VOodEYix 0A5Ek7iduNPuBjmzxz+Ow/sc7HxAk2U0z5MzXj0iCVaDQoZ31YIBkr3Qms1XsN3J sECjTuPo1eExuJ5kZs9nyXaQxLBPQH4NugMN4q5hTb3HpOcPd2ckmAiQQewR71gW F4tEynTvmdffUqLOlXHTnfWyvxNe9ki3fNPsX43OuYteyRmVFSA1537q9B7paLNy F94ncYfZkgQKX75huq6syLobs/frH8Ew34Q/oLvNAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUe9GDka99GeQvb/sZ6S5Kp2SioqswHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2NlMDM1MzE2LWEwNmUtNGI0OS1hMDRkLTBmMWE1Y2EzMTI0Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBgwDQYJKoZIhvcNAQELBQADggEBAG7Hp9FykyIz7865FRzxDV/M QLlc+x4X+agNtDhpNcQQfzMg4J7T2as8/LriLSg6Qbn7BKuRgBIrcR9/8AXTI8IR NLTDyehEm81QQbQ8rvNQdOihPvNulYGBLWq0sQRUE+1OWd1a6KX42IeJfz5EathG 28qGnuLEfiQF7koivse7udd5w2fK/e9PKepvRb9gTa9D2qSviXrLdpKaqNgakBco nH26dzPx+eVldpnSy003rUtFhFJyBF9bci8RfQgc2HsRbvpW+oIz3Aw912pv0SeN T7YNRH8e4p/NL+Xh2RURdHyevGHbjOxikeZoyBxIyj4Ebsz0wkGq31CR1ENwRBI= -----END CERTIFICATE-----Generated at Sun Nov 8 02:40:27 2026 by rpki-client