$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d7e60239-def6-4254-bb11-383c707d64aa.roa File: d7e60239-def6-4254-bb11-383c707d64aa.roa (raw, json) Hash identifier: rngsCiQ4h+edWmycDvuI+TJrGN1BXPTccgh7VNmwOys= Subject key identifier: 83:DD:46:13:1B:6A:BC:15:A6:5B:F2:8F:1A:2A:BE:36:E0:1C:CC:57 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 297D8195583E6C814F09F9B121A9B8AD851D28DF Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d7e60239-def6-4254-bb11-383c707d64aa.roa Signing time: Mon 26 Oct 2026 03:40:07 +0000 ROA not before: Mon 26 Oct 2026 03:40:07 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:549::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:7d:81:95:58:3e:6c:81:4f:09:f9:b1:21:a9:b8:ad:85:1d:28:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 26 03:40:07 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=b8a205e5a9b4dbe55b437d83084f7995a14143e1d1a1b1233bfe8a62ceec49f9, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e3:ee:77:cb:f0:9b:60:d6:51:0f:14:e7:0c: 72:8c:1d:90:54:ee:02:04:5b:6a:91:fc:4c:44:ab: ba:b0:a9:92:4a:ff:67:a3:da:0b:d5:1a:12:e3:ce: 7b:58:31:5e:46:22:72:43:72:5e:f0:e5:42:4e:dd: b5:1a:ef:a8:f2:39:36:c1:2e:cf:8b:13:58:e7:bf: 66:9d:24:e7:b7:57:ef:e0:83:e4:e1:34:50:24:45: ce:f5:a3:1b:2f:c7:76:79:ea:ff:e1:76:a7:87:28: b8:15:a2:56:b4:2f:83:91:c2:d1:d2:0e:a0:67:a0: 28:dc:2f:a4:e0:55:6a:fb:b4:06:86:c1:f4:69:09: 55:47:1e:59:99:63:6f:19:fb:16:fb:f1:83:75:fb: e7:5f:ae:11:40:ab:68:b8:13:c3:a6:17:51:c2:db: e3:60:ac:9a:1b:34:3a:ca:a0:40:aa:8f:5d:21:f2: 0b:61:07:51:fc:58:7b:90:aa:cd:7e:5d:b9:cc:f3: 54:f7:d9:4d:89:45:7b:7e:4c:91:2e:dd:fc:00:c2: 88:0b:7a:f3:82:e0:10:2b:16:0c:02:f3:61:1a:19: dd:36:b0:37:6d:4e:e8:0a:08:b4:87:47:7f:6c:29: 5f:6c:1a:1b:d8:ad:38:08:a8:3d:b9:96:d6:28:39: dd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:DD:46:13:1B:6A:BC:15:A6:5B:F2:8F:1A:2A:BE:36:E0:1C:CC:57 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d7e60239-def6-4254-bb11-383c707d64aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:549::/48 Signature Algorithm: sha256WithRSAEncryption 73:0c:c0:26:d0:d8:5c:72:79:8c:f1:99:26:8d:8e:b0:b1:35: bd:43:e8:41:16:9d:c6:b3:bf:36:22:2a:43:ab:ab:3a:ed:54: a8:af:0e:10:c1:c4:31:f9:28:09:7d:cc:21:cd:14:ca:b9:e3: 12:da:1e:f9:d3:22:44:56:64:30:f8:3f:28:64:b0:87:1e:06: 1a:c7:1c:bd:97:ad:39:66:8e:8a:c9:9e:2b:05:88:38:3a:07: 3f:6e:97:4e:90:c0:02:f3:9e:a5:b1:bb:81:d1:e3:ed:c9:e9: 3c:45:b0:91:53:2d:56:9e:3d:6d:aa:f1:46:d8:09:ae:71:5c: 7d:4f:8f:96:a3:06:e4:69:05:05:5f:a0:c8:9e:5c:6b:a0:c0: 87:9d:c1:b9:09:0d:55:3f:05:d9:f4:b1:9f:47:ba:81:0e:1f: b8:8c:04:83:9a:4e:1c:81:df:1e:b3:9c:9c:5d:d0:b5:58:d3: b7:65:4e:bd:f5:7c:e1:77:a8:9d:b3:81:51:18:c0:6b:a9:dd: e0:13:da:d1:51:38:62:fc:fd:66:6e:51:f1:1d:c5:c4:23:a4: 33:34:3c:e1:c2:17:0d:76:a3:a8:90:f4:03:09:57:d8:f6:d4: ab:c3:66:be:d5:0d:12:7d:7e:c7:de:e3:07:21:e3:14:5c:b6: f1:64:83:1c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKX2BlVg+bIFPCfmxIam4rYUdKN8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYxMDI2MDM0MDA3WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiOGEyMDVlNWE5YjRkYmU1NWI0MzdkODMwODRmNzk5NWEx NDE0M2UxZDFhMWIxMjMzYmZlOGE2MmNlZWM0OWY5MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+4+53y/CbYNZRDxTnDHKMHZBU7gIEW2qR/ExEq7qwqZJK /2ej2gvVGhLjzntYMV5GInJDcl7w5UJO3bUa76jyOTbBLs+LE1jnv2adJOe3V+/g g+ThNFAkRc71oxsvx3Z56v/hdqeHKLgVola0L4ORwtHSDqBnoCjcL6TgVWr7tAaG wfRpCVVHHlmZY28Z+xb78YN1++dfrhFAq2i4E8OmF1HC2+NgrJobNDrKoECqj10h 8gthB1H8WHuQqs1+XbnM81T32U2JRXt+TJEu3fwAwogLevOC4BArFgwC82EaGd02 sDdtTugKCLSHR39sKV9sGhvYrTgIqD25ltYoOd29AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUg91GExtqvBWmW/KPGiq+NuAczFcwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2Q3ZTYwMjM5LWRlZjYtNDI1NC1iYjExLTM4M2M3MDdkNjRhYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABUkwDQYJKoZIhvcNAQELBQADggEBAHMMwCbQ2FxyeYzxmSaNjrCx Nb1D6EEWncazvzYiKkOrqzrtVKivDhDBxDH5KAl9zCHNFMq54xLaHvnTIkRWZDD4 PyhksIceBhrHHL2XrTlmjorJnisFiDg6Bz9ul06QwALznqWxu4HR4+3J6TxFsJFT LVaePW2q8UbYCa5xXH1Pj5ajBuRpBQVfoMieXGugwIedwbkJDVU/Bdn0sZ9HuoEO H7iMBIOaThyB3x6znJxd0LVY07dlTr31fOF3qJ2zgVEYwGup3eAT2tFROGL8/WZu UfEdxcQjpDM0POHCFw12o6iQ9AMJV9j21KvDZr7VDRJ9fsfe4wch4xRctvFkgxw= -----END CERTIFICATE-----Generated at Sun Nov 8 02:56:55 2026 by rpki-client