$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d8bc745d-2257-41ea-bec6-56ffb08581bc.roa File: d8bc745d-2257-41ea-bec6-56ffb08581bc.roa (raw, json) Hash identifier: TvT9fPk5PdPp17ifkpQ3Z7/9bvOXo/YdDK33CXP/bvY= Subject key identifier: 1C:0A:BE:97:55:30:3E:3D:7E:53:18:60:8E:FA:18:8F:E3:C6:7D:D2 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 310D8AD1869662DE6301140FA2B2C68D14E24F21 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d8bc745d-2257-41ea-bec6-56ffb08581bc.roa Signing time: Fri 23 Oct 2026 00:40:08 +0000 ROA not before: Fri 23 Oct 2026 00:40:08 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:da0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:0d:8a:d1:86:96:62:de:63:01:14:0f:a2:b2:c6:8d:14:e2:4f:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 23 00:40:08 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=499ab86770c062b466d2195eacede5e5eaf56498f107f76131dfc1c8bd5adf8f, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:93:30:a4:bc:a4:df:04:32:a4:a5:11:d1:37: da:bc:4d:e6:f8:ef:90:13:70:30:31:4e:c5:81:a8: 3b:09:78:f4:cf:a5:9f:b9:a9:4c:71:02:84:79:34: 5e:d4:5a:60:42:59:82:d5:a3:cf:e4:16:b8:db:ad: fe:10:8b:a7:59:40:5e:c4:e9:7a:49:1e:59:e5:8e: 6e:d4:03:ab:0e:40:ae:9e:e5:b4:84:b4:df:24:9a: dc:cb:a4:88:4e:47:31:95:4d:be:4f:b2:81:47:63: c1:0e:d9:aa:c2:92:01:b1:8f:45:7f:d3:2a:64:4f: 8e:9f:4e:d1:8e:c7:ff:de:6e:a2:ff:2b:a9:b8:95: e4:26:dc:c4:68:da:68:c4:04:20:93:ff:99:dc:05: a8:a3:24:46:29:8c:02:fb:02:45:8d:13:b4:8d:4c: c5:29:32:cd:b7:8b:6f:85:6d:21:b3:d3:73:3b:8b: 9a:9b:fd:2b:6d:7c:87:d3:a9:21:c0:c0:fd:5a:62: 4e:0d:4b:26:34:2a:0b:12:24:07:4a:09:fd:48:71: 23:4c:09:2d:ce:76:d3:15:d7:3d:c4:31:35:df:9d: 8e:69:ee:84:a8:50:7a:20:e1:dc:8e:db:6a:01:45: 92:f1:53:b0:4e:d8:23:bc:8b:e9:14:d7:9c:e2:e3: 7a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:0A:BE:97:55:30:3E:3D:7E:53:18:60:8E:FA:18:8F:E3:C6:7D:D2 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d8bc745d-2257-41ea-bec6-56ffb08581bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:da0::/44 Signature Algorithm: sha256WithRSAEncryption 0f:26:c4:5e:45:29:3c:51:d9:b4:be:20:24:5f:e9:63:52:7c: 28:53:62:bb:52:8a:61:21:3e:af:5a:9c:12:7c:8d:48:f1:2d: 5d:fb:cf:fe:3c:f9:9a:3f:35:3e:aa:59:a9:f0:57:d4:b2:e5: 27:4c:bf:38:e3:cc:cf:09:ef:35:bb:16:5e:47:15:cd:75:ba: 17:00:7e:57:07:52:58:8f:55:d0:81:39:9c:ce:0b:0c:f1:b3: 1e:fa:9f:26:42:a5:e1:17:d4:5b:91:12:05:da:2c:b2:ad:fd: c4:39:54:5c:be:74:38:0b:9c:01:b5:00:b9:23:fe:9c:73:f1: 84:9a:23:8f:25:ce:94:87:6c:a7:15:45:e4:05:32:b8:95:0d: 8b:fc:a6:13:6a:25:27:53:6f:a5:e9:0a:1e:ae:84:cd:52:61: 03:d0:2f:f9:54:a4:9f:84:96:f0:88:2c:c9:2a:df:cb:ef:73: ca:dc:c7:bf:5f:22:14:26:4c:bf:fd:d6:55:7e:91:24:1d:31: c6:fc:98:55:e5:0a:b9:7d:4c:e7:03:8b:ef:f9:13:73:0b:e2: a0:94:f9:6a:2b:6f:92:77:8e:ed:18:94:ae:53:30:23:2b:dc: 13:85:b0:ab:bb:52:49:a4:0e:d8:c4:5e:34:e6:4a:05:76:15: aa:aa:36:c8 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMQ2K0YaWYt5jARQPorLGjRTiTyEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYxMDIzMDA0MDA4WhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A0OTlhYjg2NzcwYzA2MmI0NjZkMjE5NWVhY2VkZTVlNWVh ZjU2NDk4ZjEwN2Y3NjEzMWRmYzFjOGJkNWFkZjhmMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCFkzCkvKTfBDKkpRHRN9q8Teb475ATcDAxTsWBqDsJePTP pZ+5qUxxAoR5NF7UWmBCWYLVo8/kFrjbrf4Qi6dZQF7E6XpJHlnljm7UA6sOQK6e 5bSEtN8kmtzLpIhORzGVTb5PsoFHY8EO2arCkgGxj0V/0ypkT46fTtGOx//ebqL/ K6m4leQm3MRo2mjEBCCT/5ncBaijJEYpjAL7AkWNE7SNTMUpMs23i2+FbSGz03M7 i5qb/SttfIfTqSHAwP1aYk4NSyY0KgsSJAdKCf1IcSNMCS3OdtMV1z3EMTXfnY5p 7oSoUHog4dyO22oBRZLxU7BO2CO8i+kU15zi43ojAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUHAq+l1UwPj1+UxhgjvoYj+PGfdIwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2Q4YmM3NDVkLTIyNTctNDFlYS1iZWM2LTU2ZmZiMDg1ODFiYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmBZzADaAwDQYJKoZIhvcNAQELBQADggEBAA8mxF5FKTxR2bS+ICRf6WNS fChTYrtSimEhPq9anBJ8jUjxLV37z/48+Zo/NT6qWanwV9Sy5SdMvzjjzM8J7zW7 Fl5HFc11uhcAflcHUliPVdCBOZzOCwzxsx76nyZCpeEX1FuREgXaLLKt/cQ5VFy+ dDgLnAG1ALkj/pxz8YSaI48lzpSHbKcVReQFMriVDYv8phNqJSdTb6XpCh6uhM1S YQPQL/lUpJ+ElvCILMkq38vvc8rcx79fIhQmTL/91lV+kSQdMcb8mFXlCrl9TOcD i+/5E3ML4qCU+Worb5J3ju0YlK5TMCMr3BOFsKu7UkmkDtjEXjTmSgV2FaqqNsg= -----END CERTIFICATE-----Generated at Thu Nov 5 11:28:08 2026 by rpki-client