$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f1d4aca1-5510-4be5-babc-a05cdabd7e4a.roa File: f1d4aca1-5510-4be5-babc-a05cdabd7e4a.roa (raw, json) Hash identifier: jxfmGsyvYML7YF1sfYs80SK18flavNV7A0EHKs2clbA= Subject key identifier: 31:8C:9C:22:91:07:7F:F3:58:9C:91:EE:D8:D0:C6:98:68:93:4C:E4 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 226AB37F09BC8DADE5430AA5E0A4877EB1B7B1AA Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f1d4aca1-5510-4be5-babc-a05cdabd7e4a.roa Signing time: Thu 15 Oct 2026 03:07:35 +0000 ROA not before: Thu 15 Oct 2026 03:07:35 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:c0f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:6a:b3:7f:09:bc:8d:ad:e5:43:0a:a5:e0:a4:87:7e:b1:b7:b1:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 15 03:07:35 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=c89b2ad1a7ccfa1afd00d00d4d55e00e065fcf0cd5c4a22cb1e5650d93d7d3a5, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f6:84:c1:5c:e4:f8:02:e4:e1:f0:90:e3:7e: 4e:81:ad:86:d2:71:fc:e4:88:16:16:44:b3:d6:5a: 86:86:46:83:82:64:5b:1e:84:57:1c:a0:f6:41:af: 9e:8f:13:71:c2:ac:e4:4c:d6:88:2f:68:b3:a5:95: d9:60:ec:ed:b1:77:9e:e0:f3:30:59:04:db:a7:81: 1f:c3:34:26:4f:77:5b:02:95:35:2a:f7:64:82:30: 06:46:51:c7:d9:b6:29:66:ef:c2:ff:25:5f:12:c8: 03:fc:27:e2:c4:63:fc:a4:4b:3e:26:3b:18:d4:c8: ce:e3:01:ca:45:13:7f:f6:dc:a8:8b:f8:16:e7:1e: 08:74:4f:aa:43:75:70:fb:2a:a9:0c:25:c7:ca:79: 8a:bf:48:ee:44:f1:8c:f2:25:aa:2f:76:68:b9:5d: 22:94:4e:ff:ce:9b:56:36:60:72:d6:75:de:61:c5: e7:9b:16:0a:8a:25:ec:98:1d:66:50:76:ea:09:20: 74:30:1f:ac:4e:83:a4:68:12:9e:2a:cc:90:a9:5f: db:34:b0:da:53:59:ce:70:4c:a7:6a:64:e5:08:f8: d0:c6:e4:5c:c0:58:c2:31:33:86:0f:aa:0a:f6:2d: 1b:7d:e5:5f:7d:2b:1e:93:1f:b3:3a:e2:15:ae:69: 35:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:8C:9C:22:91:07:7F:F3:58:9C:91:EE:D8:D0:C6:98:68:93:4C:E4 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f1d4aca1-5510-4be5-babc-a05cdabd7e4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c0f::/48 Signature Algorithm: sha256WithRSAEncryption 84:02:af:b2:97:25:d8:ab:69:1e:e0:e7:fd:1c:d2:75:a6:0c: 14:4d:22:20:de:b9:06:fa:97:91:ff:b0:2f:43:08:88:b8:20: 95:85:3c:92:65:57:50:83:9a:c9:70:aa:a8:4d:a8:10:72:11: 0d:51:12:7d:d2:db:b6:c1:b6:00:16:29:3e:fb:ca:61:77:3d: 37:b0:d6:8d:8a:1f:2b:9b:b4:69:e2:6b:96:66:cc:fb:3d:26: 6a:25:ad:d1:37:67:63:3c:34:af:77:dd:08:ff:fb:75:fa:bc: ec:72:7d:6d:79:4e:eb:8b:fa:63:ab:ce:4c:22:90:b7:49:2f: fd:9b:98:36:29:f5:a8:6b:b7:8c:86:93:0d:23:8a:3a:d7:f1: f8:b8:8d:b8:d0:00:ad:74:a7:61:ca:bb:78:ae:9c:05:67:a0: 38:8c:b1:93:fd:24:f5:fb:6c:46:c3:98:db:62:aa:c4:ac:9c: bd:98:41:d8:80:33:1b:b6:54:a8:ea:33:b6:78:25:6b:29:f3: 57:0a:2c:41:4a:0e:41:c2:c6:04:d3:2c:38:3e:dd:0d:dd:15: 4b:d2:a1:f1:a9:16:56:b0:57:72:3b:77:6b:ae:d7:a6:e4:1b: ab:0d:44:2d:7b:72:97:a1:3c:18:95:bc:cc:2f:25:73:6e:e3: 9d:63:01:75 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUImqzfwm8ja3lQwql4KSHfrG3saowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYxMDE1MDMwNzM1WhcNMjcwMTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjODliMmFkMWE3Y2NmYTFhZmQwMGQwMGQ0ZDU1ZTAwZTA2 NWZjZjBjZDVjNGEyMmNiMWU1NjUwZDkzZDdkM2E1MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDS9oTBXOT4AuTh8JDjfk6BrYbScfzkiBYWRLPWWoaGRoOC ZFsehFccoPZBr56PE3HCrORM1ogvaLOlldlg7O2xd57g8zBZBNungR/DNCZPd1sC lTUq92SCMAZGUcfZtilm78L/JV8SyAP8J+LEY/ykSz4mOxjUyM7jAcpFE3/23KiL +BbnHgh0T6pDdXD7KqkMJcfKeYq/SO5E8YzyJaovdmi5XSKUTv/Om1Y2YHLWdd5h xeebFgqKJeyYHWZQduoJIHQwH6xOg6RoEp4qzJCpX9s0sNpTWc5wTKdqZOUI+NDG 5FzAWMIxM4YPqgr2LRt95V99Kx6TH7M64hWuaTXLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUMYycIpEHf/NYnJHu2NDGmGiTTOQwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2YxZDRhY2ExLTU1MTAtNGJlNS1iYWJjLWEwNWNkYWJkN2U0YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADA8wDQYJKoZIhvcNAQELBQADggEBAIQCr7KXJdiraR7g5/0c0nWm DBRNIiDeuQb6l5H/sC9DCIi4IJWFPJJlV1CDmslwqqhNqBByEQ1REn3S27bBtgAW KT77ymF3PTew1o2KHyubtGnia5ZmzPs9JmolrdE3Z2M8NK933Qj/+3X6vOxyfW15 TuuL+mOrzkwikLdJL/2bmDYp9ahrt4yGkw0jijrX8fi4jbjQAK10p2HKu3iunAVn oDiMsZP9JPX7bEbDmNtiqsSsnL2YQdiAMxu2VKjqM7Z4JWsp81cKLEFKDkHCxgTT LDg+3Q3dFUvSofGpFlawV3I7d2uu16bkG6sNRC17cpehPBiVvMwvJXNu451jAXU= -----END CERTIFICATE-----Generated at Sat Nov 7 23:51:38 2026 by rpki-client