$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a5584f6d-cac4-4271-8828-61528ae33bee.roa File: a5584f6d-cac4-4271-8828-61528ae33bee.roa (raw, json) Hash identifier: G3rjPQxqPe74HQ7FI9WUh+9xpxir6z3A3ZAzEA4qRpM= Subject key identifier: 80:BE:11:AE:56:35:D8:2C:D9:FC:F1:54:27:47:DF:84:BB:D2:44:19 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 70B80942B96673F6BCB37697A8A5F8DC481688C8 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a5584f6d-cac4-4271-8828-61528ae33bee.roa Signing time: Tue 13 Oct 2026 00:30:11 +0000 ROA not before: Tue 13 Oct 2026 00:30:11 +0000 ROA not after: Mon 11 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2631:1:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:b8:09:42:b9:66:73:f6:bc:b3:76:97:a8:a5:f8:dc:48:16:88:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 13 00:30:11 2026 GMT Not After : Jan 11 23:59:59 2027 GMT Subject: serialNumber=8afd774cc1f8709ad426795444276497818ecfd3c76b16d3eec2041a3327bdc4, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d3:b6:38:f5:5d:9b:ea:5d:08:6c:36:d0:ae: e8:d8:dc:09:f8:b9:8a:82:b9:93:ad:d6:1b:c0:cb: 0f:67:f6:6a:f8:3b:47:13:06:24:aa:51:20:31:3f: 64:ba:d9:46:8b:3b:fd:88:2f:7e:50:6a:44:14:54: 2f:76:96:3b:12:97:f3:fd:a8:e1:b1:9c:0c:39:ea: 50:3b:32:b3:3e:fd:88:34:97:6e:72:e5:7a:5f:2e: 2e:d6:84:60:83:0f:b1:94:d6:31:3f:44:68:77:1c: 00:5f:07:a0:e3:1e:ed:81:85:9a:cb:41:8a:cb:44: 64:90:23:fa:d9:76:a8:b6:73:57:94:ff:08:d6:c8: bf:c1:89:ac:17:0e:cb:a6:23:d1:c5:bb:cf:c2:a7: bd:61:b9:a4:2b:bd:9b:4b:d7:bc:ba:8a:4f:c8:c1: f0:76:c3:e1:c3:00:89:e5:97:01:97:31:d2:d7:da: af:98:33:24:53:c7:09:e9:3b:05:a6:ff:8c:71:9c: f0:7c:d7:93:cf:60:b2:4a:bf:fd:9b:4d:b1:c0:d3: 70:78:b4:e8:40:a3:35:d0:a7:84:dc:cb:d3:99:04: a8:f9:3b:53:c6:e7:64:f1:d3:aa:5a:57:39:e4:3d: 10:25:8c:2c:14:03:ad:cb:2c:71:8d:07:e3:81:fa: 8e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:BE:11:AE:56:35:D8:2C:D9:FC:F1:54:27:47:DF:84:BB:D2:44:19 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a5584f6d-cac4-4271-8828-61528ae33bee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2631:1:100::/48 Signature Algorithm: sha256WithRSAEncryption 45:7f:7a:d1:0f:77:83:4d:4b:18:cc:2c:8f:8d:e5:63:d6:7e: aa:45:0f:93:ef:01:d3:c7:65:df:a6:d0:10:6e:91:fa:75:08: e5:66:d4:f0:26:b1:62:ed:91:99:2d:4e:59:59:21:22:84:b0: 2f:e3:6b:dd:b1:41:c8:86:cb:99:3d:00:ef:33:a5:b7:d0:d3: 65:21:b2:c0:9b:e3:af:12:ff:23:5c:ff:f5:80:07:09:9a:69: 63:ec:36:31:e9:7d:b2:36:52:4e:a5:05:f0:ea:93:cd:64:20: de:71:f5:f6:e1:95:08:8b:a2:6e:92:0a:8f:00:ed:c2:ca:17: 6a:ea:a6:01:a0:de:fc:9f:cd:07:84:63:a5:97:1e:fd:a2:19: 9c:b3:7c:63:25:0e:ac:6d:47:28:5f:79:32:bb:25:46:63:31: b1:d2:7f:27:1b:fe:ef:45:69:59:ba:4c:01:7e:d2:0a:66:bd: b4:1e:e5:22:20:6e:26:fc:0c:17:5c:3c:ae:a7:7f:66:d2:c3: 4e:f8:49:22:03:d8:8f:cc:fe:b2:f5:1d:01:18:14:eb:38:ce: dd:89:12:e4:bd:17:8b:46:52:9f:62:35:c8:f2:d7:ad:c8:81: 38:db:d7:be:90:8f:f1:0d:53:10:45:47:71:c3:36:33:62:e1: 9a:3e:51:e2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcLgJQrlmc/a8s3aXqKX43EgWiMgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDEzMDAzMDExWhcNMjcwMTExMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YWZkNzc0Y2MxZjg3MDlhZDQyNjc5NTQ0NDI3NjQ5Nzgx OGVjZmQzYzc2YjE2ZDNlZWMyMDQxYTMzMjdiZGM0MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCo07Y49V2b6l0IbDbQrujY3An4uYqCuZOt1hvAyw9n9mr4 O0cTBiSqUSAxP2S62UaLO/2IL35QakQUVC92ljsSl/P9qOGxnAw56lA7MrM+/Yg0 l25y5XpfLi7WhGCDD7GU1jE/RGh3HABfB6DjHu2BhZrLQYrLRGSQI/rZdqi2c1eU /wjWyL/BiawXDsumI9HFu8/Cp71huaQrvZtL17y6ik/IwfB2w+HDAInllwGXMdLX 2q+YMyRTxwnpOwWm/4xxnPB815PPYLJKv/2bTbHA03B4tOhAozXQp4Tcy9OZBKj5 O1PG52Tx06paVznkPRAljCwUA63LLHGNB+OB+o7TAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUgL4RrlY12CzZ/PFUJ0ffhLvSRBkwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2E1NTg0ZjZkLWNhYzQtNDI3MS04ODI4LTYxNTI4YWUzM2JlZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmMQABAQAwDQYJKoZIhvcNAQELBQADggEBAEV/etEPd4NNSxjMLI+N5WPW fqpFD5PvAdPHZd+m0BBukfp1COVm1PAmsWLtkZktTllZISKEsC/ja92xQciGy5k9 AO8zpbfQ02UhssCb468S/yNc//WABwmaaWPsNjHpfbI2Uk6lBfDqk81kIN5x9fbh lQiLom6SCo8A7cLKF2rqpgGg3vyfzQeEY6WXHv2iGZyzfGMlDqxtRyhfeTK7JUZj MbHSfycb/u9FaVm6TAF+0gpmvbQe5SIgbib8DBdcPK6nf2bSw074SSID2I/M/rL1 HQEYFOs4zt2JEuS9F4tGUp9iNcjy163IgTjb176Qj/ENUxBFR3HDNjNi4Zo+UeI= -----END CERTIFICATE-----Generated at Sun Nov 15 21:50:26 2026 by rpki-client