$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c8560206-4c68-46a6-834e-4971768d50f8.roa File: c8560206-4c68-46a6-834e-4971768d50f8.roa (raw, json) Hash identifier: MSDTTltWvD0X0ODCmWuAngxKjbj9AJ1fWTYmR1nmkbo= Subject key identifier: 36:DF:06:54:FC:57:82:37:B9:9D:8C:51:FA:D4:E6:3B:30:8B:C6:AC Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 1F398C66C85F596250881CE3EA84404BACB789F4 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c8560206-4c68-46a6-834e-4971768d50f8.roa Signing time: Sat 24 Oct 2026 01:50:06 +0000 ROA not before: Sat 24 Oct 2026 01:50:06 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2606:7b40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:39:8c:66:c8:5f:59:62:50:88:1c:e3:ea:84:40:4b:ac:b7:89:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 24 01:50:06 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=b66471c1f0d68142e34bef51192e55aec5ca70f7867c41b8c336a8f7ef87cb1f, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0d:0f:c0:ec:e8:71:55:3e:0b:d4:4c:03:77: 66:24:00:2d:b0:58:72:f7:e1:66:a0:41:bb:b3:40: f2:99:a4:a3:8a:6e:61:d3:39:e9:08:f2:24:2b:bd: 46:e3:94:a6:26:84:a5:6a:23:60:5c:f5:4c:1d:1f: 79:3b:70:9d:b5:8e:59:86:c4:54:d1:c9:d1:2e:be: 17:be:c8:b0:9e:1f:8b:b4:15:4c:4c:9b:6d:3e:d4: 68:fb:79:47:ca:dd:43:73:b0:fd:72:0f:3c:db:61: a3:aa:3c:ad:11:a9:2e:95:cf:80:11:fe:e9:08:37: c7:cd:6e:3c:c2:e7:f8:33:2b:9a:d7:68:c8:ad:19: 9b:e4:28:01:76:db:47:c2:9e:c1:61:24:cc:32:d9: d1:14:9e:e8:2d:0b:a9:04:15:f2:e8:9a:ae:bc:14: 75:b3:24:f8:19:ad:6a:83:bf:db:b2:f6:4f:55:46: f2:1f:9d:96:19:de:09:c9:2e:83:8d:25:45:58:f7: ce:4b:3c:a6:a9:9c:7c:d4:16:88:61:85:94:5b:55: 03:38:ae:52:01:b2:51:52:01:93:32:20:0b:93:8d: ee:92:06:6a:af:8f:56:65:12:69:df:d2:c4:5f:a9: a8:57:61:04:5d:4a:9c:7b:f5:ec:64:98:d4:07:88: 39:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:DF:06:54:FC:57:82:37:B9:9D:8C:51:FA:D4:E6:3B:30:8B:C6:AC X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c8560206-4c68-46a6-834e-4971768d50f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2606:7b40::/32 Signature Algorithm: sha256WithRSAEncryption 28:d1:be:94:9c:9c:c4:91:fd:a5:be:a0:14:28:c7:21:52:bf: 34:ab:15:af:4c:42:18:2f:92:7a:10:62:91:8c:5f:f9:63:9e: b3:de:0f:75:3d:78:54:45:06:8d:5f:3a:15:2b:0f:b5:2b:03: 57:3e:35:52:5f:38:ff:7b:e8:69:25:29:e8:a1:25:9f:b1:71: 6b:7e:30:9e:bd:5f:18:43:ef:97:7e:e5:7f:c3:9f:7b:d5:5a: 80:8a:53:f7:7f:3e:02:f6:9b:99:ea:42:5c:38:9a:ce:db:81: ce:bc:3e:ee:29:47:9f:bb:ba:5a:11:50:9c:07:d4:9b:42:f1: e3:9c:f1:c6:a4:d6:a8:0a:15:d6:66:22:27:e3:2f:37:88:eb: a6:b4:4b:30:e4:67:45:61:c4:3a:5f:1e:db:c1:f2:15:4b:27: 9e:94:6e:05:87:da:f3:9f:db:43:27:be:65:37:c2:35:c9:47: b0:a1:73:fb:d9:1d:8e:b5:2e:a2:87:7e:90:1a:f0:28:a4:9f: 45:81:5d:69:ec:1e:31:87:cb:1c:d7:47:69:4f:0a:bc:78:cc: a3:bf:5d:99:2b:18:63:29:5b:23:1c:30:5b:9c:02:00:75:20: a1:ad:fb:34:b8:30:87:5f:8a:21:d6:55:16:46:09:a9:35:6e: 47:65:b8:9c -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUHzmMZshfWWJQiBzj6oRAS6y3ifQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDI0MDE1MDA2WhcNMjcwMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNjY0NzFjMWYwZDY4MTQyZTM0YmVmNTExOTJlNTVhZWM1 Y2E3MGY3ODY3YzQxYjhjMzM2YThmN2VmODdjYjFmMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDeDQ/A7OhxVT4L1EwDd2YkAC2wWHL34WagQbuzQPKZpKOK bmHTOekI8iQrvUbjlKYmhKVqI2Bc9UwdH3k7cJ21jlmGxFTRydEuvhe+yLCeH4u0 FUxMm20+1Gj7eUfK3UNzsP1yDzzbYaOqPK0RqS6Vz4AR/ukIN8fNbjzC5/gzK5rX aMitGZvkKAF220fCnsFhJMwy2dEUnugtC6kEFfLomq68FHWzJPgZrWqDv9uy9k9V RvIfnZYZ3gnJLoONJUVY985LPKapnHzUFohhhZRbVQM4rlIBslFSAZMyIAuTje6S Bmqvj1ZlEmnf0sRfqahXYQRdSpx79exkmNQHiDmbAgMBAAGjggKyMIICrjAdBgNV HQ4EFgQUNt8GVPxXgje5nYxR+tTmOzCLxqwwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2M4NTYwMjA2LTRjNjgtNDZhNi04MzRlLTQ5NzE3NjhkNTBmOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAmBntAMA0GCSqGSIb3DQEBCwUAA4IBAQAo0b6UnJzEkf2lvqAUKMchUr80 qxWvTEIYL5J6EGKRjF/5Y56z3g91PXhURQaNXzoVKw+1KwNXPjVSXzj/e+hpJSno oSWfsXFrfjCevV8YQ++XfuV/w5971VqAilP3fz4C9puZ6kJcOJrO24HOvD7uKUef u7paEVCcB9SbQvHjnPHGpNaoChXWZiIn4y83iOumtEsw5GdFYcQ6Xx7bwfIVSyee lG4Fh9rzn9tDJ75lN8I1yUewoXP72R2OtS6ih36QGvAopJ9FgV1p7B4xh8sc10dp Twq8eMyjv12ZKxhjKVsjHDBbnAIAdSChrfs0uDCHX4oh1lUWRgmpNW5HZbic -----END CERTIFICATE-----Generated at Sun Nov 15 21:50:43 2026 by rpki-client