$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/20095d9f-1e10-490f-9b49-7f5929635802.roa File: 20095d9f-1e10-490f-9b49-7f5929635802.roa (raw, json) Hash identifier: nsF4QphyaJrEMLHPu620R6w3OlCjeQkGq5CRGPnEhOg= Subject key identifier: EE:74:D6:AD:A7:20:74:72:49:46:64:03:20:71:3B:F8:CB:E0:72:A7 Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Certificate serial: 43DC6FF1FE1CF1A62EAA4366B71E6EAFC27EE1DD Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/20095d9f-1e10-490f-9b49-7f5929635802.roa Signing time: Wed 21 Oct 2026 00:09:42 +0000 ROA not before: Wed 21 Oct 2026 00:09:42 +0000 ROA not after: Tue 19 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2605:8380:900::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 13 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:dc:6f:f1:fe:1c:f1:a6:2e:aa:43:66:b7:1e:6e:af:c2:7e:e1:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Validity Not Before: Oct 21 00:09:42 2026 GMT Not After : Jan 19 23:59:59 2027 GMT Subject: serialNumber=f769ec281e826ef5ab516f4081fb86f609fc7b430be20a95f9c4590f6d867d41, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:be:85:f1:98:fc:58:44:2e:82:72:f2:b9:d0: d2:01:4a:3d:99:0a:e1:36:c0:46:33:c3:55:98:7e: bf:b4:ff:11:46:88:ea:1d:c0:e6:01:60:4c:b0:3c: a8:20:0b:e0:d4:7f:6e:66:f3:a2:ee:b3:39:fa:58: 35:fa:88:29:aa:df:d4:dd:47:ba:9c:d1:06:fd:cf: 55:94:4d:fb:96:49:2e:c1:58:79:cf:5c:19:14:d3: e7:b8:2c:97:e7:93:02:45:aa:90:08:80:2c:82:31: c6:80:ab:1d:f9:93:c7:ae:a8:ee:2f:e2:0a:be:34: ab:a9:fa:91:b1:7a:2d:ae:f5:21:fc:04:01:5c:8a: 18:57:81:78:88:19:93:c5:9a:fb:ce:c4:b3:04:ca: e4:49:ae:dd:9b:ef:a2:0a:44:45:7d:b7:24:74:9a: d7:1d:de:2f:2e:bd:e7:5d:8a:c5:16:9c:18:93:64: 0e:39:d8:f3:57:e6:2f:cc:8c:59:be:6f:32:7d:bd: 40:5e:f4:76:cb:33:51:ed:fa:ea:98:7d:3b:5e:53: 0b:d1:be:fd:e2:6b:3e:86:53:b9:0e:1b:8d:7d:d5: b0:aa:15:52:e0:b0:9e:1b:d6:02:64:cd:81:c1:92: c9:5a:a0:ff:4f:6d:e1:e9:70:f7:d9:63:7d:3b:d3: a7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:74:D6:AD:A7:20:74:72:49:46:64:03:20:71:3B:F8:CB:E0:72:A7 X509v3 Authority Key Identifier: keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/20095d9f-1e10-490f-9b49-7f5929635802.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:8380:900::/40 Signature Algorithm: sha256WithRSAEncryption 26:48:37:90:b3:52:8c:ba:7a:4a:bc:dc:d4:65:6f:8c:25:92: 6e:a2:3b:5a:ff:05:a0:8a:06:f6:ee:6a:87:e6:b5:89:7c:15: e5:2b:38:b9:66:80:55:e0:a2:0e:a1:53:64:52:11:90:77:04: 39:b3:c0:23:e8:06:9b:85:0c:53:e6:c5:a1:c4:9b:97:68:69: 4b:d8:ff:44:60:3a:da:3b:e3:39:80:63:eb:58:17:92:c7:22: b5:43:e0:b8:aa:41:de:6f:a5:76:db:43:41:1d:c2:2b:38:e6: 6d:e0:74:83:4c:c5:ca:e3:3c:39:cb:69:a0:33:b9:d9:fb:5b: 85:24:48:5f:0c:50:ee:68:24:02:b4:bf:7f:12:18:63:53:df: 70:89:65:62:3c:9d:28:ae:7c:09:13:a2:aa:8d:50:5b:c9:be: 0a:d8:9f:51:f3:1e:c1:d1:1e:55:bd:63:2f:20:be:e0:1f:24: e5:87:50:b0:b8:e0:41:22:84:25:e2:11:9a:8a:72:5b:15:f4: 8e:3f:39:f2:e2:84:e0:ba:6a:0c:45:ac:57:91:0b:98:08:ef: f9:a4:8b:c2:e2:a5:d9:20:37:4d:1d:14:d7:74:5e:df:98:88: b5:55:6f:f4:5e:21:cb:93:ed:12:08:ad:5c:14:6f:cf:61:52: c6:1f:f8:ea -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUQ9xv8f4c8aYuqkNmtx5ur8J+4d0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4 NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjYxMDIxMDAwOTQyWhcNMjcwMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNzY5ZWMyODFlODI2ZWY1YWI1MTZmNDA4MWZiODZmNjA5 ZmM3YjQzMGJlMjBhOTVmOWM0NTkwZjZkODY3ZDQxMS0wKwYDVQQDEyQ4Zjk1ZTRk MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAvoXxmPxYRC6CcvK50NIBSj2ZCuE2wEYzw1WYfr+0/xFG iOodwOYBYEywPKggC+DUf25m86Luszn6WDX6iCmq39TdR7qc0Qb9z1WUTfuWSS7B WHnPXBkU0+e4LJfnkwJFqpAIgCyCMcaAqx35k8euqO4v4gq+NKup+pGxei2u9SH8 BAFcihhXgXiIGZPFmvvOxLMEyuRJrt2b76IKREV9tyR0mtcd3i8uveddisUWnBiT ZA452PNX5i/MjFm+bzJ9vUBe9HbLM1Ht+uqYfTteUwvRvv3iaz6GU7kOG4191bCq FVLgsJ4b1gJkzYHBkslaoP9PbeHpcPfZY30706ezAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU7nTWracgdHJJRmQDIHE7+MvgcqcwHwYDVR0jBBgwFoAUHl8tYvha0oTU 0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05 Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh MzhjMzJmZDRjLzIwMDk1ZDlmLTFlMTAtNDkwZi05YjQ5LTdmNTkyOTYzNTgwMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBYOACTANBgkqhkiG9w0BAQsFAAOCAQEAJkg3kLNSjLp6Srzc1GVvjCWS bqI7Wv8FoIoG9u5qh+a1iXwV5Ss4uWaAVeCiDqFTZFIRkHcEObPAI+gGm4UMU+bF ocSbl2hpS9j/RGA62jvjOYBj61gXkscitUPguKpB3m+ldttDQR3CKzjmbeB0g0zF yuM8OctpoDO52ftbhSRIXwxQ7mgkArS/fxIYY1PfcIllYjydKK58CROiqo1QW8m+ CtifUfMewdEeVb1jLyC+4B8k5YdQsLjgQSKEJeIRmopyWxX0jj858uKE4LpqDEWs V5ELmAjv+aSLwuKl2SA3TR0U13Re35iItVVv9F4hy5PtEgitXBRvz2FSxh/46g== -----END CERTIFICATE-----Generated at Thu Nov 12 16:16:59 2026 by rpki-client