$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/49b6f1e1-7943-40d0-97d4-3b5e736b905f.roa File: 49b6f1e1-7943-40d0-97d4-3b5e736b905f.roa (raw, json) Hash identifier: CocgoGdp76dXvWq7Jm7PTNBOr99SJvi9RJmNHu9Mr7g= Subject key identifier: 96:16:82:39:C5:D9:55:1A:20:C9:97:7F:BC:B7:89:B3:9D:FC:88:56 Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Certificate serial: 4C8B5B898A34AEE336B79B5477AF520CEEEBD2E6 Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/49b6f1e1-7943-40d0-97d4-3b5e736b905f.roa Signing time: Thu 15 Oct 2026 00:07:05 +0000 ROA not before: Thu 15 Oct 2026 00:07:05 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2606:f40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:8b:5b:89:8a:34:ae:e3:36:b7:9b:54:77:af:52:0c:ee:eb:d2:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Validity Not Before: Oct 15 00:07:05 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=6158b5976dd6ea03e0dd4d0028fced05593b2c3cd7ed6fa0f38f28409ca4d765, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:28:e7:25:85:6e:c4:0b:39:a7:22:04:75:14: 67:c5:9c:00:42:0d:1a:16:2b:2c:6c:b3:b9:85:da: 98:9e:85:ec:8d:54:c2:77:25:09:5f:21:fe:07:5c: ae:a5:bb:69:3c:a6:77:8b:64:03:85:1e:22:c6:3a: 3f:04:b8:46:57:10:d1:7b:40:c2:bf:01:30:48:93: ac:1f:4f:34:30:7e:23:3e:b9:74:87:c2:d7:74:55: 03:bb:b1:fe:60:08:e5:fd:27:92:7f:96:1e:2d:cc: 71:0e:97:aa:e5:03:8d:4b:0b:e2:9d:b0:c9:f2:26: 8f:0b:7c:24:d5:d7:01:2b:56:06:3c:2e:11:67:38: 39:be:58:9c:be:54:ea:8a:a4:e0:33:45:c6:c8:29: ec:bd:00:8e:09:37:ca:c8:e8:7e:7e:eb:4b:93:71: 7e:7a:47:4f:ea:f7:4b:5c:3f:23:fd:79:7c:df:82: 79:88:54:a4:01:6d:17:5d:cf:d9:d3:0d:a0:48:e5: 74:3a:75:25:81:4e:35:d0:8a:5d:ad:ce:c6:ad:25: 40:f7:7e:a8:3f:63:97:93:5b:40:a8:41:e9:0d:e2: 16:7f:bc:16:fc:d4:d9:be:6e:74:d6:03:bf:26:13: 18:00:d0:ae:55:57:a2:84:2b:6b:54:ec:02:72:cd: 9c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:16:82:39:C5:D9:55:1A:20:C9:97:7F:BC:B7:89:B3:9D:FC:88:56 X509v3 Authority Key Identifier: keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/49b6f1e1-7943-40d0-97d4-3b5e736b905f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2606:f40::/32 Signature Algorithm: sha256WithRSAEncryption 2e:5a:1a:12:bd:a2:43:77:5a:75:b2:bc:fe:4c:1a:f3:77:3a: fd:03:b8:53:69:b9:03:53:03:3f:fa:21:78:73:32:67:1c:fd: 51:a4:e5:bb:65:8c:c4:d9:52:60:b7:59:3b:08:02:40:aa:5e: 18:26:95:6f:85:b6:97:be:3d:a4:77:06:11:8b:20:58:fc:7e: 4b:d1:98:c2:3f:9e:5a:2d:7c:7f:fd:ee:0f:ae:57:f5:06:ba: 69:b3:e0:6f:0d:3c:4d:1b:45:61:32:d9:72:2e:d7:70:f3:9f: 6d:c4:82:aa:c6:15:d1:aa:29:86:94:ba:2b:78:ca:1a:1b:58: db:c1:3e:b0:22:bf:be:bd:71:5d:be:cd:e6:92:84:14:fc:91: 11:93:d8:3a:d6:5b:91:95:30:6a:db:bd:c9:b8:fa:38:9f:46: a1:f0:ed:f2:a4:72:9b:2a:6f:93:14:4b:41:cd:f6:06:15:ca: 9f:08:b7:2b:5b:12:15:3c:28:ce:6d:49:1e:59:3e:de:7f:1b: b8:a0:86:31:e6:15:81:be:b7:dc:f0:6c:de:7a:0c:eb:91:10: b3:97:f5:f6:ec:9f:bb:c1:8c:e3:68:81:3b:34:86:c6:ba:60: 7f:55:0a:69:8b:b6:74:5a:e4:a6:79:02:b7:2b:9d:dd:50:49: 2e:ba:09:d7 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUTItbiYo0ruM2t5tUd69SDO7r0uYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4 NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjYxMDE1MDAwNzA1WhcNMjcwMTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MTU4YjU5NzZkZDZlYTAzZTBkZDRkMDAyOGZjZWQwNTU5 M2IyYzNjZDdlZDZmYTBmMzhmMjg0MDljYTRkNzY1MS0wKwYDVQQDEyQ4Zjk1ZTRk MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGKOclhW7ECzmnIgR1FGfFnABCDRoWKyxss7mF2pieheyN VMJ3JQlfIf4HXK6lu2k8pneLZAOFHiLGOj8EuEZXENF7QMK/ATBIk6wfTzQwfiM+ uXSHwtd0VQO7sf5gCOX9J5J/lh4tzHEOl6rlA41LC+KdsMnyJo8LfCTV1wErVgY8 LhFnODm+WJy+VOqKpOAzRcbIKey9AI4JN8rI6H5+60uTcX56R0/q90tcPyP9eXzf gnmIVKQBbRddz9nTDaBI5XQ6dSWBTjXQil2tzsatJUD3fqg/Y5eTW0CoQekN4hZ/ vBb81Nm+bnTWA78mExgA0K5VV6KEK2tU7AJyzZxrAgMBAAGjggKyMIICrjAdBgNV HQ4EFgQUlhaCOcXZVRogyZd/vLeJs538iFYwHwYDVR0jBBgwFoAUHl8tYvha0oTU 0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05 Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh MzhjMzJmZDRjLzQ5YjZmMWUxLTc5NDMtNDBkMC05N2Q0LTNiNWU3MzZiOTA1Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAmBg9AMA0GCSqGSIb3DQEBCwUAA4IBAQAuWhoSvaJDd1p1srz+TBrzdzr9 A7hTabkDUwM/+iF4czJnHP1RpOW7ZYzE2VJgt1k7CAJAql4YJpVvhbaXvj2kdwYR iyBY/H5L0ZjCP55aLXx//e4Prlf1Brpps+BvDTxNG0VhMtlyLtdw859txIKqxhXR qimGlLoreMoaG1jbwT6wIr++vXFdvs3mkoQU/JERk9g61luRlTBq273JuPo4n0ah 8O3ypHKbKm+TFEtBzfYGFcqfCLcrWxIVPCjObUkeWT7efxu4oIYx5hWBvrfc8Gze egzrkRCzl/X27J+7wYzjaIE7NIbGumB/VQppi7Z0WuSmeQK3K53dUEkuugnX -----END CERTIFICATE-----Generated at Wed Nov 11 14:03:47 2026 by rpki-client