$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/5452e093-9490-459d-a52f-ab266c32b8ed.roa File: 5452e093-9490-459d-a52f-ab266c32b8ed.roa (raw, json) Hash identifier: 32HW7WRrJs7eD8sgH8HgvFApkTXcZpBHCFlAr4B9H/k= Subject key identifier: 22:00:4B:AE:05:1D:41:D4:28:D2:49:BB:6D:85:10:4A:E8:0E:9B:33 Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Certificate serial: 5DB24D65BFA01D9328FA46D0B22284AA7B2986EB Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/5452e093-9490-459d-a52f-ab266c32b8ed.roa Signing time: Wed 21 Oct 2026 00:09:47 +0000 ROA not before: Wed 21 Oct 2026 00:09:47 +0000 ROA not after: Tue 19 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2605:8380:1f00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 13 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:b2:4d:65:bf:a0:1d:93:28:fa:46:d0:b2:22:84:aa:7b:29:86:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Validity Not Before: Oct 21 00:09:47 2026 GMT Not After : Jan 19 23:59:59 2027 GMT Subject: serialNumber=6e6b23b7722ff0897b8b591101c50269efecfe95700bc41be2c066df92237981, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:3a:a2:78:26:41:81:28:d2:c5:96:03:66:b2: 60:26:04:37:f2:a5:7f:5f:32:2b:b1:af:39:c0:49: fb:0b:dc:40:12:26:39:c7:1c:b9:cf:4f:4a:b8:e3: 9d:83:6e:ce:02:88:ac:cf:ec:f7:63:27:4c:d2:bf: 71:5f:95:55:36:ab:9a:4a:2b:37:0b:fd:62:28:c1: a6:2d:55:89:5f:bf:44:54:a7:ad:8a:24:85:f8:38: 8a:7f:a2:12:fa:e7:7a:47:fa:8a:3e:50:0d:8f:f7: 6a:4c:56:55:03:6b:36:77:18:49:b5:4b:fa:59:66: 00:03:2c:21:fb:7a:b0:1b:fa:c6:3c:49:92:96:c8: a8:3f:9b:55:ec:eb:40:01:c9:27:91:ff:3e:48:b7: 3a:40:f4:d2:ea:5c:83:1b:4c:de:05:c0:48:7e:7e: 81:29:31:85:2a:0c:17:fd:c6:26:1d:4f:ae:00:38: 44:2d:75:f7:f8:89:85:54:83:53:fe:68:38:d9:3c: 06:bd:ff:71:37:32:ea:88:78:60:f6:0b:6c:ca:63: 7b:85:67:05:39:e6:14:78:ba:b6:b8:95:54:f6:d7: 6a:ea:5b:4e:b1:da:08:94:d1:f3:aa:c8:b7:f2:b7: 63:64:c5:8d:e2:e8:9a:24:b5:46:a1:e6:20:df:a2: 19:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:00:4B:AE:05:1D:41:D4:28:D2:49:BB:6D:85:10:4A:E8:0E:9B:33 X509v3 Authority Key Identifier: keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/5452e093-9490-459d-a52f-ab266c32b8ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:8380:1f00::/40 Signature Algorithm: sha256WithRSAEncryption 48:a1:b5:6b:c4:1d:3b:cc:55:3b:01:f6:f1:89:3f:0f:2e:f2: 58:3b:ab:ff:0e:f3:9a:3f:fa:e9:26:61:9e:2f:d0:79:7f:00: c1:b5:33:0e:de:48:0d:25:1b:d3:28:76:74:43:f5:ec:cb:b3: ac:e4:69:cf:4c:9a:b4:be:18:35:07:44:30:48:a4:38:76:e4: 6b:a8:b9:85:d0:bc:02:26:d6:ca:e3:c5:18:2c:49:f9:80:1d: 6c:81:dd:81:2f:fc:6e:fd:bd:bc:ad:d5:41:d7:ac:0e:d3:5d: fb:b3:bb:e0:c7:5a:7c:6a:59:8d:96:41:0d:b4:08:0a:23:56: eb:37:f6:d3:6d:ba:f8:73:93:37:8b:30:a9:b0:4b:11:82:55: 0e:5a:e7:c8:d4:cd:94:b8:1d:9f:07:1c:e8:17:e9:1d:4b:13: ad:1d:d9:d2:ff:b4:31:db:23:65:2b:43:64:b8:04:1b:7b:1c: 9f:e2:64:7b:7f:61:f5:0a:50:e7:b9:7a:46:93:3a:6d:6d:80: 29:54:95:a5:dc:2d:2f:2d:b9:6b:ea:2d:1a:d8:8f:1c:18:e4: 8d:65:1d:54:d7:47:2b:4a:01:fe:18:1f:25:eb:9e:1c:ab:45: c3:7f:ce:c6:df:54:74:62:52:36:27:04:71:10:a4:25:78:d8: 0c:64:e4:91 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUXbJNZb+gHZMo+kbQsiKEqnsphuswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4 NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjYxMDIxMDAwOTQ3WhcNMjcwMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZTZiMjNiNzcyMmZmMDg5N2I4YjU5MTEwMWM1MDI2OWVm ZWNmZTk1NzAwYmM0MWJlMmMwNjZkZjkyMjM3OTgxMS0wKwYDVQQDEyQ4Zjk1ZTRk MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCGOqJ4JkGBKNLFlgNmsmAmBDfypX9fMiuxrznASfsL3EAS JjnHHLnPT0q4452Dbs4CiKzP7PdjJ0zSv3FflVU2q5pKKzcL/WIowaYtVYlfv0RU p62KJIX4OIp/ohL653pH+oo+UA2P92pMVlUDazZ3GEm1S/pZZgADLCH7erAb+sY8 SZKWyKg/m1Xs60ABySeR/z5ItzpA9NLqXIMbTN4FwEh+foEpMYUqDBf9xiYdT64A OEQtdff4iYVUg1P+aDjZPAa9/3E3MuqIeGD2C2zKY3uFZwU55hR4ura4lVT212rq W06x2giU0fOqyLfyt2NkxY3i6JoktUah5iDfohnZAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUIgBLrgUdQdQo0km7bYUQSugOmzMwHwYDVR0jBBgwFoAUHl8tYvha0oTU 0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05 Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh MzhjMzJmZDRjLzU0NTJlMDkzLTk0OTAtNDU5ZC1hNTJmLWFiMjY2YzMyYjhlZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBYOAHzANBgkqhkiG9w0BAQsFAAOCAQEASKG1a8QdO8xVOwH28Yk/Dy7y WDur/w7zmj/66SZhni/QeX8AwbUzDt5IDSUb0yh2dEP17MuzrORpz0yatL4YNQdE MEikOHbka6i5hdC8AibWyuPFGCxJ+YAdbIHdgS/8bv29vK3VQdesDtNd+7O74Mda fGpZjZZBDbQICiNW6zf20226+HOTN4swqbBLEYJVDlrnyNTNlLgdnwcc6BfpHUsT rR3Z0v+0MdsjZStDZLgEG3scn+Jke39h9QpQ57l6RpM6bW2AKVSVpdwtLy25a+ot GtiPHBjkjWUdVNdHK0oB/hgfJeueHKtFw3/Oxt9UdGJSNicEcRCkJXjYDGTkkQ== -----END CERTIFICATE-----Generated at Thu Nov 12 16:09:20 2026 by rpki-client