$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/7cf5be84-157a-4f26-8b9a-935b4781605a.roa File: 7cf5be84-157a-4f26-8b9a-935b4781605a.roa (raw, json) Hash identifier: s+aOIeiIdj05W+v2hgKxCeLEC4qIBujPyKBjU6G6jOk= Subject key identifier: E0:2C:AD:21:7C:2C:86:E0:85:51:7F:9D:A4:A3:DC:C4:40:3D:B8:09 Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Certificate serial: 10C6969CF78CFF5DED6C28B0D75B4BA21085CEBD Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/7cf5be84-157a-4f26-8b9a-935b4781605a.roa Signing time: Fri 16 Oct 2026 00:08:26 +0000 ROA not before: Fri 16 Oct 2026 00:08:26 +0000 ROA not after: Thu 14 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2605:8380:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 13 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:c6:96:9c:f7:8c:ff:5d:ed:6c:28:b0:d7:5b:4b:a2:10:85:ce:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Validity Not Before: Oct 16 00:08:26 2026 GMT Not After : Jan 14 23:59:59 2027 GMT Subject: serialNumber=dd8cddd7725f9cdf3cb9d185c45a4f63756c30627c922617692cbdcbdd863209, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:23:e1:ae:8d:be:4a:ad:4b:47:f3:87:71:cd: 70:06:e8:fd:36:f4:5b:ca:37:56:40:f3:da:2c:36: 35:6c:82:a1:69:58:2c:48:27:30:d6:b6:bb:0b:73: 17:9e:5e:90:53:ae:4d:2a:1f:85:53:7c:d4:e0:95: 66:97:d3:9a:0e:5b:25:f4:80:02:d1:db:5c:f7:0d: 9d:8f:c1:89:8e:03:6c:35:2b:be:34:dd:24:2e:28: 32:b3:6e:32:12:71:86:14:04:ac:ff:b4:a4:6e:74: 9d:dd:4b:d8:cc:c7:8b:50:22:23:a7:8f:7e:97:19: 79:6d:78:12:18:59:78:6a:8b:f9:59:d6:5c:35:8e: 7f:8f:3e:9d:7c:27:2e:d5:d7:14:37:72:e4:8c:40: db:44:86:ec:58:ac:c5:a9:31:59:12:f4:6e:83:ac: 6c:ce:a7:6a:05:7b:19:69:08:ce:1e:08:4a:cb:3f: c3:0b:92:30:6a:92:06:db:7a:38:93:ff:95:ca:6e: 7d:f6:01:53:64:2b:ca:66:43:8f:29:ce:7f:b6:5f: 4c:44:cb:f4:f6:65:df:20:30:11:08:8a:52:b8:54: 9e:45:09:cb:2e:79:d7:cb:0f:99:1b:91:e8:22:a5: 97:55:d2:fa:e6:79:0f:a8:6d:a4:a0:35:44:b2:bf: 49:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:2C:AD:21:7C:2C:86:E0:85:51:7F:9D:A4:A3:DC:C4:40:3D:B8:09 X509v3 Authority Key Identifier: keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/7cf5be84-157a-4f26-8b9a-935b4781605a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:8380:1000::/40 Signature Algorithm: sha256WithRSAEncryption 70:c5:a3:c2:ce:34:ea:13:4f:5d:72:8e:c7:b5:f1:4f:2b:63: 59:84:e9:67:ee:15:99:f7:4d:bc:af:90:b4:f5:26:5e:bc:a1: cc:9b:24:af:d8:30:82:f0:0d:c6:f1:d9:c1:77:8a:f7:04:b6: 81:ab:1a:35:c6:63:4e:a0:e0:ed:7b:8b:14:2a:57:a5:40:36: d2:b8:18:6c:d0:59:65:cb:a2:30:3f:0c:28:34:36:41:ee:0e: cd:05:c7:28:c5:78:45:ab:70:66:9a:34:3b:ae:31:29:78:2c: b3:ff:b1:30:31:23:2e:bc:f6:e3:ad:70:61:d3:0f:42:e3:47: f4:ea:ed:d8:4e:28:4b:fa:1f:e7:a6:76:91:85:ba:d6:50:ca: d0:2e:ca:ca:5b:25:49:6a:06:e9:0c:f1:5c:1b:59:67:7a:a7: 83:82:f4:a2:f6:42:61:a5:11:77:86:62:b9:41:ab:53:bc:1a: 76:78:1e:4c:6e:9a:3a:b5:35:32:62:bd:b5:bb:44:c2:e3:31: f6:51:61:c2:ff:d4:c3:80:56:0b:6f:19:c0:25:a8:de:b8:08: d4:ff:a8:23:78:a2:68:33:8a:7d:79:b7:3f:8d:6c:9d:fd:d4: b5:31:60:a6:4f:ba:58:a5:80:b9:e1:3d:4c:07:92:04:7b:8c: e9:7b:d8:71 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUEMaWnPeM/13tbCiw11tLohCFzr0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4 NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjYxMDE2MDAwODI2WhcNMjcwMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZDhjZGRkNzcyNWY5Y2RmM2NiOWQxODVjNDVhNGY2Mzc1 NmMzMDYyN2M5MjI2MTc2OTJjYmRjYmRkODYzMjA5MS0wKwYDVQQDEyQ4Zjk1ZTRk MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDcI+Gujb5KrUtH84dxzXAG6P029FvKN1ZA89osNjVsgqFp WCxIJzDWtrsLcxeeXpBTrk0qH4VTfNTglWaX05oOWyX0gALR21z3DZ2PwYmOA2w1 K7403SQuKDKzbjIScYYUBKz/tKRudJ3dS9jMx4tQIiOnj36XGXlteBIYWXhqi/lZ 1lw1jn+PPp18Jy7V1xQ3cuSMQNtEhuxYrMWpMVkS9G6DrGzOp2oFexlpCM4eCErL P8MLkjBqkgbbejiT/5XKbn32AVNkK8pmQ48pzn+2X0xEy/T2Zd8gMBEIilK4VJ5F CcsuedfLD5kbkegipZdV0vrmeQ+obaSgNUSyv0lRAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU4CytIXwshuCFUX+dpKPcxEA9uAkwHwYDVR0jBBgwFoAUHl8tYvha0oTU 0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05 Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh MzhjMzJmZDRjLzdjZjViZTg0LTE1N2EtNGYyNi04YjlhLTkzNWI0NzgxNjA1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBYOAEDANBgkqhkiG9w0BAQsFAAOCAQEAcMWjws406hNPXXKOx7XxTytj WYTpZ+4VmfdNvK+QtPUmXryhzJskr9gwgvANxvHZwXeK9wS2gasaNcZjTqDg7XuL FCpXpUA20rgYbNBZZcuiMD8MKDQ2Qe4OzQXHKMV4RatwZpo0O64xKXgss/+xMDEj Lrz2461wYdMPQuNH9Ort2E4oS/of56Z2kYW61lDK0C7KylslSWoG6QzxXBtZZ3qn g4L0ovZCYaURd4ZiuUGrU7wadngeTG6aOrU1MmK9tbtEwuMx9lFhwv/Uw4BWC28Z wCWo3rgI1P+oI3iiaDOKfXm3P41snf3UtTFgpk+6WKWAueE9TAeSBHuM6XvYcQ== -----END CERTIFICATE-----Generated at Thu Nov 12 16:09:36 2026 by rpki-client