$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/7ddc3ccd-1b4a-4725-81ec-bbf76087d4f3.roa File: 7ddc3ccd-1b4a-4725-81ec-bbf76087d4f3.roa (raw, json) Hash identifier: Io5t+dTzZEBFB0DoUA1DI9RLIz7n6jT0LGtEsAwqQzM= Subject key identifier: 98:F9:11:15:17:77:06:80:7D:1B:A5:2C:C6:3D:B4:9E:E6:6B:57:2D Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Certificate serial: 28743AD5E629938C6D4B57A15BE341B75B6846FD Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/7ddc3ccd-1b4a-4725-81ec-bbf76087d4f3.roa Signing time: Fri 16 Oct 2026 00:08:25 +0000 ROA not before: Fri 16 Oct 2026 00:08:25 +0000 ROA not after: Thu 14 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2605:8380:800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 13 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:74:3a:d5:e6:29:93:8c:6d:4b:57:a1:5b:e3:41:b7:5b:68:46:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Validity Not Before: Oct 16 00:08:25 2026 GMT Not After : Jan 14 23:59:59 2027 GMT Subject: serialNumber=b15887647f158223ee80a04b000b14ff6f4ed1e3459eec5752fb57538b38bb3b, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9c:28:57:2d:bf:95:f7:89:82:77:86:9b:7d: ad:17:74:52:5e:45:f6:ee:86:d5:5c:db:f0:a7:9e: 63:51:b7:af:30:96:40:26:e0:98:c0:cb:c6:a6:f6: b7:23:87:00:a9:6b:e2:38:e6:8c:1e:77:bf:a5:e8: d2:a2:bb:3f:c0:0d:9b:35:ab:a9:ff:41:62:fb:ef: e9:3d:3b:aa:4a:66:37:34:c6:98:81:6a:64:0c:cc: 6c:f6:0e:e9:2a:a7:bf:ae:0e:2f:63:00:52:c8:61: ef:d1:75:a6:22:f8:31:9e:c8:c1:af:6f:4c:63:5e: d1:c2:27:2e:70:d2:8f:c8:9b:b7:16:d8:48:41:7f: a9:8a:25:9e:35:06:8a:86:93:9e:52:e6:5b:14:00: 3c:f1:22:0e:45:4d:dd:6a:67:8c:8f:6f:d5:44:21: 54:35:6b:75:5c:16:55:ba:c8:9d:a5:07:9c:9e:6a: 8f:17:5d:90:5b:da:7d:87:3f:04:f9:b0:38:7a:ec: e1:f5:72:b3:9b:13:e6:ff:24:3f:de:38:c3:e2:c7: b2:60:e8:d8:83:84:be:8b:f7:00:41:68:49:c4:36: 75:5c:84:a1:f3:cd:db:ce:d2:a9:93:70:bf:3d:9d: 86:5c:5c:67:20:e6:fc:e0:87:a2:cc:f9:39:40:3f: b9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:F9:11:15:17:77:06:80:7D:1B:A5:2C:C6:3D:B4:9E:E6:6B:57:2D X509v3 Authority Key Identifier: keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/7ddc3ccd-1b4a-4725-81ec-bbf76087d4f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:8380:800::/40 Signature Algorithm: sha256WithRSAEncryption bd:f4:60:2e:8e:19:ae:0d:a6:0a:84:9a:ff:c9:e6:ac:52:09: a7:53:94:66:52:ba:61:28:9d:7e:19:16:26:95:88:44:ae:8f: 4e:d6:c9:51:57:f5:9a:0e:13:a2:14:1c:6c:08:ad:41:9d:81: 4a:75:60:58:3e:e8:f4:a5:14:87:ac:6b:18:4a:63:74:07:c1: 33:09:bb:32:de:9e:13:58:b2:5f:31:73:87:04:f0:cc:f5:31: 54:d6:2a:27:7d:a8:f3:80:b4:1c:2a:52:64:e8:fb:c5:0a:35: 04:e8:4d:ae:69:e4:0e:54:26:01:c4:fe:4f:31:10:d6:f3:ed: 35:e9:31:60:94:00:e4:56:c2:8c:f9:bf:ce:f5:23:ac:85:0d: 2e:e0:ab:09:78:03:68:91:12:d6:0d:67:3b:4c:8b:cc:07:d3: 37:79:0c:5a:fc:1d:e5:fe:90:c8:47:61:43:39:01:f7:d0:d2: cf:04:b5:05:c5:55:98:e4:4e:fe:84:6b:7f:57:8d:d3:67:c8: a8:12:ce:f7:46:b6:da:ac:27:23:b9:b7:a8:eb:0e:48:d6:23: 27:d4:69:ef:f1:e0:8d:63:37:03:c9:23:48:62:70:d3:3e:2f: cd:35:a9:22:c6:e4:47:dd:9d:3b:d8:bc:42:a0:ca:68:9f:5d: 9d:5c:3b:b3 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUKHQ61eYpk4xtS1ehW+NBt1toRv0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4 NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjYxMDE2MDAwODI1WhcNMjcwMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMTU4ODc2NDdmMTU4MjIzZWU4MGEwNGIwMDBiMTRmZjZm NGVkMWUzNDU5ZWVjNTc1MmZiNTc1MzhiMzhiYjNiMS0wKwYDVQQDEyQ4Zjk1ZTRk MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxnChXLb+V94mCd4abfa0XdFJeRfbuhtVc2/CnnmNRt68w lkAm4JjAy8am9rcjhwCpa+I45owed7+l6NKiuz/ADZs1q6n/QWL77+k9O6pKZjc0 xpiBamQMzGz2Dukqp7+uDi9jAFLIYe/RdaYi+DGeyMGvb0xjXtHCJy5w0o/Im7cW 2EhBf6mKJZ41BoqGk55S5lsUADzxIg5FTd1qZ4yPb9VEIVQ1a3VcFlW6yJ2lB5ye ao8XXZBb2n2HPwT5sDh67OH1crObE+b/JD/eOMPix7Jg6NiDhL6L9wBBaEnENnVc hKHzzdvO0qmTcL89nYZcXGcg5vzgh6LM+TlAP7m1AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUmPkRFRd3BoB9G6Usxj20nuZrVy0wHwYDVR0jBBgwFoAUHl8tYvha0oTU 0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05 Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh MzhjMzJmZDRjLzdkZGMzY2NkLTFiNGEtNDcyNS04MWVjLWJiZjc2MDg3ZDRmMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBYOACDANBgkqhkiG9w0BAQsFAAOCAQEAvfRgLo4Zrg2mCoSa/8nmrFIJ p1OUZlK6YSidfhkWJpWIRK6PTtbJUVf1mg4TohQcbAitQZ2BSnVgWD7o9KUUh6xr GEpjdAfBMwm7Mt6eE1iyXzFzhwTwzPUxVNYqJ32o84C0HCpSZOj7xQo1BOhNrmnk DlQmAcT+TzEQ1vPtNekxYJQA5FbCjPm/zvUjrIUNLuCrCXgDaJES1g1nO0yLzAfT N3kMWvwd5f6QyEdhQzkB99DSzwS1BcVVmORO/oRrf1eN02fIqBLO90a22qwnI7m3 qOsOSNYjJ9Rp7/HgjWM3A8kjSGJw0z4vzTWpIsbkR92dO9i8QqDKaJ9dnVw7sw== -----END CERTIFICATE-----Generated at Thu Nov 12 16:07:26 2026 by rpki-client