$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/85ea2f4d-ed79-46fd-adfb-501df4d3311a.roa File: 85ea2f4d-ed79-46fd-adfb-501df4d3311a.roa (raw, json) Hash identifier: LwXJA7moo3vCdR9bYMbZMR7jstNGv/+V820LqRtP/Cs= Subject key identifier: 4B:1A:AE:7D:09:CF:0A:37:6A:D8:61:87:60:63:F5:1A:52:4D:E9:6E Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Certificate serial: 6028FB4D23F622C4E27AE7635943501B1471D1AB Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/85ea2f4d-ed79-46fd-adfb-501df4d3311a.roa Signing time: Wed 21 Oct 2026 00:09:47 +0000 ROA not before: Wed 21 Oct 2026 00:09:47 +0000 ROA not after: Tue 19 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2605:8380:2300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 13 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:28:fb:4d:23:f6:22:c4:e2:7a:e7:63:59:43:50:1b:14:71:d1:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Validity Not Before: Oct 21 00:09:47 2026 GMT Not After : Jan 19 23:59:59 2027 GMT Subject: serialNumber=c0e9100f46e3a5d9a98d30d1b752cbd5aa8b931c97a77733e02ca9e917064218, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8d:93:9b:70:39:26:50:30:93:d7:49:18:ba: a6:b9:28:72:e4:e4:b2:27:53:60:ca:cc:10:6c:1d: 5d:8f:74:cc:53:22:3d:21:fb:fe:47:9e:c5:1e:94: 26:28:09:81:4a:76:05:18:f5:2e:7c:71:2f:06:83: 13:fe:9d:07:59:47:66:52:b1:92:6d:41:2d:b4:ed: 74:0e:f4:47:5d:d8:3e:6e:86:3f:fb:ed:23:83:e6: c0:62:77:16:75:2d:b7:72:bd:ee:99:59:61:17:74: 1c:d4:c3:1d:8f:5c:41:89:1d:b3:ba:c2:48:17:70: f1:5b:a0:84:b6:b6:f3:6d:be:5d:a9:db:f9:46:47: 68:2d:2c:46:6f:67:e5:c2:32:9d:04:09:e3:17:0d: e8:56:7a:32:79:13:5d:d6:7d:a2:ed:ff:38:5b:4e: e0:b6:c5:17:dc:45:c3:45:11:82:7e:c8:f1:9b:53: 39:e2:e7:13:0c:89:92:14:c7:be:94:c9:aa:4d:40: e1:e8:52:be:f5:ca:a4:5c:10:e5:e3:3a:60:7c:3e: 05:2f:de:f3:71:71:f6:89:05:6a:6b:55:f6:a9:90: 67:99:e0:f8:7d:df:0b:fd:9f:d1:bc:7b:95:7b:c9: 55:6a:b0:78:8b:87:87:c8:47:ec:d5:44:29:b8:bb: ba:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:1A:AE:7D:09:CF:0A:37:6A:D8:61:87:60:63:F5:1A:52:4D:E9:6E X509v3 Authority Key Identifier: keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/85ea2f4d-ed79-46fd-adfb-501df4d3311a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:8380:2300::/40 Signature Algorithm: sha256WithRSAEncryption 01:af:ce:72:2b:99:c7:cd:77:3e:03:12:d1:fc:40:24:36:0b: a7:0e:9f:70:2e:ab:71:a4:6e:a8:7a:61:55:5a:ec:f8:1e:fa: b1:af:26:41:2d:25:87:85:65:ea:33:12:d3:a7:0a:00:75:6d: 74:b4:d9:fb:eb:54:6b:ab:48:42:37:c8:a8:51:78:f5:87:09: 2f:40:c9:6a:3d:c3:1c:5b:2b:7e:9d:6f:91:30:52:08:ba:93: 58:31:2d:96:e5:19:4c:d1:51:07:fe:02:0c:ec:93:c3:5f:63: aa:9f:6e:78:82:0c:6b:97:36:9b:72:34:dd:33:e0:58:8f:13: ee:a4:9e:c8:3c:bb:0e:fb:27:b9:0e:5a:57:a7:a4:5d:4f:05: ef:46:90:af:de:8d:b6:59:ab:0a:3b:4e:46:f3:04:be:bb:47: e5:18:12:c4:f7:0a:0c:32:be:8a:50:8b:62:27:ac:bd:7f:f6: 86:4c:54:0d:85:f1:4e:42:a8:f3:78:76:3e:b0:df:eb:d8:9d: 24:21:a6:be:96:fc:e1:a4:b0:db:26:00:36:75:27:29:e8:67: 39:b1:15:10:38:8e:37:7a:a7:f6:32:12:a8:89:13:84:a8:92: f6:6b:f6:44:20:2a:c1:d5:92:87:a1:8d:84:f2:59:10:27:8b: de:35:ed:2b -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUYCj7TSP2IsTieudjWUNQGxRx0aswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4 NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjYxMDIxMDAwOTQ3WhcNMjcwMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMGU5MTAwZjQ2ZTNhNWQ5YTk4ZDMwZDFiNzUyY2JkNWFh OGI5MzFjOTdhNzc3MzNlMDJjYTllOTE3MDY0MjE4MS0wKwYDVQQDEyQ4Zjk1ZTRk MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFjZObcDkmUDCT10kYuqa5KHLk5LInU2DKzBBsHV2PdMxT Ij0h+/5HnsUelCYoCYFKdgUY9S58cS8GgxP+nQdZR2ZSsZJtQS207XQO9Edd2D5u hj/77SOD5sBidxZ1Lbdyve6ZWWEXdBzUwx2PXEGJHbO6wkgXcPFboIS2tvNtvl2p 2/lGR2gtLEZvZ+XCMp0ECeMXDehWejJ5E13WfaLt/zhbTuC2xRfcRcNFEYJ+yPGb Uzni5xMMiZIUx76UyapNQOHoUr71yqRcEOXjOmB8PgUv3vNxcfaJBWprVfapkGeZ 4Ph93wv9n9G8e5V7yVVqsHiLh4fIR+zVRCm4u7pxAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUSxqufQnPCjdq2GGHYGP1GlJN6W4wHwYDVR0jBBgwFoAUHl8tYvha0oTU 0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05 Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh MzhjMzJmZDRjLzg1ZWEyZjRkLWVkNzktNDZmZC1hZGZiLTUwMWRmNGQzMzExYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBYOAIzANBgkqhkiG9w0BAQsFAAOCAQEAAa/OciuZx813PgMS0fxAJDYL pw6fcC6rcaRuqHphVVrs+B76sa8mQS0lh4Vl6jMS06cKAHVtdLTZ++tUa6tIQjfI qFF49YcJL0DJaj3DHFsrfp1vkTBSCLqTWDEtluUZTNFRB/4CDOyTw19jqp9ueIIM a5c2m3I03TPgWI8T7qSeyDy7DvsnuQ5aV6ekXU8F70aQr96NtlmrCjtORvMEvrtH 5RgSxPcKDDK+ilCLYiesvX/2hkxUDYXxTkKo83h2PrDf69idJCGmvpb84aSw2yYA NnUnKehnObEVEDiON3qn9jISqIkThKiS9mv2RCAqwdWSh6GNhPJZECeL3jXtKw== -----END CERTIFICATE-----Generated at Thu Nov 12 16:06:59 2026 by rpki-client