$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/9429af41-5ca8-4fc9-9b14-bf2a6ca525b6.roa File: 9429af41-5ca8-4fc9-9b14-bf2a6ca525b6.roa (raw, json) Hash identifier: xXwCTGHRJZ7fI8hjgUMs/QeZbezQm3HzXQITiOLtHpw= Subject key identifier: 17:8A:D7:AF:5C:74:A8:23:DC:6D:9B:55:99:FF:BA:9A:FA:06:66:F1 Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Certificate serial: 12A73BF65E0FBA351862BCF19E4AC2C639C13A88 Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/9429af41-5ca8-4fc9-9b14-bf2a6ca525b6.roa Signing time: Wed 21 Oct 2026 00:09:32 +0000 ROA not before: Wed 21 Oct 2026 00:09:32 +0000 ROA not after: Tue 19 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2605:8380:1600::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 13 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:a7:3b:f6:5e:0f:ba:35:18:62:bc:f1:9e:4a:c2:c6:39:c1:3a:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Validity Not Before: Oct 21 00:09:32 2026 GMT Not After : Jan 19 23:59:59 2027 GMT Subject: serialNumber=9f507248faf6043ad0b8e8f7f26b25fb66d39b6f5bd1e12ff3e4f4f300475e65, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:53:96:04:27:77:c8:37:23:6d:f0:d2:f1:59: 24:3e:29:fd:b0:c7:6c:4a:e1:0d:67:b3:1a:70:c0: 06:6a:83:bd:28:03:fc:2b:8a:68:db:3a:75:8b:4d: 49:29:e0:dc:2f:d3:36:da:7a:57:18:b9:b3:ee:f7: d2:bd:88:81:41:f8:91:ec:79:e9:b0:83:52:8f:ff: f0:07:a4:56:47:f7:92:b9:bd:2b:b2:b8:26:79:8b: fd:18:16:74:c7:50:9b:6f:b7:ec:59:b0:77:c1:f8: e1:0e:b2:d8:60:74:f6:c1:88:b3:4c:ed:3a:7b:b9: 04:25:f1:b7:6f:31:dc:99:57:22:17:88:94:2a:d9: 10:6e:c2:40:b7:76:f6:ba:41:a9:18:d6:ba:b1:d0: e6:9f:fd:f2:47:42:65:b0:6e:86:0d:8e:c7:33:92: ed:42:bf:72:ad:e1:57:78:c2:fe:a1:4c:ac:a4:87: 38:d5:2a:09:e2:68:65:d9:a5:20:76:1c:6e:c4:04: 5a:60:5b:15:d5:4e:d2:42:35:a1:5a:6a:64:b2:a4: f3:52:91:10:ff:c7:ec:4c:20:50:e3:27:1c:fd:66: 18:84:76:25:b8:5d:61:3f:ef:7f:98:e6:ca:cc:82: 40:c6:8e:f4:8e:4c:c1:7d:a6:09:37:6c:53:d8:84: 26:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:8A:D7:AF:5C:74:A8:23:DC:6D:9B:55:99:FF:BA:9A:FA:06:66:F1 X509v3 Authority Key Identifier: keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/9429af41-5ca8-4fc9-9b14-bf2a6ca525b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:8380:1600::/40 Signature Algorithm: sha256WithRSAEncryption b3:81:b7:91:b0:ca:4d:f1:52:d2:b4:e3:1c:e6:7f:41:22:09: 11:69:2c:72:97:ed:e2:b4:0a:fa:ea:cd:c1:c1:62:8b:ad:02: 4b:a8:ec:56:3e:a1:96:9f:87:e7:3e:41:be:2e:a7:8c:84:04: d0:7f:9e:9a:a6:99:3e:eb:29:8d:75:98:9b:67:ce:b3:47:0a: 4d:72:a0:1d:11:9b:f7:bf:03:dd:30:2e:47:2f:71:fd:2b:02: 74:84:9d:a5:3c:74:b1:38:76:52:ec:f4:9c:cf:0a:1f:dd:9f: 5f:5e:cf:3c:14:b8:b7:f8:e6:6d:53:03:35:82:39:f0:3b:dd: 26:a1:bb:df:93:b6:cc:ce:49:22:96:78:ad:7e:68:22:73:ec: a4:73:a2:46:2d:ad:e2:7a:f0:de:4f:e7:04:bb:52:a6:c9:c3: 32:21:fa:38:d4:4e:19:0a:58:66:86:b2:b0:11:a8:bd:fd:d0: 16:20:18:af:66:92:5e:73:31:55:34:ed:c1:c9:ba:f7:aa:77: 64:00:3c:ad:2c:62:68:72:f4:fd:3d:8e:f3:a2:bf:ad:80:f4: 52:36:74:cf:cc:38:48:06:84:10:db:7f:b4:e5:18:9a:3c:b2: 03:99:91:05:9d:d5:46:f4:ea:ff:c7:2b:2b:ee:3c:77:d3:ad: 43:fb:29:e4 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUEqc79l4PujUYYrzxnkrCxjnBOogwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4 NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjYxMDIxMDAwOTMyWhcNMjcwMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZjUwNzI0OGZhZjYwNDNhZDBiOGU4ZjdmMjZiMjVmYjY2 ZDM5YjZmNWJkMWUxMmZmM2U0ZjRmMzAwNDc1ZTY1MS0wKwYDVQQDEyQ4Zjk1ZTRk MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsU5YEJ3fINyNt8NLxWSQ+Kf2wx2xK4Q1nsxpwwAZqg70o A/wrimjbOnWLTUkp4Nwv0zbaelcYubPu99K9iIFB+JHseemwg1KP//AHpFZH95K5 vSuyuCZ5i/0YFnTHUJtvt+xZsHfB+OEOsthgdPbBiLNM7Tp7uQQl8bdvMdyZVyIX iJQq2RBuwkC3dva6QakY1rqx0Oaf/fJHQmWwboYNjsczku1Cv3Kt4Vd4wv6hTKyk hzjVKgniaGXZpSB2HG7EBFpgWxXVTtJCNaFaamSypPNSkRD/x+xMIFDjJxz9ZhiE diW4XWE/73+Y5srMgkDGjvSOTMF9pgk3bFPYhCZvAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUF4rXr1x0qCPcbZtVmf+6mvoGZvEwHwYDVR0jBBgwFoAUHl8tYvha0oTU 0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05 Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh MzhjMzJmZDRjLzk0MjlhZjQxLTVjYTgtNGZjOS05YjE0LWJmMmE2Y2E1MjViNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBYOAFjANBgkqhkiG9w0BAQsFAAOCAQEAs4G3kbDKTfFS0rTjHOZ/QSIJ EWkscpft4rQK+urNwcFii60CS6jsVj6hlp+H5z5Bvi6njIQE0H+emqaZPuspjXWY m2fOs0cKTXKgHRGb978D3TAuRy9x/SsCdISdpTx0sTh2Uuz0nM8KH92fX17PPBS4 t/jmbVMDNYI58DvdJqG735O2zM5JIpZ4rX5oInPspHOiRi2t4nrw3k/nBLtSpsnD MiH6ONROGQpYZoaysBGovf3QFiAYr2aSXnMxVTTtwcm696p3ZAA8rSxiaHL0/T2O 86K/rYD0UjZ0z8w4SAaEENt/tOUYmjyyA5mRBZ3VRvTq/8crK+48d9OtQ/sp5A== -----END CERTIFICATE-----Generated at Thu Nov 12 16:07:39 2026 by rpki-client