$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/965e9a15-e7a7-4ff3-9f9f-747ffcbcda73.roa File: 965e9a15-e7a7-4ff3-9f9f-747ffcbcda73.roa (raw, json) Hash identifier: voX3oS6OZP88Fqinn6h7vkW2lRXTwV9FTFVycrGqOww= Subject key identifier: 75:6E:F1:8C:C4:CC:C7:6C:D0:A6:D2:E8:C2:31:79:05:A1:BB:54:DD Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Certificate serial: 553B9B897B5794DC0B5402B935AD23936B026BEA Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/965e9a15-e7a7-4ff3-9f9f-747ffcbcda73.roa Signing time: Wed 21 Oct 2026 00:09:34 +0000 ROA not before: Wed 21 Oct 2026 00:09:34 +0000 ROA not after: Tue 19 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2605:8380:1900::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 13 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:3b:9b:89:7b:57:94:dc:0b:54:02:b9:35:ad:23:93:6b:02:6b:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Validity Not Before: Oct 21 00:09:34 2026 GMT Not After : Jan 19 23:59:59 2027 GMT Subject: serialNumber=9bb19cfe4f7bdf2ef5d5daa120d86dd86ee4875c9fa9d149e3580f102469271f, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:37:26:dd:80:d9:94:b3:ba:8f:58:29:25:b3: b0:6e:14:9c:af:0f:d7:ac:79:bc:f7:19:a0:1c:73: fd:64:4a:90:4a:49:d2:92:67:8e:33:d4:6b:e8:5f: db:6d:53:06:4d:e5:7f:d7:3e:2e:41:95:08:77:39: 24:06:47:8c:62:3c:6d:4e:e3:71:7c:49:35:5a:9c: 37:11:3a:0d:95:0a:0b:55:20:ea:4d:cc:91:5c:84: 9a:d0:db:93:4c:57:d1:bd:21:4a:6d:57:8a:42:c9: 70:4d:f7:ac:d4:81:08:f6:d1:d4:12:cf:21:6e:cc: 62:ab:20:14:98:c9:28:e5:12:27:b2:04:51:74:18: d2:0b:57:cb:24:4c:0b:6d:89:67:66:a6:30:b3:35: 51:68:b2:9d:f0:b7:44:ec:0e:3b:a0:4b:69:0a:f7: 66:bb:95:99:ed:07:fe:b5:43:44:79:e7:2f:97:8e: 13:62:b9:77:af:6d:cf:15:9e:8e:87:24:28:a2:51: b3:c7:5a:7e:21:06:ca:76:e8:88:f4:0b:c4:61:b7: 43:22:69:e4:3f:e6:f9:25:01:6d:4b:01:16:b7:12: 1a:36:2f:5f:d7:e2:f2:d3:de:9b:fc:91:f0:00:eb: 40:68:4a:fe:6d:0b:19:5d:33:cd:97:1d:20:5f:85: 4c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:6E:F1:8C:C4:CC:C7:6C:D0:A6:D2:E8:C2:31:79:05:A1:BB:54:DD X509v3 Authority Key Identifier: keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/965e9a15-e7a7-4ff3-9f9f-747ffcbcda73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:8380:1900::/40 Signature Algorithm: sha256WithRSAEncryption 77:29:26:1f:a2:bb:2f:a3:7b:e8:84:3f:26:c2:f7:34:1a:df: 70:c0:3b:2b:fc:a5:c7:c9:04:e1:9a:98:8b:1a:54:14:80:60: 02:96:8b:12:ca:fe:87:b3:06:99:27:e4:ca:ac:ae:a4:2e:61: f8:8f:5e:17:58:0e:b4:9b:7d:1a:62:06:0e:7a:00:8c:61:9b: 82:75:e4:47:06:7f:2a:70:76:de:61:17:70:02:0e:64:9a:18: 87:17:02:a0:2e:97:a6:c8:a7:00:ab:b4:cc:c4:39:99:cd:10: 43:16:4e:b6:c0:fb:a5:78:87:3b:bb:78:77:63:5c:e9:43:13: 8f:45:05:3c:f6:7c:79:72:87:85:6f:b7:5e:67:cf:ca:a0:08: fa:bf:b9:31:bf:f6:1c:a7:96:c3:4b:3c:43:fd:fa:77:40:09: 8d:c7:a7:ed:75:00:ec:66:fc:de:c9:4b:3c:bf:dc:5f:7c:c6: 92:55:74:58:b4:5c:65:ab:7f:90:ed:81:b5:41:e1:0d:0d:c9: eb:49:00:ab:c7:03:6f:bf:53:06:64:22:a9:9a:b8:2a:c4:29: 1b:1a:c6:aa:6c:24:80:78:72:82:a3:08:db:2a:2f:4e:3c:0e: 3c:6c:fb:23:84:ec:06:8a:b7:f4:b5:17:76:5b:72:a8:80:18: fe:12:73:e6 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUVTubiXtXlNwLVAK5Na0jk2sCa+owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4 NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjYxMDIxMDAwOTM0WhcNMjcwMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A5YmIxOWNmZTRmN2JkZjJlZjVkNWRhYTEyMGQ4NmRkODZl ZTQ4NzVjOWZhOWQxNDllMzU4MGYxMDI0NjkyNzFmMS0wKwYDVQQDEyQ4Zjk1ZTRk MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzNybdgNmUs7qPWCkls7BuFJyvD9esebz3GaAcc/1kSpBK SdKSZ44z1GvoX9ttUwZN5X/XPi5BlQh3OSQGR4xiPG1O43F8STVanDcROg2VCgtV IOpNzJFchJrQ25NMV9G9IUptV4pCyXBN96zUgQj20dQSzyFuzGKrIBSYySjlEiey BFF0GNILV8skTAttiWdmpjCzNVFosp3wt0TsDjugS2kK92a7lZntB/61Q0R55y+X jhNiuXevbc8Vno6HJCiiUbPHWn4hBsp26Ij0C8Rht0MiaeQ/5vklAW1LARa3Eho2 L1/X4vLT3pv8kfAA60BoSv5tCxldM82XHSBfhUyVAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUdW7xjMTMx2zQptLowjF5BaG7VN0wHwYDVR0jBBgwFoAUHl8tYvha0oTU 0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05 Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh MzhjMzJmZDRjLzk2NWU5YTE1LWU3YTctNGZmMy05ZjlmLTc0N2ZmY2JjZGE3My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBYOAGTANBgkqhkiG9w0BAQsFAAOCAQEAdykmH6K7L6N76IQ/JsL3NBrf cMA7K/ylx8kE4ZqYixpUFIBgApaLEsr+h7MGmSfkyqyupC5h+I9eF1gOtJt9GmIG DnoAjGGbgnXkRwZ/KnB23mEXcAIOZJoYhxcCoC6XpsinAKu0zMQ5mc0QQxZOtsD7 pXiHO7t4d2Nc6UMTj0UFPPZ8eXKHhW+3XmfPyqAI+r+5Mb/2HKeWw0s8Q/36d0AJ jcen7XUA7Gb83slLPL/cX3zGklV0WLRcZat/kO2BtUHhDQ3J60kAq8cDb79TBmQi qZq4KsQpGxrGqmwkgHhygqMI2yovTjwOPGz7I4TsBoq39LUXdltyqIAY/hJz5g== -----END CERTIFICATE-----Generated at Thu Nov 12 16:06:49 2026 by rpki-client