$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/a5fee016-0f0f-4ed5-8231-85d2240819d9.roa File: a5fee016-0f0f-4ed5-8231-85d2240819d9.roa (raw, json) Hash identifier: OqV7RLiRQzOLQE6Qpn2Kd2mHIMeg97Z6vZZfo4+7hTQ= Subject key identifier: 3B:35:95:4A:A7:6C:8B:D8:9D:6F:B0:EB:EB:8D:BC:7F:DA:C1:76:98 Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Certificate serial: 5399D03FDB9EB502AE1458A062E2B2AB5883B111 Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/a5fee016-0f0f-4ed5-8231-85d2240819d9.roa Signing time: Wed 21 Oct 2026 00:09:30 +0000 ROA not before: Wed 21 Oct 2026 00:09:30 +0000 ROA not after: Tue 19 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2605:8380:a00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 13 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:99:d0:3f:db:9e:b5:02:ae:14:58:a0:62:e2:b2:ab:58:83:b1:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Validity Not Before: Oct 21 00:09:30 2026 GMT Not After : Jan 19 23:59:59 2027 GMT Subject: serialNumber=627e292bbd70b9e9d120b7f626fed483fa2095a5eefd46827fbf7b067993c3bc, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:69:6b:64:af:cf:33:d0:28:a6:63:15:ad:88: 3a:f9:5e:7e:ee:73:6a:be:fc:24:88:eb:40:df:65: a9:d1:ec:ec:52:25:b4:90:c8:38:3b:3a:ff:69:fa: 49:44:bb:bd:58:fa:65:3a:fa:71:64:2b:00:78:4e: b1:4e:a2:ba:ec:31:95:13:48:0e:b3:7f:d9:88:9f: c4:90:bf:02:2c:97:85:a5:20:63:8c:5a:9a:24:cf: a5:e7:25:0b:4c:70:bf:79:db:db:9c:3e:dd:92:09: 13:7f:b7:65:a7:89:27:58:ca:91:7a:a3:64:5c:d6: 8e:3c:98:0e:75:bd:eb:c5:b7:21:8b:79:e8:a5:a8: 8b:77:60:da:4d:a0:02:3f:99:f8:2b:8b:a4:46:6e: 0f:93:f7:53:20:4e:f2:d8:10:e9:64:19:cf:cd:56: 3f:ed:3d:53:57:7b:10:d6:f0:67:04:37:1c:11:1b: 60:f9:1a:89:79:f2:50:59:8a:57:2c:cd:d0:fa:7c: 77:ba:30:86:c5:4e:0d:29:51:7f:d7:6a:a0:e4:88: 2c:20:a5:32:b9:4d:ce:21:1a:48:ea:79:19:74:9d: 07:92:a1:ff:85:86:d2:b5:c3:d5:20:e4:ed:58:23: 71:ff:fb:ff:55:c6:17:d3:f4:cb:4d:db:9d:0d:14: 98:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:35:95:4A:A7:6C:8B:D8:9D:6F:B0:EB:EB:8D:BC:7F:DA:C1:76:98 X509v3 Authority Key Identifier: keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/a5fee016-0f0f-4ed5-8231-85d2240819d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:8380:a00::/40 Signature Algorithm: sha256WithRSAEncryption 16:11:b1:14:12:87:77:34:ed:e1:85:21:4b:1d:e8:a6:54:f6: cc:fe:3e:e5:61:72:83:93:35:eb:dd:ce:c3:cf:e9:f6:cf:8a: 7e:20:f1:38:86:57:59:b5:46:cd:5f:21:81:88:a4:b6:c5:5b: 4a:f2:85:8e:be:cd:b1:2b:c7:36:14:e7:cb:81:3b:1c:72:53: 4c:19:ad:96:0c:ac:a2:47:94:6c:8b:a6:90:04:b5:3c:ad:c4: d1:ce:59:cb:be:d9:26:e0:79:ef:6a:69:d5:45:d5:d0:a5:37: bd:f2:2f:a7:2d:1f:04:d4:91:ff:fb:0d:96:cc:01:80:24:54: ce:f4:03:b5:40:23:e7:8b:ce:da:bb:02:ff:c1:93:d3:fe:a8: 68:cc:9d:01:b2:32:34:4a:df:3a:a5:48:e2:9e:02:0f:70:23: ea:29:86:79:e2:ad:43:4d:40:3e:0c:2c:99:37:29:36:d1:6a: 32:87:92:39:8d:80:55:b9:98:57:01:d5:2a:c7:f8:71:17:8b: 67:dd:cb:16:35:51:46:b0:e2:da:05:7a:77:77:d0:1b:84:5b: c5:0c:23:21:91:43:ba:21:3d:95:cb:52:1a:20:4a:34:e9:4a: ea:9c:7b:d1:00:79:44:65:5c:c9:5b:de:d3:84:5f:98:d8:ff: 82:50:77:de -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUU5nQP9uetQKuFFigYuKyq1iDsREwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4 NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjYxMDIxMDAwOTMwWhcNMjcwMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MjdlMjkyYmJkNzBiOWU5ZDEyMGI3ZjYyNmZlZDQ4M2Zh MjA5NWE1ZWVmZDQ2ODI3ZmJmN2IwNjc5OTNjM2JjMS0wKwYDVQQDEyQ4Zjk1ZTRk MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3aWtkr88z0CimYxWtiDr5Xn7uc2q+/CSI60DfZanR7OxS JbSQyDg7Ov9p+klEu71Y+mU6+nFkKwB4TrFOorrsMZUTSA6zf9mIn8SQvwIsl4Wl IGOMWpokz6XnJQtMcL9529ucPt2SCRN/t2WniSdYypF6o2Rc1o48mA51vevFtyGL eeilqIt3YNpNoAI/mfgri6RGbg+T91MgTvLYEOlkGc/NVj/tPVNXexDW8GcENxwR G2D5Gol58lBZilcszdD6fHe6MIbFTg0pUX/XaqDkiCwgpTK5Tc4hGkjqeRl0nQeS of+FhtK1w9Ug5O1YI3H/+/9VxhfT9MtN250NFJjZAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUOzWVSqdsi9idb7Dr6428f9rBdpgwHwYDVR0jBBgwFoAUHl8tYvha0oTU 0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05 Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh MzhjMzJmZDRjL2E1ZmVlMDE2LTBmMGYtNGVkNS04MjMxLTg1ZDIyNDA4MTlkOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBYOACjANBgkqhkiG9w0BAQsFAAOCAQEAFhGxFBKHdzTt4YUhSx3oplT2 zP4+5WFyg5M1693Ow8/p9s+KfiDxOIZXWbVGzV8hgYiktsVbSvKFjr7NsSvHNhTn y4E7HHJTTBmtlgysokeUbIumkAS1PK3E0c5Zy77ZJuB572pp1UXV0KU3vfIvpy0f BNSR//sNlswBgCRUzvQDtUAj54vO2rsC/8GT0/6oaMydAbIyNErfOqVI4p4CD3Aj 6imGeeKtQ01APgwsmTcpNtFqMoeSOY2AVbmYVwHVKsf4cReLZ93LFjVRRrDi2gV6 d3fQG4RbxQwjIZFDuiE9lctSGiBKNOlK6px70QB5RGVcyVve04RfmNj/glB33g== -----END CERTIFICATE-----Generated at Thu Nov 12 16:09:32 2026 by rpki-client