$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/bc4cfd70-d837-468a-aba7-af62540622e6.roa File: bc4cfd70-d837-468a-aba7-af62540622e6.roa (raw, json) Hash identifier: 7owAn/EPloe7o3sT6lAtBoMJvRaNhy/hVpbCwFMBR9Y= Subject key identifier: F6:BF:E4:89:A9:5C:3D:35:F5:91:67:E1:4B:2F:12:BA:6B:85:22:3B Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Certificate serial: 08BCD6894ED04BCF959052663138220E13413775 Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/bc4cfd70-d837-468a-aba7-af62540622e6.roa Signing time: Wed 21 Oct 2026 00:09:18 +0000 ROA not before: Wed 21 Oct 2026 00:09:18 +0000 ROA not after: Tue 19 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2605:8380::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 13 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:bc:d6:89:4e:d0:4b:cf:95:90:52:66:31:38:22:0e:13:41:37:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Validity Not Before: Oct 21 00:09:18 2026 GMT Not After : Jan 19 23:59:59 2027 GMT Subject: serialNumber=d988bfc0c6e0d9b928e1e5b2fd6cd893aa8e33de21775c74d9b94c78b13da932, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:63:0b:d7:0e:4b:ed:cd:06:cb:68:e3:95:5a: 87:a8:21:05:e1:2f:c7:e8:d2:5a:db:74:2c:ad:4b: af:05:cf:35:4b:42:0a:9e:fa:44:03:ac:59:ad:78: cb:ec:20:8e:4f:fb:f2:37:d4:8f:74:28:ae:7c:2f: 18:e6:21:fc:c8:d9:6e:89:9d:ff:eb:09:8f:75:4e: 2a:5a:e7:21:14:eb:a5:ca:79:3e:49:3a:8f:32:bd: 35:4d:77:04:43:b9:27:7d:4f:bb:ac:d0:43:09:7c: 02:71:e0:75:d6:e6:10:75:46:fb:f8:c6:b5:e2:6f: 39:13:d1:06:df:e0:49:82:a1:cb:65:ee:cb:0d:e7: ab:32:99:8f:07:e0:b7:72:09:97:8c:5e:31:e0:ae: 88:32:19:84:31:a5:e1:d2:cf:88:f6:32:a8:d0:3d: 32:01:07:55:d6:12:a7:2c:4c:94:e6:64:ac:c8:eb: f6:b1:7f:8b:3c:60:ff:4d:68:ec:1d:a8:82:31:5e: c2:50:ef:e0:27:58:63:d4:34:ec:24:1f:cb:e5:a1: bc:ca:3c:68:cb:71:8f:80:26:c4:3e:b1:d5:18:fa: 1d:f5:8f:de:6a:8e:35:65:06:82:51:97:7a:58:9e: 83:dd:43:c5:10:3e:5b:98:64:b6:62:91:57:db:e5: 02:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:BF:E4:89:A9:5C:3D:35:F5:91:67:E1:4B:2F:12:BA:6B:85:22:3B X509v3 Authority Key Identifier: keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/bc4cfd70-d837-468a-aba7-af62540622e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:8380::/32 Signature Algorithm: sha256WithRSAEncryption 42:9a:33:02:be:f3:3f:32:ae:89:33:59:ea:a0:2c:e4:0f:ff: ab:9e:c8:31:67:9e:88:2c:7e:76:2e:85:f1:88:90:1b:26:7f: 2f:aa:2f:e4:a3:49:43:c1:f1:c6:c7:af:e7:35:a8:04:38:92: 5c:2b:cd:b4:e6:77:09:af:81:5d:d9:39:78:a7:98:da:0c:d0: 20:a2:15:af:29:52:aa:ad:a2:58:f9:bf:c5:9d:69:ed:b7:f5: c9:5e:22:54:22:34:82:c2:f1:ff:95:cc:ac:53:dc:ae:b2:af: f7:bb:7c:87:d6:1b:22:44:ee:0f:08:59:d4:0d:0c:a8:72:78: 44:15:f5:2e:fd:dc:dc:76:fa:9f:bc:37:1a:ff:0d:cd:0a:0b: 94:6a:34:12:52:6b:af:37:52:3d:6a:58:9a:63:38:af:8e:db: c5:b2:f0:08:e7:ff:40:cf:da:54:5c:6a:09:84:d1:a4:21:37: 55:01:e2:c9:f4:30:6a:d8:ff:07:38:af:83:30:4e:fe:c1:4d: 0e:9c:9c:14:ec:5a:95:ea:29:81:a3:77:b8:38:6f:4b:8f:e7: 27:bf:c0:ad:ca:68:56:37:0a:77:6a:81:58:36:f4:61:78:e3: 68:be:32:ae:80:94:84:f0:66:95:a2:7d:98:33:26:cf:64:02: 4c:28:b6:ad -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUCLzWiU7QS8+VkFJmMTgiDhNBN3UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4 NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjYxMDIxMDAwOTE4WhcNMjcwMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkOTg4YmZjMGM2ZTBkOWI5MjhlMWU1YjJmZDZjZDg5M2Fh OGUzM2RlMjE3NzVjNzRkOWI5NGM3OGIxM2RhOTMyMS0wKwYDVQQDEyQ4Zjk1ZTRk MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDiYwvXDkvtzQbLaOOVWoeoIQXhL8fo0lrbdCytS68FzzVL Qgqe+kQDrFmteMvsII5P+/I31I90KK58LxjmIfzI2W6Jnf/rCY91Tipa5yEU66XK eT5JOo8yvTVNdwRDuSd9T7us0EMJfAJx4HXW5hB1Rvv4xrXibzkT0Qbf4EmCoctl 7ssN56symY8H4LdyCZeMXjHgrogyGYQxpeHSz4j2MqjQPTIBB1XWEqcsTJTmZKzI 6/axf4s8YP9NaOwdqIIxXsJQ7+AnWGPUNOwkH8vlobzKPGjLcY+AJsQ+sdUY+h31 j95qjjVlBoJRl3pYnoPdQ8UQPluYZLZikVfb5QKzAgMBAAGjggKyMIICrjAdBgNV HQ4EFgQU9r/kialcPTX1kWfhSy8SumuFIjswHwYDVR0jBBgwFoAUHl8tYvha0oTU 0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05 Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh MzhjMzJmZDRjL2JjNGNmZDcwLWQ4MzctNDY4YS1hYmE3LWFmNjI1NDA2MjJlNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAmBYOAMA0GCSqGSIb3DQEBCwUAA4IBAQBCmjMCvvM/Mq6JM1nqoCzkD/+r nsgxZ56ILH52LoXxiJAbJn8vqi/ko0lDwfHGx6/nNagEOJJcK8205ncJr4Fd2Tl4 p5jaDNAgohWvKVKqraJY+b/FnWntt/XJXiJUIjSCwvH/lcysU9yusq/3u3yH1hsi RO4PCFnUDQyocnhEFfUu/dzcdvqfvDca/w3NCguUajQSUmuvN1I9aliaYzivjtvF svAI5/9Az9pUXGoJhNGkITdVAeLJ9DBq2P8HOK+DME7+wU0OnJwU7FqV6imBo3e4 OG9Lj+cnv8CtymhWNwp3aoFYNvRheONovjKugJSE8GaVon2YMybPZAJMKLat -----END CERTIFICATE-----Generated at Thu Nov 12 16:08:43 2026 by rpki-client