$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/c686f937-000a-490a-846c-e2773b637b26.roa File: c686f937-000a-490a-846c-e2773b637b26.roa (raw, json) Hash identifier: 9EFK3OCJIXsR1Y9BU3aIi5KYeS1/IShe5dWbzUGxnag= Subject key identifier: 12:17:28:43:3C:06:EC:BD:39:76:66:96:11:13:CD:F2:49:6C:4F:40 Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Certificate serial: 5556253E0C465C854533A0AA8608738F8AA768C8 Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/c686f937-000a-490a-846c-e2773b637b26.roa Signing time: Thu 15 Oct 2026 00:07:06 +0000 ROA not before: Thu 15 Oct 2026 00:07:06 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2606:f40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 13 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:56:25:3e:0c:46:5c:85:45:33:a0:aa:86:08:73:8f:8a:a7:68:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Validity Not Before: Oct 15 00:07:06 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=bc3b4d5dc8c1c5001c830db44179ec2fb7a9b2bc77436357926827d91a9b326c, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:85:13:9a:7e:2c:38:39:d8:43:d7:5f:d5:9d: 07:ff:51:15:76:78:10:d3:68:29:97:d8:64:a9:af: ec:e9:d9:1e:8f:1f:1b:1c:97:a3:e9:47:a4:46:79: 49:03:0d:57:c9:8a:30:f8:f0:9e:f2:8c:f8:48:50: 12:d4:e3:3e:6e:5d:be:5a:4e:a9:38:75:60:19:91: 1e:5a:a6:b9:57:0a:31:b1:b8:12:fa:1c:2a:28:2d: 1c:67:df:06:fd:8f:37:c2:19:d5:56:2c:ad:31:23: 85:df:ea:44:07:2d:12:90:c8:8d:c8:0b:c4:4b:8e: 60:06:d8:c6:18:fe:88:fb:9c:b4:bb:14:fc:b9:4e: 9d:79:0b:30:cb:41:6f:b3:7e:7f:8d:10:d2:3c:37: e6:59:22:0e:0f:79:a0:bb:b5:ee:b6:5c:cc:0a:32: ce:5a:c9:0f:3a:ce:99:f3:92:73:b4:b8:d6:2b:50: d9:5f:90:9b:1f:1b:d9:14:f7:b9:91:0f:b8:33:62: c7:a5:cc:84:cb:c4:2e:6e:d8:36:bc:c9:b4:34:49: 2e:52:e2:2c:e6:fd:5b:7c:59:65:94:09:92:b0:0c: 88:c1:6c:a7:86:26:c1:8a:45:7d:22:47:ca:c8:b9: 79:ac:9a:65:f8:31:a0:f3:e0:a0:cb:0e:e3:20:88: 0e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:17:28:43:3C:06:EC:BD:39:76:66:96:11:13:CD:F2:49:6C:4F:40 X509v3 Authority Key Identifier: keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/c686f937-000a-490a-846c-e2773b637b26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2606:f40::/32 Signature Algorithm: sha256WithRSAEncryption 4a:3c:7b:06:b5:fe:57:41:a2:bb:64:4a:18:c4:7c:4a:e3:bd: fe:bf:b4:b8:0d:3e:31:d7:40:42:08:b8:89:de:97:3f:d5:10: a9:6e:31:84:c4:77:ff:5e:b3:84:d4:7a:b1:42:6c:24:6c:2c: 16:b1:8f:c6:36:e2:0c:79:3f:e1:f2:3c:37:60:eb:f8:4e:3f: 86:35:7e:4f:eb:40:e8:95:ef:07:76:f8:5f:4a:a4:57:0c:a3: e2:e7:89:8c:42:e8:c4:5c:ad:88:4e:82:42:46:bf:b2:bd:fd: cc:b5:ef:0b:98:f0:ca:17:8c:b6:51:21:ee:5d:48:f5:db:13: 23:3a:64:c8:9a:55:49:5c:4b:bb:dc:e1:59:12:20:1b:b0:eb: 65:ac:3f:fc:cc:d6:74:e6:c5:be:49:a2:ba:3d:4b:59:40:43: 2f:d2:f3:97:8c:56:6b:bc:ac:06:02:23:aa:68:28:db:85:34: 4a:34:02:97:06:ff:a3:4a:4c:a0:7f:1d:87:c8:08:4c:8c:9f: 72:1d:99:61:cb:4a:ec:57:fc:45:fa:a7:05:88:58:81:d4:a3: 7a:ff:81:bc:f6:c9:cc:c5:13:f6:ab:50:71:b7:e1:bb:ae:74: 21:50:6e:c1:a5:ad:d1:5b:17:f4:4e:23:14:c5:7a:4d:50:c8: 4a:15:ab:31 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUVVYlPgxGXIVFM6Cqhghzj4qnaMgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4 NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjYxMDE1MDAwNzA2WhcNMjcwMTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiYzNiNGQ1ZGM4YzFjNTAwMWM4MzBkYjQ0MTc5ZWMyZmI3 YTliMmJjNzc0MzYzNTc5MjY4MjdkOTFhOWIzMjZjMS0wKwYDVQQDEyQ4Zjk1ZTRk MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNhROafiw4OdhD11/VnQf/URV2eBDTaCmX2GSpr+zp2R6P Hxscl6PpR6RGeUkDDVfJijD48J7yjPhIUBLU4z5uXb5aTqk4dWAZkR5aprlXCjGx uBL6HCooLRxn3wb9jzfCGdVWLK0xI4Xf6kQHLRKQyI3IC8RLjmAG2MYY/oj7nLS7 FPy5Tp15CzDLQW+zfn+NENI8N+ZZIg4PeaC7te62XMwKMs5ayQ86zpnzknO0uNYr UNlfkJsfG9kU97mRD7gzYselzITLxC5u2Da8ybQ0SS5S4izm/Vt8WWWUCZKwDIjB bKeGJsGKRX0iR8rIuXmsmmX4MaDz4KDLDuMgiA5dAgMBAAGjggKyMIICrjAdBgNV HQ4EFgQUEhcoQzwG7L05dmaWERPN8klsT0AwHwYDVR0jBBgwFoAUHl8tYvha0oTU 0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05 Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh MzhjMzJmZDRjL2M2ODZmOTM3LTAwMGEtNDkwYS04NDZjLWUyNzczYjYzN2IyNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAmBg9AMA0GCSqGSIb3DQEBCwUAA4IBAQBKPHsGtf5XQaK7ZEoYxHxK473+ v7S4DT4x10BCCLiJ3pc/1RCpbjGExHf/XrOE1HqxQmwkbCwWsY/GNuIMeT/h8jw3 YOv4Tj+GNX5P60Dole8HdvhfSqRXDKPi54mMQujEXK2IToJCRr+yvf3Mte8LmPDK F4y2USHuXUj12xMjOmTImlVJXEu73OFZEiAbsOtlrD/8zNZ05sW+SaK6PUtZQEMv 0vOXjFZrvKwGAiOqaCjbhTRKNAKXBv+jSkygfx2HyAhMjJ9yHZlhy0rsV/xF+qcF iFiB1KN6/4G89snMxRP2q1Bxt+G7rnQhUG7Bpa3RWxf0TiMUxXpNUMhKFasx -----END CERTIFICATE-----Generated at Thu Nov 12 16:07:46 2026 by rpki-client