$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/c9548f2a-ae67-448c-9ed7-55124dbff6cc.roa File: c9548f2a-ae67-448c-9ed7-55124dbff6cc.roa (raw, json) Hash identifier: US4MnskezCXph7GpvnGwnxKzpqpFYv+bfMb9DCWUFBs= Subject key identifier: 91:49:CF:26:EF:8D:4F:1F:B5:3E:35:F4:55:07:92:A5:17:63:B4:BA Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Certificate serial: 6DD3629D0625CD86D46F01D08234563279680B76 Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/c9548f2a-ae67-448c-9ed7-55124dbff6cc.roa Signing time: Wed 21 Oct 2026 00:09:43 +0000 ROA not before: Wed 21 Oct 2026 00:09:43 +0000 ROA not after: Tue 19 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2605:8380:c00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 13 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:d3:62:9d:06:25:cd:86:d4:6f:01:d0:82:34:56:32:79:68:0b:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Validity Not Before: Oct 21 00:09:43 2026 GMT Not After : Jan 19 23:59:59 2027 GMT Subject: serialNumber=7de8eae49a484e242d62ec47c00cdf144c5d742cb52e07916bb560bd8613dbf3, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:41:8e:64:04:1d:31:90:07:fc:91:52:17:dc: 89:36:35:e8:1a:12:95:9d:16:5d:e2:40:08:1f:6b: 25:c9:39:c3:be:17:83:4c:0d:c4:cc:fe:df:64:92: f5:c6:27:ae:70:ea:1f:10:39:d7:1c:6e:2c:0b:2a: 22:4c:08:2c:a3:27:bd:34:d9:e0:70:20:32:9d:93: c2:42:9b:23:5c:98:2d:87:90:4b:fb:b8:78:a1:32: 60:c3:91:7d:70:84:65:d0:c5:24:b6:28:92:05:43: e5:cd:bb:33:8c:3a:04:14:98:64:5f:ce:fb:69:55: 31:0f:1c:49:33:3e:e3:29:9a:fb:5e:87:21:56:9f: 0d:4c:0e:c8:a5:37:65:c3:8b:7e:07:eb:0d:63:be: c5:eb:b4:c4:1e:d0:91:a3:28:85:a8:0e:b5:10:ad: 31:6c:15:e0:ef:9f:a9:88:c9:c3:fc:7e:c6:9a:ad: b8:ec:6f:a9:1a:93:a8:a9:17:73:20:22:f7:90:c0: ab:c6:38:6a:fb:53:dd:b6:11:60:07:b7:93:92:fd: aa:78:7d:5a:eb:c1:9f:21:32:aa:4c:b8:a9:10:ca: 63:dc:c0:0f:23:8b:b6:33:a8:46:cf:2c:b3:8b:06: 08:bb:4b:d7:9c:67:f9:33:06:89:8f:71:eb:74:d7: 0f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:49:CF:26:EF:8D:4F:1F:B5:3E:35:F4:55:07:92:A5:17:63:B4:BA X509v3 Authority Key Identifier: keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/c9548f2a-ae67-448c-9ed7-55124dbff6cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:8380:c00::/40 Signature Algorithm: sha256WithRSAEncryption 9c:1f:bf:90:7a:6a:b6:5f:4a:88:4e:67:56:1f:8e:38:ce:a5: 93:1a:bf:aa:25:fb:41:c9:52:90:0b:6a:4a:a0:52:01:1b:47: 92:1d:35:39:c3:6d:38:6c:8d:84:4b:02:80:9e:ba:73:cf:9d: 43:07:50:07:a6:6c:7f:29:34:25:4b:ff:01:62:4b:fb:b9:6b: 9d:fe:c9:2f:bf:77:2e:13:f3:3d:79:d3:95:0b:a0:a8:26:ff: bc:6a:df:e3:09:05:6f:4b:92:40:70:c9:1b:60:8b:9d:cc:a9: 1f:19:ad:c9:e8:3b:6b:47:40:a6:17:87:14:58:b1:1b:3e:dc: 18:82:cc:4b:04:e8:77:65:01:37:32:66:07:a0:88:00:34:34: 1d:07:e9:6f:04:4f:b0:19:b5:4f:9b:77:2f:79:83:1e:cd:b8: ac:d9:4d:67:b2:39:40:04:25:a6:3e:e6:ff:2e:07:1f:0b:a0: b3:7e:19:a4:cb:d2:80:eb:a6:44:e9:99:f3:c7:77:f6:83:bc: 7c:56:5f:d6:ca:28:3f:74:9b:91:60:b4:67:da:0b:27:b4:56: 13:ae:0e:e7:33:ce:0d:28:e7:00:7c:47:2b:25:d4:bc:a6:32: 17:f6:1e:5b:71:a4:d0:54:6f:19:b8:a6:95:2a:49:9e:4d:f7: b9:db:97:f4 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUbdNinQYlzYbUbwHQgjRWMnloC3YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4 NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjYxMDIxMDAwOTQzWhcNMjcwMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZGU4ZWFlNDlhNDg0ZTI0MmQ2MmVjNDdjMDBjZGYxNDRj NWQ3NDJjYjUyZTA3OTE2YmI1NjBiZDg2MTNkYmYzMS0wKwYDVQQDEyQ4Zjk1ZTRk MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDlQY5kBB0xkAf8kVIX3Ik2NegaEpWdFl3iQAgfayXJOcO+ F4NMDcTM/t9kkvXGJ65w6h8QOdccbiwLKiJMCCyjJ7002eBwIDKdk8JCmyNcmC2H kEv7uHihMmDDkX1whGXQxSS2KJIFQ+XNuzOMOgQUmGRfzvtpVTEPHEkzPuMpmvte hyFWnw1MDsilN2XDi34H6w1jvsXrtMQe0JGjKIWoDrUQrTFsFeDvn6mIycP8fsaa rbjsb6kak6ipF3MgIveQwKvGOGr7U922EWAHt5OS/ap4fVrrwZ8hMqpMuKkQymPc wA8ji7YzqEbPLLOLBgi7S9ecZ/kzBomPcet01w/pAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUkUnPJu+NTx+1PjX0VQeSpRdjtLowHwYDVR0jBBgwFoAUHl8tYvha0oTU 0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05 Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh MzhjMzJmZDRjL2M5NTQ4ZjJhLWFlNjctNDQ4Yy05ZWQ3LTU1MTI0ZGJmZjZjYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBYOADDANBgkqhkiG9w0BAQsFAAOCAQEAnB+/kHpqtl9KiE5nVh+OOM6l kxq/qiX7QclSkAtqSqBSARtHkh01OcNtOGyNhEsCgJ66c8+dQwdQB6Zsfyk0JUv/ AWJL+7lrnf7JL793LhPzPXnTlQugqCb/vGrf4wkFb0uSQHDJG2CLncypHxmtyeg7 a0dApheHFFixGz7cGILMSwTod2UBNzJmB6CIADQ0HQfpbwRPsBm1T5t3L3mDHs24 rNlNZ7I5QAQlpj7m/y4HHwugs34ZpMvSgOumROmZ88d39oO8fFZf1sooP3SbkWC0 Z9oLJ7RWE64O5zPODSjnAHxHKyXUvKYyF/YeW3Gk0FRvGbimlSpJnk33uduX9A== -----END CERTIFICATE-----Generated at Thu Nov 12 16:07:56 2026 by rpki-client