$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/cf325009-c50d-4796-a313-0222d295cd1a.roa File: cf325009-c50d-4796-a313-0222d295cd1a.roa (raw, json) Hash identifier: +j9ogt3220VorgIhxje14tzz/31UtY4Q3Ba9z71Yl1k= Subject key identifier: 9D:B9:96:A0:5B:EA:B7:34:A0:13:4B:F1:E1:F9:D2:DC:AF:97:56:35 Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Certificate serial: 369D2D1F80E35DC0C8EDDFFF9168B0AF0B80A942 Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/cf325009-c50d-4796-a313-0222d295cd1a.roa Signing time: Wed 21 Oct 2026 00:09:47 +0000 ROA not before: Wed 21 Oct 2026 00:09:47 +0000 ROA not after: Tue 19 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2605:8380:1200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 13 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:9d:2d:1f:80:e3:5d:c0:c8:ed:df:ff:91:68:b0:af:0b:80:a9:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Validity Not Before: Oct 21 00:09:47 2026 GMT Not After : Jan 19 23:59:59 2027 GMT Subject: serialNumber=5d96ba56cb983e5b3e946670b57710ee0e20e8169604fface781b5cf939b8c78, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ab:4d:1c:46:02:8e:f3:08:40:93:81:49:f7: 09:9b:ac:e7:95:0d:0f:2c:0f:ba:5d:d8:c7:b2:44: b6:ed:26:85:49:bd:c8:7a:7e:fd:13:ef:c6:e4:19: 8a:e6:cc:42:0e:64:fe:a3:dd:04:07:ac:ec:95:ac: 04:bc:31:a4:8f:8e:a4:41:7a:1f:48:4e:cb:73:b1: 01:17:fe:3e:95:4f:16:9a:a1:fb:98:68:5b:18:17: 37:f4:64:58:0a:6c:1e:63:8e:0d:f5:f7:aa:7b:d6: 0a:18:b6:07:e1:71:a7:c9:2e:dc:fb:bd:45:a2:24: 14:a6:85:bb:f3:b3:36:fb:24:d9:69:3d:64:80:2e: fb:e6:7a:a0:88:4d:16:2a:8c:3f:c7:5d:15:a8:96: d3:80:df:e8:9c:4a:62:2a:23:32:5e:8a:79:cf:32: fb:0c:59:cf:94:1d:50:a4:2f:f9:41:3d:d9:42:57: bf:30:33:3d:2e:bb:f6:16:be:aa:89:a5:c6:c5:aa: e6:73:0f:2c:3e:00:f2:00:8b:fb:34:76:eb:c8:2f: 99:cd:15:81:e5:e0:69:63:77:e4:7e:cd:53:e6:de: dc:63:83:c3:57:ab:39:5f:f6:91:20:a2:56:18:27: 1d:62:74:ed:87:d0:51:4b:38:ff:0b:90:c5:24:33: 54:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B9:96:A0:5B:EA:B7:34:A0:13:4B:F1:E1:F9:D2:DC:AF:97:56:35 X509v3 Authority Key Identifier: keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/cf325009-c50d-4796-a313-0222d295cd1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:8380:1200::/40 Signature Algorithm: sha256WithRSAEncryption ce:6b:62:a8:27:a6:45:5c:c3:5f:ea:be:50:f3:9e:b1:10:9c: f8:1d:08:34:88:8c:d0:33:bd:79:ec:29:2c:9b:46:a8:6a:1c: 44:3b:93:3b:9c:2b:18:57:2e:ef:70:11:59:82:5e:58:52:8a: 65:76:c7:31:dd:08:69:b6:c7:fd:64:9a:1f:62:cb:10:21:f3: c3:61:50:29:03:43:14:6d:56:47:05:9b:36:31:c2:36:fe:5e: 74:c4:81:26:1f:11:e3:fc:b7:95:53:85:49:c1:e6:98:54:a4: 82:6a:7d:c8:69:60:b3:f1:54:36:96:6a:e9:c3:0f:4b:aa:84: 8c:0c:0a:42:f7:1b:ab:98:db:92:26:81:f4:0d:7f:b4:f8:4a: 2d:24:10:50:20:f5:90:05:69:1f:41:34:8e:79:f5:37:2f:ef: c6:3b:a3:b8:97:58:e0:24:f1:b4:1a:85:ce:c9:bd:ad:de:92: 4d:e3:90:8c:28:55:f6:ea:69:1f:3d:6a:ed:5a:85:cb:a3:af: 6a:6f:1e:13:44:02:74:0e:c2:4f:55:48:d6:ec:7d:63:d1:6f: 66:77:b6:a5:4b:17:a5:8f:4a:cb:b1:23:b3:65:9e:53:74:3e: 45:62:b1:f1:f2:53:f4:6f:30:c4:8c:f9:57:64:9d:77:c9:63: 42:d8:b8:76 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUNp0tH4DjXcDI7d//kWiwrwuAqUIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4 NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjYxMDIxMDAwOTQ3WhcNMjcwMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZDk2YmE1NmNiOTgzZTViM2U5NDY2NzBiNTc3MTBlZTBl MjBlODE2OTYwNGZmYWNlNzgxYjVjZjkzOWI4Yzc4MS0wKwYDVQQDEyQ4Zjk1ZTRk MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGq00cRgKO8whAk4FJ9wmbrOeVDQ8sD7pd2MeyRLbtJoVJ vch6fv0T78bkGYrmzEIOZP6j3QQHrOyVrAS8MaSPjqRBeh9ITstzsQEX/j6VTxaa ofuYaFsYFzf0ZFgKbB5jjg3196p71goYtgfhcafJLtz7vUWiJBSmhbvzszb7JNlp PWSALvvmeqCITRYqjD/HXRWoltOA3+icSmIqIzJeinnPMvsMWc+UHVCkL/lBPdlC V78wMz0uu/YWvqqJpcbFquZzDyw+APIAi/s0duvIL5nNFYHl4Gljd+R+zVPm3txj g8NXqzlf9pEgolYYJx1idO2H0FFLOP8LkMUkM1TFAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUnbmWoFvqtzSgE0vx4fnS3K+XVjUwHwYDVR0jBBgwFoAUHl8tYvha0oTU 0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05 Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh MzhjMzJmZDRjL2NmMzI1MDA5LWM1MGQtNDc5Ni1hMzEzLTAyMjJkMjk1Y2QxYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBYOAEjANBgkqhkiG9w0BAQsFAAOCAQEAzmtiqCemRVzDX+q+UPOesRCc +B0INIiM0DO9eewpLJtGqGocRDuTO5wrGFcu73ARWYJeWFKKZXbHMd0IabbH/WSa H2LLECHzw2FQKQNDFG1WRwWbNjHCNv5edMSBJh8R4/y3lVOFScHmmFSkgmp9yGlg s/FUNpZq6cMPS6qEjAwKQvcbq5jbkiaB9A1/tPhKLSQQUCD1kAVpH0E0jnn1Ny/v xjujuJdY4CTxtBqFzsm9rd6STeOQjChV9uppHz1q7VqFy6Ovam8eE0QCdA7CT1VI 1ux9Y9FvZne2pUsXpY9Ky7Ejs2WeU3Q+RWKx8fJT9G8wxIz5V2Sdd8ljQti4dg== -----END CERTIFICATE-----Generated at Thu Nov 12 16:09:10 2026 by rpki-client