$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/d1e840ec-30ae-4128-a18b-8d2420631c89.roa File: d1e840ec-30ae-4128-a18b-8d2420631c89.roa (raw, json) Hash identifier: /2JrHUyhjjDc4GCi+nZrLAb8qiH3K/ckdtWmTSRzHVw= Subject key identifier: 05:06:66:CB:F3:78:E1:5A:87:A6:88:B6:55:DD:E6:B5:75:B4:6D:34 Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Certificate serial: 77B77216470A530E4C65AE2AC9E962E51ABA5C2F Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/d1e840ec-30ae-4128-a18b-8d2420631c89.roa Signing time: Wed 21 Oct 2026 00:09:28 +0000 ROA not before: Wed 21 Oct 2026 00:09:28 +0000 ROA not after: Tue 19 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2605:8380:e00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:b7:72:16:47:0a:53:0e:4c:65:ae:2a:c9:e9:62:e5:1a:ba:5c:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Validity Not Before: Oct 21 00:09:28 2026 GMT Not After : Jan 19 23:59:59 2027 GMT Subject: serialNumber=e8fe08eee9b3524103b3a0efb43bee88b2a7e33e2c389801be29e9aad424b9df, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:32:ae:71:20:15:2b:ff:a7:ac:3f:78:1e:ec: 06:e1:20:d7:b2:af:0b:d4:85:d4:49:84:6b:11:86: 6e:46:08:01:b9:4d:ad:d3:b7:19:5f:4e:94:70:d6: a8:f7:76:92:97:15:96:5e:7d:b2:6b:83:d6:22:e2: 6e:cd:88:30:4c:e4:d1:5a:83:39:a6:3b:d1:32:74: 10:dd:39:71:8e:c1:f4:92:74:56:c6:d5:e7:33:be: ad:3d:59:3f:c5:28:fc:64:53:85:14:49:6d:9e:99: f5:84:f7:07:0a:ea:7a:6b:f7:8b:a6:84:1a:a8:24: 8a:02:43:1a:62:46:ca:3c:ef:94:2f:58:2e:cd:19: 24:22:e9:a6:dd:f5:e1:42:49:87:ac:2a:92:1b:63: 40:c8:d3:4f:35:c5:a2:da:7f:36:d2:ad:c2:47:67: 96:61:69:e0:08:d1:e1:a5:3f:bc:ac:e7:dd:46:c8: f0:07:a3:3d:15:07:f5:a5:9a:2c:66:1f:6b:56:47: 7f:6a:c6:0d:e5:b4:a2:93:41:c9:f7:ce:3d:ec:1d: 91:b8:e0:db:f4:3f:c2:40:d8:d7:44:c9:64:39:15: 9c:bc:5b:65:54:03:c6:1e:2b:63:50:6e:d5:82:66: a9:c0:73:92:62:9f:c5:80:0a:3b:6d:05:3b:45:54: 14:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:06:66:CB:F3:78:E1:5A:87:A6:88:B6:55:DD:E6:B5:75:B4:6D:34 X509v3 Authority Key Identifier: keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/d1e840ec-30ae-4128-a18b-8d2420631c89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:8380:e00::/40 Signature Algorithm: sha256WithRSAEncryption 1f:5c:9c:50:86:ca:f1:f9:5f:9c:24:9b:c4:4b:f6:e9:49:4e: dd:f3:21:07:18:f9:07:b8:fa:75:b8:6d:e6:13:c3:47:f5:d3: 31:cc:d4:38:93:e5:ab:7a:8c:84:6b:48:43:e3:c8:fc:f4:ca: 80:5f:65:65:92:13:4f:b6:3f:76:26:be:69:a7:7c:1e:f3:07: 44:d8:48:fa:ed:11:96:ea:c8:85:0b:2f:a6:25:5e:47:93:dd: 9a:74:3b:5a:c8:27:2c:78:4a:28:f1:37:04:95:8d:39:52:14: 38:ff:83:6c:28:0c:d1:ef:fd:04:6e:84:f0:78:e9:82:80:aa: b1:28:a3:99:c0:a9:81:91:07:5f:39:a7:75:bb:ef:a8:1d:78: 59:9e:0b:b1:5e:9e:ff:04:cc:c9:91:f7:ab:71:37:b2:68:f4: aa:fc:ee:79:73:d1:36:eb:b6:65:d0:78:b3:9f:dd:e3:e8:af: 62:5c:80:a6:0e:4e:ef:61:d1:a3:ee:4a:0d:ad:29:54:97:36: 14:94:ac:e7:1d:b0:ad:8e:ea:72:5d:43:ed:c6:64:90:18:fc: 2a:f4:20:98:0b:dc:73:da:93:81:c9:cd:98:f6:09:2e:4e:1f: c8:16:32:2c:8f:a7:71:84:09:46:58:e9:74:db:18:05:45:01: aa:72:db:ff -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUd7dyFkcKUw5MZa4qyeli5Rq6XC8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4 NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjYxMDIxMDAwOTI4WhcNMjcwMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlOGZlMDhlZWU5YjM1MjQxMDNiM2EwZWZiNDNiZWU4OGIy YTdlMzNlMmMzODk4MDFiZTI5ZTlhYWQ0MjRiOWRmMS0wKwYDVQQDEyQ4Zjk1ZTRk MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJMq5xIBUr/6esP3ge7AbhINeyrwvUhdRJhGsRhm5GCAG5 Ta3TtxlfTpRw1qj3dpKXFZZefbJrg9Yi4m7NiDBM5NFagzmmO9EydBDdOXGOwfSS dFbG1eczvq09WT/FKPxkU4UUSW2emfWE9wcK6npr94umhBqoJIoCQxpiRso875Qv WC7NGSQi6abd9eFCSYesKpIbY0DI0081xaLafzbSrcJHZ5ZhaeAI0eGlP7ys591G yPAHoz0VB/WlmixmH2tWR39qxg3ltKKTQcn3zj3sHZG44Nv0P8JA2NdEyWQ5FZy8 W2VUA8YeK2NQbtWCZqnAc5Jin8WACjttBTtFVBTpAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUBQZmy/N44VqHpoi2Vd3mtXW0bTQwHwYDVR0jBBgwFoAUHl8tYvha0oTU 0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05 Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh MzhjMzJmZDRjL2QxZTg0MGVjLTMwYWUtNDEyOC1hMThiLThkMjQyMDYzMWM4OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBYOADjANBgkqhkiG9w0BAQsFAAOCAQEAH1ycUIbK8flfnCSbxEv26UlO 3fMhBxj5B7j6dbht5hPDR/XTMczUOJPlq3qMhGtIQ+PI/PTKgF9lZZITT7Y/dia+ aad8HvMHRNhI+u0RlurIhQsvpiVeR5PdmnQ7WsgnLHhKKPE3BJWNOVIUOP+DbCgM 0e/9BG6E8HjpgoCqsSijmcCpgZEHXzmndbvvqB14WZ4LsV6e/wTMyZH3q3E3smj0 qvzueXPRNuu2ZdB4s5/d4+ivYlyApg5O72HRo+5KDa0pVJc2FJSs5x2wrY7qcl1D 7cZkkBj8KvQgmAvcc9qTgcnNmPYJLk4fyBYyLI+ncYQJRljpdNsYBUUBqnLb/w== -----END CERTIFICATE-----Generated at Thu Nov 12 17:03:18 2026 by rpki-client