$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/d3677318-abe3-4f23-813a-65606f96282c.roa File: d3677318-abe3-4f23-813a-65606f96282c.roa (raw, json) Hash identifier: oozZu4nsp4DOyyR04vRaTz1vGEDOa9lvzBssxTgp0Xs= Subject key identifier: C3:35:2B:B2:85:9E:E5:4E:28:DF:DF:41:CA:E0:BD:06:C4:49:5B:AB Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Certificate serial: 57DA94E0BBCEB1AA04DFAFBBF19911B511BD5692 Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/d3677318-abe3-4f23-813a-65606f96282c.roa Signing time: Wed 21 Oct 2026 00:09:29 +0000 ROA not before: Wed 21 Oct 2026 00:09:29 +0000 ROA not after: Tue 19 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2605:8380:1e00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:da:94:e0:bb:ce:b1:aa:04:df:af:bb:f1:99:11:b5:11:bd:56:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Validity Not Before: Oct 21 00:09:29 2026 GMT Not After : Jan 19 23:59:59 2027 GMT Subject: serialNumber=e45f009b960d65e1cb8cdc5a2d7ea6b709c8e86ae819760a31346878c6fcf139, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:df:60:93:97:3a:f9:82:ab:7a:7b:d7:34:f2: 65:85:48:2a:f3:15:46:24:8e:f1:7a:5f:c6:dc:53: 2f:d3:06:e5:94:cb:fa:15:3a:cc:2f:f4:55:6f:19: a5:31:be:d3:f3:0e:1f:19:9b:12:05:8c:57:38:00: 59:f6:38:42:91:57:51:22:10:da:49:b6:81:a6:0f: e2:0e:cd:0f:22:eb:90:75:3c:f2:bd:57:11:12:59: b3:d3:5f:ff:c1:5e:a4:cc:30:2c:85:cd:58:9c:18: 65:31:27:2f:91:08:8f:4f:d9:2a:64:8a:1a:e2:6d: 88:b2:5d:29:da:34:44:3c:24:74:07:34:1b:cd:ad: c2:3b:80:b1:14:0f:d8:8c:bc:87:ad:dc:d9:71:41: 88:20:ac:41:f4:d3:f8:7e:b2:cf:26:bc:df:d6:bb: 26:02:41:5f:4d:b7:41:63:e3:3c:72:dc:e6:58:04: e1:a0:86:e8:da:4e:a1:68:79:ff:95:89:47:b1:a2: c6:37:df:ed:fb:26:82:e9:5c:8f:39:1b:27:49:ca: 11:f3:97:70:34:9f:fc:ba:ae:24:bd:ee:e6:27:49: 49:cb:9e:13:5f:8b:a1:37:e7:d1:06:58:ec:85:71: e5:3b:96:c1:99:6e:d2:0b:4b:77:29:47:88:35:a7: 12:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:35:2B:B2:85:9E:E5:4E:28:DF:DF:41:CA:E0:BD:06:C4:49:5B:AB X509v3 Authority Key Identifier: keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/d3677318-abe3-4f23-813a-65606f96282c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:8380:1e00::/40 Signature Algorithm: sha256WithRSAEncryption 9c:cc:83:6c:25:cd:04:d4:e8:8b:86:05:f5:a6:20:4c:d1:ef: 1d:9d:7f:69:28:cd:8c:6e:a1:54:be:63:51:f4:43:40:16:41: 5d:b5:9b:1e:f7:64:34:4b:5f:1e:1b:c1:d9:a3:9a:be:33:1d: 24:0e:34:00:0f:7b:16:a1:17:0c:79:8a:c9:aa:3a:1e:4e:b2: bf:09:68:3c:2a:a5:a6:47:12:02:bd:75:65:fe:58:11:15:7b: 7c:1c:a9:35:0a:2c:60:57:55:64:54:af:d4:1d:9f:21:89:d7: d4:e4:74:47:4e:9a:c9:28:21:7c:60:07:e4:2c:3b:ea:32:37: ae:d0:07:02:00:7f:11:ea:29:77:b8:16:5f:e0:fa:87:ed:27: dd:85:ff:08:c8:9b:57:3d:92:71:7c:1d:c8:b4:01:0d:88:b0: 04:d8:33:60:a3:e4:5a:0b:3f:70:25:06:67:6f:4d:be:e6:fb: 0d:af:a7:93:d5:ff:9f:e7:42:3e:da:99:11:03:e1:04:fd:59: e6:40:28:74:0c:dd:44:9a:73:1e:d9:af:21:d4:fc:57:31:2d: e1:9f:76:9e:04:5c:58:e3:66:df:d0:4c:5b:18:59:e5:4d:9d: 2e:b7:39:e8:fb:c0:4d:c4:ae:ff:74:a1:1c:8a:78:d2:d9:b0: 39:8c:f9:43 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUV9qU4LvOsaoE36+78ZkRtRG9VpIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4 NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjYxMDIxMDAwOTI5WhcNMjcwMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNDVmMDA5Yjk2MGQ2NWUxY2I4Y2RjNWEyZDdlYTZiNzA5 YzhlODZhZTgxOTc2MGEzMTM0Njg3OGM2ZmNmMTM5MS0wKwYDVQQDEyQ4Zjk1ZTRk MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCs32CTlzr5gqt6e9c08mWFSCrzFUYkjvF6X8bcUy/TBuWU y/oVOswv9FVvGaUxvtPzDh8ZmxIFjFc4AFn2OEKRV1EiENpJtoGmD+IOzQ8i65B1 PPK9VxESWbPTX//BXqTMMCyFzVicGGUxJy+RCI9P2SpkihribYiyXSnaNEQ8JHQH NBvNrcI7gLEUD9iMvIet3NlxQYggrEH00/h+ss8mvN/WuyYCQV9Nt0Fj4zxy3OZY BOGghujaTqFoef+ViUexosY33+37JoLpXI85GydJyhHzl3A0n/y6riS97uYnSUnL nhNfi6E359EGWOyFceU7lsGZbtILS3cpR4g1pxLjAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUwzUrsoWe5U4o399ByuC9BsRJW6swHwYDVR0jBBgwFoAUHl8tYvha0oTU 0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05 Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh MzhjMzJmZDRjL2QzNjc3MzE4LWFiZTMtNGYyMy04MTNhLTY1NjA2Zjk2MjgyYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBYOAHjANBgkqhkiG9w0BAQsFAAOCAQEAnMyDbCXNBNToi4YF9aYgTNHv HZ1/aSjNjG6hVL5jUfRDQBZBXbWbHvdkNEtfHhvB2aOavjMdJA40AA97FqEXDHmK yao6Hk6yvwloPCqlpkcSAr11Zf5YERV7fBypNQosYFdVZFSv1B2fIYnX1OR0R06a ySghfGAH5Cw76jI3rtAHAgB/Eeopd7gWX+D6h+0n3YX/CMibVz2ScXwdyLQBDYiw BNgzYKPkWgs/cCUGZ29Nvub7Da+nk9X/n+dCPtqZEQPhBP1Z5kAodAzdRJpzHtmv IdT8VzEt4Z92ngRcWONm39BMWxhZ5U2dLrc56PvATcSu/3ShHIp40tmwOYz5Qw== -----END CERTIFICATE-----Generated at Thu Nov 12 20:31:51 2026 by rpki-client