$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/f108432b-786e-45b5-8c00-a6aae2025e2f.roa File: f108432b-786e-45b5-8c00-a6aae2025e2f.roa (raw, json) Hash identifier: 93sVPbSEiLCv1rL7xZKBV8dkURv0gj1x0xWc/q15FpY= Subject key identifier: 01:A0:CB:73:C5:E3:6A:74:37:D4:B9:79:2C:6B:13:74:AB:EC:8E:87 Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Certificate serial: 5E89AE895F8BD393B8B43E4FD34ACBA7FFBEA240 Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/f108432b-786e-45b5-8c00-a6aae2025e2f.roa Signing time: Wed 21 Oct 2026 00:09:19 +0000 ROA not before: Wed 21 Oct 2026 00:09:19 +0000 ROA not after: Tue 19 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2605:8380:600::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 13 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:89:ae:89:5f:8b:d3:93:b8:b4:3e:4f:d3:4a:cb:a7:ff:be:a2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Validity Not Before: Oct 21 00:09:19 2026 GMT Not After : Jan 19 23:59:59 2027 GMT Subject: serialNumber=872e5cf8ca7a2060eefdc6e4acfca85a13d3b40884a827e09bb12cd68a05a601, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7f:f2:97:24:ee:a8:72:ef:31:48:a0:8a:ce: 3b:73:7e:d5:db:a5:1b:26:4f:b2:90:a8:3b:2d:ea: 58:bc:ad:bc:ac:52:7d:62:0e:7f:14:e2:40:2f:2d: 04:7b:97:e9:5e:4f:6d:9d:e0:61:38:ec:61:bb:93: da:af:59:43:6d:ee:da:67:e9:cb:46:c6:84:ff:a6: 7d:a8:26:f8:b0:34:63:83:c3:16:3e:c9:b2:ba:aa: 49:e1:4e:ad:ec:6a:6d:6a:fb:49:74:da:14:18:f6: ee:d9:4d:fe:25:47:8b:31:fa:2b:e9:bf:bb:d6:16: 87:62:d6:26:9f:69:38:88:d3:16:4e:c4:b6:cf:45: cf:b5:1c:8a:2d:b2:39:6a:92:5d:cb:a0:40:23:9f: 93:e7:ae:39:81:84:47:c7:98:86:b5:58:87:b1:f4: e7:72:c6:18:5a:2c:b2:0f:24:0b:43:23:2a:00:71: 12:d9:c5:cb:f7:ca:b0:50:5b:26:41:ac:5a:8d:3e: fd:1b:d4:4f:20:69:6d:03:69:80:1b:23:dd:2c:0a: 15:ac:03:65:45:61:09:c5:25:f8:be:b6:2a:94:91: 8e:a9:9f:f1:b7:ee:f3:82:b4:22:f6:58:e7:8f:f8: 4b:1c:41:85:0d:98:1b:4c:2a:27:9c:e6:ac:1c:68: 9a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A0:CB:73:C5:E3:6A:74:37:D4:B9:79:2C:6B:13:74:AB:EC:8E:87 X509v3 Authority Key Identifier: keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/f108432b-786e-45b5-8c00-a6aae2025e2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:8380:600::/40 Signature Algorithm: sha256WithRSAEncryption 48:7a:e7:5f:4d:1a:cf:97:ae:03:f8:e0:54:d6:a6:22:0f:24: 08:93:fe:bb:d6:ba:f8:1d:ec:14:30:3d:e5:a4:ed:12:b6:3e: 5e:88:a8:5d:7d:91:ba:ac:a6:15:f0:aa:95:75:72:a9:b0:4f: a4:b5:7d:26:ce:52:3a:cb:45:fa:93:67:16:b8:10:a3:07:3b: 82:ed:7f:7e:c5:95:2c:03:25:a8:31:c9:df:91:56:df:5d:69: 39:af:36:c2:60:01:25:76:a5:43:26:c0:a7:cc:19:8f:2d:84: c9:1d:20:c3:eb:be:9d:ce:05:ea:da:5f:43:98:c2:c1:6a:2e: ab:7b:e5:0c:6a:e2:63:ad:c4:97:9e:6b:11:48:9f:da:b9:f4: 36:50:ec:4a:82:6c:c4:7a:40:e2:c6:4f:d9:59:7f:75:35:ad: 39:57:72:dd:04:88:4c:ba:3d:1d:56:0b:13:53:fa:b4:79:f4: 8f:f9:6a:6c:77:59:96:5d:8b:2d:79:34:60:fa:8a:e6:1f:19: 8b:2b:7a:2f:d7:cd:ec:1c:81:7f:09:6c:54:38:77:37:6a:c8: c6:b9:58:ba:7d:f6:03:87:f4:f7:9c:c3:20:ce:40:78:8d:57: 44:1b:d3:9b:72:6f:e7:47:7b:6d:ec:06:d4:96:32:e1:f6:6a: a0:37:e8:33 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUXomuiV+L05O4tD5P00rLp/++okAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4 NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjYxMDIxMDAwOTE5WhcNMjcwMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NzJlNWNmOGNhN2EyMDYwZWVmZGM2ZTRhY2ZjYTg1YTEz ZDNiNDA4ODRhODI3ZTA5YmIxMmNkNjhhMDVhNjAxMS0wKwYDVQQDEyQ4Zjk1ZTRk MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6f/KXJO6ocu8xSKCKzjtzftXbpRsmT7KQqDst6li8rbys Un1iDn8U4kAvLQR7l+leT22d4GE47GG7k9qvWUNt7tpn6ctGxoT/pn2oJviwNGOD wxY+ybK6qknhTq3sam1q+0l02hQY9u7ZTf4lR4sx+ivpv7vWFodi1iafaTiI0xZO xLbPRc+1HIotsjlqkl3LoEAjn5PnrjmBhEfHmIa1WIex9OdyxhhaLLIPJAtDIyoA cRLZxcv3yrBQWyZBrFqNPv0b1E8gaW0DaYAbI90sChWsA2VFYQnFJfi+tiqUkY6p n/G37vOCtCL2WOeP+EscQYUNmBtMKiec5qwcaJoBAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUAaDLc8XjanQ31Ll5LGsTdKvsjocwHwYDVR0jBBgwFoAUHl8tYvha0oTU 0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05 Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh MzhjMzJmZDRjL2YxMDg0MzJiLTc4NmUtNDViNS04YzAwLWE2YWFlMjAyNWUyZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBYOABjANBgkqhkiG9w0BAQsFAAOCAQEASHrnX00az5euA/jgVNamIg8k CJP+u9a6+B3sFDA95aTtErY+XoioXX2RuqymFfCqlXVyqbBPpLV9Js5SOstF+pNn FrgQowc7gu1/fsWVLAMlqDHJ35FW311pOa82wmABJXalQybAp8wZjy2EyR0gw+u+ nc4F6tpfQ5jCwWouq3vlDGriY63El55rEUif2rn0NlDsSoJsxHpA4sZP2Vl/dTWt OVdy3QSITLo9HVYLE1P6tHn0j/lqbHdZll2LLXk0YPqK5h8Ziyt6L9fN7ByBfwls VDh3N2rIxrlYun32A4f095zDIM5AeI1XRBvTm3Jv50d7bewG1JYy4fZqoDfoMw== -----END CERTIFICATE-----Generated at Thu Nov 12 16:08:53 2026 by rpki-client