$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/011a2018-20b6-4386-aacf-19025e8dc9d2.roa File: 011a2018-20b6-4386-aacf-19025e8dc9d2.roa (raw, json) Hash identifier: khvXPcrMYzO/5WlE7+n1xyjVEMMHx3v83VaNCpeOe9Q= Subject key identifier: B9:CB:D0:24:B2:88:2C:5C:2C:67:32:3D:BF:64:3C:A5:4F:37:0C:C7 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 580032ADDC51CDC142CE3E7427D3B4DF81422F82 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/011a2018-20b6-4386-aacf-19025e8dc9d2.roa Signing time: Mon 26 Oct 2026 04:03:07 +0000 ROA not before: Mon 26 Oct 2026 04:03:07 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:30b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Nov 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:00:32:ad:dc:51:cd:c1:42:ce:3e:74:27:d3:b4:df:81:42:2f:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 26 04:03:07 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=c687eb99c52467d50960fa9cee0b397f48a5cca1719037458f2520b226be94fe, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6e:81:45:39:c2:82:6b:45:a2:71:1f:06:2f: bc:4a:a3:3b:c5:63:0b:c4:ec:49:6d:a8:76:fa:df: b4:26:24:99:f8:57:c4:9a:c0:2b:e5:f1:d7:92:8b: aa:18:dc:f9:ae:90:29:fc:3b:65:1f:7f:37:60:15: 37:f5:16:fa:2e:0a:05:e3:00:56:1f:af:07:1f:b5: c7:95:bf:35:01:b4:a2:27:b3:64:80:5c:59:f6:aa: cb:3c:83:87:5d:b2:b7:84:12:db:d8:e6:17:29:56: 5b:64:12:06:43:d1:64:d0:be:13:76:7f:90:b7:1b: b0:cd:db:9d:e9:93:03:c1:fb:1c:4d:56:d0:ac:4f: c6:0b:42:fb:1b:db:a2:aa:07:1e:77:48:02:b8:5f: 08:d9:2a:20:ac:14:3a:3b:f0:18:4a:06:bd:e5:c5: 1b:64:c3:55:86:83:dc:ef:c5:ac:3e:e4:62:fd:eb: 32:be:f0:0a:3c:2b:c0:7c:6e:cb:34:4a:91:f0:57: 42:43:92:f8:11:26:86:b5:38:da:14:5f:01:0e:14: d1:59:0b:65:6d:72:28:8a:16:2c:85:05:fa:65:ca: f6:f2:59:d4:73:32:08:f3:3e:6c:d4:fd:cd:53:2a: af:23:9e:d0:06:f4:84:9e:cb:40:e7:5f:0b:e6:08: c4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:CB:D0:24:B2:88:2C:5C:2C:67:32:3D:BF:64:3C:A5:4F:37:0C:C7 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/011a2018-20b6-4386-aacf-19025e8dc9d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:30b::/48 Signature Algorithm: sha256WithRSAEncryption 1a:52:52:15:29:34:24:78:4b:9d:1c:17:9b:8c:a1:82:0a:4d: 07:7d:58:2e:93:a7:7b:ac:90:fb:70:a4:10:dc:57:47:03:a0: 71:c1:e3:a5:f8:c2:72:81:e2:65:e8:96:a8:3c:84:71:b4:c7: 46:fa:4c:36:a7:9a:14:98:95:1a:9c:94:32:6a:1c:dc:4a:eb: 5d:8a:c4:2c:26:50:49:35:f8:d2:f1:b8:e0:a5:c6:b1:7f:7e: f8:cf:11:71:2a:9e:66:38:e1:46:64:03:71:11:6b:97:04:58: 81:64:73:94:be:35:8c:f7:02:08:b1:de:02:31:8a:3b:1a:2d: cb:fc:17:1c:07:99:63:51:99:41:2e:07:04:b1:48:05:a7:e9: c6:99:eb:83:69:a2:f8:4c:5c:63:b6:6f:52:b7:84:c9:bd:dc: f5:b0:8b:ed:04:31:d9:f1:26:cf:c8:f2:1d:7b:63:99:ed:9e: 0c:21:84:e8:72:98:e0:ab:a3:ed:00:be:d2:19:79:d2:7f:5f: cf:62:a7:a3:aa:bd:53:31:b8:31:56:9e:88:95:0d:3f:74:f8: 1d:ed:4d:38:7e:c1:6e:96:67:01:b4:87:cf:8c:93:9e:bd:ed: 35:53:ef:8d:a6:ce:d7:d4:35:dd:f6:a3:41:da:e6:50:69:5a: 7f:7e:10:26 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWAAyrdxRzcFCzj50J9O034FCL4IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYxMDI2MDQwMzA3WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNjg3ZWI5OWM1MjQ2N2Q1MDk2MGZhOWNlZTBiMzk3ZjQ4 YTVjY2ExNzE5MDM3NDU4ZjI1MjBiMjI2YmU5NGZlMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDaboFFOcKCa0WicR8GL7xKozvFYwvE7EltqHb637QmJJn4 V8SawCvl8deSi6oY3PmukCn8O2UffzdgFTf1FvouCgXjAFYfrwcftceVvzUBtKIn s2SAXFn2qss8g4ddsreEEtvY5hcpVltkEgZD0WTQvhN2f5C3G7DN253pkwPB+xxN VtCsT8YLQvsb26KqBx53SAK4XwjZKiCsFDo78BhKBr3lxRtkw1WGg9zvxaw+5GL9 6zK+8Ao8K8B8bss0SpHwV0JDkvgRJoa1ONoUXwEOFNFZC2VtciiKFiyFBfplyvby WdRzMgjzPmzU/c1TKq8jntAG9ISey0DnXwvmCMQRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUucvQJLKILFwsZzI9v2Q8pU83DMcwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzAxMWEyMDE4LTIwYjYtNDM4Ni1hYWNmLTE5MDI1ZThkYzlkMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAAwswDQYJKoZIhvcNAQELBQADggEBABpSUhUpNCR4S50cF5uMoYIK TQd9WC6Tp3uskPtwpBDcV0cDoHHB46X4wnKB4mXolqg8hHG0x0b6TDanmhSYlRqc lDJqHNxK612KxCwmUEk1+NLxuOClxrF/fvjPEXEqnmY44UZkA3ERa5cEWIFkc5S+ NYz3Agix3gIxijsaLcv8FxwHmWNRmUEuBwSxSAWn6caZ64NpovhMXGO2b1K3hMm9 3PWwi+0EMdnxJs/I8h17Y5ntngwhhOhymOCro+0AvtIZedJ/X89ip6OqvVMxuDFW noiVDT90+B3tTTh+wW6WZwG0h8+Mk5697TVT742mztfUNd32o0Ha5lBpWn9+ECY= -----END CERTIFICATE-----Generated at Wed Nov 11 14:15:53 2026 by rpki-client