$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2b35ab1a-8001-404a-9285-196aa943aa95.roa File: 2b35ab1a-8001-404a-9285-196aa943aa95.roa (raw, json) Hash identifier: WQJ+PjscEgUDVASoWJW/rZMjIhXcKZfsPoGhynjpVSg= Subject key identifier: BA:EB:35:7F:04:8A:B6:1B:B9:CA:C4:1A:92:B3:50:3B:7B:DE:B2:A5 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 1C62FD2D247B6495BE1F4DEBD50FFB946AE70833 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2b35ab1a-8001-404a-9285-196aa943aa95.roa Signing time: Mon 26 Oct 2026 04:02:26 +0000 ROA not before: Mon 26 Oct 2026 04:02:26 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:387::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Nov 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:62:fd:2d:24:7b:64:95:be:1f:4d:eb:d5:0f:fb:94:6a:e7:08:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 26 04:02:26 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=04a1b46f98ceaba8ab47399e71f6bd68ace7aee151cf6291cd524b2e9dfde553, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3d:6e:3c:27:7c:0f:43:6e:23:c9:53:c7:dd: 2a:f9:90:fb:f1:a2:e6:85:f6:98:8b:50:13:6b:2e: 7b:c5:e5:87:76:67:25:9d:51:9f:6f:03:96:f4:12: 79:a0:8f:dd:78:f6:e8:92:65:a9:17:c1:4f:76:5f: 00:48:9d:74:7f:5a:bb:5a:8b:d0:6c:73:4d:a9:10: 50:d4:c4:45:c2:5f:94:4d:7f:bc:c7:ea:c0:c4:52: 32:ee:a6:75:75:a6:be:c4:21:1f:6c:c6:3a:5d:97: fb:f1:9d:da:c2:d4:6a:f9:8e:37:32:7e:2c:57:7d: ab:e9:ff:e8:f5:ef:6f:45:24:08:54:d1:0f:fa:34: db:ef:e1:4f:22:ab:c9:54:e4:82:8e:45:6a:99:e2: 82:96:dd:96:32:cd:df:d0:e2:a9:61:f7:0b:8e:33: 32:05:fc:2b:b9:6c:52:f9:42:77:ef:e0:1f:5d:da: 2d:04:6b:45:b4:9b:b3:a8:48:a0:bd:a1:e4:d5:8b: ca:b2:4e:6c:8c:94:71:6d:1e:32:13:0a:c5:66:35: 11:2e:a9:46:75:cb:61:3c:f8:14:c3:76:c3:07:5a: 88:3a:ff:12:17:f3:62:36:58:58:c9:c4:60:c9:97: ca:95:e7:96:06:18:73:9d:63:d3:1e:aa:f1:8f:9d: c9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:EB:35:7F:04:8A:B6:1B:B9:CA:C4:1A:92:B3:50:3B:7B:DE:B2:A5 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2b35ab1a-8001-404a-9285-196aa943aa95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:387::/48 Signature Algorithm: sha256WithRSAEncryption 3a:54:13:a8:70:58:05:f8:05:cc:98:29:f2:c4:b9:2b:a8:04: e2:77:fa:30:c8:bf:f1:7f:f3:7e:25:90:2e:82:5f:72:6a:7a: 05:18:ee:d1:6b:c6:9e:47:1d:d0:5c:ba:f6:cc:ae:99:72:63: 03:e0:0d:90:a8:1f:e0:d6:cd:bc:2f:cd:20:3d:90:af:7a:5c: 36:7b:5b:97:f0:0e:b5:54:62:cf:a4:8f:2d:94:ad:33:63:23: 27:01:a0:0c:21:cc:ae:8c:73:08:8c:e4:09:45:58:a7:60:21: d9:09:24:b0:54:3f:2b:51:78:d3:45:b5:cd:83:c4:0e:68:d9: 3e:e9:c8:e9:03:9d:6d:8d:f6:ab:bd:b7:30:5b:33:5f:37:1c: af:c8:d4:a8:96:17:6c:d2:47:ce:cf:75:e5:54:6b:52:10:fa: 95:dd:9e:0c:67:3c:0d:67:f4:42:6b:5b:cf:bf:44:c0:da:5e: 1e:68:ef:95:42:09:d8:09:cc:e2:79:27:16:14:81:21:a6:62: 35:2b:8b:ff:4f:67:42:e2:a8:2d:39:b2:90:6d:48:b2:68:a9: 55:11:14:1c:f5:2b:cf:dc:02:50:60:f8:1d:1a:75:a3:31:c8: b5:28:6e:54:14:79:0a:24:87:9f:ef:12:28:70:fe:6d:cf:d5: dc:0b:cd:d4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUHGL9LSR7ZJW+H03r1Q/7lGrnCDMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYxMDI2MDQwMjI2WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNGExYjQ2Zjk4Y2VhYmE4YWI0NzM5OWU3MWY2YmQ2OGFj ZTdhZWUxNTFjZjYyOTFjZDUyNGIyZTlkZmRlNTUzMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfPW48J3wPQ24jyVPH3Sr5kPvxouaF9piLUBNrLnvF5Yd2 ZyWdUZ9vA5b0Enmgj9149uiSZakXwU92XwBInXR/Wrtai9Bsc02pEFDUxEXCX5RN f7zH6sDEUjLupnV1pr7EIR9sxjpdl/vxndrC1Gr5jjcyfixXfavp/+j1729FJAhU 0Q/6NNvv4U8iq8lU5IKORWqZ4oKW3ZYyzd/Q4qlh9wuOMzIF/Cu5bFL5Qnfv4B9d 2i0Ea0W0m7OoSKC9oeTVi8qyTmyMlHFtHjITCsVmNREuqUZ1y2E8+BTDdsMHWog6 /xIX82I2WFjJxGDJl8qV55YGGHOdY9MeqvGPnckRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUuus1fwSKthu5ysQakrNQO3vesqUwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzJiMzVhYjFhLTgwMDEtNDA0YS05Mjg1LTE5NmFhOTQzYWE5NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA4cwDQYJKoZIhvcNAQELBQADggEBADpUE6hwWAX4BcyYKfLEuSuo BOJ3+jDIv/F/834lkC6CX3JqegUY7tFrxp5HHdBcuvbMrplyYwPgDZCoH+DWzbwv zSA9kK96XDZ7W5fwDrVUYs+kjy2UrTNjIycBoAwhzK6McwiM5AlFWKdgIdkJJLBU PytReNNFtc2DxA5o2T7pyOkDnW2N9qu9tzBbM183HK/I1KiWF2zSR87PdeVUa1IQ +pXdngxnPA1n9EJrW8+/RMDaXh5o75VCCdgJzOJ5JxYUgSGmYjUri/9PZ0LiqC05 spBtSLJoqVURFBz1K8/cAlBg+B0adaMxyLUoblQUeQokh5/vEihw/m3P1dwLzdQ= -----END CERTIFICATE-----Generated at Wed Nov 11 14:09:45 2026 by rpki-client