$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4d01c4d8-9b97-4ffe-b2ed-a588c1bef2af.roa File: 4d01c4d8-9b97-4ffe-b2ed-a588c1bef2af.roa (raw, json) Hash identifier: E1V+BjqJOUWuCtarBqJKHlZPq8hRSNEYDCA2Of6Mmkc= Subject key identifier: C7:E2:09:53:65:BA:54:0B:4B:01:E0:5A:29:92:90:05:83:9D:FB:93 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 7C508E707F1A75BF121C5E50486842C27FC70D5E Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4d01c4d8-9b97-4ffe-b2ed-a588c1bef2af.roa Signing time: Thu 15 Oct 2026 02:50:06 +0000 ROA not before: Thu 15 Oct 2026 02:50:06 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 40045 IP address blocks: 2605:9cc0:c0e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Nov 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:50:8e:70:7f:1a:75:bf:12:1c:5e:50:48:68:42:c2:7f:c7:0d:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 15 02:50:06 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=2be374b47fd788884995ac5c634da245338269184d0a86deb079cfb7de3c1425, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c0:10:1d:4d:fd:25:65:6d:01:c4:e2:90:2e: 97:6e:b9:02:56:bd:78:64:6b:48:b3:85:54:20:6c: 52:8d:e5:bc:5e:fe:b3:70:bf:46:b7:4e:dd:5e:08: e7:76:16:fc:7b:3b:f2:1a:76:e8:cd:1d:0e:7b:21: 3e:a0:64:fd:86:cd:1e:a5:17:bf:e0:c5:a4:d9:14: 3e:e8:a2:5f:49:73:0e:47:ce:c4:eb:a3:22:5e:49: 20:6f:67:a0:f4:7a:39:00:f0:a7:f4:a9:46:d6:ad: 87:59:c8:de:0d:f4:b9:01:3b:e7:34:fe:e0:2a:f4: f1:e2:42:a0:4c:7c:1c:67:8f:4b:bc:4c:80:43:d1: b7:85:71:31:40:d3:c5:5f:a5:b3:be:62:17:88:28: 70:77:1f:7b:39:00:77:d6:71:8e:b7:9c:63:3c:bb: 5f:96:13:44:99:9c:7f:17:c7:ee:dc:b5:79:10:b9: 02:3c:7d:dc:56:c4:e2:87:26:55:86:e0:57:7b:a6: 88:cf:dc:91:83:fb:4e:f6:f6:e7:37:6a:9b:4a:aa: 27:ca:4f:d7:f5:86:fa:6f:62:de:be:1f:d5:c6:44: 97:4c:d4:b4:31:8f:24:1c:f5:ec:15:6a:9c:cd:1f: 96:99:1b:ca:41:2a:25:e5:ee:18:92:6a:31:bd:58: 82:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E2:09:53:65:BA:54:0B:4B:01:E0:5A:29:92:90:05:83:9D:FB:93 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4d01c4d8-9b97-4ffe-b2ed-a588c1bef2af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c0e::/48 Signature Algorithm: sha256WithRSAEncryption 2d:db:b0:1a:a9:a9:89:c2:57:74:ae:30:e9:62:d5:ee:c4:2a: e1:58:ca:8f:97:c1:6c:3f:92:44:48:35:91:06:f0:14:bc:34: de:8b:e5:4d:45:73:dd:c0:54:c5:c4:ce:42:53:57:bf:85:5b: 10:df:b4:84:07:41:39:86:b8:02:28:73:ca:73:cf:65:65:fa: f2:bf:5c:66:29:d0:26:cd:2e:11:d1:2b:e0:21:7c:5f:5d:52: 7f:a6:11:7e:48:9a:ef:d3:f3:40:c9:24:67:cd:d1:f8:2f:12: fd:9f:cc:5c:01:40:a0:9a:7a:c2:c8:1d:05:76:40:e4:3c:62: 7c:bd:73:ca:1b:31:6c:23:5e:5d:4a:9c:da:70:55:07:e1:af: 8a:0f:36:2f:65:de:0f:fb:f3:26:55:4e:e5:76:06:df:b6:b0: 77:5c:f4:3c:ce:29:c7:1d:83:4d:4f:f1:85:f8:c3:a3:63:5d: 68:90:7e:17:44:2e:94:50:72:c5:26:8b:89:67:90:5c:92:98: 7d:29:f6:dc:27:90:7f:c7:03:11:9d:81:75:57:a2:be:86:45: 9c:71:2f:74:ce:1b:ce:56:89:6b:81:ec:22:c8:c8:94:98:8f: 34:ee:ff:b2:6b:96:56:90:dc:73:2b:57:d7:79:67:82:bf:e3: 2e:1a:6f:d5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfFCOcH8adb8SHF5QSGhCwn/HDV4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYxMDE1MDI1MDA2WhcNMjcwMTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYmUzNzRiNDdmZDc4ODg4NDk5NWFjNWM2MzRkYTI0NTMz ODI2OTE4NGQwYTg2ZGViMDc5Y2ZiN2RlM2MxNDI1MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDawBAdTf0lZW0BxOKQLpduuQJWvXhka0izhVQgbFKN5bxe /rNwv0a3Tt1eCOd2Fvx7O/IadujNHQ57IT6gZP2GzR6lF7/gxaTZFD7ool9Jcw5H zsTroyJeSSBvZ6D0ejkA8Kf0qUbWrYdZyN4N9LkBO+c0/uAq9PHiQqBMfBxnj0u8 TIBD0beFcTFA08VfpbO+YheIKHB3H3s5AHfWcY63nGM8u1+WE0SZnH8Xx+7ctXkQ uQI8fdxWxOKHJlWG4Fd7pojP3JGD+0729uc3aptKqifKT9f1hvpvYt6+H9XGRJdM 1LQxjyQc9ewVapzNH5aZG8pBKiXl7hiSajG9WIJ1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUx+IJU2W6VAtLAeBaKZKQBYOd+5MwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzRkMDFjNGQ4LTliOTctNGZmZS1iMmVkLWE1ODhjMWJlZjJhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADA4wDQYJKoZIhvcNAQELBQADggEBAC3bsBqpqYnCV3SuMOli1e7E KuFYyo+XwWw/kkRINZEG8BS8NN6L5U1Fc93AVMXEzkJTV7+FWxDftIQHQTmGuAIo c8pzz2Vl+vK/XGYp0CbNLhHRK+AhfF9dUn+mEX5Imu/T80DJJGfN0fgvEv2fzFwB QKCaesLIHQV2QOQ8Yny9c8obMWwjXl1KnNpwVQfhr4oPNi9l3g/78yZVTuV2Bt+2 sHdc9DzOKccdg01P8YX4w6NjXWiQfhdELpRQcsUmi4lnkFySmH0p9twnkH/HAxGd gXVXor6GRZxxL3TOG85WiWuB7CLIyJSYjzTu/7JrllaQ3HMrV9d5Z4K/4y4ab9U= -----END CERTIFICATE-----Generated at Wed Nov 11 09:20:10 2026 by rpki-client