$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4dac6043-34e0-4357-a5ac-4587a0261982.roa File: 4dac6043-34e0-4357-a5ac-4587a0261982.roa (raw, json) Hash identifier: j3qKOqZby5StP+URngnScqtfFUxAtTZtsYt5Bjl4wPI= Subject key identifier: 2C:02:30:23:23:F1:60:58:63:38:F9:8E:CB:2D:CA:3C:1B:58:C5:54 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 12D3DC21C1FB8779AACC742923D8210CAA5B690A Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4dac6043-34e0-4357-a5ac-4587a0261982.roa Signing time: Mon 26 Oct 2026 03:40:09 +0000 ROA not before: Mon 26 Oct 2026 03:40:09 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:396::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Nov 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:d3:dc:21:c1:fb:87:79:aa:cc:74:29:23:d8:21:0c:aa:5b:69:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 26 03:40:09 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=4be27139c0a044456880d6e23e652e087a23c185885842c4736aaf210a128e4c, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:46:4d:6f:84:bb:b8:0c:d0:7b:75:c0:f5:19: 2e:18:7d:86:fc:3c:ef:ee:1a:70:93:17:a0:70:53: 48:46:df:d4:54:5b:c6:7d:ce:d1:5b:0b:48:50:ac: b7:0b:77:6f:97:5c:b6:84:22:49:4e:25:77:c2:ad: 92:0e:e5:d1:b0:17:50:b5:e3:03:4f:59:5e:1c:b1: f7:66:20:7f:e6:92:81:dd:a8:39:a8:e9:d1:46:b6: 61:5e:15:b3:0a:94:14:50:36:89:bb:5a:69:ef:42: 3a:fd:9e:c9:f2:52:2f:d9:69:06:9a:2a:ff:b8:78: c3:23:36:02:f2:bc:93:01:75:84:ea:22:15:77:b8: 17:ca:ab:60:1e:13:68:df:4a:65:6a:65:d4:d9:1f: d4:91:3e:80:c3:2d:9c:be:87:8e:af:01:eb:4f:0b: 88:e9:47:02:ef:2c:bd:9a:6e:7b:c1:2a:71:ff:b0: aa:bf:44:33:2a:ea:8e:2d:f1:4f:03:37:6e:0d:1a: 8c:88:27:68:a6:4d:3f:db:25:4b:71:ff:bf:10:2a: c9:7b:c9:c3:1d:67:b2:92:d1:dc:26:a3:e7:67:7e: 5c:da:5a:64:06:ae:29:43:03:45:89:da:71:83:86: 3e:55:ca:64:cf:c3:d8:80:fb:48:7d:d7:5d:49:64: 8d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:02:30:23:23:F1:60:58:63:38:F9:8E:CB:2D:CA:3C:1B:58:C5:54 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4dac6043-34e0-4357-a5ac-4587a0261982.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:396::/48 Signature Algorithm: sha256WithRSAEncryption 54:a1:b8:cb:bc:e8:3a:63:93:7d:8b:2c:6f:1d:54:07:73:0f: ab:77:4c:7d:9c:80:c6:75:a0:fb:80:87:c5:61:d6:cc:25:d8: a7:30:d0:f8:a9:90:9a:9d:58:dc:6e:e0:d5:28:8a:47:7e:5b: 1e:16:27:62:46:ea:84:e8:02:7b:d7:b2:b7:73:97:c6:b6:c0: a8:38:8d:d0:db:82:d0:ab:f1:93:01:61:48:50:a5:47:8b:7e: 95:8f:e0:97:09:98:5e:fe:6b:e2:b8:16:b0:d6:95:44:0d:6f: 68:fc:93:30:75:a2:a0:d4:9c:b2:f3:56:82:3a:1c:be:8a:13: e9:54:21:6c:82:16:82:d3:7a:0f:58:14:a3:18:06:53:f2:ba: 06:16:cb:27:af:f8:1a:10:db:03:8a:31:7e:05:3d:08:23:45: 3b:44:55:20:c7:9c:84:60:28:02:13:6c:6e:c0:4d:36:c9:43: b8:ba:7f:92:30:6f:43:c8:6f:16:98:a0:aa:1b:bf:96:8e:b7: 60:a8:07:5f:3e:b3:1a:9d:fb:12:2b:55:91:b7:5f:24:15:de: 91:f3:7d:9e:6b:a7:e6:f8:06:af:26:3f:5f:65:28:ee:16:2e: e5:10:9f:53:4a:85:9f:05:5e:b9:ae:b8:f3:f2:2a:61:c7:5e: f6:6c:2c:3b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEtPcIcH7h3mqzHQpI9ghDKpbaQowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYxMDI2MDM0MDA5WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YmUyNzEzOWMwYTA0NDQ1Njg4MGQ2ZTIzZTY1MmUwODdh MjNjMTg1ODg1ODQyYzQ3MzZhYWYyMTBhMTI4ZTRjMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiRk1vhLu4DNB7dcD1GS4YfYb8PO/uGnCTF6BwU0hG39RU W8Z9ztFbC0hQrLcLd2+XXLaEIklOJXfCrZIO5dGwF1C14wNPWV4csfdmIH/mkoHd qDmo6dFGtmFeFbMKlBRQNom7WmnvQjr9nsnyUi/ZaQaaKv+4eMMjNgLyvJMBdYTq IhV3uBfKq2AeE2jfSmVqZdTZH9SRPoDDLZy+h46vAetPC4jpRwLvLL2abnvBKnH/ sKq/RDMq6o4t8U8DN24NGoyIJ2imTT/bJUtx/78QKsl7ycMdZ7KS0dwmo+dnflza WmQGrilDA0WJ2nGDhj5VymTPw9iA+0h9111JZI3/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQULAIwIyPxYFhjOPmOyy3KPBtYxVQwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzRkYWM2MDQzLTM0ZTAtNDM1Ny1hNWFjLTQ1ODdhMDI2MTk4Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA5YwDQYJKoZIhvcNAQELBQADggEBAFShuMu86Dpjk32LLG8dVAdz D6t3TH2cgMZ1oPuAh8Vh1swl2Kcw0PipkJqdWNxu4NUoikd+Wx4WJ2JG6oToAnvX srdzl8a2wKg4jdDbgtCr8ZMBYUhQpUeLfpWP4JcJmF7+a+K4FrDWlUQNb2j8kzB1 oqDUnLLzVoI6HL6KE+lUIWyCFoLTeg9YFKMYBlPyugYWyyev+BoQ2wOKMX4FPQgj RTtEVSDHnIRgKAITbG7ATTbJQ7i6f5Iwb0PIbxaYoKobv5aOt2CoB18+sxqd+xIr VZG3XyQV3pHzfZ5rp+b4Bq8mP19lKO4WLuUQn1NKhZ8FXrmuuPPyKmHHXvZsLDs= -----END CERTIFICATE-----Generated at Wed Nov 11 13:43:05 2026 by rpki-client