$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5a452991-0f9b-4ad0-960b-e575d9dcfb8f.roa File: 5a452991-0f9b-4ad0-960b-e575d9dcfb8f.roa (raw, json) Hash identifier: 0epAH2Qxa4TLXVRY8tlq6AxNd+V6BjfX1vVPJNLrF8U= Subject key identifier: E9:58:C5:54:73:F5:D3:E1:A5:91:7E:E3:6B:2B:D2:31:0B:B1:59:7B Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 7A7B61D54E09CDEC73F198A0864BAAFA738CF1EE Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5a452991-0f9b-4ad0-960b-e575d9dcfb8f.roa Signing time: Thu 15 Oct 2026 03:10:08 +0000 ROA not before: Thu 15 Oct 2026 03:10:08 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:c19::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Nov 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:7b:61:d5:4e:09:cd:ec:73:f1:98:a0:86:4b:aa:fa:73:8c:f1:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 15 03:10:08 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=16cd0f7fa214b0a5afcd31f6d55b5edb23a5457d62c7fe6f7ddab328831154a7, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1e:b4:82:02:23:0b:ed:40:44:cf:88:eb:54: 41:9a:59:a3:d2:1c:da:4a:7f:18:7c:95:d8:fa:6b: d7:4c:4f:f3:ee:4b:12:a7:19:8f:31:55:eb:ab:92: 98:d2:00:46:4a:d8:ac:c0:5c:1b:95:ce:0c:4f:e2: 13:b7:da:7e:eb:7c:3f:c3:a7:b1:18:48:e5:da:5b: d0:5a:02:7f:4c:98:2e:77:6f:6a:74:b3:c6:d5:2e: ee:83:95:bd:83:6b:f8:7e:f0:73:9d:5a:e6:fe:71: f7:a5:c2:e5:39:cd:9c:f8:60:51:d3:77:36:96:af: fa:ad:ad:3a:ab:33:e4:02:74:7d:09:26:67:6f:1a: de:48:39:ad:90:1d:7a:82:d4:cc:59:57:56:55:88: fb:42:4d:69:6d:b8:41:f3:b6:60:cc:a5:34:8a:9d: c9:77:c0:1e:56:65:07:fb:c2:1e:d6:f8:e4:cb:ba: 7f:b6:24:3b:99:cb:d7:1b:56:2e:33:1c:f7:d4:d4: 62:3a:06:dc:25:75:4e:d3:36:1e:13:c5:1e:81:36: ec:17:85:9b:6c:25:6d:e5:c7:69:7d:5e:dc:cc:aa: 28:5d:ac:0a:fc:ba:8b:24:44:24:89:28:4e:2c:69: e5:b0:34:26:7a:6e:2e:21:65:82:12:e0:0c:9e:f9: 05:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:58:C5:54:73:F5:D3:E1:A5:91:7E:E3:6B:2B:D2:31:0B:B1:59:7B X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5a452991-0f9b-4ad0-960b-e575d9dcfb8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c19::/48 Signature Algorithm: sha256WithRSAEncryption 9b:3d:51:8b:74:8d:28:7c:82:48:54:35:b5:cb:df:cf:ac:19: c9:bb:2a:db:ea:01:82:f3:c5:03:aa:14:23:22:20:71:e8:8f: 16:b3:fe:b8:b6:c1:3e:99:d1:f6:b6:57:c5:4a:b9:57:24:af: d3:2c:16:8f:0f:a4:d4:03:2e:bb:2b:4a:d2:b4:c1:bc:98:f9: 06:5e:fc:a1:ee:c2:25:cc:ca:cc:46:65:d2:a5:a8:ac:a7:6b: 8b:4e:c3:1e:1e:ff:27:03:88:54:ff:9c:27:d6:4d:12:bd:d6: 0e:5e:0f:3d:35:f0:2d:92:29:d2:5b:81:95:b3:4d:8a:c6:d3: ae:81:31:e6:15:78:24:c9:cb:65:4b:3a:a7:31:29:8c:b0:30: b6:e7:7f:9d:16:53:08:7c:1c:59:f0:57:8a:63:6e:8e:36:e4: 64:bf:73:e9:f0:b8:f5:fc:e1:80:7a:56:59:c0:fc:57:98:5f: 51:6d:28:a9:24:72:49:37:e2:20:e5:c0:a5:8a:a8:61:ac:22: 93:dd:65:21:0a:51:ec:9b:9a:9d:6f:af:57:4c:f9:35:ed:76: 27:f8:44:a3:ba:94:fa:b7:c7:3e:ae:7d:40:8c:1d:fc:a9:da: 90:78:94:95:a8:d6:d7:51:00:de:f2:a0:12:f5:2f:04:e3:47: ae:f4:06:a0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUenth1U4Jzexz8Zighkuq+nOM8e4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYxMDE1MDMxMDA4WhcNMjcwMTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNmNkMGY3ZmEyMTRiMGE1YWZjZDMxZjZkNTViNWVkYjIz YTU0NTdkNjJjN2ZlNmY3ZGRhYjMyODgzMTE1NGE3MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8HrSCAiML7UBEz4jrVEGaWaPSHNpKfxh8ldj6a9dMT/Pu SxKnGY8xVeurkpjSAEZK2KzAXBuVzgxP4hO32n7rfD/Dp7EYSOXaW9BaAn9MmC53 b2p0s8bVLu6Dlb2Da/h+8HOdWub+cfelwuU5zZz4YFHTdzaWr/qtrTqrM+QCdH0J JmdvGt5IOa2QHXqC1MxZV1ZViPtCTWltuEHztmDMpTSKncl3wB5WZQf7wh7W+OTL un+2JDuZy9cbVi4zHPfU1GI6BtwldU7TNh4TxR6BNuwXhZtsJW3lx2l9XtzMqihd rAr8uoskRCSJKE4saeWwNCZ6bi4hZYIS4Aye+QX3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU6VjFVHP10+GlkX7jayvSMQuxWXswHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzVhNDUyOTkxLTBmOWItNGFkMC05NjBiLWU1NzVkOWRjZmI4Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBkwDQYJKoZIhvcNAQELBQADggEBAJs9UYt0jSh8gkhUNbXL38+s Gcm7KtvqAYLzxQOqFCMiIHHojxaz/ri2wT6Z0fa2V8VKuVckr9MsFo8PpNQDLrsr StK0wbyY+QZe/KHuwiXMysxGZdKlqKyna4tOwx4e/ycDiFT/nCfWTRK91g5eDz01 8C2SKdJbgZWzTYrG066BMeYVeCTJy2VLOqcxKYywMLbnf50WUwh8HFnwV4pjbo42 5GS/c+nwuPX84YB6VlnA/FeYX1FtKKkkckk34iDlwKWKqGGsIpPdZSEKUeybmp1v r1dM+TXtdif4RKO6lPq3xz6ufUCMHfyp2pB4lJWo1tdRAN7yoBL1LwTjR670BqA= -----END CERTIFICATE-----Generated at Wed Nov 11 09:20:12 2026 by rpki-client