$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/84ac7714-eba5-4f7d-a5ee-79b6eed77b7e.roa File: 84ac7714-eba5-4f7d-a5ee-79b6eed77b7e.roa (raw, json) Hash identifier: Urscix/CrGXCnnlPH/0Ur4YqAvMFqEdgb4xcUbeRfhk= Subject key identifier: CF:4C:B7:BF:71:54:49:98:A1:FB:19:6E:AD:41:ED:A1:9B:D6:98:B7 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 296FC21867D7C8857673CC62CB638E3D60D1EC1F Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/84ac7714-eba5-4f7d-a5ee-79b6eed77b7e.roa Signing time: Mon 26 Oct 2026 03:40:08 +0000 ROA not before: Mon 26 Oct 2026 03:40:08 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:c40::/45 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Nov 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:6f:c2:18:67:d7:c8:85:76:73:cc:62:cb:63:8e:3d:60:d1:ec:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 26 03:40:08 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=a2ad00985fa8ac942eecfe8cec754aa40c220ea13f88997ab0ef583bb9dfdb0d, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ab:04:f8:9b:e8:ca:85:f4:10:64:99:06:20: b8:53:3e:5f:78:0d:b9:cd:4b:a1:88:49:94:7d:14: 8d:50:e2:50:b8:f4:0f:43:60:8b:87:c3:78:bc:57: 24:b0:cf:bb:86:0f:f5:fa:a6:1e:47:f3:72:f2:71: 38:17:aa:e8:90:35:29:94:8a:0c:6d:1a:33:22:87: 08:52:03:e8:fd:bf:7b:0a:51:5d:07:53:aa:d7:75: e1:10:e2:ab:f5:38:08:77:25:54:ef:ed:99:71:6b: dc:e3:10:bb:73:62:33:a8:f1:b2:ee:d3:4a:8b:d4: 22:91:97:66:14:e8:bb:34:05:73:33:3f:12:92:d7: 67:a7:d6:fb:e9:1b:e6:31:46:be:7a:74:15:da:b9: 98:12:a3:ab:27:54:bc:18:fa:a7:79:0a:82:26:df: 6e:fb:34:32:2e:01:98:1a:6b:d2:98:77:58:78:d1: 12:e6:c3:33:b9:7a:19:a0:26:08:af:66:db:ce:bb: f5:f5:4d:69:ff:0a:30:cb:1b:7e:5a:e8:95:70:ae: 62:f6:80:98:2a:fd:01:30:75:b4:86:c8:44:f7:11: b6:08:aa:29:99:b2:b7:a0:74:02:5f:e9:ce:e2:70: 81:6b:59:af:95:03:b2:12:b7:c3:3d:c6:56:53:aa: f1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:4C:B7:BF:71:54:49:98:A1:FB:19:6E:AD:41:ED:A1:9B:D6:98:B7 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/84ac7714-eba5-4f7d-a5ee-79b6eed77b7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c40::/45 Signature Algorithm: sha256WithRSAEncryption 0b:89:24:bd:b5:57:e3:81:50:07:4a:07:4c:01:8c:ec:42:88: 8a:27:f5:04:7a:a6:76:5d:39:3d:30:dc:09:a8:df:45:25:ae: 81:c9:56:18:77:33:18:9e:4f:5a:d9:e4:8a:69:45:47:25:f0: 71:8e:9e:79:c0:c1:0f:2b:06:4b:06:97:43:ec:6f:9d:cc:59: 9c:53:49:17:2c:11:5a:99:1c:56:e8:31:54:21:d4:23:ed:e0: f3:9d:72:57:0f:6d:99:e5:08:42:d3:54:a3:87:df:66:11:f6: d9:a4:d8:4e:ce:fc:b1:ce:47:9b:c1:02:d5:4a:d6:b0:b0:d5: 3b:a2:1d:35:6a:78:9f:2a:97:06:34:d1:27:1d:af:31:52:c0: d9:0d:17:01:75:4e:92:15:f7:29:8a:a1:5d:de:c4:31:9b:5b: 2c:9f:e2:98:5f:23:46:bb:d0:1f:82:a5:37:2c:bc:c8:9c:e4: 1d:8f:df:db:2c:c1:c8:51:02:03:67:dd:1f:69:82:35:cd:e1: 20:9e:07:a0:ad:1c:7f:9b:15:24:00:0c:55:01:18:16:71:d1: c9:71:1a:8e:59:a1:b1:40:d4:7e:21:a6:f9:f7:9c:27:2a:42: 3c:b5:ce:48:b8:d8:f9:88:2d:68:b0:f9:e8:81:e8:56:f4:57: c9:c9:dc:a9 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKW/CGGfXyIV2c8xiy2OOPWDR7B8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYxMDI2MDM0MDA4WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMmFkMDA5ODVmYThhYzk0MmVlY2ZlOGNlYzc1NGFhNDBj MjIwZWExM2Y4ODk5N2FiMGVmNTgzYmI5ZGZkYjBkMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxqwT4m+jKhfQQZJkGILhTPl94DbnNS6GISZR9FI1Q4lC4 9A9DYIuHw3i8VySwz7uGD/X6ph5H83LycTgXquiQNSmUigxtGjMihwhSA+j9v3sK UV0HU6rXdeEQ4qv1OAh3JVTv7Zlxa9zjELtzYjOo8bLu00qL1CKRl2YU6Ls0BXMz PxKS12en1vvpG+YxRr56dBXauZgSo6snVLwY+qd5CoIm3277NDIuAZgaa9KYd1h4 0RLmwzO5ehmgJgivZtvOu/X1TWn/CjDLG35a6JVwrmL2gJgq/QEwdbSGyET3EbYI qimZsregdAJf6c7icIFrWa+VA7ISt8M9xlZTqvGBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUz0y3v3FUSZih+xlurUHtoZvWmLcwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzg0YWM3NzE0LWViYTUtNGY3ZC1hNWVlLTc5YjZlZWQ3N2I3ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmBZzADEAwDQYJKoZIhvcNAQELBQADggEBAAuJJL21V+OBUAdKB0wBjOxC iIon9QR6pnZdOT0w3Amo30UlroHJVhh3MxieT1rZ5IppRUcl8HGOnnnAwQ8rBksG l0Psb53MWZxTSRcsEVqZHFboMVQh1CPt4POdclcPbZnlCELTVKOH32YR9tmk2E7O /LHOR5vBAtVK1rCw1TuiHTVqeJ8qlwY00ScdrzFSwNkNFwF1TpIV9ymKoV3exDGb Wyyf4phfI0a70B+CpTcsvMic5B2P39sswchRAgNn3R9pgjXN4SCeB6CtHH+bFSQA DFUBGBZx0clxGo5ZobFA1H4hpvn3nCcqQjy1zki42PmILWiw+eiB6Fb0V8nJ3Kk= -----END CERTIFICATE-----Generated at Wed Nov 11 13:39:32 2026 by rpki-client