$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a0c1fa71-e0e5-4df8-863f-3e5a0f1bdf86.roa File: a0c1fa71-e0e5-4df8-863f-3e5a0f1bdf86.roa (raw, json) Hash identifier: 9+/oqjIj9o8PFtOQDuNGNriKi3tP0pvRDIEnbqKYork= Subject key identifier: C5:A4:31:30:1C:B8:AB:23:9A:9C:E4:C8:2F:4D:6A:7D:A0:61:9A:D0 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 72A2D41AF8FA7457E8452F2B565952D0286E06EC Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a0c1fa71-e0e5-4df8-863f-3e5a0f1bdf86.roa Signing time: Wed 11 Nov 2026 06:47:22 +0000 ROA not before: Wed 11 Nov 2026 06:47:22 +0000 ROA not after: Tue 09 Feb 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:d00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Nov 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:a2:d4:1a:f8:fa:74:57:e8:45:2f:2b:56:59:52:d0:28:6e:06:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Nov 11 06:47:22 2026 GMT Not After : Feb 9 23:59:59 2027 GMT Subject: serialNumber=fd9007fcece4224241e80cbb9c0b83e72e111642e9c6cbf8627e99a75904c8c9, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6a:0a:c5:61:5e:b7:4c:e0:46:47:57:a3:47: 09:8f:4d:97:44:a4:57:08:d0:3d:55:13:1b:de:5b: b4:81:a5:0e:c7:94:ab:a5:81:ca:4d:08:8e:63:f7: ee:2e:9a:19:fc:11:89:f3:13:20:31:fc:73:89:a1: b0:cc:64:38:b2:49:45:5f:d1:bb:9f:27:58:b7:a9: 57:db:09:cf:2b:cb:1f:ba:48:a3:64:b4:67:72:0b: 2a:9c:dd:87:91:b1:c6:64:11:de:a2:5b:63:59:7e: 13:a4:c5:a6:97:aa:14:9f:a5:35:53:05:44:26:5a: 4b:06:7a:46:86:22:f3:dc:29:bf:07:bf:8b:a1:5d: 7e:fb:20:87:81:e1:e9:a9:e1:8e:03:b0:c8:74:cb: 7a:a7:c9:c4:18:d5:dc:93:30:65:82:45:f7:5a:7f: 35:28:5e:33:ff:f0:15:ad:e4:87:16:a0:d0:1a:2b: c4:43:a1:75:c8:ae:34:36:b1:af:c1:e4:87:ef:eb: 53:83:28:21:04:e1:bf:d7:28:6b:4c:d4:14:46:3b: 14:8e:f0:cf:a1:3b:66:a5:db:dc:da:7d:db:bb:33: f0:6b:92:a2:3c:86:59:e9:b7:e8:4b:97:6b:8c:f9: 8d:7a:db:33:11:4f:e5:7a:ce:8b:d4:7f:e5:74:39: 9c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A4:31:30:1C:B8:AB:23:9A:9C:E4:C8:2F:4D:6A:7D:A0:61:9A:D0 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a0c1fa71-e0e5-4df8-863f-3e5a0f1bdf86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:d00::/40 Signature Algorithm: sha256WithRSAEncryption 39:59:d2:6c:ae:09:9f:36:fa:f6:3a:24:ad:3b:5e:80:9f:8b: 01:e2:a4:2e:d9:8f:9f:01:e9:24:a7:ff:d0:da:87:bd:05:36: 9e:62:ba:e2:53:21:e4:ba:ce:76:0e:95:31:68:92:95:95:17: 5d:b3:91:9c:f0:41:85:ea:8f:50:2f:58:68:02:c6:d6:79:ae: 58:9b:e7:88:2b:3f:87:96:41:62:f4:11:d6:9d:b2:d4:83:ba: 00:14:3d:36:19:ac:37:af:26:dc:a0:ce:c1:d6:54:bd:e2:6b: ae:8d:e5:c0:5e:53:94:a2:56:07:b7:63:e0:8c:40:c6:86:10: 63:37:19:1a:95:12:6e:8e:66:a4:bb:d3:2f:c7:20:50:3c:0b: 39:44:19:fa:de:80:48:88:89:be:b0:3a:b3:30:a2:c7:9b:a4: b9:33:e1:e9:3f:0a:48:cb:99:5a:03:a8:8a:ad:d6:ed:1a:dd: fd:63:1b:24:62:73:99:12:10:6d:0f:f2:0b:61:15:5d:5d:6a: d6:80:3e:8e:d3:06:9e:11:6f:0e:97:8c:b5:b5:3e:95:7b:6c: 56:bd:24:13:e0:ff:dd:e7:d3:1c:8d:ad:d7:3e:f8:c5:73:29: e9:a7:b3:a1:9a:5a:50:fb:36:97:51:fb:22:e0:b3:14:22:bb: 86:7e:35:c4 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUcqLUGvj6dFfoRS8rVllS0ChuBuwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYxMTExMDY0NzIyWhcNMjcwMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZDkwMDdmY2VjZTQyMjQyNDFlODBjYmI5YzBiODNlNzJl MTExNjQyZTljNmNiZjg2MjdlOTlhNzU5MDRjOGM5MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjagrFYV63TOBGR1ejRwmPTZdEpFcI0D1VExveW7SBpQ7H lKulgcpNCI5j9+4umhn8EYnzEyAx/HOJobDMZDiySUVf0bufJ1i3qVfbCc8ryx+6 SKNktGdyCyqc3YeRscZkEd6iW2NZfhOkxaaXqhSfpTVTBUQmWksGekaGIvPcKb8H v4uhXX77IIeB4emp4Y4DsMh0y3qnycQY1dyTMGWCRfdafzUoXjP/8BWt5IcWoNAa K8RDoXXIrjQ2sa/B5Ifv61ODKCEE4b/XKGtM1BRGOxSO8M+hO2al29zafdu7M/Br kqI8hlnpt+hLl2uM+Y162zMRT+V6zovUf+V0OZxFAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUxaQxMBy4qyOanOTIL01qfaBhmtAwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2EwYzFmYTcxLWUwZTUtNGRmOC04NjNmLTNlNWEwZjFiZGY4Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBZzADTANBgkqhkiG9w0BAQsFAAOCAQEAOVnSbK4Jnzb69jokrTtegJ+L AeKkLtmPnwHpJKf/0NqHvQU2nmK64lMh5LrOdg6VMWiSlZUXXbORnPBBheqPUC9Y aALG1nmuWJvniCs/h5ZBYvQR1p2y1IO6ABQ9NhmsN68m3KDOwdZUveJrro3lwF5T lKJWB7dj4IxAxoYQYzcZGpUSbo5mpLvTL8cgUDwLOUQZ+t6ASIiJvrA6szCix5uk uTPh6T8KSMuZWgOoiq3W7Rrd/WMbJGJzmRIQbQ/yC2EVXV1q1oA+jtMGnhFvDpeM tbU+lXtsVr0kE+D/3efTHI2t1z74xXMp6aezoZpaUPs2l1H7IuCzFCK7hn41xA== -----END CERTIFICATE-----Generated at Wed Nov 11 09:19:47 2026 by rpki-client