$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ba7089a4-095c-4e4d-8622-4b37a89fad97.roa File: ba7089a4-095c-4e4d-8622-4b37a89fad97.roa (raw, json) Hash identifier: +EcqDwPDVjBaeukMzzs69VjjbtxurcDCDrt5cjtuKoU= Subject key identifier: 6A:D1:1C:01:39:8F:EF:E6:6C:90:93:91:08:06:8F:73:D7:51:0A:91 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 5915F15AA5217D3DC202BD431E842A810C5A29B3 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ba7089a4-095c-4e4d-8622-4b37a89fad97.roa Signing time: Fri 23 Oct 2026 00:40:10 +0000 ROA not before: Fri 23 Oct 2026 00:40:10 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:3d4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Nov 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:15:f1:5a:a5:21:7d:3d:c2:02:bd:43:1e:84:2a:81:0c:5a:29:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 23 00:40:10 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=913baa13b9295005cd5488769647903ee9e573fe4a877d6a0eda0c47a70276a5, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1c:21:e2:22:bb:68:b8:8e:3a:d6:47:d0:10: 9e:15:42:6d:eb:fa:33:03:aa:8b:cb:71:ed:19:c0: 79:1c:c9:43:d1:a7:54:7c:5c:9d:e0:2d:8d:ca:6d: 7c:ae:bd:ea:31:18:df:e0:d9:0e:a4:d6:6c:a1:4d: d3:d0:52:d4:c0:26:e0:30:57:c9:bc:12:a4:2c:79: 58:f4:13:ad:35:cd:6a:74:84:0e:fa:ae:a8:77:7a: 9e:08:80:b4:35:77:fc:5c:d3:03:05:19:89:92:f1: 31:45:a7:e1:e0:64:1d:29:94:69:67:f1:3a:ec:c8: 6c:4f:b7:92:07:1e:88:3c:95:f0:63:d0:e8:20:2d: 6a:7a:69:9a:3c:9c:5e:74:30:ed:73:4c:c5:4a:22: bc:3b:2c:f6:fb:6f:24:01:cc:5f:eb:7e:b9:20:1b: d3:7d:b9:ca:ac:5d:39:86:23:c0:4e:74:fb:2b:0b: 04:8d:c9:58:4b:af:fd:e6:7a:0a:a4:ed:3c:57:58: 84:a9:22:5e:ce:c3:77:d1:8d:49:90:48:61:e8:e2: 98:9b:20:52:1e:d3:7d:a8:fe:fb:6a:55:1b:95:75: 98:7f:6d:0d:8d:f2:78:b6:36:1e:6a:d7:6a:67:ad: 8c:b1:90:a5:62:3d:3d:74:8d:d0:06:95:0b:7d:5b: e0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D1:1C:01:39:8F:EF:E6:6C:90:93:91:08:06:8F:73:D7:51:0A:91 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ba7089a4-095c-4e4d-8622-4b37a89fad97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:3d4::/48 Signature Algorithm: sha256WithRSAEncryption 50:32:fa:6b:bb:47:10:48:18:c0:d6:be:af:d7:c0:43:84:29: d7:ec:a1:e5:5a:a9:77:c5:9b:64:18:89:7f:35:8d:70:3e:5e: 31:d4:f8:4e:63:3f:88:b0:d2:7a:e1:2b:f2:4a:e9:63:2a:9d: 00:24:45:ad:ca:63:87:95:7d:9c:21:58:d1:ea:e9:eb:41:10: d0:1a:b2:1d:54:6d:56:e3:93:71:68:8e:8d:c2:e7:6e:05:5e: 55:0c:dc:70:80:b8:31:61:f3:66:3d:e9:15:81:28:06:8f:bf: 4e:54:51:1f:d5:02:7d:70:8b:8c:fc:4a:13:dd:1a:a4:31:28: a6:6a:f4:88:66:e4:7e:6f:88:68:40:e0:d0:b9:6c:04:45:68: 80:db:9b:50:44:e3:c6:b4:08:58:9c:59:0e:10:4a:b0:81:90: cf:19:0c:8e:9b:d3:71:4f:bb:36:5a:3c:44:82:fa:58:bf:21: ab:6b:85:c8:69:c5:2d:8d:91:a5:85:6d:1c:ef:25:6d:eb:2c: 1f:9e:9d:5b:12:11:2f:fe:39:92:a2:a1:c6:cd:14:cb:2d:8a: 2f:1f:d0:f3:86:04:b1:d3:da:a8:0d:5d:cb:e5:ed:e5:06:d7: 6a:5f:5c:ab:37:95:db:d3:7e:d3:4f:90:6f:77:49:1c:5a:90: df:d4:cc:5d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWRXxWqUhfT3CAr1DHoQqgQxaKbMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYxMDIzMDA0MDEwWhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MTNiYWExM2I5Mjk1MDA1Y2Q1NDg4NzY5NjQ3OTAzZWU5 ZTU3M2ZlNGE4NzdkNmEwZWRhMGM0N2E3MDI3NmE1MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkHCHiIrtouI461kfQEJ4VQm3r+jMDqovLce0ZwHkcyUPR p1R8XJ3gLY3KbXyuveoxGN/g2Q6k1myhTdPQUtTAJuAwV8m8EqQseVj0E601zWp0 hA76rqh3ep4IgLQ1d/xc0wMFGYmS8TFFp+HgZB0plGln8TrsyGxPt5IHHog8lfBj 0OggLWp6aZo8nF50MO1zTMVKIrw7LPb7byQBzF/rfrkgG9N9ucqsXTmGI8BOdPsr CwSNyVhLr/3megqk7TxXWISpIl7Ow3fRjUmQSGHo4pibIFIe032o/vtqVRuVdZh/ bQ2N8ni2Nh5q12pnrYyxkKViPT10jdAGlQt9W+CvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUatEcATmP7+ZskJORCAaPc9dRCpEwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2JhNzA4OWE0LTA5NWMtNGU0ZC04NjIyLTRiMzdhODlmYWQ5Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA9QwDQYJKoZIhvcNAQELBQADggEBAFAy+mu7RxBIGMDWvq/XwEOE KdfsoeVaqXfFm2QYiX81jXA+XjHU+E5jP4iw0nrhK/JK6WMqnQAkRa3KY4eVfZwh WNHq6etBENAash1UbVbjk3Fojo3C524FXlUM3HCAuDFh82Y96RWBKAaPv05UUR/V An1wi4z8ShPdGqQxKKZq9Ihm5H5viGhA4NC5bARFaIDbm1BE48a0CFicWQ4QSrCB kM8ZDI6b03FPuzZaPESC+li/IatrhchpxS2NkaWFbRzvJW3rLB+enVsSES/+OZKi ocbNFMstii8f0POGBLHT2qgNXcvl7eUG12pfXKs3ldvTftNPkG93SRxakN/UzF0= -----END CERTIFICATE-----Generated at Wed Nov 11 13:39:04 2026 by rpki-client