$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f1c7ce63-b744-4bdd-b0c3-1ea2eae4ff28.roa File: f1c7ce63-b744-4bdd-b0c3-1ea2eae4ff28.roa (raw, json) Hash identifier: ZVFm0KfqH+WL1MZA5+qkZEsJPRyEP6HG48lriPvq9x8= Subject key identifier: 89:7F:94:51:8A:66:D4:33:38:E0:00:BC:FF:5E:D5:96:64:81:23:33 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 781E662FEB569B253C772770D06F7C608B2F5A58 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f1c7ce63-b744-4bdd-b0c3-1ea2eae4ff28.roa Signing time: Sun 11 Oct 2026 14:40:08 +0000 ROA not before: Sun 11 Oct 2026 14:40:08 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 40045 IP address blocks: 2605:9cc0:c03::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Nov 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:1e:66:2f:eb:56:9b:25:3c:77:27:70:d0:6f:7c:60:8b:2f:5a:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 11 14:40:08 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=b7a956df95d6c4474b4dca081dfe66b3ce721cb3d593630bcfe770aefa6ac2a8, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9d:c1:f0:7b:ac:16:c5:f1:ca:d1:7b:dd:e3: 42:98:ec:14:07:a5:93:e2:aa:2e:cb:e3:b7:6d:4d: 55:34:40:7c:4c:cc:30:35:71:09:c5:e0:2b:b5:4d: c1:64:cd:34:f5:fd:ff:9d:e9:d1:45:37:e1:1b:40: f0:4f:2e:53:42:5c:b0:b3:19:24:aa:06:44:b3:2b: ac:da:25:2d:a2:48:f8:04:20:9a:d0:e4:84:19:5c: 7a:cb:ef:0c:00:54:31:65:3b:84:97:a4:35:4d:c6: 4f:41:9b:2e:6b:b0:f4:44:88:7e:38:9b:11:2f:9a: f9:2f:ee:1d:81:7f:bd:6d:ee:aa:2e:3e:6a:6d:6f: e8:a8:94:b0:54:11:3f:56:af:31:76:02:cb:7a:25: ce:51:c7:16:22:c4:61:a0:8f:5d:50:81:03:23:53: 3e:28:44:b6:b4:7d:04:52:55:59:cd:91:e3:6a:12: df:27:b2:5f:c3:82:74:11:73:13:40:d0:51:92:dd: 3d:ea:d3:63:f7:80:f7:96:7b:20:f8:8e:be:e7:fc: c3:81:1a:3a:03:8c:79:8c:c4:60:15:83:45:95:3b: fa:55:f6:5e:31:9a:34:e5:7a:33:b9:f3:6f:21:34: ef:57:6e:23:81:f8:2a:4f:e0:fb:ff:a5:8c:b2:cc: 54:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:7F:94:51:8A:66:D4:33:38:E0:00:BC:FF:5E:D5:96:64:81:23:33 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f1c7ce63-b744-4bdd-b0c3-1ea2eae4ff28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c03::/48 Signature Algorithm: sha256WithRSAEncryption a9:97:2b:2a:e1:71:0e:a0:44:d6:af:0a:82:22:03:3d:8a:a9: 38:76:7d:95:b4:48:cf:e0:36:e7:50:3a:e3:7d:52:0d:38:b6: 3c:ed:7d:8a:a2:dc:dc:b7:07:7f:07:8a:57:d0:11:89:15:f7: 3f:b3:04:6d:24:d3:51:d6:92:d5:55:bb:9e:e1:a4:31:ff:de: 82:79:6e:1d:30:28:09:d7:d3:b3:62:00:de:a7:8f:5a:3e:2d: 7e:ce:de:cf:d3:61:8e:aa:9d:e2:24:f4:89:2c:f9:55:38:5e: 02:bd:db:91:82:d3:f1:e1:c6:d7:4a:73:27:4c:5e:fc:ce:69: 5e:cd:dc:d7:83:b8:9d:2e:85:dd:2f:a6:7f:62:0b:de:e0:ad: 47:97:e2:67:34:55:9b:95:7d:11:0c:15:76:f6:f6:76:5e:94: 47:2b:0e:b7:6d:1f:33:e6:ae:c7:2d:6e:1a:53:4f:07:09:62: 62:5a:03:10:a4:39:dd:cb:d1:f9:3a:4e:f4:76:2d:a9:ea:89: 28:dd:8a:98:27:51:ba:7d:30:b0:22:b7:e7:67:74:20:0b:a5: ca:14:a4:37:eb:d7:4c:88:d8:5b:79:b9:2c:15:6c:2e:e2:03: bb:cb:f3:f1:72:f5:e1:50:a6:00:72:b7:07:f1:ce:55:ff:ee: e6:7e:f4:b2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUeB5mL+tWmyU8dydw0G98YIsvWlgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYxMDExMTQ0MDA4WhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiN2E5NTZkZjk1ZDZjNDQ3NGI0ZGNhMDgxZGZlNjZiM2Nl NzIxY2IzZDU5MzYzMGJjZmU3NzBhZWZhNmFjMmE4MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTncHwe6wWxfHK0Xvd40KY7BQHpZPiqi7L47dtTVU0QHxM zDA1cQnF4Cu1TcFkzTT1/f+d6dFFN+EbQPBPLlNCXLCzGSSqBkSzK6zaJS2iSPgE IJrQ5IQZXHrL7wwAVDFlO4SXpDVNxk9Bmy5rsPREiH44mxEvmvkv7h2Bf71t7qou Pmptb+iolLBUET9WrzF2Ast6Jc5RxxYixGGgj11QgQMjUz4oRLa0fQRSVVnNkeNq Et8nsl/DgnQRcxNA0FGS3T3q02P3gPeWeyD4jr7n/MOBGjoDjHmMxGAVg0WVO/pV 9l4xmjTlejO5828hNO9XbiOB+CpP4Pv/pYyyzFS7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUiX+UUYpm1DM44AC8/17VlmSBIzMwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2YxYzdjZTYzLWI3NDQtNGJkZC1iMGMzLTFlYTJlYWU0ZmYyOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAMwDQYJKoZIhvcNAQELBQADggEBAKmXKyrhcQ6gRNavCoIiAz2K qTh2fZW0SM/gNudQOuN9Ug04tjztfYqi3Ny3B38HilfQEYkV9z+zBG0k01HWktVV u57hpDH/3oJ5bh0wKAnX07NiAN6nj1o+LX7O3s/TYY6qneIk9Iks+VU4XgK925GC 0/HhxtdKcydMXvzOaV7N3NeDuJ0uhd0vpn9iC97grUeX4mc0VZuVfREMFXb29nZe lEcrDrdtHzPmrsctbhpTTwcJYmJaAxCkOd3L0fk6TvR2LanqiSjdipgnUbp9MLAi t+dndCALpcoUpDfr10yI2Ft5uSwVbC7iA7vL8/Fy9eFQpgBytwfxzlX/7uZ+9LI= -----END CERTIFICATE-----Generated at Wed Nov 11 09:20:08 2026 by rpki-client