$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f9d2b65b-e2b3-4af8-9a51-2135ee046801.roa File: f9d2b65b-e2b3-4af8-9a51-2135ee046801.roa (raw, json) Hash identifier: /HSgMa/ak52X0bYrMwhF7w3A7o5Nsj6xf44+qCzMKQU= Subject key identifier: 64:0F:C2:28:1C:09:6E:66:3C:A3:42:DC:FB:A4:00:2A:34:02:74:C7 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 3695BC81CF83BEE9A6C2541E2FA3E3ED30DF2723 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f9d2b65b-e2b3-4af8-9a51-2135ee046801.roa Signing time: Thu 15 Oct 2026 03:10:40 +0000 ROA not before: Thu 15 Oct 2026 03:10:40 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 40045 IP address blocks: 2605:9cc0:c13::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Nov 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:95:bc:81:cf:83:be:e9:a6:c2:54:1e:2f:a3:e3:ed:30:df:27:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 15 03:10:40 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=b524fbaa87c9528fea0ebec3f1acb540f0e2f68b2d13cc346b8269d095f0bcfd, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ef:4e:27:1b:da:39:e0:96:5a:2a:e7:ee:6b: 01:08:f8:0f:71:a2:78:78:17:98:40:62:1b:8d:3b: 55:3a:08:37:0e:83:e7:a8:15:9b:75:4a:4e:74:96: 8d:1a:49:02:49:3c:78:91:0e:d2:8f:35:f7:a1:2b: f1:89:cd:b5:1a:62:75:39:65:af:f5:1a:8a:a9:0b: 30:ab:70:25:db:22:d3:7e:a1:79:a9:c0:60:5a:2a: 8a:97:51:8a:a8:37:5c:24:9c:cf:71:25:dc:49:02: 06:6a:8a:49:b5:bf:12:b4:76:02:a9:53:3d:16:e0: eb:48:9d:7e:1e:16:c8:9b:44:ce:42:40:47:88:bd: 42:5e:69:eb:63:bd:31:a9:45:a9:e7:73:27:83:f9: 26:3e:a0:a7:b7:48:84:4c:7c:e2:df:32:04:33:ed: b4:fc:58:65:ca:61:32:f0:22:bd:ce:4a:80:54:ff: 2a:cb:b2:01:b5:e0:31:16:c7:82:bb:c2:2b:b4:c1: 2a:0d:69:dc:a5:77:bc:45:21:65:1a:15:b0:66:b4: 96:c6:4c:aa:04:6a:2f:5a:b3:05:85:b7:7d:45:16: c6:c6:0b:26:83:a0:17:94:d9:5c:67:42:03:86:73: 4f:f8:64:9e:b2:2d:e3:68:9d:ed:fb:ce:de:27:bc: d5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:0F:C2:28:1C:09:6E:66:3C:A3:42:DC:FB:A4:00:2A:34:02:74:C7 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f9d2b65b-e2b3-4af8-9a51-2135ee046801.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c13::/48 Signature Algorithm: sha256WithRSAEncryption 6d:14:83:0a:53:f9:01:35:53:ed:bb:67:48:23:9a:60:57:df: 36:ff:d3:d9:df:e4:aa:d8:ad:3e:13:8f:35:48:f2:bc:b9:f9: f1:48:d3:18:33:a1:a4:12:fe:65:26:cd:0f:69:2d:19:16:26: 14:bb:f7:68:2a:87:d3:fa:25:84:a5:cc:30:64:cf:70:fc:94: 82:af:09:41:ae:be:93:c9:54:cc:b0:d8:7a:6a:93:cb:9f:2e: c3:0d:f7:b8:91:ff:6c:52:9e:6d:96:48:b3:ce:7d:52:5f:74: a2:ad:cb:c9:01:91:53:cd:c6:3e:18:94:1a:0f:96:a7:4a:57: 23:e6:73:5f:ce:2d:50:a3:b6:d8:0f:e3:4f:31:45:75:6b:32: 79:6c:32:4b:ee:a1:cc:78:78:09:92:f8:91:2e:76:7b:c4:b5: c1:8c:0a:30:a2:f9:92:64:36:65:af:ce:70:80:86:70:02:76: d8:f3:4e:3a:56:55:dc:56:9f:3e:43:81:7c:ca:63:1e:10:7b: d7:58:0f:ef:18:2c:bd:25:f7:2b:58:eb:a7:d4:b2:ca:c6:26: 0d:99:0a:37:9c:f3:59:3c:f8:93:2c:01:f6:3e:49:f7:73:8c: 11:80:66:c1:39:16:87:e4:85:a6:01:fa:95:b7:f3:85:87:1d: fa:ac:68:b3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUNpW8gc+DvummwlQeL6Pj7TDfJyMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYxMDE1MDMxMDQwWhcNMjcwMTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNTI0ZmJhYTg3Yzk1MjhmZWEwZWJlYzNmMWFjYjU0MGYw ZTJmNjhiMmQxM2NjMzQ2YjgyNjlkMDk1ZjBiY2ZkMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4704nG9o54JZaKufuawEI+A9xonh4F5hAYhuNO1U6CDcO g+eoFZt1Sk50lo0aSQJJPHiRDtKPNfehK/GJzbUaYnU5Za/1GoqpCzCrcCXbItN+ oXmpwGBaKoqXUYqoN1wknM9xJdxJAgZqikm1vxK0dgKpUz0W4OtInX4eFsibRM5C QEeIvUJeaetjvTGpRanncyeD+SY+oKe3SIRMfOLfMgQz7bT8WGXKYTLwIr3OSoBU /yrLsgG14DEWx4K7wiu0wSoNadyld7xFIWUaFbBmtJbGTKoEai9aswWFt31FFsbG CyaDoBeU2VxnQgOGc0/4ZJ6yLeNone37zt4nvNXxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUZA/CKBwJbmY8o0Lc+6QAKjQCdMcwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2Y5ZDJiNjViLWUyYjMtNGFmOC05YTUxLTIxMzVlZTA0NjgwMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBMwDQYJKoZIhvcNAQELBQADggEBAG0UgwpT+QE1U+27Z0gjmmBX 3zb/09nf5KrYrT4TjzVI8ry5+fFI0xgzoaQS/mUmzQ9pLRkWJhS792gqh9P6JYSl zDBkz3D8lIKvCUGuvpPJVMyw2Hpqk8ufLsMN97iR/2xSnm2WSLPOfVJfdKKty8kB kVPNxj4YlBoPlqdKVyPmc1/OLVCjttgP408xRXVrMnlsMkvuocx4eAmS+JEudnvE tcGMCjCi+ZJkNmWvznCAhnACdtjzTjpWVdxWnz5DgXzKYx4Qe9dYD+8YLL0l9ytY 66fUssrGJg2ZCjec81k8+JMsAfY+SfdzjBGAZsE5FofkhaYB+pW384WHHfqsaLM= -----END CERTIFICATE-----Generated at Wed Nov 11 09:19:53 2026 by rpki-client