$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0a8c0f6d-d3df-4586-a874-ee20de7d1e0b.roa File: 0a8c0f6d-d3df-4586-a874-ee20de7d1e0b.roa (raw, json) Hash identifier: WGCYhLAAQo8z27cOdWYoiUdmYeUF0iJWo0FHsMsSd/U= Subject key identifier: 09:ED:A8:4C:8A:97:ED:67:AA:EF:27:2E:F6:22:BE:72:CB:45:7D:4E Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 29640CB5E864EE633E79791A0BE904B677341CD3 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0a8c0f6d-d3df-4586-a874-ee20de7d1e0b.roa Signing time: Wed 14 Oct 2026 00:06:22 +0000 ROA not before: Wed 14 Oct 2026 00:06:22 +0000 ROA not after: Tue 12 Jan 2027 23:59:59 +0000 asID: 801 IP address blocks: 2631::/24 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:64:0c:b5:e8:64:ee:63:3e:79:79:1a:0b:e9:04:b6:77:34:1c:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 14 00:06:22 2026 GMT Not After : Jan 12 23:59:59 2027 GMT Subject: serialNumber=ab292ca7e3b57fb7277b9fc7940505fbbc1b3a1dc8dc2611e9ea6ee225935440, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:4c:13:e7:2d:81:88:2a:24:94:1e:56:a5:b0: 19:95:90:94:5a:27:78:24:be:3c:db:a5:95:e1:c0: 0b:59:74:fe:9f:2a:7a:8d:e8:06:c5:13:df:82:58: 79:0d:46:6d:2a:6b:65:5c:97:69:2d:c9:ca:42:f4: 5f:ca:90:4c:67:a6:5e:8e:ef:2c:28:94:21:25:86: e9:6d:1c:74:43:03:21:3f:be:df:b0:0d:4f:65:a2: 3a:1e:ac:d2:86:7e:5a:87:a0:e6:b2:51:95:ef:96: 97:46:67:bb:16:31:cc:e9:74:4b:85:3a:98:a7:e0: d8:55:b4:79:b2:c8:67:1c:bc:7b:be:67:81:8c:ca: 0f:0b:f2:91:f8:9b:5d:7d:a6:d3:a2:e3:59:fa:a5: 29:4c:9e:f1:71:6e:e3:35:49:04:05:36:0a:d4:2e: 31:7d:e7:05:e3:dd:ab:a7:39:e8:e5:77:4e:5f:96: 6c:24:47:52:da:42:b3:28:b7:12:3e:5f:1b:30:12: a6:e0:dc:f1:62:e3:e8:bd:fa:2a:d9:c4:3c:ce:9c: f1:c9:d8:42:fa:85:ff:71:04:f4:28:61:60:a1:a2: 8a:bf:35:7a:56:6a:5a:9b:e2:54:5f:28:63:5b:f2: b1:a9:f2:41:2d:95:3e:25:9c:4d:75:a2:ad:3d:52: d3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:ED:A8:4C:8A:97:ED:67:AA:EF:27:2E:F6:22:BE:72:CB:45:7D:4E X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0a8c0f6d-d3df-4586-a874-ee20de7d1e0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2631::/24 Signature Algorithm: sha256WithRSAEncryption 9c:c1:41:61:02:32:3c:9e:81:07:09:5f:94:3a:e7:2c:48:c3: e4:bd:cc:e7:2f:cf:85:2a:25:96:c2:65:3b:4a:76:c9:c7:8a: a1:61:42:03:fb:30:93:4b:d1:0d:c4:a7:48:bc:c9:eb:21:b0: 1d:a4:e3:eb:92:fd:62:29:24:e0:82:b6:23:95:19:0d:d1:4f: 49:ef:13:14:f8:fd:8d:39:c0:b6:ce:41:81:23:2b:c2:91:86: 87:a8:5a:20:76:10:0c:bf:e0:bb:16:ca:62:b6:af:06:6f:d8: cb:f4:11:49:b9:5d:0b:b5:d0:3f:df:36:70:ed:d6:9d:bc:83: 4c:56:42:bc:ef:44:18:96:e8:c5:e6:7c:fb:ce:45:fe:dd:ba: 40:fc:38:79:f2:eb:bb:37:72:57:fc:7b:1f:5c:97:98:14:33: e3:e9:08:1a:38:57:48:a4:80:ee:ad:45:e6:d3:dc:57:0d:e9: 84:ea:bb:8d:a3:8b:77:58:a2:1b:be:df:88:db:74:79:f5:32: 87:7a:a5:6b:60:99:91:db:6f:f4:81:ed:e4:42:86:27:34:cc: ca:63:8c:be:38:cb:37:44:5b:db:ef:98:3c:7a:22:3b:39:9c: e5:2c:90:35:ef:81:a5:71:99:8b:1e:70:6c:7d:2b:d7:e1:a2: 2c:7d:20:07 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKWQMtehk7mM+eXkaC+kEtnc0HNMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDE0MDAwNjIyWhcNMjcwMTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhYjI5MmNhN2UzYjU3ZmI3Mjc3YjlmYzc5NDA1MDVmYmJj MWIzYTFkYzhkYzI2MTFlOWVhNmVlMjI1OTM1NDQwMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDiTBPnLYGIKiSUHlalsBmVkJRaJ3gkvjzbpZXhwAtZdP6f KnqN6AbFE9+CWHkNRm0qa2Vcl2ktycpC9F/KkExnpl6O7ywolCElhultHHRDAyE/ vt+wDU9lojoerNKGflqHoOayUZXvlpdGZ7sWMczpdEuFOpin4NhVtHmyyGccvHu+ Z4GMyg8L8pH4m119ptOi41n6pSlMnvFxbuM1SQQFNgrULjF95wXj3aunOejld05f lmwkR1LaQrMotxI+XxswEqbg3PFi4+i9+irZxDzOnPHJ2EL6hf9xBPQoYWChooq/ NXpWalqb4lRfKGNb8rGp8kEtlT4lnE11oq09UtMjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCe2oTIqX7Weq7ycu9iK+cstFfU4wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzBhOGMwZjZkLWQzZGYtNDU4Ni1hODc0LWVlMjBkZTdkMWUwYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAC MAYDBAAmMQAwDQYJKoZIhvcNAQELBQADggEBAJzBQWECMjyegQcJX5Q65yxIw+S9 zOcvz4UqJZbCZTtKdsnHiqFhQgP7MJNL0Q3Ep0i8yeshsB2k4+uS/WIpJOCCtiOV GQ3RT0nvExT4/Y05wLbOQYEjK8KRhoeoWiB2EAy/4LsWymK2rwZv2Mv0EUm5XQu1 0D/fNnDt1p28g0xWQrzvRBiW6MXmfPvORf7dukD8OHny67s3clf8ex9cl5gUM+Pp CBo4V0ikgO6tRebT3FcN6YTqu42ji3dYohu+34jbdHn1Mod6pWtgmZHbb/SB7eRC hic0zMpjjL44yzdEW9vvmDx6Ijs5nOUskDXvgaVxmYsecGx9K9fhoix9IAc= -----END CERTIFICATE-----Generated at Sun Nov 15 09:59:39 2026 by rpki-client