$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5928f28b-f592-4cba-8206-96ea348083da.roa File: 5928f28b-f592-4cba-8206-96ea348083da.roa (raw, json) Hash identifier: 64O4ow2g1MMcVD7o8p/uk5Grf9vQDJMp2/ffWQZ3mt8= Subject key identifier: 87:59:D3:5A:72:D0:4E:BA:64:5A:96:CF:3F:C5:83:B8:25:AD:BB:5E Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 3EE8ECF4390BB9A50F2E7D5AA85FBD3A0EF4B0AE Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5928f28b-f592-4cba-8206-96ea348083da.roa Signing time: Fri 02 Oct 2026 00:00:13 +0000 ROA not before: Fri 02 Oct 2026 00:00:13 +0000 ROA not after: Thu 31 Dec 2026 23:59:59 +0000 asID: 801 IP address blocks: 2631:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:e8:ec:f4:39:0b:b9:a5:0f:2e:7d:5a:a8:5f:bd:3a:0e:f4:b0:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 2 00:00:13 2026 GMT Not After : Dec 31 23:59:59 2026 GMT Subject: serialNumber=500eeee0c835d13a0db055c77cc7d5d48bbb4c067c97c83ca91c37dad40fa392, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:78:bd:40:8e:fb:9e:12:88:97:b9:60:ea:21: 5c:ad:4a:81:7d:1c:6d:c1:1e:b2:33:45:a6:a9:1e: f5:74:d7:2c:25:c3:21:d7:95:0d:c0:a2:72:39:be: 3a:91:fb:f9:75:80:da:52:f7:b2:db:d9:92:95:aa: 4f:e6:24:5f:4b:97:55:93:11:77:61:14:5a:c0:ba: 66:9b:82:f0:75:2d:37:0e:cc:6a:aa:b1:5c:c5:95: af:c1:6d:08:01:24:ac:54:63:ac:2c:39:f3:58:4d: 9d:11:70:17:ca:b5:95:c5:12:90:aa:c4:78:f3:38: ec:89:41:c4:7b:5b:42:71:98:9f:35:b1:9c:b0:de: ea:2e:e0:50:b5:85:3c:a2:5a:a7:be:8d:51:97:bf: ab:8a:60:7c:7a:15:1e:d4:bf:27:b5:a0:84:7e:17: a3:29:1a:d8:7c:9d:16:aa:18:87:8f:50:6b:8c:99: fa:4f:0a:29:96:d9:eb:09:62:41:bc:d2:3c:d6:75: 92:0d:ff:53:70:bb:6a:5e:fb:65:43:cc:08:b6:9d: fe:0d:e5:71:c0:c5:6c:ab:81:96:db:d4:3c:a6:f0: 35:62:0f:e6:64:94:31:3e:25:47:38:a4:bb:9d:9e: 2f:f0:17:7f:66:4f:27:1a:2b:5f:f7:e5:5c:64:fa: fb:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:59:D3:5A:72:D0:4E:BA:64:5A:96:CF:3F:C5:83:B8:25:AD:BB:5E X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5928f28b-f592-4cba-8206-96ea348083da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2631:1::/48 Signature Algorithm: sha256WithRSAEncryption 0e:81:f6:fa:7d:73:c0:6d:88:5e:0a:a5:b6:f6:1e:5f:cc:d3: 5d:13:aa:c0:08:f8:57:eb:30:d7:08:9f:b7:bf:f4:97:1d:31: 26:75:ab:9d:ad:1a:ee:e1:a5:33:37:d9:49:a5:e7:cb:80:ab: f3:f0:8a:5c:44:6a:d5:de:1e:ba:5e:c4:10:93:ad:37:1b:73: 4a:23:9a:dd:03:c4:75:c3:bc:02:a9:20:ec:1b:5e:2a:8d:67: 80:fd:95:e1:ab:11:9f:93:9d:e4:f2:e4:13:e0:4f:6b:57:91: b4:8a:2d:4a:43:eb:44:fd:07:1d:ef:66:4b:36:01:b8:c1:2e: 5b:cb:40:4a:f2:02:81:ac:78:88:64:0e:87:83:d7:6d:d5:83: bd:7d:b7:6c:9b:6e:5d:e9:0a:c0:31:ed:85:e8:b4:a1:d9:f2: 1c:17:0b:d4:62:f5:c8:12:57:af:d0:18:f6:7a:6c:4e:b3:4e: d9:83:6e:0a:b3:92:3a:2a:c1:2a:29:a4:83:3b:64:97:2a:24: 72:1f:6b:8a:25:99:68:4f:80:fa:8e:5f:26:ab:e0:9b:42:7b: 66:79:20:d4:d5:7c:a7:81:c8:25:c3:0e:67:73:ae:d0:34:3e: 2a:ae:97:59:9a:a0:60:4e:29:02:b6:fd:80:9d:43:04:fb:39: 53:b9:e0:68 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUPujs9DkLuaUPLn1aqF+9Og70sK4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDAyMDAwMDEzWhcNMjYxMjMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MDBlZWVlMGM4MzVkMTNhMGRiMDU1Yzc3Y2M3ZDVkNDhi YmI0YzA2N2M5N2M4M2NhOTFjMzdkYWQ0MGZhMzkyMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKeL1AjvueEoiXuWDqIVytSoF9HG3BHrIzRaapHvV01ywl wyHXlQ3AonI5vjqR+/l1gNpS97Lb2ZKVqk/mJF9Ll1WTEXdhFFrAumabgvB1LTcO zGqqsVzFla/BbQgBJKxUY6wsOfNYTZ0RcBfKtZXFEpCqxHjzOOyJQcR7W0JxmJ81 sZyw3uou4FC1hTyiWqe+jVGXv6uKYHx6FR7Uvye1oIR+F6MpGth8nRaqGIePUGuM mfpPCimW2esJYkG80jzWdZIN/1Nwu2pe+2VDzAi2nf4N5XHAxWyrgZbb1Dym8DVi D+ZklDE+JUc4pLudni/wF39mTycaK1/35Vxk+vtBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUh1nTWnLQTrpkWpbPP8WDuCWtu14wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzU5MjhmMjhiLWY1OTItNGNiYS04MjA2LTk2ZWEzNDgwODNkYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmMQABAAAwDQYJKoZIhvcNAQELBQADggEBAA6B9vp9c8BtiF4Kpbb2Hl/M 010TqsAI+FfrMNcIn7e/9JcdMSZ1q52tGu7hpTM32Uml58uAq/PwilxEatXeHrpe xBCTrTcbc0ojmt0DxHXDvAKpIOwbXiqNZ4D9leGrEZ+TneTy5BPgT2tXkbSKLUpD 60T9Bx3vZks2AbjBLlvLQEryAoGseIhkDoeD123Vg719t2ybbl3pCsAx7YXotKHZ 8hwXC9Ri9cgSV6/QGPZ6bE6zTtmDbgqzkjoqwSoppIM7ZJcqJHIfa4olmWhPgPqO Xyar4JtCe2Z5INTVfKeByCXDDmdzrtA0Piqul1maoGBOKQK2/YCdQwT7OVO54Gg= -----END CERTIFICATE-----Generated at Sun Nov 15 10:00:52 2026 by rpki-client