$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0934543e-90db-4ba0-9848-455452e0c367.roa File: 0934543e-90db-4ba0-9848-455452e0c367.roa (raw, json) Hash identifier: Z7CKN08AQDqu1iSMaPAX5dVLuFLaZ73Y0WCI9WEss7E= Subject key identifier: D0:B9:5F:73:E3:9E:97:F9:3F:AB:AC:C8:4C:0F:B9:13:88:D5:23:43 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 5E1E356A2D4FF8EEBA2DFEEFC9F1A914D4DAD160 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0934543e-90db-4ba0-9848-455452e0c367.roa Signing time: Sun 11 Oct 2026 14:40:30 +0000 ROA not before: Sun 11 Oct 2026 14:40:30 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c02::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:1e:35:6a:2d:4f:f8:ee:ba:2d:fe:ef:c9:f1:a9:14:d4:da:d1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 11 14:40:30 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=5a424da362e354d309332396dc3c1a8ca36d9fa09deac7eaa84100da8de2dcdc, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:36:10:d5:4e:57:d9:cd:17:c5:c0:85:3e:c2: e3:d2:70:8c:ba:93:42:80:5b:58:66:e3:eb:7d:db: d6:61:07:57:c3:f4:a5:a5:a1:f4:eb:9b:5f:04:9b: 93:6c:47:72:85:72:88:73:05:05:00:51:d8:1a:43: c2:05:51:94:29:6f:c8:10:d7:2d:da:b6:7e:55:58: f2:33:f3:a0:93:21:11:ad:7d:fb:d1:4a:e5:19:25: a6:41:b8:97:49:43:2d:1b:ac:b3:58:c4:f2:53:c5: c6:d7:4c:fd:70:6b:64:5a:88:49:ce:fb:e8:23:c6: 54:8d:07:ea:29:33:dd:49:3b:d4:b3:1c:44:22:50: d2:3b:dd:62:3c:a7:b3:b3:4b:ad:0d:e5:21:86:c6: 3e:53:6f:da:92:ef:9b:5d:f2:9f:ef:3b:71:54:53: 27:c9:6f:5e:c2:a1:9b:9b:c4:69:c0:b4:f3:1c:5e: 39:09:15:65:e1:c9:e0:96:36:35:9a:4b:9e:06:e7: e0:c6:e1:30:e9:f9:93:21:6d:bf:02:33:5e:53:b4: 46:25:36:78:4c:4b:18:eb:47:81:e3:ad:81:9b:38: bd:d0:c2:1f:d1:b4:bb:a9:39:cc:cd:3c:0b:ff:13: 55:3c:04:2e:7f:e5:1a:f8:3e:19:f5:7b:e4:61:71: fc:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:B9:5F:73:E3:9E:97:F9:3F:AB:AC:C8:4C:0F:B9:13:88:D5:23:43 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0934543e-90db-4ba0-9848-455452e0c367.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c02::/48 Signature Algorithm: sha256WithRSAEncryption 19:9f:c2:9e:43:4a:0c:38:0c:a8:a6:bd:38:0a:55:f6:6d:55: 31:28:9a:0a:d7:ab:21:f1:89:15:43:07:96:4c:53:c7:68:49: 5f:e6:40:39:ef:3b:ab:c7:1b:94:d0:64:f2:2f:02:b6:c9:4e: 90:4a:14:df:99:05:01:60:d7:b1:6b:20:04:8c:8b:a8:76:14: 1b:f7:43:03:0a:a8:8c:33:5e:c5:da:b9:e8:de:ed:b8:d0:d0: 66:78:8d:30:f6:c2:ac:fc:8f:72:e5:0f:46:94:0d:0b:31:16: f4:42:00:79:f3:a1:e4:c1:03:f3:64:42:01:cf:cc:76:fd:bb: 81:17:5d:e8:41:64:ac:5a:7d:90:ed:2d:a5:db:ca:09:ca:b3: 50:26:ee:06:7b:79:e3:3c:f5:0c:d9:67:39:7c:8c:64:e4:21: 19:4e:1b:10:d0:a6:0b:ed:cb:b0:53:44:7d:85:11:5b:3d:66: a2:98:10:9c:ab:5a:54:a6:7e:11:5f:83:b3:5f:b9:e1:bf:09: b6:3e:f6:75:6f:3d:a9:0d:5c:1a:bc:14:4a:ab:c7:1a:9d:1f: 0a:6f:ba:13:82:c3:b4:40:bc:76:37:ce:ee:7b:d1:62:da:15: c2:2d:d7:c3:78:6f:be:ec:ba:f9:40:08:ca:ee:45:5f:55:33: 65:fd:7c:08 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXh41ai1P+O66Lf7vyfGpFNTa0WAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYxMDExMTQ0MDMwWhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YTQyNGRhMzYyZTM1NGQzMDkzMzIzOTZkYzNjMWE4Y2Ez NmQ5ZmEwOWRlYWM3ZWFhODQxMDBkYThkZTJkY2RjMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+NhDVTlfZzRfFwIU+wuPScIy6k0KAW1hm4+t929ZhB1fD 9KWlofTrm18Em5NsR3KFcohzBQUAUdgaQ8IFUZQpb8gQ1y3atn5VWPIz86CTIRGt ffvRSuUZJaZBuJdJQy0brLNYxPJTxcbXTP1wa2RaiEnO++gjxlSNB+opM91JO9Sz HEQiUNI73WI8p7OzS60N5SGGxj5Tb9qS75td8p/vO3FUUyfJb17CoZubxGnAtPMc XjkJFWXhyeCWNjWaS54G5+DG4TDp+ZMhbb8CM15TtEYlNnhMSxjrR4HjrYGbOL3Q wh/RtLupOczNPAv/E1U8BC5/5Rr4Phn1e+RhcfwJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU0Llfc+Oel/k/q6zITA+5E4jVI0MwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzA5MzQ1NDNlLTkwZGItNGJhMC05ODQ4LTQ1NTQ1MmUwYzM2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAIwDQYJKoZIhvcNAQELBQADggEBABmfwp5DSgw4DKimvTgKVfZt VTEomgrXqyHxiRVDB5ZMU8doSV/mQDnvO6vHG5TQZPIvArbJTpBKFN+ZBQFg17Fr IASMi6h2FBv3QwMKqIwzXsXaueje7bjQ0GZ4jTD2wqz8j3LlD0aUDQsxFvRCAHnz oeTBA/NkQgHPzHb9u4EXXehBZKxafZDtLaXbygnKs1Am7gZ7eeM89QzZZzl8jGTk IRlOGxDQpgvty7BTRH2FEVs9ZqKYEJyrWlSmfhFfg7NfueG/CbY+9nVvPakNXBq8 FEqrxxqdHwpvuhOCw7RAvHY3zu570WLaFcIt18N4b77suvlACMruRV9VM2X9fAg= -----END CERTIFICATE-----Generated at Tue Nov 3 22:53:36 2026 by rpki-client