$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0c8fb97d-8e7e-45c9-9b3a-838dd669dd47.roa File: 0c8fb97d-8e7e-45c9-9b3a-838dd669dd47.roa (raw, json) Hash identifier: 2ty87Tx6KyYR/vV4OLaZMAYFMpQ5R45gqPXPjfkCc58= Subject key identifier: 48:78:D0:B4:72:9F:33:92:D7:BE:94:4A:63:1C:77:C6:AD:35:DE:5E Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 296A868D3853071CFBDE8F137D184D3D4E4F4ADB Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0c8fb97d-8e7e-45c9-9b3a-838dd669dd47.roa Signing time: Sun 11 Oct 2026 14:40:07 +0000 ROA not before: Sun 11 Oct 2026 14:40:07 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c03::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:6a:86:8d:38:53:07:1c:fb:de:8f:13:7d:18:4d:3d:4e:4f:4a:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 11 14:40:07 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=97adcce13cd78b5b214c9543c5bf99da82dcdd61b53a62d9dd5a4fb268a9a0ff, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:75:5d:12:c3:9a:6e:7f:b7:8c:e0:fc:07:55: c0:f8:8d:e4:ef:90:73:76:72:f1:0b:82:08:bb:22: 64:ea:70:08:0f:31:e4:89:0b:51:0e:40:ea:54:a4: 05:58:14:bb:ca:2d:f2:94:50:4e:71:e2:ff:fd:ad: cd:95:c7:ee:ed:d1:55:ec:1c:b6:48:56:7b:da:2a: 6d:b7:06:aa:0e:68:d8:d4:5e:08:ae:85:3a:c9:28: f3:a4:44:68:fb:8a:f9:5f:42:e4:25:ad:bf:a0:ba: 34:57:0a:42:cd:08:c5:73:84:26:31:f3:4e:4e:ce: c8:99:cd:e8:59:e3:20:ed:40:ff:fd:03:95:a4:1f: 86:d9:d5:a6:0c:70:b1:78:c5:32:0e:f5:3f:4d:79: f8:ae:11:f4:94:9b:ed:ed:82:2c:97:fb:d9:2e:36: 16:70:44:1a:d1:6e:99:db:a5:c8:32:ed:ac:e9:fc: 3d:26:1f:69:c4:ab:38:da:63:84:f1:25:ea:04:78: 6f:e2:69:49:6f:a0:4e:21:a5:9f:00:ff:62:c9:ca: dc:63:a4:46:61:4d:bf:56:e1:db:d0:ce:7a:2e:98: f3:66:00:8a:5e:b7:ac:4c:49:9e:02:d7:96:71:33: 09:43:11:ba:40:e0:57:c8:33:5b:bb:0c:b8:b2:35: 97:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:78:D0:B4:72:9F:33:92:D7:BE:94:4A:63:1C:77:C6:AD:35:DE:5E X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0c8fb97d-8e7e-45c9-9b3a-838dd669dd47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c03::/48 Signature Algorithm: sha256WithRSAEncryption 85:4a:5c:f1:f8:f7:79:fb:20:66:d6:c2:0a:a7:a0:8a:94:c2: 5b:0b:d1:7a:46:4c:bf:9f:a0:ff:8a:81:0e:89:87:fe:f7:26: 11:d8:46:b2:53:bc:c6:db:0b:bc:be:61:90:39:6d:76:4b:85: 88:7b:3c:55:31:29:92:2e:68:4c:59:d5:74:60:78:35:c9:77: df:fc:80:a1:78:e4:02:46:be:e4:c0:4a:e7:76:ce:31:95:7d: a6:d7:cf:e0:66:27:74:07:cc:79:bf:8c:2f:0c:ed:0a:29:89: 53:6a:38:68:cd:7b:e2:50:ce:2a:d1:c6:a4:3a:d3:d4:8f:8e: cb:82:7b:74:90:b3:93:9d:e1:70:ff:90:a4:2d:67:60:85:ec: b6:09:49:0a:22:b2:24:74:d3:a6:3b:d2:c5:13:47:6b:25:57: 87:df:ee:d3:62:dc:43:14:05:a9:0b:b1:fe:f0:16:d3:26:fb: ef:d9:aa:46:4e:25:13:33:6d:20:f7:e8:ca:99:1d:5c:d5:7f: 95:9f:a6:39:61:c6:07:a3:4b:61:93:3e:04:ed:e2:bb:ce:12: a7:df:22:b2:c8:69:5a:34:17:f2:c9:59:df:9e:10:94:73:2c: f8:91:49:9a:7d:4a:ed:5c:60:a8:75:ee:6b:f7:b2:de:2a:1c: db:5b:38:40 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKWqGjThTBxz73o8TfRhNPU5PStswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYxMDExMTQ0MDA3WhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A5N2FkY2NlMTNjZDc4YjViMjE0Yzk1NDNjNWJmOTlkYTgy ZGNkZDYxYjUzYTYyZDlkZDVhNGZiMjY4YTlhMGZmMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNdV0Sw5puf7eM4PwHVcD4jeTvkHN2cvELggi7ImTqcAgP MeSJC1EOQOpUpAVYFLvKLfKUUE5x4v/9rc2Vx+7t0VXsHLZIVnvaKm23BqoOaNjU XgiuhTrJKPOkRGj7ivlfQuQlrb+gujRXCkLNCMVzhCYx805OzsiZzehZ4yDtQP/9 A5WkH4bZ1aYMcLF4xTIO9T9NefiuEfSUm+3tgiyX+9kuNhZwRBrRbpnbpcgy7azp /D0mH2nEqzjaY4TxJeoEeG/iaUlvoE4hpZ8A/2LJytxjpEZhTb9W4dvQznoumPNm AIpet6xMSZ4C15ZxMwlDEbpA4FfIM1u7DLiyNZfRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUSHjQtHKfM5LXvpRKYxx3xq013l4wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzBjOGZiOTdkLThlN2UtNDVjOS05YjNhLTgzOGRkNjY5ZGQ0Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAMwDQYJKoZIhvcNAQELBQADggEBAIVKXPH493n7IGbWwgqnoIqU wlsL0XpGTL+foP+KgQ6Jh/73JhHYRrJTvMbbC7y+YZA5bXZLhYh7PFUxKZIuaExZ 1XRgeDXJd9/8gKF45AJGvuTASud2zjGVfabXz+BmJ3QHzHm/jC8M7QopiVNqOGjN e+JQzirRxqQ609SPjsuCe3SQs5Od4XD/kKQtZ2CF7LYJSQoisiR006Y70sUTR2sl V4ff7tNi3EMUBakLsf7wFtMm++/ZqkZOJRMzbSD36MqZHVzVf5WfpjlhxgejS2GT PgTt4rvOEqffIrLIaVo0F/LJWd+eEJRzLPiRSZp9Su1cYKh17mv3st4qHNtbOEA= -----END CERTIFICATE-----Generated at Tue Nov 3 22:54:10 2026 by rpki-client