$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/354ba1ab-6bd2-48ee-bdad-e1f3954b02a3.roa File: 354ba1ab-6bd2-48ee-bdad-e1f3954b02a3.roa (raw, json) Hash identifier: q+ED5kjHuSd3kh3Usn2dy5/8TNlYV15j4hk7QPU7YCU= Subject key identifier: 68:6C:F0:E1:08:F3:95:C9:52:75:18:5B:6C:40:7F:C6:FD:4D:39:41 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 6AC398C019BAE6940902D57A67FA5FF96955A615 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/354ba1ab-6bd2-48ee-bdad-e1f3954b02a3.roa Signing time: Thu 15 Oct 2026 03:07:00 +0000 ROA not before: Thu 15 Oct 2026 03:07:00 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:c3:98:c0:19:ba:e6:94:09:02:d5:7a:67:fa:5f:f9:69:55:a6:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 15 03:07:00 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=bd31005b156d78c240d99edc587bc044d8acb9e6ed950edb7f6207df5eabd70f, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4b:0a:5f:06:05:38:4c:7b:0a:50:05:7c:cd: f8:3a:e5:d5:68:51:e3:ea:1b:6d:4b:45:3e:e7:63: da:77:a3:2c:a6:56:c4:00:e1:25:e6:2a:cc:79:24: df:df:93:10:f8:89:de:13:cd:31:be:50:aa:5f:48: 2e:9f:c6:ed:80:3c:40:ec:ec:b1:22:83:ea:21:45: e5:6a:df:f4:17:53:5a:d5:45:06:14:ba:4c:e3:99: 30:2a:5e:1c:3f:d8:2f:be:a3:a6:49:c0:9c:5c:48: f4:d9:28:1a:f3:82:3d:14:49:fc:d1:82:81:0b:80: 16:82:08:82:32:16:70:df:00:7c:84:76:9e:02:97: 5b:43:35:59:9b:5d:e0:e5:13:72:e6:09:e3:97:02: e9:53:2b:ee:bd:08:18:b1:a6:69:12:77:ed:b5:3e: 76:db:97:e1:d4:0c:f1:f0:26:b6:dd:9a:2b:73:a3: 4d:3a:0a:44:42:28:66:0c:bb:8c:dd:dc:e3:06:3b: 6a:3b:11:f7:aa:f1:20:ab:07:a7:07:53:68:e9:62: 3e:02:49:6e:d9:92:ae:d1:33:e3:41:0b:cb:3f:a9: 91:ec:11:49:60:af:a4:ef:51:c0:8a:0f:16:96:cf: 1c:ee:e9:1f:7e:ad:a5:ec:fc:c9:5d:8a:34:e4:8d: 0e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:6C:F0:E1:08:F3:95:C9:52:75:18:5B:6C:40:7F:C6:FD:4D:39:41 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/354ba1ab-6bd2-48ee-bdad-e1f3954b02a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c12::/48 Signature Algorithm: sha256WithRSAEncryption 4d:46:fb:03:7a:6f:c1:0b:80:fb:bd:3a:e1:9b:61:df:98:af: b7:61:fe:0e:2b:7f:bf:78:d9:b7:f9:be:8d:80:e4:da:26:2f: 8c:e3:4d:ad:7e:d7:30:ee:49:69:e1:38:a3:a8:63:d8:97:45: e5:b8:82:52:85:28:ae:68:d7:42:eb:d5:d8:91:81:f8:23:0a: 35:cd:fc:20:55:54:71:22:30:fd:b0:53:c7:2e:7e:b6:5e:67: 07:67:2b:be:78:c1:14:ed:5e:7c:75:55:85:f6:b6:28:62:e2: 78:e4:01:5b:59:67:4b:39:c0:97:8f:82:36:97:28:e0:f1:c1: fe:77:7d:5d:6f:d5:ef:4f:d0:b8:86:8a:e6:a8:2a:cb:96:02: 6a:0e:6c:50:d7:5f:4a:ac:97:f5:eb:e7:fa:e3:c5:64:02:ac: 43:2c:be:ce:7d:98:92:6f:71:11:18:8a:3f:79:69:48:b9:d3: 3e:d9:82:a1:17:16:42:dd:83:07:fe:77:cf:33:b6:c0:23:74: f7:a9:5a:75:a7:6b:8a:30:40:d8:1a:32:08:a2:fb:2e:6f:db: bb:a9:e9:4d:9b:eb:1a:6e:08:b5:7a:b9:f4:c7:18:03:7b:7c: 74:14:23:b2:1a:30:c8:17:b4:d2:1c:5a:67:7c:d7:04:8f:88: 53:d0:57:90 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUasOYwBm65pQJAtV6Z/pf+WlVphUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYxMDE1MDMwNzAwWhcNMjcwMTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiZDMxMDA1YjE1NmQ3OGMyNDBkOTllZGM1ODdiYzA0NGQ4 YWNiOWU2ZWQ5NTBlZGI3ZjYyMDdkZjVlYWJkNzBmMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkSwpfBgU4THsKUAV8zfg65dVoUePqG21LRT7nY9p3oyym VsQA4SXmKsx5JN/fkxD4id4TzTG+UKpfSC6fxu2APEDs7LEig+ohReVq3/QXU1rV RQYUukzjmTAqXhw/2C++o6ZJwJxcSPTZKBrzgj0USfzRgoELgBaCCIIyFnDfAHyE dp4Cl1tDNVmbXeDlE3LmCeOXAulTK+69CBixpmkSd+21Pnbbl+HUDPHwJrbdmitz o006CkRCKGYMu4zd3OMGO2o7Efeq8SCrB6cHU2jpYj4CSW7Zkq7RM+NBC8s/qZHs EUlgr6TvUcCKDxaWzxzu6R9+raXs/MldijTkjQ7TAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUaGzw4QjzlclSdRhbbEB/xv1NOUEwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzM1NGJhMWFiLTZiZDItNDhlZS1iZGFkLWUxZjM5NTRiMDJhMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBIwDQYJKoZIhvcNAQELBQADggEBAE1G+wN6b8ELgPu9OuGbYd+Y r7dh/g4rf7942bf5vo2A5NomL4zjTa1+1zDuSWnhOKOoY9iXReW4glKFKK5o10Lr 1diRgfgjCjXN/CBVVHEiMP2wU8cufrZeZwdnK754wRTtXnx1VYX2tihi4njkAVtZ Z0s5wJePgjaXKODxwf53fV1v1e9P0LiGiuaoKsuWAmoObFDXX0qsl/Xr5/rjxWQC rEMsvs59mJJvcREYij95aUi50z7ZgqEXFkLdgwf+d88ztsAjdPepWnWna4owQNga Mgii+y5v27up6U2b6xpuCLV6ufTHGAN7fHQUI7IaMMgXtNIcWmd81wSPiFPQV5A= -----END CERTIFICATE-----Generated at Mon Nov 2 21:05:55 2026 by rpki-client