$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3f9eac71-74eb-41d6-909a-a188024d8d5f.roa File: 3f9eac71-74eb-41d6-909a-a188024d8d5f.roa (raw, json) Hash identifier: NORJmP0C42426qRokVyCn4qN6VeKuVUcl8P9BD22D+M= Subject key identifier: E3:B2:91:D1:BB:82:1E:26:DA:1A:A9:B0:B9:85:94:A8:71:3C:17:D7 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 25DF45BE260D7E0F9D9C17E0BB414B7E5882AB41 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3f9eac71-74eb-41d6-909a-a188024d8d5f.roa Signing time: Sun 11 Oct 2026 14:40:31 +0000 ROA not before: Sun 11 Oct 2026 14:40:31 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c16::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:df:45:be:26:0d:7e:0f:9d:9c:17:e0:bb:41:4b:7e:58:82:ab:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 11 14:40:31 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=9c64058a1f6f12506168f9847526d54bfdb882545c12802ab816eadab4408292, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c7:8c:f7:56:54:ab:30:a6:a2:78:50:b2:ea: e5:0b:d6:a2:5f:da:51:2b:ff:65:43:36:57:c7:d2: ad:e1:d0:c0:c1:3a:b5:0f:a4:5b:14:11:c0:3d:10: 3f:e2:c9:44:f7:a6:75:4e:4d:34:5b:b7:16:87:b2: 37:b2:aa:28:2e:ee:81:3d:7b:44:8f:d4:5d:88:ef: 0f:23:8e:2d:3e:1d:51:c7:7e:94:71:90:a0:2a:d4: 26:49:de:e9:c8:60:97:21:21:17:bc:6e:59:90:5c: b9:f0:d4:27:15:ea:29:46:ff:97:e2:5b:b2:77:fe: 09:89:44:a0:f6:63:3e:ee:af:10:9a:6d:69:05:64: 21:1f:9c:0f:2c:5b:f1:20:a5:fa:5c:64:ed:cb:7f: 2c:e2:80:15:0d:80:7e:42:51:80:f6:59:25:fe:c6: a9:ba:43:af:78:0d:23:1a:ff:c2:e3:71:d0:67:0c: 73:48:7a:2d:d6:10:66:e5:ab:29:86:54:a0:74:3a: 33:00:3d:ca:28:bc:e9:99:a1:7c:37:9e:0e:c3:ed: 2a:00:04:45:8f:42:54:26:4a:cd:65:8d:6f:ba:a7: 73:1e:b0:84:31:70:5f:66:24:ec:ae:cd:06:e7:62: 69:67:43:e6:06:98:9e:2e:04:3b:a1:27:70:df:cf: bb:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B2:91:D1:BB:82:1E:26:DA:1A:A9:B0:B9:85:94:A8:71:3C:17:D7 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3f9eac71-74eb-41d6-909a-a188024d8d5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c16::/48 Signature Algorithm: sha256WithRSAEncryption 9a:b9:14:34:57:a2:86:d2:58:a0:d9:ec:36:88:29:95:57:73: 5c:68:c0:bb:68:d3:f8:f8:c1:4c:75:ef:80:ed:89:10:9a:84: 05:35:44:93:80:59:3d:22:c1:50:c9:f8:c4:04:0a:40:83:d2: 22:66:d3:42:a1:28:5f:f8:0c:2d:37:d8:44:fd:b9:e3:42:71: e4:80:5e:42:61:2c:52:13:b8:f1:e8:47:1c:87:33:40:71:4b: ba:e9:5b:35:33:18:4b:4e:52:91:16:83:c0:06:d3:cd:6a:1d: 7f:64:7f:d0:a4:13:9b:0c:1d:3a:02:ad:33:39:27:39:df:8f: f3:41:63:a6:56:90:38:20:a2:79:ea:c8:c5:d6:d9:5e:2a:42: 79:07:05:66:59:89:fc:6f:36:c5:05:f9:08:5c:9e:a1:cb:51: f2:ec:a1:8e:13:82:ef:99:04:7e:2e:d8:8b:35:01:29:72:70: e9:bc:82:65:9a:dc:e2:d6:07:97:2f:7d:34:c4:3e:74:86:2d: d2:ec:e6:1d:ff:df:89:7a:d6:90:5f:6d:1b:5e:eb:f8:3b:d0: 99:2b:7e:d7:97:f4:3c:d6:62:e2:cc:03:df:8a:35:d8:dc:3b: 63:f9:9a:f9:ea:90:20:03:a6:76:28:26:f9:09:05:23:cb:77: 2b:7e:b0:12 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJd9FviYNfg+dnBfgu0FLfliCq0EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYxMDExMTQ0MDMxWhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A5YzY0MDU4YTFmNmYxMjUwNjE2OGY5ODQ3NTI2ZDU0YmZk Yjg4MjU0NWMxMjgwMmFiODE2ZWFkYWI0NDA4MjkyMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCKx4z3VlSrMKaieFCy6uUL1qJf2lEr/2VDNlfH0q3h0MDB OrUPpFsUEcA9ED/iyUT3pnVOTTRbtxaHsjeyqigu7oE9e0SP1F2I7w8jji0+HVHH fpRxkKAq1CZJ3unIYJchIRe8blmQXLnw1CcV6ilG/5fiW7J3/gmJRKD2Yz7urxCa bWkFZCEfnA8sW/EgpfpcZO3LfyzigBUNgH5CUYD2WSX+xqm6Q694DSMa/8LjcdBn DHNIei3WEGblqymGVKB0OjMAPcoovOmZoXw3ng7D7SoABEWPQlQmSs1ljW+6p3Me sIQxcF9mJOyuzQbnYmlnQ+YGmJ4uBDuhJ3Dfz7tnAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU47KR0buCHibaGqmwuYWUqHE8F9cwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzNmOWVhYzcxLTc0ZWItNDFkNi05MDlhLWExODgwMjRkOGQ1Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBYwDQYJKoZIhvcNAQELBQADggEBAJq5FDRXoobSWKDZ7DaIKZVX c1xowLto0/j4wUx174DtiRCahAU1RJOAWT0iwVDJ+MQECkCD0iJm00KhKF/4DC03 2ET9ueNCceSAXkJhLFITuPHoRxyHM0BxS7rpWzUzGEtOUpEWg8AG081qHX9kf9Ck E5sMHToCrTM5Jznfj/NBY6ZWkDggonnqyMXW2V4qQnkHBWZZifxvNsUF+QhcnqHL UfLsoY4Tgu+ZBH4u2Is1ASlycOm8gmWa3OLWB5cvfTTEPnSGLdLs5h3/34l61pBf bRte6/g70JkrfteX9DzWYuLMA9+KNdjcO2P5mvnqkCADpnYoJvkJBSPLdyt+sBI= -----END CERTIFICATE-----Generated at Tue Nov 3 06:18:45 2026 by rpki-client