$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/89848d84-ccf0-40c8-b12a-ac4d8910d997.roa File: 89848d84-ccf0-40c8-b12a-ac4d8910d997.roa (raw, json) Hash identifier: 2ATfUs0dJU1aqch2ALYDRqkidd4Fa2TM7R55HC/KyiM= Subject key identifier: A4:DD:B0:34:08:4A:DE:BD:32:A6:E2:BB:11:2D:0F:21:7A:DA:76:2B Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 50F4FF3B05B832BFC619C8CE1B8E6E83F763EE42 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/89848d84-ccf0-40c8-b12a-ac4d8910d997.roa Signing time: Mon 26 Oct 2026 03:50:40 +0000 ROA not before: Mon 26 Oct 2026 03:50:40 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:3a7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:f4:ff:3b:05:b8:32:bf:c6:19:c8:ce:1b:8e:6e:83:f7:63:ee:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 26 03:50:40 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=7f200a80d60a139a6e1b151c59994ef3832f572ed8575b9bee63ef70d8065259, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:99:97:d3:27:8c:29:e4:eb:f3:59:2e:d3:4e: ab:40:29:60:8e:e3:b7:4d:4a:5d:d7:38:56:37:90: e3:a7:97:a6:4f:35:f6:d0:b2:5b:4c:e2:d1:f8:e6: 1d:b9:10:4e:ec:d3:11:5d:08:aa:13:da:ba:09:12: 62:5d:53:5e:90:28:15:40:5c:f9:c0:d6:0f:58:65: 9c:9f:41:c5:38:9c:8c:e8:c1:8f:b9:1c:10:ce:08: f9:14:53:26:b1:f9:3a:24:5c:89:23:31:24:4a:8f: 9a:59:67:ab:bd:6d:26:25:fb:f0:ba:42:0e:dc:4a: ca:d3:a5:eb:60:36:06:bd:b2:4d:10:f1:ed:e1:93: 47:de:44:c6:e6:50:dd:2d:3b:e0:75:65:59:87:5e: 20:c4:e6:52:3c:a2:42:b9:50:4f:74:a1:23:87:07: 57:e8:c0:a5:b4:de:06:c8:a2:b2:db:db:aa:27:9c: e9:dc:4a:ed:17:1f:0e:16:b6:91:f0:5a:71:6a:83: ad:3e:6c:02:8e:09:77:bd:5a:8c:5a:a3:36:a1:c5: 0c:f4:26:2f:b7:06:60:aa:7f:cb:4d:41:e7:36:7f: b2:21:da:5c:d0:05:d0:a1:7c:9f:93:d7:82:ca:f6: 13:f3:bd:a2:ef:b8:70:db:0c:79:86:40:7a:99:a0: 68:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:DD:B0:34:08:4A:DE:BD:32:A6:E2:BB:11:2D:0F:21:7A:DA:76:2B X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/89848d84-ccf0-40c8-b12a-ac4d8910d997.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:3a7::/48 Signature Algorithm: sha256WithRSAEncryption 92:9c:65:4f:9a:dc:d4:c4:06:94:7a:96:76:bc:8f:54:9c:18: 9c:25:86:f8:06:86:51:0c:df:74:88:ac:27:e6:4a:44:4f:ee: 70:45:f4:2b:de:ea:ae:4a:2c:fe:d7:12:73:68:d2:10:e5:04: 2e:6e:6b:ea:d1:91:05:67:de:fc:66:80:05:32:a4:45:47:f6: f3:29:dd:ea:9d:81:da:72:72:c9:a8:f7:aa:4f:91:3d:18:d3: 0a:a3:b8:30:04:de:63:f7:6b:6d:08:39:91:b0:13:b1:42:8d: 74:5c:50:50:00:a8:a8:d4:63:c0:cf:49:f7:eb:96:e7:0a:24: 23:49:67:54:8e:4a:0d:b0:50:8a:b4:91:2d:7d:8e:d4:85:0b: d6:f6:ab:32:c3:54:ee:c8:95:68:52:41:97:4b:b5:04:af:eb: c1:93:44:61:80:39:10:32:c9:18:f2:f0:db:6c:25:3b:71:11: 41:cc:0b:9b:de:c6:5a:4a:94:d8:2b:47:91:8b:8f:9b:50:79: 06:32:03:3f:b7:8f:c0:91:18:6c:0a:c2:cf:f1:cf:69:22:36: f0:17:2b:68:27:c7:b9:c2:63:ec:db:31:79:c2:90:b4:81:52: 43:a4:a1:36:7e:ff:65:40:02:2d:bf:17:e6:c6:e4:08:60:9c: ee:7f:2a:60 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUPT/OwW4Mr/GGcjOG45ug/dj7kIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYxMDI2MDM1MDQwWhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZjIwMGE4MGQ2MGExMzlhNmUxYjE1MWM1OTk5NGVmMzgz MmY1NzJlZDg1NzViOWJlZTYzZWY3MGQ4MDY1MjU5MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbmZfTJ4wp5OvzWS7TTqtAKWCO47dNSl3XOFY3kOOnl6ZP NfbQsltM4tH45h25EE7s0xFdCKoT2roJEmJdU16QKBVAXPnA1g9YZZyfQcU4nIzo wY+5HBDOCPkUUyax+TokXIkjMSRKj5pZZ6u9bSYl+/C6Qg7cSsrTpetgNga9sk0Q 8e3hk0feRMbmUN0tO+B1ZVmHXiDE5lI8okK5UE90oSOHB1fowKW03gbIorLb26on nOncSu0XHw4WtpHwWnFqg60+bAKOCXe9WoxaozahxQz0Ji+3BmCqf8tNQec2f7Ih 2lzQBdChfJ+T14LK9hPzvaLvuHDbDHmGQHqZoGgZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUpN2wNAhK3r0ypuK7ES0PIXradiswHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzg5ODQ4ZDg0LWNjZjAtNDBjOC1iMTJhLWFjNGQ4OTEwZDk5Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA6cwDQYJKoZIhvcNAQELBQADggEBAJKcZU+a3NTEBpR6lna8j1Sc GJwlhvgGhlEM33SIrCfmSkRP7nBF9Cve6q5KLP7XEnNo0hDlBC5ua+rRkQVn3vxm gAUypEVH9vMp3eqdgdpycsmo96pPkT0Y0wqjuDAE3mP3a20IOZGwE7FCjXRcUFAA qKjUY8DPSffrlucKJCNJZ1SOSg2wUIq0kS19jtSFC9b2qzLDVO7IlWhSQZdLtQSv 68GTRGGAORAyyRjy8NtsJTtxEUHMC5vexlpKlNgrR5GLj5tQeQYyAz+3j8CRGGwK ws/xz2kiNvAXK2gnx7nCY+zbMXnCkLSBUkOkoTZ+/2VAAi2/F+bG5AhgnO5/KmA= -----END CERTIFICATE-----Generated at Wed Nov 4 00:43:36 2026 by rpki-client