$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/8a5ff071-2589-4b8f-bab2-ab661880d472.roa File: 8a5ff071-2589-4b8f-bab2-ab661880d472.roa (raw, json) Hash identifier: Gs/USoWxF0h7Qvuth4FEap4kdoad2P1697udzZQEXAg= Subject key identifier: F3:E1:C8:55:47:4D:D5:7D:82:61:97:BD:16:43:90:70:5C:9E:5A:BE Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 52A199FB1BC80DA7FA9479965505F7EEF6A90987 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/8a5ff071-2589-4b8f-bab2-ab661880d472.roa Signing time: Wed 21 Oct 2026 01:40:11 +0000 ROA not before: Wed 21 Oct 2026 01:40:11 +0000 ROA not after: Tue 19 Jan 2027 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:3c2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:a1:99:fb:1b:c8:0d:a7:fa:94:79:96:55:05:f7:ee:f6:a9:09:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 21 01:40:11 2026 GMT Not After : Jan 19 23:59:59 2027 GMT Subject: serialNumber=35d4fc838dbcd7e285404a95e634e3ef02ceaaa5631947dd86d13e24437be300, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:74:8b:d0:17:76:a0:b2:1c:75:5b:7b:01:00: b0:91:23:0c:36:26:90:bc:99:77:71:d5:28:ab:13: 37:58:48:ff:a1:c6:08:fb:17:0b:5e:35:2f:a3:9c: 57:22:21:13:1c:df:81:2a:b4:f8:57:5d:a6:fe:e8: fa:56:a8:61:9b:66:02:04:9f:0b:0e:3b:e7:cc:2c: ee:ae:9f:7c:7b:1c:13:0c:71:83:d4:79:8c:3b:7e: 88:54:f5:93:ee:7f:cc:b8:8a:c3:b7:c1:cd:52:bf: 85:17:ab:c2:9f:3c:73:e9:03:8c:75:44:00:3d:b6: 39:46:d7:4e:2b:66:dd:7e:ea:00:7d:6e:13:cf:e1: 8d:21:17:6c:8e:36:0e:bd:b4:a0:7f:81:a5:af:3f: a5:20:09:dd:e9:ac:ba:be:f5:21:31:ef:b2:d9:48: ed:da:89:1c:64:6d:78:ad:4e:d6:a7:25:90:58:be: ff:37:82:78:fa:f8:f5:70:f3:a0:70:48:54:93:ce: a9:a2:b4:6e:50:5e:88:22:b3:ad:10:14:fa:52:9e: 84:61:cb:e3:7c:b1:5c:a4:ff:bc:44:92:3f:ab:76: 5e:49:58:ea:c2:c7:a4:e1:57:2b:a3:c6:10:a9:8d: 39:4f:9e:d0:26:bb:63:6d:0e:66:aa:d6:75:e7:c6: 1c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E1:C8:55:47:4D:D5:7D:82:61:97:BD:16:43:90:70:5C:9E:5A:BE X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/8a5ff071-2589-4b8f-bab2-ab661880d472.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:3c2::/48 Signature Algorithm: sha256WithRSAEncryption 2c:e2:b3:b2:f8:a2:8e:66:8e:59:9d:26:b9:64:9a:56:d5:7c: 2d:c4:ee:f3:e6:03:fc:15:68:16:a1:7c:98:b1:ef:3b:bc:3c: 7c:d8:ad:05:52:2a:38:f0:10:ff:01:f0:c0:05:60:d9:c9:d1: dc:ca:bb:30:f8:da:93:48:77:4b:d2:b3:50:d7:6e:af:40:96: a6:a1:57:9e:90:f9:7b:63:9c:fa:60:49:f1:54:4a:07:3c:07: 21:7c:32:23:7f:7d:48:bf:ba:77:0c:7d:f0:af:55:74:01:9f: 9c:ec:5d:c3:07:ea:e4:34:39:86:85:27:ce:4f:a1:37:35:a6: 9f:75:17:19:d1:2e:a2:cc:54:31:a1:2e:53:b5:c4:95:a7:e0: b2:d6:15:70:2e:55:f1:d7:2f:cc:54:f1:5e:db:cb:cb:36:6f: 37:0d:86:d1:e6:7f:51:90:3e:b3:59:a3:c3:49:7d:50:29:e0: 6a:94:70:2e:5f:23:2f:ba:5a:1f:51:13:d3:ff:ad:15:ec:00: 4c:be:af:a8:98:bb:30:53:63:f2:ba:c3:a3:02:79:73:17:c3: 83:0b:72:d4:ea:6a:a7:d9:4e:81:8f:17:01:90:8e:42:53:73: e6:cb:d5:55:38:60:b6:7f:6a:f6:ee:73:0b:03:f2:ce:76:d5: 32:08:9b:f4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUqGZ+xvIDaf6lHmWVQX37vapCYcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYxMDIxMDE0MDExWhcNMjcwMTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNWQ0ZmM4MzhkYmNkN2UyODU0MDRhOTVlNjM0ZTNlZjAy Y2VhYWE1NjMxOTQ3ZGQ4NmQxM2UyNDQzN2JlMzAwMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQdIvQF3agshx1W3sBALCRIww2JpC8mXdx1SirEzdYSP+h xgj7FwteNS+jnFciIRMc34EqtPhXXab+6PpWqGGbZgIEnwsOO+fMLO6un3x7HBMM cYPUeYw7fohU9ZPuf8y4isO3wc1Sv4UXq8KfPHPpA4x1RAA9tjlG104rZt1+6gB9 bhPP4Y0hF2yONg69tKB/gaWvP6UgCd3prLq+9SEx77LZSO3aiRxkbXitTtanJZBY vv83gnj6+PVw86BwSFSTzqmitG5QXogis60QFPpSnoRhy+N8sVyk/7xEkj+rdl5J WOrCx6ThVyujxhCpjTlPntAmu2NtDmaq1nXnxhzxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU8+HIVUdN1X2CYZe9FkOQcFyeWr4wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzhhNWZmMDcxLTI1ODktNGI4Zi1iYWIyLWFiNjYxODgwZDQ3Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA8IwDQYJKoZIhvcNAQELBQADggEBACzis7L4oo5mjlmdJrlkmlbV fC3E7vPmA/wVaBahfJix7zu8PHzYrQVSKjjwEP8B8MAFYNnJ0dzKuzD42pNId0vS s1DXbq9AlqahV56Q+XtjnPpgSfFUSgc8ByF8MiN/fUi/uncMffCvVXQBn5zsXcMH 6uQ0OYaFJ85PoTc1pp91FxnRLqLMVDGhLlO1xJWn4LLWFXAuVfHXL8xU8V7by8s2 bzcNhtHmf1GQPrNZo8NJfVAp4GqUcC5fIy+6Wh9RE9P/rRXsAEy+r6iYuzBTY/K6 w6MCeXMXw4MLctTqaqfZToGPFwGQjkJTc+bL1VU4YLZ/avbucwsD8s521TIIm/Q= -----END CERTIFICATE-----Generated at Tue Nov 3 00:56:31 2026 by rpki-client