$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/db3bbfe8-2718-45e1-a3a5-afbf572d00cf.roa File: db3bbfe8-2718-45e1-a3a5-afbf572d00cf.roa (raw, json) Hash identifier: bmz1c+UE4kr51DjlOWwK1aSlXnqVlJRHKaDp9UDB504= Subject key identifier: 9E:0A:2F:C0:9F:3D:B4:92:FA:52:11:8B:CE:2F:E0:C3:9D:85:F8:F4 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 7DEC86A6998414F3024D1205C7AAD912C482FD6B Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/db3bbfe8-2718-45e1-a3a5-afbf572d00cf.roa Signing time: Thu 15 Oct 2026 03:10:41 +0000 ROA not before: Thu 15 Oct 2026 03:10:41 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c14::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:ec:86:a6:99:84:14:f3:02:4d:12:05:c7:aa:d9:12:c4:82:fd:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 15 03:10:41 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=4b30d1530298fd03d9369a5d1e1b999d5f16dbcd9fe3cafe3a120fd49d33ad8d, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e3:73:00:6d:07:28:d5:98:94:37:1a:f8:0f: 6b:d5:b1:18:b3:a4:81:fc:bb:30:7e:0b:8c:c2:a4: 5b:8a:74:1b:f3:74:69:cf:d3:c4:9f:15:75:a0:a6: c1:a0:4e:c7:4d:4e:1d:26:fe:b3:e0:ec:51:71:25: 27:15:1d:cd:bc:aa:71:ff:28:01:07:70:c8:8c:9c: ac:55:8c:92:1d:dd:fe:d1:af:a6:12:23:56:27:c8: a5:47:c8:32:6a:24:2e:e6:0a:86:49:d3:97:a4:c6: 0d:e9:dc:7f:7a:18:2d:70:5f:30:2a:6a:ea:1b:9e: 3c:10:1f:7d:0b:2e:f7:5d:07:3e:d6:19:b7:cb:2d: e1:c9:db:2e:62:d5:56:e1:96:af:d4:ea:ce:73:5c: f5:b4:18:66:df:2e:0b:79:60:5d:a0:7c:4e:a3:29: 29:20:65:eb:13:1a:6e:37:1a:74:ae:7f:ff:32:f8: 07:74:2d:61:7d:41:81:49:f1:06:66:d5:80:e8:13: 04:b7:cc:2e:c7:66:96:cd:aa:8a:e6:7d:46:5a:c8: 46:02:df:b5:af:a8:39:5d:42:86:fc:92:86:c3:70: c8:44:74:5b:19:31:46:95:53:f7:17:8f:34:16:5c: 7b:29:23:61:e8:8e:2a:aa:3b:47:b0:ae:d4:f9:22: d4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:0A:2F:C0:9F:3D:B4:92:FA:52:11:8B:CE:2F:E0:C3:9D:85:F8:F4 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/db3bbfe8-2718-45e1-a3a5-afbf572d00cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c14::/48 Signature Algorithm: sha256WithRSAEncryption 11:db:65:0f:58:1b:e0:c0:5c:f0:dc:82:e4:02:da:de:f1:81: 2c:9a:46:e9:01:9e:5d:f3:f1:6f:da:0c:ba:04:3f:01:80:7a: 12:9a:a4:b3:56:86:66:64:e7:d2:09:b3:54:70:bc:2d:50:e5: 4f:4e:a1:e9:2b:79:8e:25:b3:76:09:83:2c:95:b2:4a:3d:06: 0f:a6:05:7b:2a:05:70:91:00:ee:0f:2f:13:f0:69:d2:a3:43: 42:4b:ff:a7:0e:5f:19:ab:34:ef:67:df:64:6b:c1:5d:d7:19: 52:10:c1:0f:f1:92:8c:ad:ca:78:94:d6:fc:85:41:f7:d6:fc: e8:f4:db:32:5b:47:f2:e8:88:2f:27:41:07:d5:8e:4f:59:fa: d7:8f:92:a2:3e:cd:ce:ea:f0:db:ec:54:12:35:e8:b8:0c:71: ad:1a:b3:85:04:41:c1:1d:52:a2:1c:f4:17:71:cf:a5:9d:77: 95:4d:b5:be:97:cb:e7:1f:df:5e:b1:dc:c2:3c:6f:5a:b5:bf: 09:9a:f9:a3:d3:78:50:ec:78:f3:bc:18:1e:40:a9:2e:a9:6f: b0:2b:4e:0b:35:da:c7:8d:53:fa:8e:7f:3e:9c:c0:12:bb:98: a3:3b:c0:a2:ef:db:32:64:36:45:61:c6:53:99:93:ee:c2:8c: be:35:b0:7d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfeyGppmEFPMCTRIFx6rZEsSC/WswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYxMDE1MDMxMDQxWhcNMjcwMTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0YjMwZDE1MzAyOThmZDAzZDkzNjlhNWQxZTFiOTk5ZDVm MTZkYmNkOWZlM2NhZmUzYTEyMGZkNDlkMzNhZDhkMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDk43MAbQco1ZiUNxr4D2vVsRizpIH8uzB+C4zCpFuKdBvz dGnP08SfFXWgpsGgTsdNTh0m/rPg7FFxJScVHc28qnH/KAEHcMiMnKxVjJId3f7R r6YSI1YnyKVHyDJqJC7mCoZJ05ekxg3p3H96GC1wXzAqauobnjwQH30LLvddBz7W GbfLLeHJ2y5i1Vbhlq/U6s5zXPW0GGbfLgt5YF2gfE6jKSkgZesTGm43GnSuf/8y +Ad0LWF9QYFJ8QZm1YDoEwS3zC7HZpbNqormfUZayEYC37WvqDldQob8kobDcMhE dFsZMUaVU/cXjzQWXHspI2HojiqqO0ewrtT5ItTHAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUngovwJ89tJL6UhGLzi/gw52F+PQwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2RiM2JiZmU4LTI3MTgtNDVlMS1hM2E1LWFmYmY1NzJkMDBjZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBQwDQYJKoZIhvcNAQELBQADggEBABHbZQ9YG+DAXPDcguQC2t7x gSyaRukBnl3z8W/aDLoEPwGAehKapLNWhmZk59IJs1RwvC1Q5U9OoekreY4ls3YJ gyyVsko9Bg+mBXsqBXCRAO4PLxPwadKjQ0JL/6cOXxmrNO9n32RrwV3XGVIQwQ/x koytyniU1vyFQffW/Oj02zJbR/LoiC8nQQfVjk9Z+tePkqI+zc7q8NvsVBI16LgM ca0as4UEQcEdUqIc9Bdxz6Wdd5VNtb6Xy+cf316x3MI8b1q1vwma+aPTeFDsePO8 GB5AqS6pb7ArTgs12seNU/qOfz6cwBK7mKM7wKLv2zJkNkVhxlOZk+7CjL41sH0= -----END CERTIFICATE-----Generated at Tue Nov 3 22:54:05 2026 by rpki-client