$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f5342ecb-711b-446c-8167-0d2a93e65bea.roa File: f5342ecb-711b-446c-8167-0d2a93e65bea.roa (raw, json) Hash identifier: ulL8MdcPqe4NbD3bPf2LlKiMP0s3pOrmfcZzgc2RhGM= Subject key identifier: 74:3E:3C:4F:C3:4E:41:FF:93:73:A6:27:5D:CE:E8:B8:BA:4C:49:69 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 77443C74409888D9551434738521499EFA5D4DEF Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f5342ecb-711b-446c-8167-0d2a93e65bea.roa Signing time: Thu 15 Oct 2026 03:07:15 +0000 ROA not before: Thu 15 Oct 2026 03:07:15 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c18::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:44:3c:74:40:98:88:d9:55:14:34:73:85:21:49:9e:fa:5d:4d:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 15 03:07:15 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=204f60541726629bbad26e2e1335c1b216e57b68110c0e15cb3cfbfb83406acd, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3f:50:58:10:f1:7c:38:4b:33:47:39:a9:b7: bb:52:3d:4d:ea:1f:01:b4:4e:e9:14:f9:e1:c5:48: 51:c1:65:24:db:b6:32:c8:bb:1d:11:df:75:a3:38: c2:82:b4:ac:e5:5c:94:4e:81:3d:4b:1a:c9:12:18: 61:b0:d1:a1:a6:3b:7e:46:2d:12:60:0f:1b:17:1f: 92:42:d8:22:df:33:83:82:b2:8b:89:f8:d8:13:bb: 95:3e:31:87:7c:fd:46:20:c5:4b:d1:86:35:f4:2c: 50:bd:97:78:5e:24:c3:b1:81:4d:8b:85:ab:ef:92: 18:fb:a9:da:fd:6d:fb:07:44:f2:ec:50:95:d9:53: b4:f2:cb:f5:53:a0:85:47:49:8a:2b:72:94:78:a8: 80:bf:b7:f8:9c:3d:85:83:dd:15:d6:8a:67:14:f6: 16:6d:27:8f:f7:15:23:4a:ab:c6:4b:89:e3:6b:6c: b5:75:79:b9:39:0e:5a:34:b9:3e:d4:16:a0:a4:0e: 52:11:0d:ef:35:72:40:4b:89:fc:07:35:f4:1c:69: 29:78:cc:4f:c1:17:49:7d:68:db:02:b1:e5:af:5d: 06:23:ae:98:33:96:e2:b9:5f:f1:e5:05:e1:26:43: be:d6:02:92:dd:d5:ac:ca:6b:3f:a5:0e:f3:ba:87: be:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:3E:3C:4F:C3:4E:41:FF:93:73:A6:27:5D:CE:E8:B8:BA:4C:49:69 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f5342ecb-711b-446c-8167-0d2a93e65bea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c18::/48 Signature Algorithm: sha256WithRSAEncryption 61:9a:39:7e:b6:8c:02:e4:da:ee:59:1d:c4:ec:bc:20:bb:64: 9f:44:5c:11:df:f7:9a:0f:fd:76:e1:8f:74:a9:f1:92:be:ca: 29:c6:b3:34:69:54:6b:7d:5c:81:a7:63:09:a5:6c:13:f1:d2: 6f:95:b1:60:2d:12:1e:41:96:ff:2c:96:93:64:7c:ad:f1:44: 78:bf:28:a6:e1:38:4d:05:50:c9:b2:7d:11:48:5f:bc:40:c5: 86:82:4f:2c:4a:08:0a:ca:58:18:40:49:e4:10:e5:76:b4:82: 09:2a:e3:71:7e:45:fd:fd:79:3b:6c:3c:61:e2:b0:67:ef:33: e3:ce:47:a7:82:d5:05:03:25:a4:6d:4e:53:d2:65:9d:a6:f6: ae:43:0f:d4:d6:77:89:bb:30:59:24:3e:55:22:df:5c:04:f3: 6d:c2:9b:a6:ca:dc:45:b6:a6:23:b4:94:33:dc:9b:47:f8:d4: 18:ea:0e:a5:42:75:47:08:4e:22:61:de:aa:01:5f:dc:f4:7b: c5:ac:22:7d:3a:d8:0a:34:2a:ba:fd:dd:92:fd:78:1e:9e:64: f8:ca:44:6d:40:9a:da:a2:d1:1c:c6:b6:92:2e:e1:4d:ed:03: 6b:c4:79:d0:b3:50:56:5e:ca:e5:69:60:1b:25:5c:06:1b:c9: e1:87:6a:31 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUd0Q8dECYiNlVFDRzhSFJnvpdTe8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYxMDE1MDMwNzE1WhcNMjcwMTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMDRmNjA1NDE3MjY2MjliYmFkMjZlMmUxMzM1YzFiMjE2 ZTU3YjY4MTEwYzBlMTVjYjNjZmJmYjgzNDA2YWNkMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYP1BYEPF8OEszRzmpt7tSPU3qHwG0TukU+eHFSFHBZSTb tjLIux0R33WjOMKCtKzlXJROgT1LGskSGGGw0aGmO35GLRJgDxsXH5JC2CLfM4OC souJ+NgTu5U+MYd8/UYgxUvRhjX0LFC9l3heJMOxgU2Lhavvkhj7qdr9bfsHRPLs UJXZU7Tyy/VToIVHSYorcpR4qIC/t/icPYWD3RXWimcU9hZtJ4/3FSNKq8ZLieNr bLV1ebk5Dlo0uT7UFqCkDlIRDe81ckBLifwHNfQcaSl4zE/BF0l9aNsCseWvXQYj rpgzluK5X/HlBeEmQ77WApLd1azKaz+lDvO6h77DAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUdD48T8NOQf+Tc6YnXc7ouLpMSWkwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2Y1MzQyZWNiLTcxMWItNDQ2Yy04MTY3LTBkMmE5M2U2NWJlYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBgwDQYJKoZIhvcNAQELBQADggEBAGGaOX62jALk2u5ZHcTsvCC7 ZJ9EXBHf95oP/Xbhj3Sp8ZK+yinGszRpVGt9XIGnYwmlbBPx0m+VsWAtEh5Blv8s lpNkfK3xRHi/KKbhOE0FUMmyfRFIX7xAxYaCTyxKCArKWBhASeQQ5Xa0ggkq43F+ Rf39eTtsPGHisGfvM+POR6eC1QUDJaRtTlPSZZ2m9q5DD9TWd4m7MFkkPlUi31wE 823Cm6bK3EW2piO0lDPcm0f41BjqDqVCdUcITiJh3qoBX9z0e8WsIn062Ao0Krr9 3ZL9eB6eZPjKRG1Amtqi0RzGtpIu4U3tA2vEedCzUFZeyuVpYBslXAYbyeGHajE= -----END CERTIFICATE-----Generated at Tue Nov 3 22:53:47 2026 by rpki-client