$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00cae676-7b3b-4fba-9c48-be691e86b9c8.roa File: 00cae676-7b3b-4fba-9c48-be691e86b9c8.roa (raw, json) Hash identifier: Ox5GUyUm15Dsk36UjIULA2e/0NLvV+c4ZP9s3j4bVf8= Subject key identifier: D7:FD:A1:58:DB:F4:CD:EE:A4:4C:7B:DF:E9:D7:9F:D5:66:CE:E3:D7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7095ADA22AABDFC206319CF090F342D19A1DFAEE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00cae676-7b3b-4fba-9c48-be691e86b9c8.roa Signing time: Thu 22 Oct 2026 01:11:06 +0000 ROA not before: Thu 22 Oct 2026 01:11:06 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:a480::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:95:ad:a2:2a:ab:df:c2:06:31:9c:f0:90:f3:42:d1:9a:1d:fa:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 22 01:11:06 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=0e5114c1d025b3d177f911886b63db3ecd48b01f42f669210b28e973c2207303, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fa:47:bf:d5:04:19:78:8c:af:d5:26:07:a4: d0:9d:89:f6:eb:8b:bb:ef:cc:30:87:db:9c:0a:bb: de:83:aa:fc:c5:4a:3c:78:95:d9:1d:f6:e6:8b:eb: 5e:84:4f:5c:d7:ca:d4:52:39:47:9d:b2:86:d5:d5: 75:19:39:34:2a:ee:9f:50:89:2b:87:e2:b1:e4:ca: 74:3f:35:65:7e:48:73:0c:18:80:43:15:c7:93:d3: 5c:9d:c1:4c:6d:97:8f:5f:da:af:ab:00:64:44:16: df:27:84:9f:07:57:60:15:7a:4c:34:28:0a:0e:ec: 3a:95:54:5f:b0:9a:e6:24:d3:41:f1:82:3c:d5:df: 98:1d:34:41:de:e2:b4:45:9e:8d:c3:94:22:14:0d: 36:6b:03:c5:40:2d:27:67:82:54:03:2d:79:99:8d: 61:d9:3e:47:5f:f9:4c:c4:6f:3d:31:2a:51:2d:df: 3f:24:e6:e3:a9:ba:8c:13:00:9d:6e:ce:61:ff:ff: 3f:77:2a:42:43:f0:90:b5:d8:e8:40:93:02:7b:90: d8:47:48:a3:e0:4d:50:84:81:85:96:80:13:4e:af: 55:b4:76:ff:95:14:dc:01:0d:b9:c5:97:54:84:4c: 27:9b:51:3f:5d:5b:d8:22:8c:f2:f1:cb:59:58:c8: 69:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:FD:A1:58:DB:F4:CD:EE:A4:4C:7B:DF:E9:D7:9F:D5:66:CE:E3:D7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00cae676-7b3b-4fba-9c48-be691e86b9c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:a480::/48 Signature Algorithm: sha256WithRSAEncryption 07:fc:ea:94:67:6f:f9:d0:84:9e:f0:f4:42:15:24:8e:42:07: ef:17:88:38:0d:53:09:fa:d2:f6:6d:2c:ba:bd:69:07:4d:d6: 61:8a:51:da:1e:c1:62:7f:dc:0c:26:c4:46:95:48:07:c5:2b: 66:5c:b2:8d:01:f5:65:3b:d2:47:2f:7b:4f:9d:75:5b:8f:27: 57:1e:62:94:ff:4c:ca:32:70:a1:3f:12:52:df:73:b5:cc:84: c1:e4:cc:f4:ff:6f:1f:f2:52:2f:69:21:09:65:3c:b6:c2:ce: d3:76:a1:52:99:ec:56:c7:dc:98:f7:3f:60:55:d5:19:47:3b: e0:a1:02:77:17:e9:a8:fb:24:cb:c3:6a:9f:55:ea:d0:81:f1: eb:b0:bd:5b:67:f5:4e:7a:1a:6c:23:2f:9a:e7:c5:30:05:9d: ff:68:b0:28:4c:67:7a:fd:f1:80:98:50:55:8a:00:9c:37:cc: 23:de:e5:f5:89:07:25:a6:2e:72:1e:aa:46:e7:de:df:7a:d8: 66:19:a7:98:1c:30:da:79:53:22:04:7d:e0:61:c4:fa:b4:14: d3:bf:ad:d7:c8:95:c0:f6:49:f5:4b:a1:b2:69:ba:a5:9a:b0: f4:b0:3c:14:12:a2:15:6e:5b:86:4b:2a:cf:5d:a0:6d:a0:ee: 08:22:82:90 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcJWtoiqr38IGMZzwkPNC0Zod+u4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIyMDExMTA2WhcNMjcwMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZTUxMTRjMWQwMjViM2QxNzdmOTExODg2YjYzZGIzZWNk NDhiMDFmNDJmNjY5MjEwYjI4ZTk3M2MyMjA3MzAzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6+ke/1QQZeIyv1SYHpNCdifbri7vvzDCH25wKu96DqvzF Sjx4ldkd9uaL616ET1zXytRSOUedsobV1XUZOTQq7p9QiSuH4rHkynQ/NWV+SHMM GIBDFceT01ydwUxtl49f2q+rAGREFt8nhJ8HV2AVekw0KAoO7DqVVF+wmuYk00Hx gjzV35gdNEHe4rRFno3DlCIUDTZrA8VALSdnglQDLXmZjWHZPkdf+UzEbz0xKlEt 3z8k5uOpuowTAJ1uzmH//z93KkJD8JC12OhAkwJ7kNhHSKPgTVCEgYWWgBNOr1W0 dv+VFNwBDbnFl1SETCebUT9dW9gijPLxy1lYyGl3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU1/2hWNv0ze6kTHvf6def1WbO49cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAwY2FlNjc2LTdiM2ItNGZiYS05YzQ4LWJlNjkxZTg2YjljOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//pIAwDQYJKoZIhvcNAQELBQADggEBAAf86pRnb/nQhJ7w9EIVJI5C B+8XiDgNUwn60vZtLLq9aQdN1mGKUdoewWJ/3AwmxEaVSAfFK2Zcso0B9WU70kcv e0+ddVuPJ1ceYpT/TMoycKE/ElLfc7XMhMHkzPT/bx/yUi9pIQllPLbCztN2oVKZ 7FbH3Jj3P2BV1RlHO+ChAncX6aj7JMvDap9V6tCB8euwvVtn9U56GmwjL5rnxTAF nf9osChMZ3r98YCYUFWKAJw3zCPe5fWJByWmLnIeqkbn3t962GYZp5gcMNp5UyIE feBhxPq0FNO/rdfIlcD2SfVLobJpuqWasPSwPBQSohVuW4ZLKs9doG2g7ggigpA= -----END CERTIFICATE-----Generated at Mon Nov 2 16:44:37 2026 by rpki-client