$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05df2a26-ba8a-4f23-818b-e03f3af060b8.roa File: 05df2a26-ba8a-4f23-818b-e03f3af060b8.roa (raw, json) Hash identifier: GQBFjRh79rxXninjyiN/Huk968gW4g9zdkyNtMwhVjQ= Subject key identifier: 1D:7A:48:36:3E:6E:0C:AC:53:64:F5:E8:0C:40:B8:6C:AC:32:69:6F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4EBFB518501E167B8AD6347826C96CC8164025 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05df2a26-ba8a-4f23-818b-e03f3af060b8.roa Signing time: Fri 23 Oct 2026 01:50:40 +0000 ROA not before: Fri 23 Oct 2026 01:50:40 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff2:3400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:bf:b5:18:50:1e:16:7b:8a:d6:34:78:26:c9:6c:c8:16:40:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 23 01:50:40 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=8e266d9ec3d9f075a9f42284d3fbc6994adda440e4b4857b9036946c8a3b247c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:29:a5:e1:96:90:aa:d1:5c:f3:ce:54:bc:74: 8d:ce:36:0a:1f:0b:de:e0:a1:aa:4b:90:5e:98:f0: 04:fc:81:ab:ee:d5:b7:f7:25:61:e8:29:6d:2a:52: 74:59:88:d8:e2:58:9e:21:97:cb:18:33:74:d1:c1: aa:c3:8a:33:bd:d1:d9:a2:25:8c:25:60:f9:51:4f: 46:61:b1:ae:54:d4:a5:6a:36:93:67:f8:1d:f7:35: 65:60:d9:a4:75:d4:ae:1e:9c:0d:14:44:9c:2e:9a: 6b:bc:12:61:88:00:47:67:56:56:dd:fd:fc:c2:37: 60:fc:2c:57:cf:07:d6:7f:c9:a9:91:49:9a:50:bb: 95:06:ca:ea:1a:3c:bc:a9:b1:1a:3c:ef:21:ea:8c: ca:27:1b:c0:ca:a1:5b:82:c9:9e:4c:ad:22:2b:c3: 40:09:08:b8:8a:6b:ae:f7:de:0e:54:23:99:84:5a: 74:01:e0:50:8a:f1:5b:d9:3e:13:04:05:03:1e:61: 6e:e9:1c:d3:99:1e:b8:61:11:7c:f9:d3:de:a5:a7: a9:fb:21:a8:9d:2b:53:c0:48:87:01:34:a9:61:53: b3:28:8c:61:b1:02:3e:96:35:e4:ad:47:3e:86:97: d4:8a:24:e6:21:de:03:83:20:ec:ac:37:39:5f:18: 45:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:7A:48:36:3E:6E:0C:AC:53:64:F5:E8:0C:40:B8:6C:AC:32:69:6F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/05df2a26-ba8a-4f23-818b-e03f3af060b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff2:3400::/40 Signature Algorithm: sha256WithRSAEncryption 3d:51:11:c6:d7:99:ed:4d:09:b7:c9:b7:59:73:66:e4:b9:3a: b0:07:db:23:49:b0:06:66:2e:e7:18:32:a8:e2:03:c8:df:86: e2:fb:8d:ab:c0:1b:d4:4f:e6:ca:46:ed:59:23:8b:e0:af:4c: 41:de:27:78:d8:07:e3:ff:97:62:59:f9:5a:8c:d5:ee:d5:07: 5b:87:45:e0:6d:70:21:bb:91:24:ab:03:1a:72:8c:0a:48:bf: 82:b2:65:0f:1c:6f:32:5b:6d:f0:7a:f4:35:5b:7b:ab:08:ad: 17:d8:e8:26:e7:4b:60:ad:a6:d3:34:a1:ef:e4:fe:f7:88:a0: 2f:9d:e3:23:24:71:35:70:17:40:b6:da:a9:01:d6:52:44:cc: d4:70:de:bf:6a:4b:16:7d:fd:53:86:f2:82:66:07:c1:d6:7b: cb:60:bf:47:e8:65:8d:6a:1b:89:f2:e2:27:f9:2c:43:6c:5e: ac:cb:fc:5e:54:d2:b1:6d:12:14:c5:07:6a:d3:0b:46:b4:47: f7:24:7c:8d:c8:76:de:a4:7c:58:4f:9f:0c:88:36:0c:ab:52: a4:96:39:fa:bc:9a:99:8c:b6:00:07:69:98:0a:27:e5:da:ee: e9:4a:b0:09:67:7a:c5:5a:ee:ae:9a:d4:73:62:ca:71:b3:c9: 83:1a:2a:ac -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgITTr+1GFAeFnuK1jR4JslsyBZAJTANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNjEwMjMwMTUwNDBaFw0yNzAxMjEyMzU5NTla MHoxSTBHBgNVBAUTQDhlMjY2ZDllYzNkOWYwNzVhOWY0MjI4NGQzZmJjNjk5NGFk ZGE0NDBlNGI0ODU3YjkwMzY5NDZjOGEzYjI0N2MxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAJwppeGWkKrRXPPOVLx0jc42Ch8L3uChqkuQXpjwBPyBq+7V t/clYegpbSpSdFmI2OJYniGXyxgzdNHBqsOKM73R2aIljCVg+VFPRmGxrlTUpWo2 k2f4Hfc1ZWDZpHXUrh6cDRREnC6aa7wSYYgAR2dWVt39/MI3YPwsV88H1n/JqZFJ mlC7lQbK6ho8vKmxGjzvIeqMyicbwMqhW4LJnkytIivDQAkIuIprrvfeDlQjmYRa dAHgUIrxW9k+EwQFAx5hbukc05keuGERfPnT3qWnqfshqJ0rU8BIhwE0qWFTsyiM YbECPpY15K1HPoaX1Iok5iHeA4Mg7Kw3OV8YRfcCAwEAAaOCArMwggKvMB0GA1Ud DgQWBBQdekg2Pm4MrFNk9egMQLhsrDJpbzAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvMDVkZjJhMjYtYmE4YS00ZjIzLTgxOGItZTAzZjNhZjA2MGI4LnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw CAMGACYAH/I0MA0GCSqGSIb3DQEBCwUAA4IBAQA9URHG15ntTQm3ybdZc2bkuTqw B9sjSbAGZi7nGDKo4gPI34bi+42rwBvUT+bKRu1ZI4vgr0xB3id42Afj/5diWfla jNXu1Qdbh0XgbXAhu5EkqwMacowKSL+CsmUPHG8yW23wevQ1W3urCK0X2Ogm50tg rabTNKHv5P73iKAvneMjJHE1cBdAttqpAdZSRMzUcN6/aksWff1ThvKCZgfB1nvL YL9H6GWNahuJ8uIn+SxDbF6sy/xeVNKxbRIUxQdq0wtGtEf3JHyNyHbepHxYT58M iDYMq1Kkljn6vJqZjLYAB2mYCifl2u7pSrAJZ3rFWu6umtRzYspxs8mDGiqs -----END CERTIFICATE-----Generated at Wed Nov 4 18:49:43 2026 by rpki-client