$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/067db7a0-98da-4f57-9f73-acefae7c5ebb.roa File: 067db7a0-98da-4f57-9f73-acefae7c5ebb.roa (raw, json) Hash identifier: 5EZwMyQTHEsk8B+nzXKl5GU+hxdsU/t4fs+Z6pJmS64= Subject key identifier: DB:24:69:E7:41:4A:5D:EF:B4:C0:BD:9E:8B:FE:FD:B6:76:01:F0:B4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3A5D5E25628B76850990F36EF30E48C22629463B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/067db7a0-98da-4f57-9f73-acefae7c5ebb.roa Signing time: Fri 23 Oct 2026 01:02:24 +0000 ROA not before: Fri 23 Oct 2026 01:02:24 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff6:8000::/39 maxlen: 39 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:5d:5e:25:62:8b:76:85:09:90:f3:6e:f3:0e:48:c2:26:29:46:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 23 01:02:24 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=15432c36cd90f9d9ae8d763b8278b9a49b40756535e85ce5530c4dec9c2def27, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0f:6e:f1:83:70:17:34:39:75:2d:fb:b3:66: 67:88:22:b6:01:7e:14:c0:a0:4f:1b:d8:37:79:7e: fd:55:ff:77:30:f3:9e:db:62:6b:58:8e:7a:75:14: e4:e7:b8:a4:b5:d5:5e:95:80:97:e3:8c:95:b4:3c: 02:af:3e:1a:35:fe:11:75:5b:00:1e:23:03:70:2d: 20:d6:4c:b8:af:1a:72:bc:f3:a8:67:67:bf:db:8b: fa:36:26:ca:f2:a6:cc:31:66:60:f5:3a:6a:cc:7a: e2:2b:95:b8:61:dc:b0:63:31:af:f2:22:9d:f4:1a: f0:df:ae:1d:b3:fc:43:8d:e0:3e:b2:13:a1:8a:67: 04:e7:cd:95:c7:fb:7c:a6:a9:f7:cb:84:13:8a:37: 21:35:1c:51:66:56:30:e1:b2:57:f6:33:85:09:15: 7e:0d:c0:c0:e0:dc:17:03:01:3f:7f:89:8a:0d:9b: 08:75:26:e8:a5:13:37:d8:42:79:d8:80:ba:3c:6f: 0b:5c:ce:15:61:a3:87:8c:52:e6:20:f6:33:e0:f1: 65:7b:87:5d:83:37:c3:99:7b:03:e6:a8:53:b5:90: 02:95:07:ef:56:df:ad:75:1d:75:c8:9d:48:98:10: 3f:1f:44:8d:a6:44:e6:d6:b2:72:b9:6b:3f:be:49: 82:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:24:69:E7:41:4A:5D:EF:B4:C0:BD:9E:8B:FE:FD:B6:76:01:F0:B4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/067db7a0-98da-4f57-9f73-acefae7c5ebb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff6:8000::/39 Signature Algorithm: sha256WithRSAEncryption 5a:e6:4b:cf:b6:09:e0:99:c6:1c:02:aa:24:b0:76:70:52:d9: 65:ab:7e:4b:0d:b5:51:7d:48:47:3f:fa:6e:66:16:0d:df:55: 49:c1:14:81:75:ec:74:f3:45:dd:98:6e:77:36:cf:b8:ea:4f: 99:1c:9a:39:03:9d:e6:e0:f6:3c:c1:bf:23:96:ca:95:cc:e3: 82:0d:17:94:55:6d:00:95:78:64:2a:f6:f0:3e:70:c9:88:f9: 98:07:d1:73:95:91:07:06:1c:c7:5f:8d:de:2f:6e:4e:29:07: 37:4c:f9:8e:61:fe:fa:e5:4a:0c:46:0a:25:ca:9c:ba:2d:2d: fe:11:38:f5:e5:0c:7f:37:f6:68:03:ca:5e:81:df:f0:54:5f: 2b:ba:bf:39:4d:20:2c:96:10:20:d1:79:d0:a6:64:1a:9b:af: 53:b6:a4:28:c6:a0:00:74:41:3e:21:40:25:33:a3:ea:03:b2: 16:b1:cd:8e:23:4c:fa:ac:5c:2d:02:28:de:3f:d2:d5:23:c5: f3:36:4a:b1:61:b1:72:8a:cd:57:da:6a:9f:d4:0b:46:d3:e3: 9f:b8:01:10:f9:d7:d4:57:e2:74:3a:89:16:bb:86:8f:60:aa: ec:a9:cc:e3:87:a8:60:2e:ce:1d:8b:b8:14:3b:cd:54:dd:7f: 38:84:53:95 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUOl1eJWKLdoUJkPNu8w5IwiYpRjswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDEwMjI0WhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNTQzMmMzNmNkOTBmOWQ5YWU4ZDc2M2I4Mjc4YjlhNDli NDA3NTY1MzVlODVjZTU1MzBjNGRlYzljMmRlZjI3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQD27xg3AXNDl1LfuzZmeIIrYBfhTAoE8b2Dd5fv1V/3cw 857bYmtYjnp1FOTnuKS11V6VgJfjjJW0PAKvPho1/hF1WwAeIwNwLSDWTLivGnK8 86hnZ7/bi/o2JsrypswxZmD1OmrMeuIrlbhh3LBjMa/yIp30GvDfrh2z/EON4D6y E6GKZwTnzZXH+3ymqffLhBOKNyE1HFFmVjDhslf2M4UJFX4NwMDg3BcDAT9/iYoN mwh1JuilEzfYQnnYgLo8bwtczhVho4eMUuYg9jPg8WV7h12DN8OZewPmqFO1kAKV B+9W3611HXXInUiYED8fRI2mRObWsnK5az++SYKXAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU2yRp50FKXe+0wL2ei/79tnYB8LQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA2N2RiN2EwLTk4ZGEtNGY1Ny05ZjczLWFjZWZhZTdjNWViYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB/2gDANBgkqhkiG9w0BAQsFAAOCAQEAWuZLz7YJ4JnGHAKqJLB2cFLZ Zat+Sw21UX1IRz/6bmYWDd9VScEUgXXsdPNF3ZhudzbPuOpPmRyaOQOd5uD2PMG/ I5bKlczjgg0XlFVtAJV4ZCr28D5wyYj5mAfRc5WRBwYcx1+N3i9uTikHN0z5jmH+ +uVKDEYKJcqcui0t/hE49eUMfzf2aAPKXoHf8FRfK7q/OU0gLJYQINF50KZkGpuv U7akKMagAHRBPiFAJTOj6gOyFrHNjiNM+qxcLQIo3j/S1SPF8zZKsWGxcorNV9pq n9QLRtPjn7gBEPnX1FfidDqJFruGj2Cq7KnM44eoYC7OHYu4FDvNVN1/OIRTlQ== -----END CERTIFICATE-----Generated at Mon Nov 2 19:20:18 2026 by rpki-client