$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a12ecf2-0a22-45c0-a0b1-06f01158cf0e.roa File: 0a12ecf2-0a22-45c0-a0b1-06f01158cf0e.roa (raw, json) Hash identifier: 94sHf3gJlSqntCA2AjU4DvgoqSq1oz4LmJaiLNS7YsQ= Subject key identifier: 77:78:FB:21:A4:3F:DB:5E:44:C3:18:33:45:A8:BB:3F:A4:6D:39:2D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2EABA040628F5B5B393D1FB83287A62CCD1CFB2E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a12ecf2-0a22-45c0-a0b1-06f01158cf0e.roa Signing time: Sun 18 Oct 2026 00:30:46 +0000 ROA not before: Sun 18 Oct 2026 00:30:46 +0000 ROA not after: Sat 16 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f01::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:ab:a0:40:62:8f:5b:5b:39:3d:1f:b8:32:87:a6:2c:cd:1c:fb:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 18 00:30:46 2026 GMT Not After : Jan 16 23:59:59 2027 GMT Subject: serialNumber=5ded288de596169e4f0e5280352cc1c10f24c50807085a88bb84ee45f3e595b9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:55:9d:9a:f2:f6:2e:f9:2b:e8:12:53:fd:17: 6a:d7:77:f0:34:b2:7f:e1:0b:dc:76:e6:7f:df:2e: fe:eb:23:70:61:8c:8c:56:a2:6f:31:c0:16:34:5f: 4e:91:5f:9a:1f:d3:0f:97:a3:b9:86:78:39:3a:fa: 51:8f:54:12:7c:b4:26:44:ac:b4:69:d2:57:1f:1c: 75:73:0d:48:ae:8e:88:bf:16:97:60:38:d0:59:72: cb:b2:33:dd:0b:6c:19:29:b8:77:91:9c:e2:ac:a4: f1:05:a0:04:a5:84:75:bc:90:d0:5c:71:7b:ea:ab: 1c:05:53:c7:02:85:af:6e:90:7b:11:b9:c1:bd:59: 13:01:22:93:d0:9f:92:b7:74:4d:b8:27:eb:30:29: 18:7c:46:00:b6:db:57:51:e4:82:ea:e4:42:84:3d: 86:9f:b6:40:64:b2:ea:84:88:0a:d6:da:74:b4:26: 6f:43:0e:d6:7a:0b:e2:a3:41:a8:3b:f9:15:53:fc: 4d:1d:e5:6d:66:79:e2:86:bb:de:f1:5b:8a:f4:95: 4c:49:7e:80:17:9b:1e:83:b1:c9:f9:33:79:47:cf: 82:21:95:00:4a:ce:23:d9:dd:3e:d6:21:4e:0b:6c: af:22:14:4f:66:9f:4b:28:5d:99:a3:40:b2:7d:c2: f1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:78:FB:21:A4:3F:DB:5E:44:C3:18:33:45:A8:BB:3F:A4:6D:39:2D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a12ecf2-0a22-45c0-a0b1-06f01158cf0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f01::/32 Signature Algorithm: sha256WithRSAEncryption c5:d9:2c:47:2a:ec:47:da:22:16:06:dc:d1:22:92:2b:17:26: 52:49:d1:08:fd:ed:78:ab:d0:14:b3:fe:2f:d5:ec:23:39:9b: b0:7e:46:03:1c:79:10:f7:bc:62:d0:8d:e4:7f:f6:5d:04:d9: ed:61:2a:e7:80:49:f0:0f:9b:1a:ec:90:52:19:f2:c0:6c:da: 4b:6e:e2:c0:01:d3:c6:bd:f4:f2:09:5a:18:42:ef:67:cb:82: c7:e2:62:c1:12:cc:5b:cd:bc:48:bc:6b:8a:b6:24:02:5a:fd: c0:51:7b:98:ed:ae:20:76:9f:38:56:cc:62:ff:4a:ca:1d:5c: c6:6f:4a:fa:7e:52:61:61:f2:aa:ae:cf:9a:42:7e:c1:be:d4: 6c:82:70:35:f7:93:8c:34:e7:40:ce:2b:2f:09:3c:7d:33:17: d8:b0:bf:39:fa:92:24:6c:a1:cb:8c:86:b2:8a:4c:eb:e9:66: e3:ce:5f:76:ab:8f:a3:65:75:6d:68:8e:85:82:6a:0f:84:80: 0f:48:a1:c8:a7:ad:c4:dd:a4:ea:23:45:57:07:55:ad:33:3d: dd:9a:08:9d:c6:10:63:ea:05:c5:7f:2f:e7:f4:6f:20:3f:b2: cf:0b:50:76:04:86:2e:de:30:35:0c:37:c8:cb:c2:32:3a:4a: e3:ff:19:f2 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIULqugQGKPW1s5PR+4MoemLM0c+y4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE4MDAzMDQ2WhcNMjcwMTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZGVkMjg4ZGU1OTYxNjllNGYwZTUyODAzNTJjYzFjMTBm MjRjNTA4MDcwODVhODhiYjg0ZWU0NWYzZTU5NWI5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnVZ2a8vYu+SvoElP9F2rXd/A0sn/hC9x25n/fLv7rI3Bh jIxWom8xwBY0X06RX5of0w+Xo7mGeDk6+lGPVBJ8tCZErLRp0lcfHHVzDUiujoi/ FpdgONBZcsuyM90LbBkpuHeRnOKspPEFoASlhHW8kNBccXvqqxwFU8cCha9ukHsR ucG9WRMBIpPQn5K3dE24J+swKRh8RgC221dR5ILq5EKEPYaftkBksuqEiArW2nS0 Jm9DDtZ6C+KjQag7+RVT/E0d5W1meeKGu97xW4r0lUxJfoAXmx6Dscn5M3lHz4Ih lQBKziPZ3T7WIU4LbK8iFE9mn0soXZmjQLJ9wvFNAgMBAAGjggKyMIICrjAdBgNV HQ4EFgQUd3j7IaQ/215EwxgzRai7P6RtOS0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBhMTJlY2YyLTBhMjItNDVjMC1hMGIxLTA2ZjAxMTU4Y2YwZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAmAB8BMA0GCSqGSIb3DQEBCwUAA4IBAQDF2SxHKuxH2iIWBtzRIpIrFyZS SdEI/e14q9AUs/4v1ewjOZuwfkYDHHkQ97xi0I3kf/ZdBNntYSrngEnwD5sa7JBS GfLAbNpLbuLAAdPGvfTyCVoYQu9ny4LH4mLBEsxbzbxIvGuKtiQCWv3AUXuY7a4g dp84Vsxi/0rKHVzGb0r6flJhYfKqrs+aQn7BvtRsgnA195OMNOdAzisvCTx9MxfY sL85+pIkbKHLjIayikzr6Wbjzl92q4+jZXVtaI6FgmoPhIAPSKHIp63E3aTqI0VX B1WtMz3dmgidxhBj6gXFfy/n9G8gP7LPC1B2BIYu3jA1DDfIy8IyOkrj/xny -----END CERTIFICATE-----Generated at Tue Nov 3 19:19:47 2026 by rpki-client