$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ae50a7b-a250-412d-84b1-8621716125fa.roa File: 0ae50a7b-a250-412d-84b1-8621716125fa.roa (raw, json) Hash identifier: MK2/KlFPDMXfrWcCgaHfqgVPwrWHlHj/McHFTADY/Pw= Subject key identifier: 32:F9:FE:E9:9E:22:4F:6B:94:40:A8:4B:B6:7D:06:DC:FE:B0:EE:7D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 08CCA551A0ED6F65A6BFF83CF39D4A9F08D00893 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ae50a7b-a250-412d-84b1-8621716125fa.roa Signing time: Fri 09 Oct 2026 00:40:58 +0000 ROA not before: Fri 09 Oct 2026 00:40:58 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fea:8060::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:cc:a5:51:a0:ed:6f:65:a6:bf:f8:3c:f3:9d:4a:9f:08:d0:08:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 9 00:40:58 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=0147dad191c1a539b7ebaecd3f3768aa7b30410eb3e56dd2a674005716f65744, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e9:0b:0f:95:12:5b:7e:b7:47:a3:15:55:7f: f6:13:fe:d2:e8:05:65:45:60:e3:11:b4:bd:ee:c7: 60:98:91:93:7b:7e:da:c2:2f:ab:8e:73:00:18:d0: f1:95:e2:ab:78:82:d0:ef:77:50:6a:f9:32:62:e3: 83:a9:8a:34:2d:4e:08:92:b4:cb:6a:d4:b1:0a:f2: 1d:e0:26:37:97:cc:76:fc:90:b8:9b:b5:d4:22:fc: a8:77:76:12:a2:ac:bf:12:6d:6b:2c:fe:92:9c:59: 24:eb:d3:c8:52:b6:0b:24:99:a4:21:3f:30:e9:2a: 66:dc:cd:45:0b:d4:c7:fa:19:7f:01:0e:94:a9:5b: 89:4d:07:c6:5e:07:ed:8d:31:f1:e2:20:29:24:1c: b2:d2:c3:9a:be:6d:8d:1a:b1:2b:0c:f9:b8:e8:1d: 50:61:3f:5e:ff:4e:3b:ea:27:5a:8d:bf:5c:5b:87: 6e:c6:e7:41:e1:33:32:0d:90:4c:bf:0a:a8:88:f5: d7:fa:c2:0d:51:5b:4c:bb:6f:d0:d7:51:0f:1d:14: 74:cf:57:82:58:d8:c5:f5:e2:8d:53:58:e9:42:53: 94:17:d2:85:2c:ec:e7:c4:12:ba:3d:3b:3d:66:dc: eb:d7:59:2d:2c:8a:01:29:dc:81:55:2d:74:79:20: 71:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F9:FE:E9:9E:22:4F:6B:94:40:A8:4B:B6:7D:06:DC:FE:B0:EE:7D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ae50a7b-a250-412d-84b1-8621716125fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fea:8060::/48 Signature Algorithm: sha256WithRSAEncryption 7a:77:ed:c1:4c:bd:35:22:51:92:05:ba:3d:24:c8:9f:c5:98: d1:ab:8c:ef:73:e0:ba:e5:66:1c:f8:05:a0:1b:cc:cb:83:77: cd:7f:01:6e:63:cf:23:5b:ac:29:bc:bd:92:82:be:91:31:d7: 02:04:44:33:3f:11:71:61:91:6e:4a:a2:21:4d:09:45:bf:fe: fd:67:70:dc:79:9b:c6:f8:10:f7:82:c9:51:ac:6d:f6:8d:ef: 94:45:0f:5d:85:28:38:00:3b:85:7c:94:8d:b7:65:3e:8b:7b: 9d:5f:0c:1c:a1:cc:a9:3c:1f:17:de:65:19:84:9a:4e:fd:47: e9:70:95:65:9f:7d:47:16:63:d6:76:69:b7:84:00:08:51:a2: cb:ad:ac:50:ef:c8:a4:3f:d1:26:41:74:9b:d1:c9:fb:e2:8b: c6:ea:d3:f7:82:ee:68:9d:7d:9d:86:2b:81:80:bf:57:8d:47: 74:98:51:c6:c5:ab:02:3b:10:e9:cf:ae:9e:dc:58:ac:b1:c0: 4e:22:94:7c:e9:54:76:f6:39:78:fe:db:2e:48:bb:c2:a8:cf: cf:80:ab:98:e9:62:82:25:86:8c:9e:10:8b:e0:64:eb:e5:c1: 32:f9:7e:c8:03:ce:17:e0:8f:3e:34:1b:1e:d2:5b:05:b9:db: 97:4e:de:ac -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCMylUaDtb2Wmv/g8851KnwjQCJMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA5MDA0MDU4WhcNMjcwMTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMTQ3ZGFkMTkxYzFhNTM5YjdlYmFlY2QzZjM3NjhhYTdi MzA0MTBlYjNlNTZkZDJhNjc0MDA1NzE2ZjY1NzQ0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC46QsPlRJbfrdHoxVVf/YT/tLoBWVFYOMRtL3ux2CYkZN7 ftrCL6uOcwAY0PGV4qt4gtDvd1Bq+TJi44OpijQtTgiStMtq1LEK8h3gJjeXzHb8 kLibtdQi/Kh3dhKirL8SbWss/pKcWSTr08hStgskmaQhPzDpKmbczUUL1Mf6GX8B DpSpW4lNB8ZeB+2NMfHiICkkHLLSw5q+bY0asSsM+bjoHVBhP17/TjvqJ1qNv1xb h27G50HhMzINkEy/CqiI9df6wg1RW0y7b9DXUQ8dFHTPV4JY2MX14o1TWOlCU5QX 0oUs7OfEEro9Oz1m3OvXWS0sigEp3IFVLXR5IHGzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUMvn+6Z4iT2uUQKhLtn0G3P6w7n0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBhZTUwYTdiLWEyNTAtNDEyZC04NGIxLTg2MjE3MTYxMjVmYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/qgGAwDQYJKoZIhvcNAQELBQADggEBAHp37cFMvTUiUZIFuj0kyJ/F mNGrjO9z4LrlZhz4BaAbzMuDd81/AW5jzyNbrCm8vZKCvpEx1wIERDM/EXFhkW5K oiFNCUW//v1ncNx5m8b4EPeCyVGsbfaN75RFD12FKDgAO4V8lI23ZT6Le51fDByh zKk8HxfeZRmEmk79R+lwlWWffUcWY9Z2abeEAAhRosutrFDvyKQ/0SZBdJvRyfvi i8bq0/eC7midfZ2GK4GAv1eNR3SYUcbFqwI7EOnPrp7cWKyxwE4ilHzpVHb2OXj+ 2y5Iu8Koz8+Aq5jpYoIlhoyeEIvgZOvlwTL5fsgDzhfgjz40Gx7SWwW525dO3qw= -----END CERTIFICATE-----Generated at Sat Oct 31 12:07:16 2026 by rpki-client