$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1204fd3b-3f96-4317-9dcb-ebef15964e7a.roa File: 1204fd3b-3f96-4317-9dcb-ebef15964e7a.roa (raw, json) Hash identifier: zZmMk84N7crYEEfSemp9jFcdN6ao334ceTD43N97rRU= Subject key identifier: FA:BE:13:A9:B8:BC:08:6B:8C:F1:28:93:41:83:9A:0E:7E:4C:E4:F0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3B9BF35B694E30D6FC653AA7C4274440F83ED407 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1204fd3b-3f96-4317-9dcb-ebef15964e7a.roa Signing time: Fri 23 Oct 2026 02:20:39 +0000 ROA not before: Fri 23 Oct 2026 02:20:39 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f32:c000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:9b:f3:5b:69:4e:30:d6:fc:65:3a:a7:c4:27:44:40:f8:3e:d4:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 23 02:20:39 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=4d51a53ccf4c507c04c99c2e6a244d886640fd39dcf92ce1de4a06fb4778b15d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:94:08:a6:55:f2:4e:8b:86:86:2e:35:81:00: 8b:90:5a:25:d4:55:fc:aa:23:1d:be:4e:97:5f:92: 02:f7:42:85:18:a9:bd:b2:b8:83:4a:71:ec:38:dc: 58:9f:20:34:11:d9:26:4c:9c:08:d1:5c:e7:1b:8c: 3a:92:0e:5b:72:7c:c7:b9:0a:9f:e8:8f:ca:97:3d: 2d:66:a1:8c:49:fc:51:0a:e0:0b:f4:13:04:42:4a: 46:e0:3a:f0:6b:15:bc:fd:8b:11:6a:82:29:4d:7b: d1:e4:fb:b0:44:b1:d1:c0:0f:f9:07:7e:b9:f6:46: e1:39:ae:9a:6a:3a:ed:7a:77:8c:95:ed:29:4a:a7: b6:2b:90:ef:2a:7e:69:b2:a9:6e:99:5b:98:f2:2f: b8:d4:47:a5:86:a4:ed:1a:8b:3a:bc:d3:62:ed:d9: be:6c:b8:3a:da:ca:7f:91:e0:3c:0e:7c:63:a0:e9: 08:43:f7:c2:1a:af:4a:1a:77:40:ee:04:06:8d:82: 18:7f:28:aa:a6:12:c7:86:11:19:4b:11:50:a7:9e: fb:94:08:32:ae:a0:ac:97:68:b1:89:b4:bb:64:79: 84:e8:86:e6:a8:eb:c0:14:05:86:60:9c:af:e8:5b: 71:a7:71:8c:b6:c1:b0:2f:8c:03:29:24:48:ef:97: 16:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:BE:13:A9:B8:BC:08:6B:8C:F1:28:93:41:83:9A:0E:7E:4C:E4:F0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1204fd3b-3f96-4317-9dcb-ebef15964e7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f32:c000::/40 Signature Algorithm: sha256WithRSAEncryption c0:09:47:5d:80:ac:71:8b:5b:68:08:44:2f:54:6f:38:27:d5: eb:5b:2e:1d:1d:10:06:2e:36:98:94:bf:53:6b:5b:a7:91:82: 4a:14:2c:2e:da:5b:4d:ce:c1:56:a2:73:c4:46:6e:06:14:09: b4:ec:37:19:5d:6d:c1:a4:91:dd:eb:53:26:c7:6e:a3:0a:af: cc:14:2a:e6:24:5d:e2:5c:8c:d2:cd:f0:41:73:03:b2:e9:f6: d0:aa:22:67:60:7e:99:55:bf:5a:9a:4a:02:99:3e:32:a3:ad: e4:13:aa:82:92:53:c8:49:92:5a:ec:f3:6e:0c:b6:83:25:82: 68:e5:e1:27:1b:30:9c:89:8c:b4:57:23:6a:e4:7d:a1:30:53: 26:09:fc:8f:2d:1e:26:a7:0c:08:c0:85:a4:6c:2b:38:75:de: 4d:1b:d8:ca:e6:49:10:1a:8c:67:69:62:a2:d5:9d:c5:2f:b5: b0:29:35:ac:80:85:21:00:3f:9c:00:f4:3b:c5:1c:18:47:89: 37:e1:38:b6:2e:58:94:c1:87:05:53:86:e9:7e:7c:a2:2b:9d: 7c:21:f7:7e:12:b0:04:e4:35:d7:47:d8:cf:04:63:35:86:d2: 06:5d:43:65:4a:a1:1c:e6:8d:42:66:17:a8:7b:fe:9a:52:64: d1:28:c2:d8 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUO5vzW2lOMNb8ZTqnxCdEQPg+1AcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDIyMDM5WhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZDUxYTUzY2NmNGM1MDdjMDRjOTljMmU2YTI0NGQ4ODY2 NDBmZDM5ZGNmOTJjZTFkZTRhMDZmYjQ3NzhiMTVkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDtlAimVfJOi4aGLjWBAIuQWiXUVfyqIx2+TpdfkgL3QoUY qb2yuINKcew43FifIDQR2SZMnAjRXOcbjDqSDltyfMe5Cp/oj8qXPS1moYxJ/FEK 4Av0EwRCSkbgOvBrFbz9ixFqgilNe9Hk+7BEsdHAD/kHfrn2RuE5rppqOu16d4yV 7SlKp7YrkO8qfmmyqW6ZW5jyL7jUR6WGpO0aizq802Lt2b5suDrayn+R4DwOfGOg 6QhD98Iar0oad0DuBAaNghh/KKqmEseGERlLEVCnnvuUCDKuoKyXaLGJtLtkeYTo huao68AUBYZgnK/oW3GncYy2wbAvjAMpJEjvlxYPAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU+r4Tqbi8CGuM8SiTQYOaDn5M5PAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzEyMDRmZDNiLTNmOTYtNDMxNy05ZGNiLWViZWYxNTk2NGU3YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB8ywDANBgkqhkiG9w0BAQsFAAOCAQEAwAlHXYCscYtbaAhEL1RvOCfV 61suHR0QBi42mJS/U2tbp5GCShQsLtpbTc7BVqJzxEZuBhQJtOw3GV1twaSR3etT JsduowqvzBQq5iRd4lyM0s3wQXMDsun20KoiZ2B+mVW/WppKApk+MqOt5BOqgpJT yEmSWuzzbgy2gyWCaOXhJxswnImMtFcjauR9oTBTJgn8jy0eJqcMCMCFpGwrOHXe TRvYyuZJEBqMZ2liotWdxS+1sCk1rICFIQA/nAD0O8UcGEeJN+E4ti5YlMGHBVOG 6X58oiudfCH3fhKwBOQ110fYzwRjNYbSBl1DZUqhHOaNQmYXqHv+mlJk0SjC2A== -----END CERTIFICATE-----Generated at Wed Nov 4 18:52:20 2026 by rpki-client