$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15aa6352-348a-401d-8e39-36d727c951f2.roa File: 15aa6352-348a-401d-8e39-36d727c951f2.roa (raw, json) Hash identifier: 7iw8LttDogqDQfZX8f9jUmG7IGsl4nMAV6+e32nUD8Q= Subject key identifier: 31:3C:46:D1:FC:1D:0D:0F:AD:6C:12:57:3F:87:EA:B7:BF:9E:A6:5E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5A51871E54F76243978332E54094A4B12271E687 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15aa6352-348a-401d-8e39-36d727c951f2.roa Signing time: Mon 26 Oct 2026 00:31:35 +0000 ROA not before: Mon 26 Oct 2026 00:31:35 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fef:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:51:87:1e:54:f7:62:43:97:83:32:e5:40:94:a4:b1:22:71:e6:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 26 00:31:35 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=eb34e09592dddeace9af99440f08a81da2f4712fe173dcb57d7077b3224c097f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:73:a4:f6:28:5a:d3:b5:ec:0a:14:98:0b:8b: 50:77:96:00:d2:3f:ee:14:d6:7c:5d:6f:7d:c1:65: 69:0f:09:65:9b:78:1e:e2:a0:43:f8:a3:7a:98:89: 10:38:7c:9c:23:2e:81:b3:29:e4:9b:d0:fa:c1:2d: 2a:81:d8:60:9b:15:cc:12:22:b7:c2:6c:b5:f5:25: a8:ac:9e:8d:df:fd:8e:34:d3:4e:2a:25:78:f8:ad: d5:27:86:de:af:2e:5f:4e:98:d1:10:a5:41:03:19: 98:0b:a9:99:a7:72:7c:a4:cb:3b:79:2e:4d:a3:2d: 81:e1:e3:7c:ee:82:21:fd:6f:a4:05:5d:7a:12:fa: c5:e4:5f:b1:0e:e0:cc:9e:b1:25:ea:b2:b6:2c:a9: 3d:b4:7a:31:39:98:fa:b3:fb:8b:b4:9e:92:8f:8b: 03:c5:4f:b1:ff:ab:38:27:c1:75:dd:80:75:df:5b: d9:b4:41:78:26:36:11:58:c8:f2:2c:c6:50:27:ed: d5:fc:05:32:90:1a:41:b2:64:ad:16:aa:1d:6d:02: 01:1c:fe:52:28:3f:a7:04:7a:02:8e:30:2f:6a:37: 4a:d1:b9:58:27:62:63:57:46:52:2c:b3:af:20:67: ba:eb:15:d3:45:34:ba:b4:6a:9f:8a:9e:7d:48:16: f8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:3C:46:D1:FC:1D:0D:0F:AD:6C:12:57:3F:87:EA:B7:BF:9E:A6:5E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15aa6352-348a-401d-8e39-36d727c951f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fef:1000::/40 Signature Algorithm: sha256WithRSAEncryption 66:d3:a7:7e:4b:2b:3b:40:9b:89:cd:d0:64:67:b3:3d:94:8e: ad:f3:bc:9f:bf:80:e8:03:17:83:95:9e:b9:90:0e:05:7e:c1: 8b:52:17:d3:38:7e:63:e3:76:9c:9d:34:8e:fd:5b:b3:44:61: 4b:ad:0f:20:b2:da:1c:70:b6:27:83:50:3e:3a:59:0e:e8:fd: 40:2b:b6:ed:0a:23:18:fb:73:4d:b0:e8:cd:49:28:1b:5f:aa: 31:a1:83:1b:86:ac:c0:0b:32:bd:c2:73:7e:86:c5:e0:35:72: d7:2e:cb:03:a5:16:b4:e6:d5:b4:05:bc:dd:e5:97:43:9a:dc: a3:1e:ec:04:fc:f4:1b:7e:55:ff:21:f4:40:91:54:82:d8:88: 19:10:15:a2:61:6d:e4:3e:5c:07:a4:ba:84:c2:18:8d:b4:5b: 40:79:cc:a4:e1:63:7f:15:26:c3:68:9b:e6:e8:36:73:94:90: 2b:29:97:c8:e3:38:1a:af:13:69:2e:7f:ee:9f:9d:8f:e8:97: da:65:94:7d:d2:02:d7:fc:0b:21:6b:a7:2c:76:16:64:a3:29: 7f:15:20:bd:f5:c9:45:1e:9f:44:15:82:7d:63:b6:f7:95:1f: e0:4a:20:e5:c0:0f:eb:91:72:32:ba:b2:59:53:cb:67:bf:e5: ed:8e:ac:88 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUWlGHHlT3YkOXgzLlQJSksSJx5ocwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI2MDAzMTM1WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlYjM0ZTA5NTkyZGRkZWFjZTlhZjk5NDQwZjA4YTgxZGEy ZjQ3MTJmZTE3M2RjYjU3ZDcwNzdiMzIyNGMwOTdmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCac6T2KFrTtewKFJgLi1B3lgDSP+4U1nxdb33BZWkPCWWb eB7ioEP4o3qYiRA4fJwjLoGzKeSb0PrBLSqB2GCbFcwSIrfCbLX1Jaisno3f/Y40 004qJXj4rdUnht6vLl9OmNEQpUEDGZgLqZmncnykyzt5Lk2jLYHh43zugiH9b6QF XXoS+sXkX7EO4MyesSXqsrYsqT20ejE5mPqz+4u0npKPiwPFT7H/qzgnwXXdgHXf W9m0QXgmNhFYyPIsxlAn7dX8BTKQGkGyZK0Wqh1tAgEc/lIoP6cEegKOMC9qN0rR uVgnYmNXRlIss68gZ7rrFdNFNLq0ap+Knn1IFviTAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUMTxG0fwdDQ+tbBJXP4fqt7+epl4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE1YWE2MzUyLTM0OGEtNDAxZC04ZTM5LTM2ZDcyN2M5NTFmMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/vEDANBgkqhkiG9w0BAQsFAAOCAQEAZtOnfksrO0Cbic3QZGezPZSO rfO8n7+A6AMXg5WeuZAOBX7Bi1IX0zh+Y+N2nJ00jv1bs0RhS60PILLaHHC2J4NQ PjpZDuj9QCu27QojGPtzTbDozUkoG1+qMaGDG4aswAsyvcJzfobF4DVy1y7LA6UW tObVtAW83eWXQ5rcox7sBPz0G35V/yH0QJFUgtiIGRAVomFt5D5cB6S6hMIYjbRb QHnMpOFjfxUmw2ib5ug2c5SQKymXyOM4Gq8TaS5/7p+dj+iX2mWUfdIC1/wLIWun LHYWZKMpfxUgvfXJRR6fRBWCfWO295Uf4Eog5cAP65FyMrqyWVPLZ7/l7Y6siA== -----END CERTIFICATE-----Generated at Thu Nov 5 01:23:26 2026 by rpki-client