$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17c1973c-5b10-4069-96c7-34bdce6946da.roa File: 17c1973c-5b10-4069-96c7-34bdce6946da.roa (raw, json) Hash identifier: TfawcpUCxjQWimiGQDCRWTSciMkfCDQkM41Mo10aBvw= Subject key identifier: 3D:5F:4F:1F:54:03:F8:95:74:02:3B:71:B9:2C:FA:68:79:3E:8C:B3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 70FBDB64EE85FF4BD27062F64D04B8DF8971DED9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17c1973c-5b10-4069-96c7-34bdce6946da.roa Signing time: Thu 22 Oct 2026 01:30:14 +0000 ROA not before: Thu 22 Oct 2026 01:30:14 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:20c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:fb:db:64:ee:85:ff:4b:d2:70:62:f6:4d:04:b8:df:89:71:de:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 22 01:30:14 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=328e2c663bf52abebe30b4f6da28e84e935548e6f74f1dd129027f29262837df, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f0:62:af:53:03:34:4b:28:27:41:e6:91:30: 22:ec:ad:fc:a1:d9:cb:00:ef:3c:84:20:91:3e:5e: 77:18:fa:fd:f9:87:49:cb:1b:19:91:92:93:68:60: cd:8c:f7:5d:e5:04:52:f8:62:f9:93:33:6e:2d:6f: 3d:8b:67:2c:bc:24:75:c9:69:d0:1c:9f:71:5c:47: bb:9d:a9:3d:09:b8:1a:ce:b0:f2:75:3e:92:36:95: b9:61:f6:57:b5:40:6f:01:f8:e9:9e:99:3b:c0:83: ab:16:61:c1:42:21:e0:55:77:5c:ae:20:6d:63:70: 85:ca:9f:c3:88:de:0c:2c:11:28:02:f0:c3:b4:d7: 95:6c:af:fb:f4:41:e4:08:27:7e:de:9a:da:7b:4e: 74:94:ba:a3:77:58:29:9b:d3:d7:bb:14:df:57:ca: 28:9e:51:8f:c5:8a:87:1c:34:b4:e1:f3:4e:56:d1: 6b:ec:d2:37:d9:ae:44:b9:ff:54:f3:31:74:6b:33: 6a:b6:39:3e:47:75:3e:59:36:3a:3a:57:25:54:87: 5f:0f:47:5f:1f:85:4a:11:22:97:7d:04:6a:3a:b9: f6:07:1e:ca:be:f3:52:e3:4b:bd:ae:b4:ab:75:05: 4c:dc:90:14:c1:19:24:f3:7e:1d:cc:af:e3:10:be: dd:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:5F:4F:1F:54:03:F8:95:74:02:3B:71:B9:2C:FA:68:79:3E:8C:B3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17c1973c-5b10-4069-96c7-34bdce6946da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:20c0::/48 Signature Algorithm: sha256WithRSAEncryption ac:36:03:02:0d:73:6c:e9:ab:a7:c2:24:3e:b9:bd:54:d5:ec: 69:c6:31:07:92:8e:0f:c1:a9:7d:07:67:88:15:66:62:5d:9e: ef:72:d5:3e:c7:d4:22:10:af:79:65:0f:42:3d:67:da:01:b5: 49:58:ed:d3:ef:21:00:f0:7f:39:fc:fc:cf:46:f1:d7:62:32: 89:1d:ff:9e:76:98:aa:7a:1f:41:66:30:c4:31:0b:3c:05:4b: 42:93:ae:6b:1c:12:60:77:d3:31:04:90:3a:58:96:49:02:9a: 79:b0:96:23:12:2e:dd:a1:64:ad:95:49:54:ef:6a:2e:9e:b1: d0:3d:9c:15:bb:f1:2f:cb:83:9c:8a:5d:a3:a1:48:11:47:26: 0b:a8:ca:2c:b6:8c:46:f4:3b:aa:96:d5:a8:07:c7:51:1e:4c: 1a:31:0f:a0:7d:f6:ae:30:45:61:b5:7c:d5:a2:82:fe:c2:db: 90:80:73:17:13:a5:37:b9:e5:91:f7:2c:6a:f3:47:ff:d4:b7: 3d:a7:14:da:65:e9:9b:cb:10:9f:8b:51:40:84:86:46:f7:cd: 65:6d:28:6e:1a:17:9a:7b:4e:5b:30:ef:09:73:ab:01:ae:9a: 32:49:af:96:ec:3d:34:a5:87:6b:58:23:54:a5:b1:56:67:cf: 49:47:5e:50 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcPvbZO6F/0vScGL2TQS434lx3tkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIyMDEzMDE0WhcNMjcwMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMjhlMmM2NjNiZjUyYWJlYmUzMGI0ZjZkYTI4ZTg0ZTkz NTU0OGU2Zjc0ZjFkZDEyOTAyN2YyOTI2MjgzN2RmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDV8GKvUwM0SygnQeaRMCLsrfyh2csA7zyEIJE+XncY+v35 h0nLGxmRkpNoYM2M913lBFL4YvmTM24tbz2LZyy8JHXJadAcn3FcR7udqT0JuBrO sPJ1PpI2lblh9le1QG8B+OmemTvAg6sWYcFCIeBVd1yuIG1jcIXKn8OI3gwsESgC 8MO015Vsr/v0QeQIJ37emtp7TnSUuqN3WCmb09e7FN9XyiieUY/FioccNLTh805W 0Wvs0jfZrkS5/1TzMXRrM2q2OT5HdT5ZNjo6VyVUh18PR18fhUoRIpd9BGo6ufYH Hsq+81LjS72utKt1BUzckBTBGSTzfh3Mr+MQvt2pAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUPV9PH1QD+JV0AjtxuSz6aHk+jLMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE3YzE5NzNjLTViMTAtNDA2OS05NmM3LTM0YmRjZTY5NDZkYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//IMAwDQYJKoZIhvcNAQELBQADggEBAKw2AwINc2zpq6fCJD65vVTV 7GnGMQeSjg/BqX0HZ4gVZmJdnu9y1T7H1CIQr3llD0I9Z9oBtUlY7dPvIQDwfzn8 /M9G8ddiMokd/552mKp6H0FmMMQxCzwFS0KTrmscEmB30zEEkDpYlkkCmnmwliMS Lt2hZK2VSVTvai6esdA9nBW78S/Lg5yKXaOhSBFHJguoyiy2jEb0O6qW1agHx1Ee TBoxD6B99q4wRWG1fNWigv7C25CAcxcTpTe55ZH3LGrzR//Utz2nFNpl6ZvLEJ+L UUCEhkb3zWVtKG4aF5p7Tlsw7wlzqwGumjJJr5bsPTSlh2tYI1SlsVZnz0lHXlA= -----END CERTIFICATE-----Generated at Wed Nov 4 10:20:43 2026 by rpki-client