$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17deb4a0-b962-4061-9e77-fa3b8da2e437.roa File: 17deb4a0-b962-4061-9e77-fa3b8da2e437.roa (raw, json) Hash identifier: bYLA4Bw3dLZed49DjRK64RP630eFTkDcCmgNhzq2Wm0= Subject key identifier: F5:9B:72:C5:96:C4:41:A1:B5:8A:94:3E:26:DB:52:2C:14:16:72:C6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5CE5D1D95C39FFE66A076FCE74CA8C29856A1372 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17deb4a0-b962-4061-9e77-fa3b8da2e437.roa Signing time: Thu 29 Oct 2026 00:41:35 +0000 ROA not before: Thu 29 Oct 2026 00:41:35 +0000 ROA not after: Wed 27 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f38:840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:e5:d1:d9:5c:39:ff:e6:6a:07:6f:ce:74:ca:8c:29:85:6a:13:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 29 00:41:35 2026 GMT Not After : Jan 27 23:59:59 2027 GMT Subject: serialNumber=ee104b558b69ffce942e31346478e8b3d9bba2c6d108ed07de427f2db10082f1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:89:61:33:82:d4:9e:7c:05:ca:95:86:1d:7f: 61:9f:46:4e:82:0b:8c:d9:8c:69:03:56:c5:24:e5: 07:c0:31:1a:10:62:71:76:06:7c:1a:aa:71:c2:1d: 5b:4e:b9:d9:10:90:f6:aa:71:ca:68:c9:11:a2:39: 44:4a:4a:80:ad:da:21:20:78:01:30:17:6d:ca:42: 6d:68:0f:fb:2c:85:5d:2e:dd:f5:0e:a3:78:52:6b: 3e:db:19:b7:9a:b1:49:de:6b:b8:ef:e4:b8:fc:5b: 82:63:09:e5:92:b0:fd:53:d4:20:31:07:30:bc:87: f1:fd:a6:f4:85:6a:d2:49:0b:6f:f3:01:3c:e3:37: 97:a5:ac:bd:fa:21:0a:a7:36:49:36:02:8a:a7:4f: 27:60:5b:a5:cd:05:de:de:48:67:58:dc:90:56:30: a4:23:82:11:a6:b5:1a:4f:1f:a9:7c:9e:ae:a0:f4: 0c:ea:59:3d:a1:e5:b8:4c:49:a4:38:32:fa:c8:33: ed:cc:e0:bb:5f:ae:1f:8b:51:5f:27:eb:8d:a4:c5: 19:c5:37:14:fa:88:a5:cc:58:4d:3d:56:88:73:fc: b4:94:75:fd:76:86:79:10:5a:32:e1:34:4a:1b:a8: 33:7d:58:80:19:69:77:e8:2b:f1:64:e4:1b:44:b7: 53:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:9B:72:C5:96:C4:41:A1:B5:8A:94:3E:26:DB:52:2C:14:16:72:C6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17deb4a0-b962-4061-9e77-fa3b8da2e437.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f38:840::/48 Signature Algorithm: sha256WithRSAEncryption 5e:79:e2:68:4d:8a:7e:a8:38:89:24:e7:da:9c:bd:a0:89:51: 2a:93:6a:fb:57:42:32:91:29:c7:71:59:9b:f8:3a:e3:77:d5: aa:1c:ed:cf:4a:35:78:e7:9a:0c:5a:1d:ad:e4:af:29:e1:e6: ea:e2:a7:a1:37:dd:3f:db:41:25:3d:df:65:60:03:02:ab:04: 0b:ea:73:1b:74:0c:21:c1:15:46:2f:d5:af:35:97:b6:88:ad: 03:12:74:ee:14:bc:43:dd:8e:6f:a5:65:bf:80:ff:4f:e2:41: bf:47:aa:9d:cb:ee:bd:f2:e7:e8:74:e0:50:23:79:e0:db:16: 07:18:e1:21:17:00:94:fb:9c:e9:df:ba:c6:d8:e1:cb:fe:73: 16:e8:29:d0:38:ff:a5:94:f0:97:c1:93:88:c7:cc:1d:fd:0a: d7:2b:6e:05:e3:5d:2f:87:58:cf:db:be:b7:e6:77:ad:2d:8d: 4f:e1:04:b0:9b:8a:83:08:e2:b8:94:9a:07:3d:75:9f:0e:90: d9:3b:73:67:ad:d2:ec:e3:e5:92:a6:0e:e2:25:f7:84:b7:c8: 2d:90:27:18:51:21:c0:e3:b6:52:94:ba:f2:4a:9e:31:4f:38: a5:9b:70:8c:7f:7b:c2:0a:c9:28:55:35:e4:4d:48:e3:6e:8a: db:a6:dc:9a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXOXR2Vw5/+ZqB2/OdMqMKYVqE3IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI5MDA0MTM1WhcNMjcwMTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZTEwNGI1NThiNjlmZmNlOTQyZTMxMzQ2NDc4ZThiM2Q5 YmJhMmM2ZDEwOGVkMDdkZTQyN2YyZGIxMDA4MmYxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGiWEzgtSefAXKlYYdf2GfRk6CC4zZjGkDVsUk5QfAMRoQ YnF2BnwaqnHCHVtOudkQkPaqccpoyRGiOURKSoCt2iEgeAEwF23KQm1oD/sshV0u 3fUOo3hSaz7bGbeasUnea7jv5Lj8W4JjCeWSsP1T1CAxBzC8h/H9pvSFatJJC2/z ATzjN5elrL36IQqnNkk2AoqnTydgW6XNBd7eSGdY3JBWMKQjghGmtRpPH6l8nq6g 9AzqWT2h5bhMSaQ4MvrIM+3M4Ltfrh+LUV8n642kxRnFNxT6iKXMWE09Vohz/LSU df12hnkQWjLhNEobqDN9WIAZaXfoK/Fk5BtEt1MTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU9ZtyxZbEQaG1ipQ+JttSLBQWcsYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE3ZGViNGEwLWI5NjItNDA2MS05ZTc3LWZhM2I4ZGEyZTQzNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB84CEAwDQYJKoZIhvcNAQELBQADggEBAF554mhNin6oOIkk59qcvaCJ USqTavtXQjKRKcdxWZv4OuN31aoc7c9KNXjnmgxaHa3krynh5urip6E33T/bQSU9 32VgAwKrBAvqcxt0DCHBFUYv1a81l7aIrQMSdO4UvEPdjm+lZb+A/0/iQb9Hqp3L 7r3y5+h04FAjeeDbFgcY4SEXAJT7nOnfusbY4cv+cxboKdA4/6WU8JfBk4jHzB39 CtcrbgXjXS+HWM/bvrfmd60tjU/hBLCbioMI4riUmgc9dZ8OkNk7c2et0uzj5ZKm DuIl94S3yC2QJxhRIcDjtlKUuvJKnjFPOKWbcIx/e8IKyShVNeRNSONuitum3Jo= -----END CERTIFICATE-----Generated at Mon Nov 2 19:19:20 2026 by rpki-client