$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f48cc9f-914c-4d7e-ad71-e4029aff06f1.roa File: 1f48cc9f-914c-4d7e-ad71-e4029aff06f1.roa (raw, json) Hash identifier: qtwGVnxjhcK4fbQcopI5D+Ufpv6bTv3EaRNqa6uHgaw= Subject key identifier: C7:98:76:0C:2E:DA:C8:AF:28:F3:A8:32:82:AB:C5:32:69:E3:F9:AB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0B4AE2BDC74EDA5E0CC8C6C4DCDBA588315BD334 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f48cc9f-914c-4d7e-ad71-e4029aff06f1.roa Signing time: Tue 27 Oct 2026 00:20:46 +0000 ROA not before: Tue 27 Oct 2026 00:20:46 +0000 ROA not after: Mon 25 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fed:40c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:4a:e2:bd:c7:4e:da:5e:0c:c8:c6:c4:dc:db:a5:88:31:5b:d3:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 27 00:20:46 2026 GMT Not After : Jan 25 23:59:59 2027 GMT Subject: serialNumber=4d717ff9e737e2d525501fdafc8cdd2b2cebdea2ab4d85b4ead082d274de84cb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ba:c6:a7:60:4f:df:b3:a7:66:fd:34:fa:50: 52:5a:5e:1e:01:7d:d6:70:02:71:2c:a3:d0:9f:98: 56:76:a4:ca:a5:92:c1:09:c3:81:98:83:9f:6f:6b: 6f:58:c6:f5:1b:9e:c7:b0:b5:9a:e6:c3:98:44:6a: a2:da:be:5c:d9:47:d7:8e:13:f8:26:11:67:6a:30: 7f:b4:f4:a1:98:51:ec:c3:81:2e:e6:ae:9b:d4:84: 69:cb:fb:ef:b2:af:d5:12:00:ba:1d:17:ca:85:de: 00:6b:f3:91:64:06:db:7d:72:01:8c:78:69:cd:37: 5b:7b:44:b7:f9:8e:d2:00:1a:54:9d:f2:1c:e9:20: 4d:49:2a:93:6e:da:4a:a7:3e:c4:24:24:e7:fa:67: 2d:b5:65:5e:40:4b:73:15:1e:e0:87:c3:5e:31:4a: 4f:37:15:38:3b:35:11:ac:51:08:a3:6a:fb:83:ab: f0:9e:48:68:35:2d:c4:bb:f2:95:9e:3b:c9:81:97: e2:d4:ba:49:bf:5d:33:18:5d:3b:c6:4d:e8:a0:3d: 30:cf:af:69:d4:d8:b7:03:08:ef:66:a5:34:a2:ee: 2a:0b:34:0b:4a:23:a3:0e:d0:47:a0:02:56:7d:b2: 71:10:2c:00:31:b4:72:84:32:0b:91:26:1b:d7:90: 40:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:98:76:0C:2E:DA:C8:AF:28:F3:A8:32:82:AB:C5:32:69:E3:F9:AB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f48cc9f-914c-4d7e-ad71-e4029aff06f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fed:40c0::/48 Signature Algorithm: sha256WithRSAEncryption 32:f3:a9:2d:13:73:55:16:bc:5b:f7:94:15:1a:36:06:42:f1: 1e:1e:40:31:8b:a3:de:1d:e5:3d:91:83:1a:f1:0b:eb:50:f0: 7e:3f:33:89:1a:d3:16:b2:25:a3:6b:4a:84:c8:15:90:7b:51: 82:3a:31:f2:8a:16:5b:79:af:a2:43:5e:35:75:b3:4c:20:91: 2e:86:3e:10:34:cb:d7:11:c4:6a:64:f8:a2:6a:d6:3b:d5:f5: b1:83:7c:8b:1a:0c:53:fa:d3:d0:eb:89:35:f0:df:a9:2a:4f: 07:be:d8:73:75:37:d3:21:8b:70:f1:4b:71:15:47:41:1e:3b: e5:e4:d7:68:18:e4:d6:e4:79:f5:ac:c2:f5:28:5f:c3:ca:66: ed:1a:c7:aa:71:eb:a2:34:6d:a4:59:0e:98:c4:6b:c8:bd:70: 4c:d1:9e:8f:35:fe:45:f1:88:c1:4a:81:9b:32:8a:cc:28:a8: bf:3f:c2:6e:ab:ba:be:75:44:77:24:b8:86:a0:3f:02:90:14: 8d:b5:93:a3:aa:1f:51:6a:b6:e9:a6:d3:fe:ac:74:25:57:dc: 0a:44:79:95:3e:7b:fa:56:da:a4:78:50:d9:0b:e0:3c:3e:0b: 25:06:0a:51:d2:53:4c:7e:a4:87:09:30:89:58:d5:44:e6:99: 37:47:29:e7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUC0rivcdO2l4MyMbE3NuliDFb0zQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI3MDAyMDQ2WhcNMjcwMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZDcxN2ZmOWU3MzdlMmQ1MjU1MDFmZGFmYzhjZGQyYjJj ZWJkZWEyYWI0ZDg1YjRlYWQwODJkMjc0ZGU4NGNiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDusanYE/fs6dm/TT6UFJaXh4BfdZwAnEso9CfmFZ2pMql ksEJw4GYg59va29YxvUbnsewtZrmw5hEaqLavlzZR9eOE/gmEWdqMH+09KGYUezD gS7mrpvUhGnL+++yr9USALodF8qF3gBr85FkBtt9cgGMeGnNN1t7RLf5jtIAGlSd 8hzpIE1JKpNu2kqnPsQkJOf6Zy21ZV5AS3MVHuCHw14xSk83FTg7NRGsUQijavuD q/CeSGg1LcS78pWeO8mBl+LUukm/XTMYXTvGTeigPTDPr2nU2LcDCO9mpTSi7ioL NAtKI6MO0EegAlZ9snEQLAAxtHKEMguRJhvXkECbAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUx5h2DC7ayK8o86gygqvFMmnj+aswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFmNDhjYzlmLTkxNGMtNGQ3ZS1hZDcxLWU0MDI5YWZmMDZmMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/tQMAwDQYJKoZIhvcNAQELBQADggEBADLzqS0Tc1UWvFv3lBUaNgZC 8R4eQDGLo94d5T2RgxrxC+tQ8H4/M4ka0xayJaNrSoTIFZB7UYI6MfKKFlt5r6JD XjV1s0wgkS6GPhA0y9cRxGpk+KJq1jvV9bGDfIsaDFP609DriTXw36kqTwe+2HN1 N9Mhi3DxS3EVR0EeO+Xk12gY5NbkefWswvUoX8PKZu0ax6px66I0baRZDpjEa8i9 cEzRno81/kXxiMFKgZsyiswoqL8/wm6rur51RHckuIagPwKQFI21k6OqH1Fqtumm 0/6sdCVX3ApEeZU+e/pW2qR4UNkL4Dw+CyUGClHSU0x+pIcJMIlY1UTmmTdHKec= -----END CERTIFICATE-----Generated at Mon Nov 2 21:07:36 2026 by rpki-client