$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/267e57ab-8866-48bd-91df-1c560e2471a0.roa File: 267e57ab-8866-48bd-91df-1c560e2471a0.roa (raw, json) Hash identifier: Vf0//9bFokCcmCFkrjk080EWvU5K5KitE1RcgY0dEPg= Subject key identifier: 79:D4:97:18:F3:F1:B8:A5:C2:53:D1:8F:8B:FE:E9:1C:87:15:43:CB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 51F8D4953D947CBF34D894A95788F2FBF37ACB55 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/267e57ab-8866-48bd-91df-1c560e2471a0.roa Signing time: Thu 22 Oct 2026 01:30:14 +0000 ROA not before: Thu 22 Oct 2026 01:30:14 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1fff:20c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:f8:d4:95:3d:94:7c:bf:34:d8:94:a9:57:88:f2:fb:f3:7a:cb:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 22 01:30:14 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=44dd18c384e5e869915d3ed83eab6c6d83426e4a7cfaac59fcd067dc34a7f463, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e0:7a:49:1c:af:9b:bc:d2:b6:fe:83:e5:78: b7:d5:aa:05:e4:f9:33:62:f1:d2:86:63:31:fd:36: fc:35:af:2b:e2:59:16:1e:6d:5d:82:ef:ae:5e:86: 4a:fb:d8:ef:93:48:ea:57:ec:53:83:81:c6:f4:e7: 71:4b:bf:4c:ac:3d:0b:77:04:92:4a:89:1c:62:2f: 46:ba:32:9c:d8:e4:be:ba:17:33:4d:2a:77:9b:15: b8:a1:b3:ff:93:0f:86:58:c6:68:88:d1:0d:30:b7: 3b:86:e7:a5:02:67:d3:db:ca:5c:9a:db:7d:35:e9: df:14:2f:0b:36:a3:3e:c1:f8:c6:ce:1f:21:e9:78: d6:bd:e0:94:e9:f1:58:ac:d3:e5:3a:6c:ac:8d:6f: 0a:6f:72:65:3f:52:fd:b0:53:d4:80:9f:6f:04:bf: 30:26:41:10:75:46:ce:ba:0d:a5:04:de:97:5e:48: 01:fe:a9:de:ac:a9:fb:3b:a5:c4:c9:91:c1:23:26: 54:90:ef:bb:57:fa:6e:e1:c1:45:9c:02:ee:f9:1c: 56:38:b2:e8:66:f3:af:1c:20:c6:82:82:33:c1:9e: 19:a0:5f:02:3e:07:ea:d4:21:dd:3e:3d:15:c4:d4: 09:9a:ad:3e:ac:17:6f:6e:23:53:07:50:3e:95:e6: 7c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:D4:97:18:F3:F1:B8:A5:C2:53:D1:8F:8B:FE:E9:1C:87:15:43:CB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/267e57ab-8866-48bd-91df-1c560e2471a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:20c0::/48 Signature Algorithm: sha256WithRSAEncryption b8:f8:bc:1a:67:93:1e:59:d0:9a:5c:7e:96:d3:64:54:2a:fe: 1c:5c:cd:da:42:01:79:76:cd:e5:69:b8:a9:05:09:64:1d:57: ab:11:0a:35:42:70:99:4c:ec:c8:9d:b8:8a:bb:1a:c1:20:ba: 08:17:ae:43:7d:31:c0:4b:9f:32:8c:42:8c:f8:c1:6e:34:76: fc:8a:3f:d5:b9:61:59:9b:39:63:d5:c1:27:10:2d:71:4b:ab: d9:25:bb:0a:d0:dd:27:db:20:ef:d3:8e:37:72:55:05:88:b1: 13:aa:69:dd:5c:2c:fb:13:0a:96:7e:47:f3:cf:c9:05:06:2c: 3b:16:b9:fb:87:25:36:16:46:83:27:b8:0d:27:88:8d:2a:b8: 0e:41:18:06:e9:5c:6a:9e:f7:df:e8:cf:50:89:06:a9:ba:a9: db:84:80:69:e9:d4:67:61:98:24:0e:e7:86:da:0c:6c:9d:e4: 6a:75:55:48:91:c5:33:4b:f9:b0:e7:3d:e4:8e:6e:a5:4f:0c: 31:a6:25:01:06:6f:0b:c5:8b:a8:2b:3e:e1:a0:37:12:8a:f4: f5:b4:82:dc:5d:06:2f:a7:49:82:a0:c6:c1:5b:62:30:78:8c: 47:c4:47:a0:ea:d3:5c:36:65:d0:84:2c:ea:81:bf:fa:64:39: 13:80:df:94 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUfjUlT2UfL802JSpV4jy+/N6y1UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIyMDEzMDE0WhcNMjcwMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0NGRkMThjMzg0ZTVlODY5OTE1ZDNlZDgzZWFiNmM2ZDgz NDI2ZTRhN2NmYWFjNTlmY2QwNjdkYzM0YTdmNDYzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDF4HpJHK+bvNK2/oPleLfVqgXk+TNi8dKGYzH9Nvw1ryvi WRYebV2C765ehkr72O+TSOpX7FODgcb053FLv0ysPQt3BJJKiRxiL0a6MpzY5L66 FzNNKnebFbihs/+TD4ZYxmiI0Q0wtzuG56UCZ9Pbylya23016d8ULws2oz7B+MbO HyHpeNa94JTp8Vis0+U6bKyNbwpvcmU/Uv2wU9SAn28EvzAmQRB1Rs66DaUE3pde SAH+qd6sqfs7pcTJkcEjJlSQ77tX+m7hwUWcAu75HFY4suhm868cIMaCgjPBnhmg XwI+B+rUId0+PRXE1AmarT6sF29uI1MHUD6V5nzPAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUedSXGPPxuKXCU9GPi/7pHIcVQ8swHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI2N2U1N2FiLTg4NjYtNDhiZC05MWRmLTFjNTYwZTI0NzFhMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//IMAwDQYJKoZIhvcNAQELBQADggEBALj4vBpnkx5Z0JpcfpbTZFQq /hxczdpCAXl2zeVpuKkFCWQdV6sRCjVCcJlM7MiduIq7GsEguggXrkN9McBLnzKM Qoz4wW40dvyKP9W5YVmbOWPVwScQLXFLq9kluwrQ3SfbIO/TjjdyVQWIsROqad1c LPsTCpZ+R/PPyQUGLDsWufuHJTYWRoMnuA0niI0quA5BGAbpXGqe99/oz1CJBqm6 qduEgGnp1GdhmCQO54baDGyd5Gp1VUiRxTNL+bDnPeSObqVPDDGmJQEGbwvFi6gr PuGgNxKK9PW0gtxdBi+nSYKgxsFbYjB4jEfER6Dq01w2ZdCELOqBv/pkOROA35Q= -----END CERTIFICATE-----Generated at Mon Nov 2 22:31:05 2026 by rpki-client