$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/29db2fd9-c35c-4593-9595-bedc02c299d4.roa File: 29db2fd9-c35c-4593-9595-bedc02c299d4.roa (raw, json) Hash identifier: XhCG264byHwbwR4LLYt1BqbuXMvngFjYGodfc4gyRNY= Subject key identifier: D6:80:40:C5:85:4E:B8:30:04:36:12:D7:C5:F1:46:E9:1C:A7:2D:7D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 178DDB8EA7AB75C5051E1A5E8C9111B9997486FE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/29db2fd9-c35c-4593-9595-bedc02c299d4.roa Signing time: Thu 29 Oct 2026 00:41:37 +0000 ROA not before: Thu 29 Oct 2026 00:41:37 +0000 ROA not after: Wed 27 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fe8:a480::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:8d:db:8e:a7:ab:75:c5:05:1e:1a:5e:8c:91:11:b9:99:74:86:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 29 00:41:37 2026 GMT Not After : Jan 27 23:59:59 2027 GMT Subject: serialNumber=de9124e2a7a9ad9411fc9d270a4d51960069a87f33e96bdfe42ca9759b585183, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:27:40:51:c2:a5:08:8c:65:a4:70:7c:77:08: 90:67:f6:47:25:ab:bb:1c:e3:99:e9:56:7a:76:3c: fc:ab:7c:8c:26:24:c3:a7:96:5f:44:64:5a:24:71: fd:c2:cd:f0:b7:89:f5:cd:ea:3c:b7:72:dd:ef:8c: e8:7d:65:68:10:e1:75:0c:04:dc:6c:e8:c2:66:ba: 51:89:dd:eb:a9:0f:d8:d7:43:f8:c8:ed:0b:2c:48: 9c:f8:50:78:00:ca:f8:74:9a:67:93:f7:19:33:d0: af:18:e9:14:a6:80:58:75:f1:1b:c1:7e:bb:3d:9e: ba:f3:10:e5:63:09:da:f1:93:ed:0d:3a:85:75:5a: d7:d5:91:34:bc:7f:05:b0:1b:6d:9a:35:5a:97:4c: ab:62:7c:8f:27:4f:ef:c5:56:2a:aa:a7:7b:99:bd: d1:3c:dd:90:12:de:5c:77:c2:4b:79:e1:f7:df:fe: c0:e9:6e:ce:8a:03:52:df:2e:a4:21:62:ba:be:2b: 31:b6:da:f5:78:ab:39:fc:3e:85:6a:d1:06:c9:c0: 7e:1a:b7:d9:2a:b7:39:a0:06:04:08:53:03:79:5d: 4b:1c:57:e5:25:d4:6b:b9:b2:35:79:53:20:4e:71: fc:4f:11:f6:d8:bd:f2:2f:2f:53:1d:90:aa:b8:37: b4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:80:40:C5:85:4E:B8:30:04:36:12:D7:C5:F1:46:E9:1C:A7:2D:7D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/29db2fd9-c35c-4593-9595-bedc02c299d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fe8:a480::/48 Signature Algorithm: sha256WithRSAEncryption bc:be:19:5f:54:df:45:44:de:e1:c9:36:df:37:37:71:60:9c: 5e:59:7c:0f:8a:47:44:d2:44:f7:4b:bb:05:be:61:c7:4c:a0: ac:cc:08:11:96:7d:99:f1:93:d9:4e:ee:70:5d:22:ee:d8:b8: e4:8d:cc:65:16:3d:4b:5e:76:94:d0:64:7b:f2:a2:a2:75:d2: 50:1c:d3:3e:72:64:06:69:37:3b:3f:3b:83:72:83:93:59:0b: 25:5d:60:07:da:1a:ee:aa:de:cb:0c:86:76:6a:9e:36:6a:39: 21:19:cd:db:6e:fe:40:45:89:21:b0:38:da:03:fd:7c:04:22: 45:dc:8f:3b:1b:5b:ea:41:1f:e0:e4:fc:10:21:6a:8c:ae:f2: f7:89:e4:75:3a:2f:e4:fd:df:67:5f:d2:82:53:53:99:35:8e: 65:c4:12:3a:2a:16:b5:8f:4b:c9:2b:07:4e:4d:15:b3:d8:4e: f1:15:41:77:10:19:f6:ee:be:b1:1d:ee:62:6d:57:25:72:28: 90:41:bc:ec:bf:39:4f:67:0f:48:9e:74:2b:e4:6e:48:8e:f9: a3:4c:d3:f9:fd:3f:d4:cf:d3:8f:74:bf:34:57:88:e8:91:bc: a3:c5:97:54:29:01:40:0b:48:06:25:b9:7b:33:88:3b:d2:06: 0b:65:6e:a9 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUF43bjqerdcUFHhpejJERuZl0hv4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI5MDA0MTM3WhcNMjcwMTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZTkxMjRlMmE3YTlhZDk0MTFmYzlkMjcwYTRkNTE5NjAw NjlhODdmMzNlOTZiZGZlNDJjYTk3NTliNTg1MTgzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSJ0BRwqUIjGWkcHx3CJBn9kclq7sc45npVnp2PPyrfIwm JMOnll9EZFokcf3CzfC3ifXN6jy3ct3vjOh9ZWgQ4XUMBNxs6MJmulGJ3eupD9jX Q/jI7QssSJz4UHgAyvh0mmeT9xkz0K8Y6RSmgFh18RvBfrs9nrrzEOVjCdrxk+0N OoV1WtfVkTS8fwWwG22aNVqXTKtifI8nT+/FViqqp3uZvdE83ZAS3lx3wkt54fff /sDpbs6KA1LfLqQhYrq+KzG22vV4qzn8PoVq0QbJwH4at9kqtzmgBgQIUwN5XUsc V+Ul1Gu5sjV5UyBOcfxPEfbYvfIvL1MdkKq4N7ThAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU1oBAxYVOuDAENhLXxfFG6RynLX0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI5ZGIyZmQ5LWMzNWMtNDU5My05NTk1LWJlZGMwMmMyOTlkNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/opIAwDQYJKoZIhvcNAQELBQADggEBALy+GV9U30VE3uHJNt83N3Fg nF5ZfA+KR0TSRPdLuwW+YcdMoKzMCBGWfZnxk9lO7nBdIu7YuOSNzGUWPUtedpTQ ZHvyoqJ10lAc0z5yZAZpNzs/O4Nyg5NZCyVdYAfaGu6q3ssMhnZqnjZqOSEZzdtu /kBFiSGwONoD/XwEIkXcjzsbW+pBH+Dk/BAhaoyu8veJ5HU6L+T932df0oJTU5k1 jmXEEjoqFrWPS8krB05NFbPYTvEVQXcQGfbuvrEd7mJtVyVyKJBBvOy/OU9nD0ie dCvkbkiO+aNM0/n9P9TP0490vzRXiOiRvKPFl1QpAUALSAYluXsziDvSBgtlbqk= -----END CERTIFICATE-----Generated at Wed Nov 4 05:36:57 2026 by rpki-client