$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bf5a1ea-38c0-4ced-acd0-3ceb6bf26faf.roa File: 2bf5a1ea-38c0-4ced-acd0-3ceb6bf26faf.roa (raw, json) Hash identifier: g2vjs/dOyLPDr0GoBBGU37ai4b7SVe/0szw4jF2RonQ= Subject key identifier: D2:05:14:21:31:8E:E3:CD:7B:45:38:78:F4:E2:E4:57:57:11:E6:5C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 21C0336D35449F4B566CB27B6BB0A1853929705A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bf5a1ea-38c0-4ced-acd0-3ceb6bf26faf.roa Signing time: Tue 06 Oct 2026 00:20:34 +0000 ROA not before: Tue 06 Oct 2026 00:20:34 +0000 ROA not after: Mon 04 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f01:4806::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:c0:33:6d:35:44:9f:4b:56:6c:b2:7b:6b:b0:a1:85:39:29:70:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 6 00:20:34 2026 GMT Not After : Jan 4 23:59:59 2027 GMT Subject: serialNumber=408330a1ed023cdcbf204339e4c1654daa4fa7bccaa16d0e65a1e43402a7f769, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7e:b5:a8:2d:33:4e:a4:8e:3d:88:4d:77:13: df:ae:34:bc:f9:e5:48:5e:26:6a:ba:6c:69:2c:b8: da:8a:48:b9:e0:3c:f9:b9:28:ef:f2:b3:7d:aa:72: b2:87:40:54:2f:a9:29:c1:8e:bf:69:ca:c5:c7:1a: 79:c9:e6:eb:16:58:5d:e9:11:5b:1d:92:29:ac:58: db:eb:a8:39:19:cb:9c:38:b3:e8:26:7b:52:6d:38: a6:27:8d:45:12:d4:a0:e7:f7:ed:cb:75:f5:b0:48: db:cc:03:32:58:ee:88:37:82:51:62:61:db:5c:d8: 07:b6:fc:92:2b:9e:38:83:35:4f:c3:be:fd:bc:83: b8:fa:2d:db:2f:bc:bd:57:69:a1:96:d0:48:34:6b: c1:20:61:5d:de:ea:55:5b:7f:b2:51:89:fb:76:91: 72:3f:17:08:a1:cc:00:85:f7:e3:bf:d5:4d:1d:c1: c1:82:37:f7:5d:40:d5:de:8e:b9:ec:eb:b0:4d:44: 83:af:77:09:41:9c:1d:51:04:a3:63:fd:db:4e:25: 3a:16:52:a5:a8:f4:8d:9e:6d:c7:93:0f:dd:98:78: b5:d9:aa:ef:5a:6e:eb:1c:96:05:1a:74:a4:74:ec: 00:2a:d9:65:b0:cd:83:7d:c3:5c:fa:34:6e:67:d2: c5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:05:14:21:31:8E:E3:CD:7B:45:38:78:F4:E2:E4:57:57:11:E6:5C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bf5a1ea-38c0-4ced-acd0-3ceb6bf26faf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f01:4806::/47 Signature Algorithm: sha256WithRSAEncryption 57:b7:0d:0e:9b:87:47:d7:5d:de:13:e8:e6:10:94:09:07:b5: 60:d6:4c:75:7b:95:14:39:e3:cd:8d:88:3b:4c:0a:0a:ee:e0: d4:8d:72:71:3e:07:b7:1c:0f:7d:ae:e3:ed:0a:cb:4e:9b:48: 4d:7d:36:48:e6:73:a1:84:0c:cf:a8:d5:2d:f3:7b:5f:6e:1c: 2c:3e:8d:6f:48:cd:5d:84:67:19:58:d7:28:df:90:3d:9d:69: bc:c1:ee:ec:16:86:06:b2:cf:7b:46:eb:2d:52:27:f0:1e:fe: 9a:90:a7:2e:3d:d4:fb:c0:42:69:9e:48:27:04:91:1c:bb:ae: 64:82:ae:79:4c:9f:d8:05:b5:fa:f9:ab:59:c7:ec:d9:90:e9: c5:02:9f:56:02:19:92:eb:68:c8:d8:13:53:f3:44:0c:42:4e: e1:d9:55:b3:83:7f:e2:fb:86:c1:0c:1c:63:27:3d:89:31:0c: 76:eb:bc:74:aa:88:c2:80:d4:78:72:42:a7:44:d4:c3:7e:6d: c7:f3:ec:36:44:48:1e:54:32:0a:12:65:fe:ce:70:81:c6:03: 54:8d:91:94:41:d6:f3:0e:d8:54:2d:b2:70:4d:06:06:b9:3a: f1:b7:99:20:12:2f:98:2a:05:1f:f4:ad:03:fd:98:ff:c5:76: 76:4b:98:2e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUIcAzbTVEn0tWbLJ7a7ChhTkpcFowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA2MDAyMDM0WhcNMjcwMTA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MDgzMzBhMWVkMDIzY2RjYmYyMDQzMzllNGMxNjU0ZGFh NGZhN2JjY2FhMTZkMGU2NWExZTQzNDAyYTdmNzY5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKfrWoLTNOpI49iE13E9+uNLz55UheJmq6bGksuNqKSLng PPm5KO/ys32qcrKHQFQvqSnBjr9pysXHGnnJ5usWWF3pEVsdkimsWNvrqDkZy5w4 s+gme1JtOKYnjUUS1KDn9+3LdfWwSNvMAzJY7og3glFiYdtc2Ae2/JIrnjiDNU/D vv28g7j6LdsvvL1XaaGW0Eg0a8EgYV3e6lVbf7JRift2kXI/FwihzACF9+O/1U0d wcGCN/ddQNXejrns67BNRIOvdwlBnB1RBKNj/dtOJToWUqWo9I2ebceTD92YeLXZ qu9abusclgUadKR07AAq2WWwzYN9w1z6NG5n0sU9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU0gUUITGO4817RTh49OLkV1cR5lwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJiZjVhMWVhLTM4YzAtNGNlZC1hY2QwLTNjZWI2YmYyNmZhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAB8BSAYwDQYJKoZIhvcNAQELBQADggEBAFe3DQ6bh0fXXd4T6OYQlAkH tWDWTHV7lRQ5482NiDtMCgru4NSNcnE+B7ccD32u4+0Ky06bSE19Nkjmc6GEDM+o 1S3ze19uHCw+jW9IzV2EZxlY1yjfkD2dabzB7uwWhgayz3tG6y1SJ/Ae/pqQpy49 1PvAQmmeSCcEkRy7rmSCrnlMn9gFtfr5q1nH7NmQ6cUCn1YCGZLraMjYE1PzRAxC TuHZVbODf+L7hsEMHGMnPYkxDHbrvHSqiMKA1HhyQqdE1MN+bcfz7DZESB5UMgoS Zf7OcIHGA1SNkZRB1vMO2FQtsnBNBga5OvG3mSASL5gqBR/0rQP9mP/FdnZLmC4= -----END CERTIFICATE-----Generated at Wed Nov 4 13:16:03 2026 by rpki-client