$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bfd279d-53c3-47d9-a282-c1f249b2a5f9.roa File: 2bfd279d-53c3-47d9-a282-c1f249b2a5f9.roa (raw, json) Hash identifier: LgdPt531Y/EPj1ES1RBZ6t0yTpXna2WQ/TdYWGcewGo= Subject key identifier: 0F:5B:25:11:0A:23:94:15:12:99:BF:56:F5:83:C4:C4:D9:9D:AA:E3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3F3CDF82DF52025ABA1099CF5B3DF87DA65858D0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bfd279d-53c3-47d9-a282-c1f249b2a5f9.roa Signing time: Mon 26 Oct 2026 00:31:09 +0000 ROA not before: Mon 26 Oct 2026 00:31:09 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fef:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:3c:df:82:df:52:02:5a:ba:10:99:cf:5b:3d:f8:7d:a6:58:58:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 26 00:31:09 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=50ec550789465de0eca79eb9f34083807b5814228f8f518d6650c616fc1a736d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0e:83:a3:41:c6:60:4f:f7:b6:0f:7b:6d:b3: 18:6d:a2:c1:96:d7:74:49:1a:f5:4d:73:4b:a1:f3: aa:a3:7b:40:b9:d6:ea:ed:1c:9f:57:c4:83:20:9c: 88:94:0e:e1:9a:41:d0:af:11:aa:f7:6f:1b:7a:35: 79:b3:36:f5:50:4b:97:40:e7:bf:32:3b:3b:70:21: b8:8e:96:8c:43:65:9d:77:54:25:8c:40:d6:f2:93: 46:f4:88:1b:41:2d:76:bc:c2:dc:95:76:46:fa:a6: 8b:98:ae:32:c5:ae:ff:6d:a2:0b:ad:88:2f:8e:e1: 1f:31:8e:24:85:5a:23:21:03:27:8c:7f:c4:80:f4: 4f:de:ca:00:fd:c1:c7:84:d9:56:07:b1:28:7e:b1: 0f:4c:1d:2a:45:a3:5c:1a:3d:4c:f8:fc:06:8b:41: 17:ff:8e:24:68:ee:c8:0a:f4:d7:a3:7f:eb:a5:8b: 2b:6e:e6:27:6c:cf:9a:81:93:24:16:6b:fa:20:ed: e5:ba:27:7c:5f:34:ff:f2:50:be:98:45:8f:91:1e: 49:4d:28:95:07:53:a4:3b:ae:90:04:f3:91:51:3c: 25:f6:5f:81:aa:fa:f8:fa:a1:72:fd:6d:47:d7:a7: 19:10:17:65:1e:f8:ca:3c:dd:e1:3a:2b:c0:d4:d2: 5d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:5B:25:11:0A:23:94:15:12:99:BF:56:F5:83:C4:C4:D9:9D:AA:E3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bfd279d-53c3-47d9-a282-c1f249b2a5f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fef:5000::/40 Signature Algorithm: sha256WithRSAEncryption 4c:ff:ab:27:97:29:b4:30:82:ba:4e:ba:72:07:d5:53:2c:d5: a7:35:c3:0e:cd:63:44:30:e9:ec:7d:63:c1:6b:6b:d9:a8:e0: c9:52:4d:5b:4e:e4:01:42:6e:f1:55:c5:87:88:e1:ca:0d:37: 71:9b:65:42:e5:50:cb:ef:e6:43:69:ac:f4:ef:a1:77:ce:b4: 73:97:29:9a:cf:a5:05:fa:61:bd:35:0b:07:d1:b1:06:70:eb: ff:16:44:83:5f:ff:0b:ee:be:c4:19:79:b3:1a:89:9a:44:b2: 1b:dc:14:57:bc:4a:06:b9:c6:d4:88:aa:9f:95:7a:34:d7:8f: b2:c0:e5:c8:1d:60:ee:c1:e1:96:29:f1:e4:cc:99:0c:4c:8a: 91:de:f3:77:cc:b0:02:3f:84:4e:fb:22:b0:a8:99:ba:92:26: ff:eb:51:1c:5c:41:bc:2d:4a:f2:3c:15:b2:e5:2d:4c:44:76: c2:e6:09:6f:ca:30:18:35:d5:13:dc:64:06:99:c1:7e:03:e7: 56:22:b3:8d:f4:e8:41:09:c2:60:22:8f:d7:7a:a0:d0:0a:a6: 98:6d:67:2f:7a:07:52:c3:8c:e0:e9:a5:72:60:7a:01:02:51: d1:8c:5e:55:53:27:dd:cb:fa:51:22:0b:78:49:6f:53:f8:59: f9:02:29:77 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUPzzfgt9SAlq6EJnPWz34faZYWNAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI2MDAzMTA5WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MGVjNTUwNzg5NDY1ZGUwZWNhNzllYjlmMzQwODM4MDdi NTgxNDIyOGY4ZjUxOGQ2NjUwYzYxNmZjMWE3MzZkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCODoOjQcZgT/e2D3ttsxhtosGW13RJGvVNc0uh86qje0C5 1urtHJ9XxIMgnIiUDuGaQdCvEar3bxt6NXmzNvVQS5dA578yOztwIbiOloxDZZ13 VCWMQNbyk0b0iBtBLXa8wtyVdkb6pouYrjLFrv9togutiC+O4R8xjiSFWiMhAyeM f8SA9E/eygD9wceE2VYHsSh+sQ9MHSpFo1waPUz4/AaLQRf/jiRo7sgK9Nejf+ul iytu5idsz5qBkyQWa/og7eW6J3xfNP/yUL6YRY+RHklNKJUHU6Q7rpAE85FRPCX2 X4Gq+vj6oXL9bUfXpxkQF2Ue+Mo83eE6K8DU0l0vAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUD1slEQojlBUSmb9W9YPExNmdquMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJiZmQyNzlkLTUzYzMtNDdkOS1hMjgyLWMxZjI0OWIyYTVmOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/vUDANBgkqhkiG9w0BAQsFAAOCAQEATP+rJ5cptDCCuk66cgfVUyzV pzXDDs1jRDDp7H1jwWtr2ajgyVJNW07kAUJu8VXFh4jhyg03cZtlQuVQy+/mQ2ms 9O+hd860c5cpms+lBfphvTULB9GxBnDr/xZEg1//C+6+xBl5sxqJmkSyG9wUV7xK BrnG1Iiqn5V6NNePssDlyB1g7sHhlinx5MyZDEyKkd7zd8ywAj+ETvsisKiZupIm /+tRHFxBvC1K8jwVsuUtTER2wuYJb8owGDXVE9xkBpnBfgPnViKzjfToQQnCYCKP 13qg0AqmmG1nL3oHUsOM4OmlcmB6AQJR0YxeVVMn3cv6USILeElvU/hZ+QIpdw== -----END CERTIFICATE-----Generated at Mon Nov 2 16:47:12 2026 by rpki-client