$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2db5e928-de62-49bc-a803-dc9b3ce29b28.roa File: 2db5e928-de62-49bc-a803-dc9b3ce29b28.roa (raw, json) Hash identifier: ynn/eJ3/UAjPbzeMV3pLoQcJDgToeXsAA50zaxXqZnw= Subject key identifier: 09:AB:E6:0E:98:6C:E8:FC:FB:62:8F:DA:E3:5E:99:7E:A3:29:07:B9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3B1611166245DC069BFFB6C4FE54F559DCE0109D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2db5e928-de62-49bc-a803-dc9b3ce29b28.roa Signing time: Thu 22 Oct 2026 02:07:15 +0000 ROA not before: Thu 22 Oct 2026 02:07:15 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f38:60c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:16:11:16:62:45:dc:06:9b:ff:b6:c4:fe:54:f5:59:dc:e0:10:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 22 02:07:15 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=87e16cb834681607d1662bd0ea7dafe0ee9882dfbdfcc31181f91ff237ed7fee, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:fa:62:af:19:39:32:36:c0:89:b4:01:e0:5c: b7:cf:8f:00:23:ec:a8:75:b4:a2:86:57:b0:cf:e2: c1:4c:36:7d:f1:87:03:c0:1d:9f:c4:1c:8e:7d:e2: 13:4c:b9:9f:ca:4c:12:c3:f2:c5:2d:cc:39:97:7e: d5:7f:81:ce:5a:68:45:7d:b1:b7:1b:2b:5f:c2:3d: 90:43:d8:65:e9:02:f0:38:21:c5:cd:ec:7d:bd:af: 68:0e:7c:b6:ba:4c:23:37:ae:1c:90:3e:fb:fd:89: 97:c8:d1:ef:1f:e4:0f:5a:74:1b:4c:55:8e:6e:f3: ab:82:0c:85:03:9c:d9:d6:53:eb:ad:c2:8f:ad:eb: 60:8d:7c:e3:e2:34:62:8f:c1:71:82:4a:ea:29:20: 6f:56:d2:5a:58:7e:ab:20:45:51:82:e5:b7:15:66: a8:0a:f7:50:c1:8c:79:fd:fe:6d:a1:67:f6:5a:8c: 38:44:b5:42:89:28:69:ca:3a:03:fb:46:09:f2:a6: 98:f1:57:cb:d1:2a:d9:ae:69:bf:42:37:ee:1b:13: a0:9c:5b:2b:3b:8b:3d:7d:2e:82:4a:2f:8c:45:c7: d9:17:6a:55:f7:b1:6c:aa:65:8c:55:9b:88:9f:6e: 1b:ed:5b:ca:64:d2:07:20:8c:b2:34:7a:ec:b8:f8: a4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:AB:E6:0E:98:6C:E8:FC:FB:62:8F:DA:E3:5E:99:7E:A3:29:07:B9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2db5e928-de62-49bc-a803-dc9b3ce29b28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f38:60c0::/48 Signature Algorithm: sha256WithRSAEncryption 7d:00:02:41:68:1d:14:00:f4:5c:90:26:6a:3b:db:b5:1a:e1: 56:ed:d3:bf:df:a7:b0:9d:71:96:b0:ec:9f:57:7d:36:a6:7e: 72:13:b8:30:a4:e4:8c:09:dd:32:91:1d:ce:4b:ec:19:ef:39: a5:02:d5:e0:e0:61:ff:73:4c:47:b9:84:14:46:23:54:b6:5c: ed:5c:c5:bb:7e:79:8c:c4:bb:71:aa:56:81:bc:c3:68:8c:3d: e4:a3:42:ad:a2:ca:5e:2e:5b:6d:64:60:e1:e3:e5:9e:c5:ee: 8e:af:d2:30:fa:3b:46:5e:47:6d:01:93:d7:87:a1:5c:f3:26: bb:5d:ba:04:58:83:75:13:8c:b2:dd:b2:23:a3:25:ab:b8:c2: 64:3b:ab:46:ff:61:3f:40:ca:a2:46:26:c5:4d:22:84:ac:5e: 9f:ce:64:fe:4e:a1:cf:7f:b7:9c:a2:03:5e:75:1f:07:ef:12: f4:90:06:a1:9b:63:46:9f:27:97:c4:ef:96:e4:78:93:3f:cc: 4c:9e:40:0a:ea:ff:65:2c:ba:ec:ca:5e:29:6e:00:bd:8f:22: 89:06:7e:09:e9:78:82:c1:ac:9b:7a:86:32:e1:dd:50:98:92: 2a:38:2f:22:c3:91:a7:4c:27:a7:7b:5b:9a:1d:fc:0c:98:97: 84:66:05:54 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUOxYRFmJF3Aab/7bE/lT1WdzgEJ0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIyMDIwNzE1WhcNMjcwMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4N2UxNmNiODM0NjgxNjA3ZDE2NjJiZDBlYTdkYWZlMGVl OTg4MmRmYmRmY2MzMTE4MWY5MWZmMjM3ZWQ3ZmVlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZ+mKvGTkyNsCJtAHgXLfPjwAj7Kh1tKKGV7DP4sFMNn3x hwPAHZ/EHI594hNMuZ/KTBLD8sUtzDmXftV/gc5aaEV9sbcbK1/CPZBD2GXpAvA4 IcXN7H29r2gOfLa6TCM3rhyQPvv9iZfI0e8f5A9adBtMVY5u86uCDIUDnNnWU+ut wo+t62CNfOPiNGKPwXGCSuopIG9W0lpYfqsgRVGC5bcVZqgK91DBjHn9/m2hZ/Za jDhEtUKJKGnKOgP7RgnyppjxV8vRKtmuab9CN+4bE6CcWys7iz19LoJKL4xFx9kX alX3sWyqZYxVm4ifbhvtW8pk0gcgjLI0euy4+KRxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUCavmDphs6Pz7Yo/a416ZfqMpB7kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJkYjVlOTI4LWRlNjItNDliYy1hODAzLWRjOWIzY2UyOWIyOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB84YMAwDQYJKoZIhvcNAQELBQADggEBAH0AAkFoHRQA9FyQJmo727Ua 4Vbt07/fp7CdcZaw7J9XfTamfnITuDCk5IwJ3TKRHc5L7BnvOaUC1eDgYf9zTEe5 hBRGI1S2XO1cxbt+eYzEu3GqVoG8w2iMPeSjQq2iyl4uW21kYOHj5Z7F7o6v0jD6 O0ZeR20Bk9eHoVzzJrtdugRYg3UTjLLdsiOjJau4wmQ7q0b/YT9AyqJGJsVNIoSs Xp/OZP5Ooc9/t5yiA151HwfvEvSQBqGbY0afJ5fE75bkeJM/zEyeQArq/2UsuuzK XiluAL2PIokGfgnpeILBrJt6hjLh3VCYkio4LyLDkadMJ6d7W5od/AyYl4RmBVQ= -----END CERTIFICATE-----Generated at Sat Oct 31 05:30:16 2026 by rpki-client