$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30083b55-0236-4f8d-8387-e3015b3d58d8.roa File: 30083b55-0236-4f8d-8387-e3015b3d58d8.roa (raw, json) Hash identifier: KytSyYARwl/Dza80jO0SO+tKMmCNmsT4T+1xNvgf2dE= Subject key identifier: 89:22:C2:52:31:80:C1:3B:52:5A:36:0C:5B:64:A9:3E:E9:18:17:46 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0FB78859E1725A2ABA844345ED313C22B8D6C169 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30083b55-0236-4f8d-8387-e3015b3d58d8.roa Signing time: Mon 19 Oct 2026 00:20:08 +0000 ROA not before: Mon 19 Oct 2026 00:20:08 +0000 ROA not after: Sun 17 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffc::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:b7:88:59:e1:72:5a:2a:ba:84:43:45:ed:31:3c:22:b8:d6:c1:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 19 00:20:08 2026 GMT Not After : Jan 17 23:59:59 2027 GMT Subject: serialNumber=fb0fe6da234f4d94c24f318b27887c1d1fce681e9e8c9c484ed5fa126c5aeb6e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:65:68:e1:54:08:31:bd:2e:c0:d8:c2:96:75: 8e:43:ed:48:44:cb:96:99:57:5b:b2:bf:9e:9d:cd: c9:b2:39:da:c9:cf:24:4a:09:17:85:de:2a:78:84: 7f:5a:ac:45:d6:20:14:c0:36:4d:eb:2f:bb:ac:ac: 08:81:cd:e4:bd:68:80:59:23:d6:c5:ea:25:e8:b7: 89:9d:36:3f:b3:b8:06:2f:0e:f8:e6:ee:7f:92:33: da:d8:9c:fe:4f:5b:0e:57:2d:ac:ed:bc:ee:c3:c3: 15:87:6b:b8:02:b7:35:a0:72:78:42:3e:29:c0:a5: 43:c1:a4:23:8b:bf:5a:09:47:f4:34:ca:cd:9f:6b: c2:a3:ef:dc:31:8a:3a:fb:26:92:e4:d7:d5:24:07: 9f:e8:f2:90:06:45:1e:6c:d0:3c:8b:f2:e6:bc:1e: 44:33:8d:4b:24:21:59:b2:90:d4:3b:e7:d3:1d:fb: 50:52:36:ea:d7:5c:a5:21:7d:65:c5:ac:ad:9b:9b: 02:ca:15:36:10:94:ee:71:3b:cb:6a:fd:fe:e2:f7: 69:2c:50:ab:8b:07:7f:d5:44:8f:c9:b2:d2:11:6d: 66:d3:ed:03:12:60:93:f0:30:68:6f:33:ff:a6:af: ef:66:8d:64:33:47:3c:8c:83:b9:6f:34:24:75:7c: 58:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:22:C2:52:31:80:C1:3B:52:5A:36:0C:5B:64:A9:3E:E9:18:17:46 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30083b55-0236-4f8d-8387-e3015b3d58d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffc::/32 Signature Algorithm: sha256WithRSAEncryption 3d:2e:1f:df:02:18:f2:75:01:cb:e2:d7:8f:3d:aa:37:3b:85: fb:6d:38:f1:fe:12:2c:27:3d:5f:c0:67:2b:e1:13:52:e2:a5: c0:63:f1:c5:f3:14:3e:f2:98:22:d6:41:47:0f:76:6d:9c:8d: d7:b9:b0:5c:a4:93:42:67:bc:14:d5:c5:93:65:1f:6d:57:e2: 81:d6:94:d4:0a:4c:5e:4e:bc:1c:c5:1d:0d:ea:4d:84:4d:98: 27:9c:1f:11:a1:6c:de:b6:c1:e6:8f:05:f7:40:27:db:54:66: db:07:b8:17:5c:dc:ed:9b:4b:1e:7b:60:8b:e2:7f:d7:09:84: 83:ef:34:7e:38:9b:98:ac:b8:39:66:8a:54:56:1e:e9:8f:23: 07:7d:19:d0:60:e6:90:0d:b6:23:77:55:a0:a6:9d:1e:f1:34: 57:e1:d9:53:6b:e6:a6:90:ec:f7:01:9c:65:1e:75:ee:c4:ff: 79:aa:d5:fa:6a:f4:e6:83:83:0c:11:ce:fa:53:4e:6d:db:d0: ce:7e:e9:06:67:f1:5f:bc:b3:a0:1c:26:cf:b2:f6:2a:69:96: a0:8e:29:a4:f0:bf:86:ec:dd:e0:3d:90:26:e2:25:8f:3a:f4: a7:87:3a:4e:eb:db:81:3a:ed:03:b6:54:4f:b1:4e:a5:c5:0e: c0:8d:c1:4f -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUD7eIWeFyWiq6hENF7TE8IrjWwWkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE5MDAyMDA4WhcNMjcwMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYjBmZTZkYTIzNGY0ZDk0YzI0ZjMxOGIyNzg4N2MxZDFm Y2U2ODFlOWU4YzljNDg0ZWQ1ZmExMjZjNWFlYjZlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4ZWjhVAgxvS7A2MKWdY5D7UhEy5aZV1uyv56dzcmyOdrJ zyRKCReF3ip4hH9arEXWIBTANk3rL7usrAiBzeS9aIBZI9bF6iXot4mdNj+zuAYv Dvjm7n+SM9rYnP5PWw5XLaztvO7DwxWHa7gCtzWgcnhCPinApUPBpCOLv1oJR/Q0 ys2fa8Kj79wxijr7JpLk19UkB5/o8pAGRR5s0DyL8ua8HkQzjUskIVmykNQ759Md +1BSNurXXKUhfWXFrK2bmwLKFTYQlO5xO8tq/f7i92ksUKuLB3/VRI/JstIRbWbT 7QMSYJPwMGhvM/+mr+9mjWQzRzyMg7lvNCR1fFhbAgMBAAGjggKyMIICrjAdBgNV HQ4EFgQUiSLCUjGAwTtSWjYMW2SpPukYF0YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMwMDgzYjU1LTAyMzYtNGY4ZC04Mzg3LWUzMDE1YjNkNThkOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAmAB/8MA0GCSqGSIb3DQEBCwUAA4IBAQA9Lh/fAhjydQHL4tePPao3O4X7 bTjx/hIsJz1fwGcr4RNS4qXAY/HF8xQ+8pgi1kFHD3ZtnI3XubBcpJNCZ7wU1cWT ZR9tV+KB1pTUCkxeTrwcxR0N6k2ETZgnnB8RoWzetsHmjwX3QCfbVGbbB7gXXNzt m0see2CL4n/XCYSD7zR+OJuYrLg5ZopUVh7pjyMHfRnQYOaQDbYjd1Wgpp0e8TRX 4dlTa+amkOz3AZxlHnXuxP95qtX6avTmg4MMEc76U05t29DOfukGZ/FfvLOgHCbP svYqaZagjimk8L+G7N3gPZAm4iWPOvSnhzpO69uBOu0DtlRPsU6lxQ7AjcFP -----END CERTIFICATE-----Generated at Wed Nov 4 10:19:56 2026 by rpki-client