$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35d8b8e0-8b5e-4f54-933c-eff053d0f3a8.roa File: 35d8b8e0-8b5e-4f54-933c-eff053d0f3a8.roa (raw, json) Hash identifier: bfQ+TFnAjuU2D5TA1St1llyW6IrwjZQ5DCSWDcITyxY= Subject key identifier: 72:5D:87:76:91:3A:6B:19:A8:93:39:6D:F8:13:48:E9:FE:7A:C0:BF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5D06FCCD8147616DB26DD189BBA77D71288BD9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35d8b8e0-8b5e-4f54-933c-eff053d0f3a8.roa Signing time: Thu 22 Oct 2026 01:08:10 +0000 ROA not before: Thu 22 Oct 2026 01:08:10 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff2:8060::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:06:fc:cd:81:47:61:6d:b2:6d:d1:89:bb:a7:7d:71:28:8b:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 22 01:08:10 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=2c4b979c44a31bbf7e02517ca06506f0be919304385c1477b125cecc61039b75, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e9:74:3e:80:47:a3:44:53:af:c0:5d:5d:2c: 7e:02:2f:89:67:ad:8e:51:22:8b:86:4d:ec:10:3c: dc:80:36:66:f8:8e:bd:50:02:a3:38:15:84:b1:cd: 51:8f:a8:c3:ed:2b:b2:94:61:e0:c7:b2:8d:16:18: fe:2c:2f:44:07:7d:a5:2a:79:0a:8c:a6:90:9a:c1: 84:2b:98:9a:6b:84:22:ad:32:ee:bb:c9:4a:6c:9c: 31:22:d0:9d:53:db:0c:bd:b3:82:9b:c3:f8:ad:27: 1b:64:c4:8f:f7:fd:32:f3:6c:47:9e:66:ba:a9:c2: b0:81:83:07:e6:8c:1a:27:d7:54:b0:5c:0e:db:d1: fa:e4:76:78:3b:ad:da:c4:3e:3a:3b:1f:7f:0e:b4: 1d:73:8a:f7:17:37:bd:9f:d9:5f:89:c4:af:94:f1: 42:3f:15:32:fa:bf:54:51:5c:f6:3f:08:70:c4:ba: ac:11:76:05:38:a0:4d:c2:0a:76:70:99:ae:b6:9c: 37:8c:da:e6:be:c1:fb:5a:0e:e8:9b:1c:ca:50:b2: db:a6:87:dc:f5:d8:ff:f2:c4:9b:d6:81:fa:3d:f4: f4:e1:09:99:c4:ea:12:40:12:f1:4a:6f:83:43:4b: 5c:f1:2a:d0:22:55:5d:7a:d7:48:19:2e:a6:4e:de: da:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:5D:87:76:91:3A:6B:19:A8:93:39:6D:F8:13:48:E9:FE:7A:C0:BF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35d8b8e0-8b5e-4f54-933c-eff053d0f3a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff2:8060::/48 Signature Algorithm: sha256WithRSAEncryption 0e:ba:eb:41:b4:59:e4:ae:54:0b:23:10:2c:9e:bb:2a:05:99: a7:75:e5:f1:8b:73:83:83:1c:ef:df:81:20:e2:46:79:de:59: 95:33:a2:9a:6e:98:ee:fc:ad:f1:a4:a1:06:f1:58:c8:4e:b4: c1:5b:8c:d3:d9:1f:7b:34:4b:8d:fd:81:9a:73:e2:ff:fd:78: 17:95:62:09:f8:13:6c:91:ff:d1:7b:5c:5b:c4:ab:c7:35:06: 71:0a:7f:ea:6d:be:27:f3:6a:ef:0a:a5:71:7e:65:17:57:03: 79:11:42:1a:02:83:92:34:7a:3e:ed:7a:ed:95:c8:42:e2:e4: 6c:d6:0d:7e:94:4a:8a:f8:56:a6:9a:e2:c6:5a:d6:25:bd:11: 99:3b:4b:c1:a9:4b:fb:e8:9b:54:47:ee:6c:83:ef:9d:da:b5: 73:73:c7:aa:b5:5b:c1:70:63:52:95:3c:d0:59:b9:5c:c1:fe: 0a:00:2b:d5:f7:be:84:a8:91:d2:2d:50:96:05:5e:ea:88:f8: ed:90:3b:10:5a:18:4f:8c:c3:e9:54:04:f7:96:4e:33:fd:72: bc:47:11:52:80:f3:ad:8f:d8:ad:9b:49:fe:a9:d7:5d:0e:1e: 46:8c:14:fb:d7:7a:58:7f:f6:34:62:91:b1:e1:e7:e0:38:a7: 35:f2:1e:bf -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgITXQb8zYFHYW2ybdGJu6d9cSiL2TANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNjEwMjIwMTA4MTBaFw0yNzAxMjAyMzU5NTla MHoxSTBHBgNVBAUTQDJjNGI5NzljNDRhMzFiYmY3ZTAyNTE3Y2EwNjUwNmYwYmU5 MTkzMDQzODVjMTQ3N2IxMjVjZWNjNjEwMzliNzUxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAODpdD6AR6NEU6/AXV0sfgIviWetjlEii4ZN7BA83IA2ZviO vVACozgVhLHNUY+ow+0rspRh4MeyjRYY/iwvRAd9pSp5CoymkJrBhCuYmmuEIq0y 7rvJSmycMSLQnVPbDL2zgpvD+K0nG2TEj/f9MvNsR55muqnCsIGDB+aMGifXVLBc DtvR+uR2eDut2sQ+Ojsffw60HXOK9xc3vZ/ZX4nEr5TxQj8VMvq/VFFc9j8IcMS6 rBF2BTigTcIKdnCZrracN4za5r7B+1oO6JscylCy26aH3PXY//LEm9aB+j309OEJ mcTqEkAS8Upvg0NLXPEq0CJVXXrXSBkupk7e2qcCAwEAAaOCArQwggKwMB0GA1Ud DgQWBBRyXYd2kTprGaiTOW34E0jp/nrAvzAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvMzVkOGI4ZTAtOGI1ZS00ZjU0LTkzM2MtZWZmMDUzZDBmM2E4LnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHACYAH/KAYDANBgkqhkiG9w0BAQsFAAOCAQEADrrrQbRZ5K5UCyMQLJ67KgWZ p3Xl8Ytzg4Mc79+BIOJGed5ZlTOimm6Y7vyt8aShBvFYyE60wVuM09kfezRLjf2B mnPi//14F5ViCfgTbJH/0XtcW8SrxzUGcQp/6m2+J/Nq7wqlcX5lF1cDeRFCGgKD kjR6Pu167ZXIQuLkbNYNfpRKivhWpprixlrWJb0RmTtLwalL++ibVEfubIPvndq1 c3PHqrVbwXBjUpU80Fm5XMH+CgAr1fe+hKiR0i1QlgVe6oj47ZA7EFoYT4zD6VQE 95ZOM/1yvEcRUoDzrY/YrZtJ/qnXXQ4eRowU+9d6WH/2NGKRseHn4DinNfIevw== -----END CERTIFICATE-----Generated at Wed Nov 4 07:21:44 2026 by rpki-client