$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38e49101-eb4d-4830-aa00-47d23d0dd27f.roa File: 38e49101-eb4d-4830-aa00-47d23d0dd27f.roa (raw, json) Hash identifier: g0W5a39ftrpf77dDH/R0+qffGygb+qjlc5Ya4G8Qq0g= Subject key identifier: B6:5D:42:5C:8D:6A:82:18:DF:54:AD:77:16:CD:E9:D0:5C:F3:59:96 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 30E2F1D0D888A54F28FA559736DA82106DA22315 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38e49101-eb4d-4830-aa00-47d23d0dd27f.roa Signing time: Thu 29 Oct 2026 00:41:38 +0000 ROA not before: Thu 29 Oct 2026 00:41:38 +0000 ROA not after: Wed 27 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fe8:c0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:e2:f1:d0:d8:88:a5:4f:28:fa:55:97:36:da:82:10:6d:a2:23:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 29 00:41:38 2026 GMT Not After : Jan 27 23:59:59 2027 GMT Subject: serialNumber=ea58f579b8f2373ff95ceda43fa47eafd03aa6d4e93de865684a0c5a759aaff7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ef:0a:81:63:06:8a:56:8d:52:f2:09:cf:da: b5:ba:cc:b3:60:b2:66:7d:17:df:6d:43:4b:01:a1: 3c:12:3d:82:d0:dd:fc:0e:3c:56:83:82:4a:fa:1c: 8c:de:53:8e:8c:46:7e:07:8f:63:83:b5:28:92:81: 09:98:41:99:73:a1:39:37:10:89:cb:e1:6a:3a:06: b5:65:94:32:b6:02:c8:8a:b8:a8:fc:ef:73:dd:75: b3:0a:71:c7:f1:8b:27:75:c0:fa:fa:cf:29:d6:90: 73:4c:16:a4:08:67:30:25:e7:f3:f8:cc:1a:4f:2f: ac:b3:1f:93:9a:49:ed:2c:74:4e:5b:e7:e9:98:58: 26:b1:8b:41:62:47:8e:94:58:72:d0:85:7b:f1:16: e3:16:b1:a8:de:1f:2a:ae:96:8f:64:10:68:d3:fc: ca:cf:a7:13:7e:2e:5b:63:15:7c:a7:b8:e3:82:c5: 97:69:bd:2e:83:12:9c:c0:24:2f:92:39:26:4c:6f: 1c:e2:36:d5:7d:43:6b:00:c9:43:3a:ed:05:d6:ad: e7:28:66:ec:4e:ad:3d:ec:2c:d0:d7:d5:8a:80:66: 54:34:c9:49:25:a6:ec:e3:9d:5d:05:62:87:b3:3f: 41:59:7d:8b:e0:ca:9e:97:db:0f:f7:b9:05:63:be: 68:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:5D:42:5C:8D:6A:82:18:DF:54:AD:77:16:CD:E9:D0:5C:F3:59:96 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38e49101-eb4d-4830-aa00-47d23d0dd27f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fe8:c0c0::/48 Signature Algorithm: sha256WithRSAEncryption 02:80:e4:46:53:60:2e:35:65:a7:9d:c5:80:06:00:88:9d:95: e9:30:11:84:77:60:5d:27:bf:5b:84:bc:f6:0a:ac:21:a6:da: 66:4c:5c:8b:80:82:f8:50:d1:f2:23:db:79:88:f5:cd:fc:88: cb:3e:d4:bf:90:68:5b:ec:dd:72:d3:7d:7a:80:8b:1e:fb:06: 1b:c6:04:6b:1a:be:05:51:94:2c:a9:74:fc:6a:f7:06:d6:97: 24:28:32:9d:39:be:2d:01:2b:f2:27:2d:a0:8d:33:cd:db:1e: 59:8e:8c:e0:e6:fc:b2:4d:ac:1f:8f:47:16:52:df:9d:2d:42: c8:6b:1a:d6:ba:bc:81:dc:da:5f:3a:5a:2e:20:4c:a7:11:b2: fc:5b:0b:8b:e1:0a:4c:4b:bb:8f:27:87:5b:aa:31:04:aa:cc: 1b:68:51:98:22:4c:46:60:33:90:b2:75:6a:a7:07:70:8f:d5: a1:b8:a9:5d:ba:88:b3:38:2b:de:d0:24:b6:79:2a:66:a7:ef: 93:79:35:49:a8:75:34:fb:e9:b2:5b:28:7b:5a:2f:2a:fa:bf: 6b:ab:e4:57:d5:24:38:29:dc:e0:85:a8:0b:e4:08:a4:6b:28: 7c:b4:b0:c1:db:55:fc:e2:01:a3:65:f6:d7:49:51:4c:2a:de: e2:a8:d8:28 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMOLx0NiIpU8o+lWXNtqCEG2iIxUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI5MDA0MTM4WhcNMjcwMTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlYTU4ZjU3OWI4ZjIzNzNmZjk1Y2VkYTQzZmE0N2VhZmQw M2FhNmQ0ZTkzZGU4NjU2ODRhMGM1YTc1OWFhZmY3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCV7wqBYwaKVo1S8gnP2rW6zLNgsmZ9F99tQ0sBoTwSPYLQ 3fwOPFaDgkr6HIzeU46MRn4Hj2ODtSiSgQmYQZlzoTk3EInL4Wo6BrVllDK2AsiK uKj873PddbMKccfxiyd1wPr6zynWkHNMFqQIZzAl5/P4zBpPL6yzH5OaSe0sdE5b 5+mYWCaxi0FiR46UWHLQhXvxFuMWsajeHyqulo9kEGjT/MrPpxN+LltjFXynuOOC xZdpvS6DEpzAJC+SOSZMbxziNtV9Q2sAyUM67QXWrecoZuxOrT3sLNDX1YqAZlQ0 yUklpuzjnV0FYoezP0FZfYvgyp6X2w/3uQVjvmi7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUtl1CXI1qghjfVK13Fs3p0FzzWZYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM4ZTQ5MTAxLWViNGQtNDgzMC1hYTAwLTQ3ZDIzZDBkZDI3Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/owMAwDQYJKoZIhvcNAQELBQADggEBAAKA5EZTYC41ZaedxYAGAIid lekwEYR3YF0nv1uEvPYKrCGm2mZMXIuAgvhQ0fIj23mI9c38iMs+1L+QaFvs3XLT fXqAix77BhvGBGsavgVRlCypdPxq9wbWlyQoMp05vi0BK/InLaCNM83bHlmOjODm /LJNrB+PRxZS350tQshrGta6vIHc2l86Wi4gTKcRsvxbC4vhCkxLu48nh1uqMQSq zBtoUZgiTEZgM5CydWqnB3CP1aG4qV26iLM4K97QJLZ5Kman75N5NUmodTT76bJb KHtaLyr6v2ur5FfVJDgp3OCFqAvkCKRrKHy0sMHbVfziAaNl9tdJUUwq3uKo2Cg= -----END CERTIFICATE-----Generated at Tue Nov 3 19:20:14 2026 by rpki-client