$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ae9d1da-543e-418a-b637-92344451ee1b.roa File: 3ae9d1da-543e-418a-b637-92344451ee1b.roa (raw, json) Hash identifier: FCLXKnHeFzBF57zC0/h8zcTlqmeQtw96vE0WH6jADJg= Subject key identifier: 5F:41:72:28:55:8B:DC:A3:79:77:B3:74:5D:1D:B5:28:0F:58:8C:B3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3C1DAF640A2D67B17EB3A50D8B6B415D4F764771 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ae9d1da-543e-418a-b637-92344451ee1b.roa Signing time: Thu 29 Oct 2026 00:20:30 +0000 ROA not before: Thu 29 Oct 2026 00:20:30 +0000 ROA not after: Wed 27 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fe8:80c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:1d:af:64:0a:2d:67:b1:7e:b3:a5:0d:8b:6b:41:5d:4f:76:47:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 29 00:20:30 2026 GMT Not After : Jan 27 23:59:59 2027 GMT Subject: serialNumber=11f6c5d4f241808f9958908eb38b42b2d6ed7296b5ff86b493d0d82e7704c781, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6c:75:f7:a4:9d:4a:38:9e:c9:3f:a4:ea:6f: d7:f4:7e:bb:5c:60:c9:d2:71:44:e5:8e:21:c5:0c: 91:8e:d1:f8:4d:18:4d:bd:3f:5b:78:0a:6f:99:fb: d2:0f:71:f3:58:bd:04:36:61:d9:50:fb:c8:8f:b7: a0:3d:22:5c:c9:71:aa:7e:25:b7:d2:a3:7e:ae:6b: db:cb:30:4b:c5:85:a6:e2:9e:a5:e1:0c:99:8e:07: 11:31:95:7f:c3:33:6e:ec:cd:db:fc:cb:fe:e3:9e: 90:16:40:32:b6:94:12:fa:a1:2c:9c:01:80:e2:88: 8f:e2:b0:54:56:25:00:a0:8f:84:25:94:88:69:60: 4f:d6:b2:ac:2c:b0:ea:f1:a9:13:78:d7:d1:d0:dd: 91:0b:b1:ff:91:ef:d3:61:31:38:64:71:1f:9c:dc: 71:d1:7c:1c:b8:da:a6:3f:90:07:e3:bb:ac:c7:c0: 98:2c:ab:89:38:ff:d4:aa:6e:8f:15:4b:12:fc:22: 4d:73:d6:9c:0f:bd:43:31:5c:77:d5:88:ce:f2:ec: 6b:98:35:ab:95:78:c0:59:e4:6a:98:bf:fd:73:df: 6e:f3:76:a0:4f:cb:f6:28:c5:02:df:43:82:e6:81: 11:2c:e4:f9:6e:99:25:1a:e0:d0:c0:72:87:af:58: 01:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:41:72:28:55:8B:DC:A3:79:77:B3:74:5D:1D:B5:28:0F:58:8C:B3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ae9d1da-543e-418a-b637-92344451ee1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fe8:80c0::/48 Signature Algorithm: sha256WithRSAEncryption a5:53:49:77:a0:20:7e:87:b1:0f:3b:6c:05:24:48:07:94:2a: c5:99:62:4a:19:83:e3:79:83:c0:04:7f:04:d3:ec:11:1f:80: ce:b0:82:d5:91:49:b9:1d:5a:c5:40:5e:1b:2f:dd:08:5b:26: 82:d5:ae:47:3a:34:2e:e3:e7:33:43:39:a9:c2:05:6e:50:ac: f7:7d:c7:cf:93:44:b1:ed:01:34:04:d1:ae:ea:e4:bf:d0:b8: 30:00:fd:06:cb:13:5c:78:24:9f:36:b8:26:f3:e0:ec:73:38: 33:76:83:ae:6a:22:46:e8:31:52:99:28:ed:29:b0:5b:8e:d9: ff:06:42:5d:35:d0:0e:f7:be:f0:67:94:9a:15:cb:dc:30:01: 6a:70:f2:93:fc:d9:5e:53:b5:8d:b2:70:bf:3e:83:24:5d:77: 51:b5:16:46:a2:7c:f2:56:63:2e:86:03:0b:95:88:f2:d4:6b: 59:fe:dc:b4:3a:50:83:b5:51:2e:2b:da:51:98:7a:db:f3:97: 3d:18:9a:de:6b:bc:36:9d:b6:34:9b:0a:87:54:92:4a:aa:99: 9c:9c:b1:ac:c5:cd:ee:58:43:51:bf:e6:a1:80:e5:6c:88:fa: 68:f4:4d:92:7e:7a:47:6b:e4:88:05:cf:69:18:03:7c:21:95: fc:a6:2f:84 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUPB2vZAotZ7F+s6UNi2tBXU92R3EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI5MDAyMDMwWhcNMjcwMTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMWY2YzVkNGYyNDE4MDhmOTk1ODkwOGViMzhiNDJiMmQ2 ZWQ3Mjk2YjVmZjg2YjQ5M2QwZDgyZTc3MDRjNzgxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxbHX3pJ1KOJ7JP6Tqb9f0frtcYMnScUTljiHFDJGO0fhN GE29P1t4Cm+Z+9IPcfNYvQQ2YdlQ+8iPt6A9IlzJcap+JbfSo36ua9vLMEvFhabi nqXhDJmOBxExlX/DM27szdv8y/7jnpAWQDK2lBL6oSycAYDiiI/isFRWJQCgj4Ql lIhpYE/WsqwssOrxqRN419HQ3ZELsf+R79NhMThkcR+c3HHRfBy42qY/kAfju6zH wJgsq4k4/9Sqbo8VSxL8Ik1z1pwPvUMxXHfViM7y7GuYNauVeMBZ5GqYv/1z327z dqBPy/YoxQLfQ4LmgREs5PlumSUa4NDAcoevWAEnAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUX0FyKFWL3KN5d7N0XR21KA9YjLMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNhZTlkMWRhLTU0M2UtNDE4YS1iNjM3LTkyMzQ0NDUxZWUxYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/ogMAwDQYJKoZIhvcNAQELBQADggEBAKVTSXegIH6HsQ87bAUkSAeU KsWZYkoZg+N5g8AEfwTT7BEfgM6wgtWRSbkdWsVAXhsv3QhbJoLVrkc6NC7j5zND OanCBW5QrPd9x8+TRLHtATQE0a7q5L/QuDAA/QbLE1x4JJ82uCbz4OxzODN2g65q IkboMVKZKO0psFuO2f8GQl010A73vvBnlJoVy9wwAWpw8pP82V5TtY2ycL8+gyRd d1G1FkaifPJWYy6GAwuViPLUa1n+3LQ6UIO1US4r2lGYetvzlz0Ymt5rvDadtjSb CodUkkqqmZycsazFze5YQ1G/5qGA5WyI+mj0TZJ+ekdr5IgFz2kYA3whlfymL4Q= -----END CERTIFICATE-----Generated at Tue Nov 3 19:23:16 2026 by rpki-client