$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3d71a0d0-152f-4f2e-ba5f-6eda48d8e284.roa File: 3d71a0d0-152f-4f2e-ba5f-6eda48d8e284.roa (raw, json) Hash identifier: 8cWAdvK4YvFSb7M6neRPQDv9W18mn8nMhNsnc0Ah7Ok= Subject key identifier: BE:C6:90:EC:B1:C1:60:28:5C:80:41:A8:C1:43:CA:31:A7:73:13:EE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 78FDE4C71BA1AB5D1B9F18C76782B6F4E7FF3122 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3d71a0d0-152f-4f2e-ba5f-6eda48d8e284.roa Signing time: Thu 15 Oct 2026 00:40:48 +0000 ROA not before: Thu 15 Oct 2026 00:40:48 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f25:c000::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:fd:e4:c7:1b:a1:ab:5d:1b:9f:18:c7:67:82:b6:f4:e7:ff:31:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 15 00:40:48 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=6a6d049e6a408557c987efd0d4e0f83bfa1083abc629349fa1520f2239f02def, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c5:4d:d4:3f:7a:a0:bd:13:65:bb:8a:a9:d0: 44:3e:4d:bf:3a:81:e8:cf:9d:e2:d9:3f:56:71:2e: f8:4a:2a:ea:2c:91:e6:92:78:5c:b6:38:6d:c1:49: 01:0d:53:f5:c0:44:52:0b:72:66:ee:43:f3:45:0d: 92:ce:38:38:52:f4:da:c8:6c:82:8e:43:4f:50:ef: ca:65:bb:24:41:0c:76:39:20:a4:bb:82:72:23:58: 62:78:78:34:30:2c:ff:03:fe:79:35:d1:b1:4c:22: f9:7f:3f:b7:bb:0b:ab:af:1f:55:47:d2:e7:1a:77: 48:da:85:d1:50:07:1e:71:05:f3:37:d9:5d:ea:33: fe:99:ef:4a:d3:db:e1:3b:a3:aa:1a:01:41:ec:f7: ef:65:0a:6c:b1:1d:ac:06:73:db:25:29:c7:27:2a: 61:25:fe:f4:a7:16:e7:a2:7b:e1:78:03:e8:a7:3f: bf:2f:0d:32:a5:4d:74:53:f4:3d:ee:ec:5b:2a:c8: d5:c1:2a:44:52:fa:19:3b:51:33:6f:c9:dc:b0:d1: c8:9d:c9:6c:60:f0:cc:23:cc:9e:b6:e4:8f:8a:28: 97:cf:e3:d0:11:64:70:94:e7:8d:e0:b4:83:95:44: 10:6a:06:aa:f2:a0:71:10:2b:05:31:44:5f:f4:d1: 32:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:C6:90:EC:B1:C1:60:28:5C:80:41:A8:C1:43:CA:31:A7:73:13:EE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3d71a0d0-152f-4f2e-ba5f-6eda48d8e284.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f25:c000::/37 Signature Algorithm: sha256WithRSAEncryption 77:dc:65:07:ca:b2:c7:fd:3d:eb:7d:e0:b3:94:7d:f3:9b:ce: 2b:37:68:2a:66:2b:79:3b:ee:cf:00:8d:54:c8:75:34:1c:25: dc:df:93:03:da:5c:cf:f2:8d:10:40:ee:75:90:07:23:1c:67: cb:16:b2:f3:9a:06:0b:59:9f:bb:e7:ea:9e:72:b4:c4:3d:9f: 11:c0:5c:61:07:c8:d0:2b:e5:35:9e:e6:00:81:2c:59:3a:31: f0:8f:84:d3:a6:11:ec:03:f1:16:c7:d1:c9:e4:6a:e8:42:26: 61:dd:50:06:23:10:f1:fe:63:9e:63:9b:c7:b8:0a:7d:3e:31: 37:de:9d:79:bc:a7:53:cd:54:ca:7d:46:d8:04:0f:6f:1e:5a: 21:b7:b7:f0:34:99:d4:c3:f0:ca:57:2e:b1:10:67:bd:c0:29: c7:44:55:15:ee:bf:2f:73:50:40:de:e9:94:f0:2a:9a:4c:e5: 51:65:b7:9d:ec:cd:c3:13:b7:53:42:09:0d:bd:0f:cb:c2:57: 1b:f8:68:41:fa:b4:e2:53:0c:d0:8c:63:fb:88:fb:71:34:2a: 75:45:23:6c:5c:bb:ed:ba:b1:50:9e:fe:2c:d6:09:24:85:6a: 2c:23:49:2b:5b:24:b9:97:79:19:28:19:40:51:2c:f3:19:ba: b4:4a:34:40 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUeP3kxxuhq10bnxjHZ4K29Of/MSIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE1MDA0MDQ4WhcNMjcwMTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2YTZkMDQ5ZTZhNDA4NTU3Yzk4N2VmZDBkNGUwZjgzYmZh MTA4M2FiYzYyOTM0OWZhMTUyMGYyMjM5ZjAyZGVmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUxU3UP3qgvRNlu4qp0EQ+Tb86gejPneLZP1ZxLvhKKuos keaSeFy2OG3BSQENU/XARFILcmbuQ/NFDZLOODhS9NrIbIKOQ09Q78pluyRBDHY5 IKS7gnIjWGJ4eDQwLP8D/nk10bFMIvl/P7e7C6uvH1VH0ucad0jahdFQBx5xBfM3 2V3qM/6Z70rT2+E7o6oaAUHs9+9lCmyxHawGc9slKccnKmEl/vSnFueie+F4A+in P78vDTKlTXRT9D3u7FsqyNXBKkRS+hk7UTNvydyw0cidyWxg8MwjzJ625I+KKJfP 49ARZHCU543gtIOVRBBqBqryoHEQKwUxRF/00TL7AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUvsaQ7LHBYChcgEGowUPKMadzE+4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNkNzFhMGQwLTE1MmYtNGYyZS1iYTVmLTZlZGE0OGQ4ZTI4NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8lwDANBgkqhkiG9w0BAQsFAAOCAQEAd9xlB8qyx/09633gs5R985vO KzdoKmYreTvuzwCNVMh1NBwl3N+TA9pcz/KNEEDudZAHIxxnyxay85oGC1mfu+fq nnK0xD2fEcBcYQfI0CvlNZ7mAIEsWTox8I+E06YR7APxFsfRyeRq6EImYd1QBiMQ 8f5jnmObx7gKfT4xN96debynU81Uyn1G2AQPbx5aIbe38DSZ1MPwylcusRBnvcAp x0RVFe6/L3NQQN7plPAqmkzlUWW3nezNwxO3U0IJDb0Py8JXG/hoQfq04lMM0Ixj +4j7cTQqdUUjbFy77bqxUJ7+LNYJJIVqLCNJK1skuZd5GSgZQFEs8xm6tEo0QA== -----END CERTIFICATE-----Generated at Wed Nov 4 03:35:29 2026 by rpki-client