$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40224638-a28e-4f61-9972-f1bcb7774c46.roa File: 40224638-a28e-4f61-9972-f1bcb7774c46.roa (raw, json) Hash identifier: KYslQZX3ShXewNgC74jfBPd/HAiO1+zyGSLP208kjOc= Subject key identifier: D1:5F:C7:72:53:7C:0D:EA:CB:55:F3:9D:2D:55:1E:DA:83:A9:EC:C8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 137D7BEF4D14645DD5A55815220E5DD8E4FA2693 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40224638-a28e-4f61-9972-f1bcb7774c46.roa Signing time: Mon 19 Oct 2026 00:50:06 +0000 ROA not before: Mon 19 Oct 2026 00:50:06 +0000 ROA not after: Sun 17 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fa0:2c00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:7d:7b:ef:4d:14:64:5d:d5:a5:58:15:22:0e:5d:d8:e4:fa:26:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 19 00:50:06 2026 GMT Not After : Jan 17 23:59:59 2027 GMT Subject: serialNumber=0441a1fa80435607a9e9ac61f40c3f2f1c743e6f7cb02b1c937e85e23a58d9ca, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:03:f9:69:f4:18:14:f6:de:6a:8d:e0:b1:31: b2:cc:8e:04:a8:f3:1c:d9:f1:5f:ce:83:9c:9f:06: 1e:69:6c:1d:a9:fa:28:48:32:97:6e:74:27:93:9c: 81:d6:e1:3d:d5:7f:f8:c3:e3:c9:ab:bb:81:b6:f9: 23:3e:90:ed:68:f0:57:96:77:0c:af:8f:e3:76:21: fc:0e:ab:0a:03:80:54:43:e5:82:56:e1:90:15:a1: 33:fc:e1:56:01:c9:b7:d8:e4:a7:12:cb:0d:75:de: ae:2a:95:9a:69:ab:c0:b9:d2:3a:02:36:f6:c9:93: b3:5b:bc:44:8d:2b:97:99:17:2a:93:d3:b2:63:99: e2:70:d4:d3:e3:a7:df:dd:ad:ea:34:88:f4:b5:69: d8:f7:98:00:b4:46:9b:d5:f3:2f:41:fc:d7:8a:26: ba:f0:da:47:e9:92:da:cb:e7:df:2b:34:6e:28:dd: 63:59:34:bf:ee:37:4e:a0:a8:0c:7b:7a:11:d3:f4: d7:c6:25:32:84:de:00:7c:6e:9c:5e:9e:78:ea:70: 35:a7:b2:e5:a5:9b:55:79:1a:17:8e:c1:65:33:0f: 0d:cb:fa:b5:e8:76:6d:89:6f:a6:b9:87:e8:51:a7: 2a:8e:6f:76:3d:35:a7:e2:5e:65:19:f7:d6:0c:84: 9f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:5F:C7:72:53:7C:0D:EA:CB:55:F3:9D:2D:55:1E:DA:83:A9:EC:C8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40224638-a28e-4f61-9972-f1bcb7774c46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fa0:2c00::/40 Signature Algorithm: sha256WithRSAEncryption b0:21:66:e1:63:b3:db:4c:bb:98:e3:63:0a:27:dc:b9:7b:d7: 88:88:51:06:78:f3:3a:6d:32:9d:51:46:8d:3e:86:14:eb:10: e6:02:6f:2e:6c:e8:b3:4d:7c:97:a7:7d:eb:4f:7c:84:c3:97: f7:87:b8:5f:3c:50:29:80:b6:fb:38:4d:c0:bf:30:b2:a7:6e: 52:e2:1d:3e:e4:2a:29:dc:1f:5b:28:77:b4:85:d9:18:bb:96: f3:fd:6c:74:00:4e:30:80:14:40:5d:c8:35:83:0d:9b:45:a0: a8:21:c2:62:4a:20:e2:5c:92:a6:cb:86:3b:eb:3e:18:01:67: 17:4b:48:44:84:05:43:09:80:11:f3:d5:28:55:cf:b5:34:cc: 6b:0f:f5:8e:b1:eb:dc:59:bf:cf:a0:99:22:99:91:e4:0b:03: 12:6d:53:a8:b8:9f:c6:e7:3b:9a:14:ba:b8:87:72:b1:a4:40: ee:00:cd:3f:b3:93:53:12:55:c0:4a:7d:76:f3:d7:c4:ea:a3: 6a:d0:77:38:2b:93:df:c4:32:7b:da:0e:dd:22:fe:f6:9a:15: d2:3b:21:c6:2d:bd:36:4d:8a:1a:4a:cc:1c:27:08:9f:d5:34: bd:4e:07:e5:09:4e:f7:4f:3a:bd:1c:53:c8:08:0d:33:d2:56: 86:9b:15:3a -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUE317700UZF3VpVgVIg5d2OT6JpMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE5MDA1MDA2WhcNMjcwMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNDQxYTFmYTgwNDM1NjA3YTllOWFjNjFmNDBjM2YyZjFj NzQzZTZmN2NiMDJiMWM5MzdlODVlMjNhNThkOWNhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSA/lp9BgU9t5qjeCxMbLMjgSo8xzZ8V/Og5yfBh5pbB2p +ihIMpdudCeTnIHW4T3Vf/jD48mru4G2+SM+kO1o8FeWdwyvj+N2IfwOqwoDgFRD 5YJW4ZAVoTP84VYBybfY5KcSyw113q4qlZppq8C50joCNvbJk7NbvESNK5eZFyqT 07JjmeJw1NPjp9/dreo0iPS1adj3mAC0RpvV8y9B/NeKJrrw2kfpktrL598rNG4o 3WNZNL/uN06gqAx7ehHT9NfGJTKE3gB8bpxennjqcDWnsuWlm1V5GheOwWUzDw3L +rXodm2Jb6a5h+hRpyqOb3Y9NafiXmUZ99YMhJ/1AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU0V/HclN8DerLVfOdLVUe2oOp7MgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQwMjI0NjM4LWEyOGUtNGY2MS05OTcyLWYxYmNiNzc3NGM0Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+gLDANBgkqhkiG9w0BAQsFAAOCAQEAsCFm4WOz20y7mONjCifcuXvX iIhRBnjzOm0ynVFGjT6GFOsQ5gJvLmzos018l6d96098hMOX94e4XzxQKYC2+zhN wL8wsqduUuIdPuQqKdwfWyh3tIXZGLuW8/1sdABOMIAUQF3INYMNm0WgqCHCYkog 4lySpsuGO+s+GAFnF0tIRIQFQwmAEfPVKFXPtTTMaw/1jrHr3Fm/z6CZIpmR5AsD Em1TqLifxuc7mhS6uIdysaRA7gDNP7OTUxJVwEp9dvPXxOqjatB3OCuT38Qye9oO 3SL+9poV0jshxi29Nk2KGkrMHCcIn9U0vU4H5QlO9086vRxTyAgNM9JWhpsVOg== -----END CERTIFICATE-----Generated at Tue Nov 3 16:21:20 2026 by rpki-client