$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40d34c5a-5089-4544-85d2-37c75af53934.roa File: 40d34c5a-5089-4544-85d2-37c75af53934.roa (raw, json) Hash identifier: pDAjt4zNNqfhSDtv9fUGWlnlPCM65eUDv/1YfRot0Ds= Subject key identifier: FE:5F:0A:E0:23:12:2C:73:9A:8D:C5:39:F6:83:C5:DF:03:16:44:B6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3F1E851166F916D029F6C4B046748B5E8BD1853A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40d34c5a-5089-4544-85d2-37c75af53934.roa Signing time: Fri 23 Oct 2026 01:20:51 +0000 ROA not before: Fri 23 Oct 2026 01:20:51 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f10:c000::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:1e:85:11:66:f9:16:d0:29:f6:c4:b0:46:74:8b:5e:8b:d1:85:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 23 01:20:51 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=ddb6d69173121304f583938581f5927bb48ec9b7dd88cf3f093ef017f08bc93a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:07:ec:70:d4:15:fc:d0:5a:85:99:65:b4:47: 12:43:70:31:13:5a:59:30:10:c6:1a:0f:9e:0c:a2: 6f:e2:39:84:31:ed:21:4e:70:b6:47:b1:d5:98:10: 19:7c:3f:29:c4:0a:38:79:fc:f5:1c:80:11:84:f3: ef:9a:37:7f:ce:f0:0f:98:2d:17:51:e4:65:4c:11: 8a:ab:b5:29:df:26:54:56:e5:57:4c:1c:47:c8:e7: 58:b9:53:22:8c:69:d5:e1:cd:0e:48:b9:a0:0c:0c: 1e:8c:43:f8:a9:2c:f8:45:2a:31:41:46:e5:c6:3e: b4:d8:ec:ad:a2:70:74:f0:f7:5c:ff:8d:ec:92:e9: ed:70:49:66:a7:2d:bc:d5:86:60:c9:7b:85:ba:83: c2:34:72:08:d7:d0:6e:ed:d4:5d:8e:b6:2f:27:96: d1:66:79:69:a2:95:7d:df:69:f9:0d:93:1a:cd:5f: 31:49:13:1e:44:d5:0c:00:70:1d:45:37:08:ef:46: 18:b7:a0:7e:9f:74:35:13:ae:39:dd:92:84:9c:f6: 47:1c:bd:52:bc:7a:01:dc:f4:45:31:b2:52:56:f4: 99:69:a6:e4:d3:54:79:65:16:7b:b4:f5:15:08:5f: 8d:f7:e5:03:18:b4:48:0b:91:08:c5:17:5f:6a:e8: 3c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:5F:0A:E0:23:12:2C:73:9A:8D:C5:39:F6:83:C5:DF:03:16:44:B6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40d34c5a-5089-4544-85d2-37c75af53934.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f10:c000::/37 Signature Algorithm: sha256WithRSAEncryption c7:9f:ce:5d:b3:7d:10:22:fc:ba:a6:79:53:94:02:49:5b:43: 1f:a2:28:c0:1a:78:25:f8:8b:42:fc:c1:37:3e:ef:31:d5:30: ca:3f:62:c3:c2:d9:93:56:6f:b4:4e:25:f9:9c:88:ea:3a:39: 42:f4:ea:cf:e3:9d:54:dc:b8:69:0e:74:f0:99:b4:2a:35:5a: d7:7b:d8:8b:2d:51:87:88:1a:3c:c7:6c:c4:83:70:8d:d6:76: 0a:d4:c9:b0:05:10:9a:ce:d5:f9:33:a1:d2:50:48:57:6e:6e: 2a:5f:10:8b:6d:2b:a1:cd:19:53:bb:43:97:5c:d5:4e:2e:ba: 6e:34:88:4c:4b:6b:e9:82:8a:89:6d:c0:84:07:59:a3:7a:d5: 06:b7:6f:d6:71:5f:22:48:18:9a:9a:75:cd:75:3b:64:4a:95: 11:58:85:67:d7:0f:21:e6:e5:ff:2e:56:d2:10:dd:1b:38:ab: 5b:d1:42:1b:30:96:8f:b5:4c:03:c1:f2:fb:83:63:a4:6c:a4: 42:78:ca:bc:72:44:73:c4:8d:c7:47:6f:ad:73:0e:98:54:e9: ea:8d:d4:f5:74:13:3e:5f:b3:c9:56:65:3e:9d:c8:e2:47:a7: 4b:42:e7:c2:c3:28:2d:51:d0:e2:75:b9:45:dc:be:6d:6b:91: 4f:40:73:00 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUPx6FEWb5FtAp9sSwRnSLXovRhTowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDEyMDUxWhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZGI2ZDY5MTczMTIxMzA0ZjU4MzkzODU4MWY1OTI3YmI0 OGVjOWI3ZGQ4OGNmM2YwOTNlZjAxN2YwOGJjOTNhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXB+xw1BX80FqFmWW0RxJDcDETWlkwEMYaD54Mom/iOYQx 7SFOcLZHsdWYEBl8PynECjh5/PUcgBGE8++aN3/O8A+YLRdR5GVMEYqrtSnfJlRW 5VdMHEfI51i5UyKMadXhzQ5IuaAMDB6MQ/ipLPhFKjFBRuXGPrTY7K2icHTw91z/ jeyS6e1wSWanLbzVhmDJe4W6g8I0cgjX0G7t1F2Oti8nltFmeWmilX3fafkNkxrN XzFJEx5E1QwAcB1FNwjvRhi3oH6fdDUTrjndkoSc9kccvVK8egHc9EUxslJW9Jlp puTTVHllFnu09RUIX4335QMYtEgLkQjFF19q6DyNAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU/l8K4CMSLHOajcU59oPF3wMWRLYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQwZDM0YzVhLTUwODktNDU0NC04NWQyLTM3Yzc1YWY1MzkzNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8QwDANBgkqhkiG9w0BAQsFAAOCAQEAx5/OXbN9ECL8uqZ5U5QCSVtD H6IowBp4JfiLQvzBNz7vMdUwyj9iw8LZk1ZvtE4l+ZyI6jo5QvTqz+OdVNy4aQ50 8Jm0KjVa13vYiy1Rh4gaPMdsxINwjdZ2CtTJsAUQms7V+TOh0lBIV25uKl8Qi20r oc0ZU7tDl1zVTi66bjSITEtr6YKKiW3AhAdZo3rVBrdv1nFfIkgYmpp1zXU7ZEqV EViFZ9cPIebl/y5W0hDdGzirW9FCGzCWj7VMA8Hy+4NjpGykQnjKvHJEc8SNx0dv rXMOmFTp6o3U9XQTPl+zyVZlPp3I4kenS0LnwsMoLVHQ4nW5Rdy+bWuRT0BzAA== -----END CERTIFICATE-----Generated at Mon Nov 2 22:30:58 2026 by rpki-client