$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/43963ea9-c865-4cb5-b075-eea3df535429.roa File: 43963ea9-c865-4cb5-b075-eea3df535429.roa (raw, json) Hash identifier: jvfGAd9le2yMGqLRXhjM+5lrlrciiiYvBy78v4UcRJw= Subject key identifier: 45:44:B1:AC:18:1F:4D:9D:97:4B:C1:F3:A0:8A:02:E8:9F:BC:9A:79 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 125D1ED8290438FD6352E5590A664EBBD52BD4F0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/43963ea9-c865-4cb5-b075-eea3df535429.roa Signing time: Tue 06 Oct 2026 00:20:07 +0000 ROA not before: Tue 06 Oct 2026 00:20:07 +0000 ROA not after: Mon 04 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffd:83d2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:5d:1e:d8:29:04:38:fd:63:52:e5:59:0a:66:4e:bb:d5:2b:d4:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 6 00:20:07 2026 GMT Not After : Jan 4 23:59:59 2027 GMT Subject: serialNumber=7bf38cc70da891eb44cd47b037cbc6d508970b4a511aa4cfe6375b85b115022c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0d:62:56:6c:34:1d:8a:a7:b3:e6:01:2c:18: 31:a1:0a:bf:a9:9a:fb:f1:90:f6:d1:77:c3:c5:23: 52:a8:7c:05:00:c8:1f:18:0a:2f:72:78:4c:2b:20: 82:2c:7b:ba:ec:29:85:75:8c:5a:13:2e:0c:f5:6f: 47:79:f5:32:a0:e9:fc:54:35:be:bf:46:7b:c4:81: d3:a0:c5:ef:b9:a5:f0:25:eb:eb:e3:ad:53:6a:87: 3c:b4:47:35:44:de:e2:2d:1c:e7:fb:1b:58:8d:c0: c8:fb:f0:cb:46:fe:a3:4b:97:3a:31:dc:f5:2b:00: b8:9e:51:88:62:f0:e4:b7:d2:b6:8f:4b:4f:9c:ad: e6:0f:13:ec:19:08:b0:a6:34:86:d2:dd:3b:15:da: 65:23:ba:d1:93:3f:9c:a7:27:01:cd:7c:a0:c9:66: 88:f4:cf:8a:3d:af:e3:5c:b1:ac:1a:8d:f9:0d:e7: 13:83:50:e8:11:7f:49:c4:e1:d9:a9:54:65:0a:48: ab:19:7e:5c:c2:a6:66:e0:b9:66:e3:28:de:a1:d8: b0:87:e0:68:df:92:96:05:24:eb:66:ed:54:52:00: 52:dd:4d:d3:5a:0e:82:4c:a7:df:25:9e:34:55:64: ce:ba:01:70:85:ad:97:f2:c7:63:e3:7e:fa:6a:a4: 25:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:44:B1:AC:18:1F:4D:9D:97:4B:C1:F3:A0:8A:02:E8:9F:BC:9A:79 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/43963ea9-c865-4cb5-b075-eea3df535429.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffd:83d2::/48 Signature Algorithm: sha256WithRSAEncryption 36:68:7f:56:28:f2:37:c2:1f:3f:ab:ba:33:75:9c:ba:22:20: 51:51:9a:61:87:91:8b:08:80:96:23:87:93:6c:91:a7:1a:53: 0c:85:ea:9b:c6:8d:5a:2e:33:f1:9a:f0:3e:20:a1:f8:9c:c0: 87:68:fb:13:64:bd:dc:45:2d:08:01:7d:33:7e:25:67:53:04: c0:a8:6b:97:22:b2:50:81:31:ba:c3:75:ce:44:f6:cf:47:7f: d9:12:5b:8d:64:00:ff:fc:a1:24:b4:37:10:b0:17:f8:89:e6: e4:f4:e9:8d:43:77:7e:a8:c5:35:b2:ff:17:d8:e9:22:39:02: 69:50:0a:20:20:86:d7:64:f7:14:a4:c5:13:dc:7b:01:d9:77: d5:48:9a:a4:a7:5c:3d:da:07:c7:60:80:f4:6e:29:43:b7:05: 52:5e:f5:f4:6a:02:e8:bd:8b:92:8d:a0:db:f8:be:b1:f3:e3: 0c:23:48:a6:15:38:88:9f:93:91:b0:c7:4d:63:eb:50:28:b2: 6b:84:bd:a2:ad:70:65:19:a5:45:f3:87:53:a9:2e:be:3d:fb: 4d:a7:a8:4d:82:50:01:cf:91:b8:d5:13:79:2a:53:2d:5f:2d: 14:9d:04:06:ef:74:6e:26:28:ff:3e:84:c2:08:f5:5f:60:75: 89:c9:d7:38 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEl0e2CkEOP1jUuVZCmZOu9Ur1PAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA2MDAyMDA3WhcNMjcwMTA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3YmYzOGNjNzBkYTg5MWViNDRjZDQ3YjAzN2NiYzZkNTA4 OTcwYjRhNTExYWE0Y2ZlNjM3NWI4NWIxMTUwMjJjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFDWJWbDQdiqez5gEsGDGhCr+pmvvxkPbRd8PFI1KofAUA yB8YCi9yeEwrIIIse7rsKYV1jFoTLgz1b0d59TKg6fxUNb6/RnvEgdOgxe+5pfAl 6+vjrVNqhzy0RzVE3uItHOf7G1iNwMj78MtG/qNLlzox3PUrALieUYhi8OS30raP S0+creYPE+wZCLCmNIbS3TsV2mUjutGTP5ynJwHNfKDJZoj0z4o9r+NcsawajfkN 5xODUOgRf0nE4dmpVGUKSKsZflzCpmbguWbjKN6h2LCH4GjfkpYFJOtm7VRSAFLd TdNaDoJMp98lnjRVZM66AXCFrZfyx2PjfvpqpCUXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQURUSxrBgfTZ2XS8HzoIoC6J+8mnkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQzOTYzZWE5LWM4NjUtNGNiNS1iMDc1LWVlYTNkZjUzNTQyOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/9g9IwDQYJKoZIhvcNAQELBQADggEBADZof1Yo8jfCHz+rujN1nLoi IFFRmmGHkYsIgJYjh5NskacaUwyF6pvGjVouM/Ga8D4goficwIdo+xNkvdxFLQgB fTN+JWdTBMCoa5cislCBMbrDdc5E9s9Hf9kSW41kAP/8oSS0NxCwF/iJ5uT06Y1D d36oxTWy/xfY6SI5AmlQCiAghtdk9xSkxRPcewHZd9VImqSnXD3aB8dggPRuKUO3 BVJe9fRqAui9i5KNoNv4vrHz4wwjSKYVOIifk5Gwx01j61AosmuEvaKtcGUZpUXz h1OpLr49+02nqE2CUAHPkbjVE3kqUy1fLRSdBAbvdG4mKP8+hMII9V9gdYnJ1zg= -----END CERTIFICATE-----Generated at Mon Oct 26 03:44:21 2026 by rpki-client