$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4492468d-ade8-4955-9c65-98cc7b723380.roa File: 4492468d-ade8-4955-9c65-98cc7b723380.roa (raw, json) Hash identifier: RTln0LKijxOlNJ+gb63Vq01FOSkLzD5POJ8OA+YyrvY= Subject key identifier: E3:32:4A:B5:73:AC:80:9D:DB:31:27:3A:12:F4:8F:E4:4A:2F:80:D7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4718A82F84044266E9EC00719058E0A86B1A6FD6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4492468d-ade8-4955-9c65-98cc7b723380.roa Signing time: Fri 23 Oct 2026 00:10:31 +0000 ROA not before: Fri 23 Oct 2026 00:10:31 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:8000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:18:a8:2f:84:04:42:66:e9:ec:00:71:90:58:e0:a8:6b:1a:6f:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 23 00:10:31 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=1a45891ed0ea03a1bad7be0fe66a10a7818cf3083a2d8672e023a162342d3152, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6d:fc:a4:0f:4d:8c:44:78:39:38:6d:14:2a: be:98:d8:72:15:79:1b:0b:db:1f:f3:dc:14:3d:89: 49:42:b0:78:61:27:15:35:e5:3e:6d:2a:b5:46:13: 65:da:64:d4:f8:cc:8f:c9:90:93:08:b8:71:a6:1a: e9:b7:2a:24:40:35:a3:15:12:dc:76:5f:15:90:6a: 15:85:40:21:19:c8:91:b7:cb:68:57:d7:fd:a8:df: 13:f2:18:46:bd:97:fe:7a:a6:20:ae:12:88:04:01: ea:1f:41:7f:79:27:6c:f7:73:06:25:19:56:82:fb: 75:7d:16:64:4b:c0:9b:12:01:30:ac:cd:1c:df:ee: 0d:ca:62:7f:f8:91:13:5f:69:2b:f6:24:04:61:0e: bb:b1:1f:23:8d:fc:40:6f:96:40:d3:c1:a5:ef:81: 8f:dd:e7:52:f0:61:d1:c3:39:aa:fd:1c:b0:77:e9: 2d:9e:c8:69:24:a8:ac:2c:1a:65:27:ef:a3:c3:15: 59:08:ed:ac:e3:6e:d5:75:c0:bd:fc:64:ed:31:f1: 72:a8:7d:3b:ed:2d:5f:89:ec:e3:f9:60:b0:bc:e8: c6:23:a6:e8:93:43:2e:ec:5f:a2:a0:4b:e2:8f:8f: c4:0e:8b:35:ef:41:6b:98:e9:e9:f3:37:78:00:10: ab:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:32:4A:B5:73:AC:80:9D:DB:31:27:3A:12:F4:8F:E4:4A:2F:80:D7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4492468d-ade8-4955-9c65-98cc7b723380.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:8000::/40 Signature Algorithm: sha256WithRSAEncryption 45:fe:b6:96:fb:f4:da:ad:41:99:dc:d8:77:4a:d9:9b:ab:0d: 7d:23:09:e5:b0:39:4c:a5:0d:bf:bd:7b:a7:2a:cf:28:a9:e1: b4:e8:c9:a3:f4:83:1a:6e:b2:2a:fc:74:06:99:86:5a:74:39: 69:6e:a9:d7:4d:b8:c8:7c:bd:95:92:73:15:83:cf:a8:c8:0b: 09:ba:29:0c:97:c8:a9:2c:f9:17:a2:fd:ff:3d:e5:d7:d6:aa: b3:8d:2d:c8:d1:1a:8f:12:f3:aa:23:d7:33:82:f4:85:a8:7f: be:6a:10:34:85:ea:29:51:b0:19:d2:a0:4e:2c:a7:ff:a1:66: 52:38:b9:1d:6f:a5:c4:bd:8d:7c:94:5c:0f:ad:f5:42:b6:c5: 6a:0d:73:de:52:82:8b:86:58:0e:3e:ce:cc:78:af:84:40:15: 2e:35:2f:87:98:3b:3b:72:d3:52:ee:2f:e1:2d:e5:e0:a0:40: eb:c3:34:00:c2:5d:cd:7a:1e:24:38:f5:55:88:18:34:24:13: 1f:ff:19:5a:8d:4c:11:07:15:cb:16:e8:52:81:6d:ec:55:ad: 19:1a:2b:45:18:a7:47:d6:55:ef:c0:98:96:e0:25:c5:c0:fc: 72:b8:b4:8f:75:ad:a6:9b:88:c9:29:4c:91:bc:8d:c6:d0:df: 07:58:78:c0 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIURxioL4QEQmbp7ABxkFjgqGsab9YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDAxMDMxWhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AxYTQ1ODkxZWQwZWEwM2ExYmFkN2JlMGZlNjZhMTBhNzgx OGNmMzA4M2EyZDg2NzJlMDIzYTE2MjM0MmQzMTUyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0bfykD02MRHg5OG0UKr6Y2HIVeRsL2x/z3BQ9iUlCsHhh JxU15T5tKrVGE2XaZNT4zI/JkJMIuHGmGum3KiRANaMVEtx2XxWQahWFQCEZyJG3 y2hX1/2o3xPyGEa9l/56piCuEogEAeofQX95J2z3cwYlGVaC+3V9FmRLwJsSATCs zRzf7g3KYn/4kRNfaSv2JARhDruxHyON/EBvlkDTwaXvgY/d51LwYdHDOar9HLB3 6S2eyGkkqKwsGmUn76PDFVkI7azjbtV1wL38ZO0x8XKofTvtLV+J7OP5YLC86MYj puiTQy7sX6KgS+KPj8QOizXvQWuY6enzN3gAEKu9AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU4zJKtXOsgJ3bMSc6EvSP5EovgNcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ0OTI0NjhkLWFkZTgtNDk1NS05YzY1LTk4Y2M3YjcyMzM4MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB//gDANBgkqhkiG9w0BAQsFAAOCAQEARf62lvv02q1BmdzYd0rZm6sN fSMJ5bA5TKUNv717pyrPKKnhtOjJo/SDGm6yKvx0BpmGWnQ5aW6p1024yHy9lZJz FYPPqMgLCbopDJfIqSz5F6L9/z3l19aqs40tyNEajxLzqiPXM4L0hah/vmoQNIXq KVGwGdKgTiyn/6FmUji5HW+lxL2NfJRcD631QrbFag1z3lKCi4ZYDj7OzHivhEAV LjUvh5g7O3LTUu4v4S3l4KBA68M0AMJdzXoeJDj1VYgYNCQTH/8ZWo1MEQcVyxbo UoFt7FWtGRorRRinR9ZV78CYluAlxcD8cri0j3WtppuIySlMkbyNxtDfB1h4wA== -----END CERTIFICATE-----Generated at Tue Nov 3 12:02:32 2026 by rpki-client