$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4504c80e-4ba3-448e-ae5e-bd057f790c27.roa File: 4504c80e-4ba3-448e-ae5e-bd057f790c27.roa (raw, json) Hash identifier: OnlfF72NR68j/JCloXxQH7GtOSfx2EGo7npGyefq2Tk= Subject key identifier: 40:66:BA:72:EB:38:6E:AA:79:88:FC:B9:AA:23:B7:38:5F:69:A2:D7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5F14C21D9AA618C3CFC55466F5682DD7EFE6F3F1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4504c80e-4ba3-448e-ae5e-bd057f790c27.roa Signing time: Tue 06 Oct 2026 00:30:59 +0000 ROA not before: Tue 06 Oct 2026 00:30:59 +0000 ROA not after: Mon 04 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fa0:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:14:c2:1d:9a:a6:18:c3:cf:c5:54:66:f5:68:2d:d7:ef:e6:f3:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 6 00:30:59 2026 GMT Not After : Jan 4 23:59:59 2027 GMT Subject: serialNumber=b418a3ee84b38e10e328f119c36fb95d4962184f0b40d50fb5efa314288d9410, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4b:c0:89:0c:94:ab:91:33:49:48:75:27:37: 92:fb:20:ad:d3:22:c4:f9:91:91:0d:7e:b2:a3:d4: 31:89:6f:a3:27:b7:ff:08:86:ee:2d:47:c0:cf:a9: 16:d2:df:d7:53:5e:29:18:4e:db:df:95:a4:e6:72: 52:8b:88:66:51:61:db:ed:25:fd:39:b3:1d:50:7c: 23:e8:e6:2b:cc:dc:d5:20:11:8e:31:be:51:fd:34: e1:c1:fe:d7:bb:7e:bd:ce:c9:91:5d:7c:7c:1e:fa: 1d:f3:5a:9e:f2:a4:18:bd:ee:c9:d3:ee:58:fe:9c: 0b:00:0e:91:dc:83:4a:68:d1:40:2d:69:3c:fa:ab: 10:b9:91:98:af:23:8f:f1:87:0a:21:70:80:38:0d: f6:17:8a:65:a9:bd:5c:ae:38:e5:f4:d0:49:04:71: 07:ea:bf:c4:25:61:4c:4f:e4:cb:26:37:5c:4e:d8: 96:36:2f:c2:7e:61:41:37:95:1d:70:7b:d1:13:36: ba:43:76:6a:4b:52:2e:f7:55:22:4c:cf:2b:f7:af: f2:78:09:40:86:de:82:95:83:b5:24:f3:6c:d5:ab: 3e:83:b2:f0:c3:a3:9a:bc:7f:83:af:ba:98:01:e0: 31:53:bf:95:42:25:5e:a2:bc:76:2c:ba:ad:75:ac: b2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:66:BA:72:EB:38:6E:AA:79:88:FC:B9:AA:23:B7:38:5F:69:A2:D7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4504c80e-4ba3-448e-ae5e-bd057f790c27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fa0:e000::/40 Signature Algorithm: sha256WithRSAEncryption c0:e0:d9:46:78:43:89:d9:ba:ec:f0:fa:b9:72:7e:e2:95:90: 51:da:44:93:ec:33:d0:05:eb:cd:28:0f:9d:f3:a2:e8:f8:5a: fd:36:38:58:84:55:53:43:ff:79:df:47:17:07:bb:17:11:a1: f2:c7:b5:4a:05:1e:78:ba:d1:9c:cf:b3:08:ca:ab:45:23:bf: 91:82:b8:a1:89:49:5f:ba:8b:3c:28:36:35:61:5c:2d:ae:a5: 6c:b7:23:a6:0a:ad:d5:7e:a8:d3:06:ed:86:cc:da:15:87:96: b4:b5:a9:7f:0b:dc:c9:5f:fa:34:53:49:93:83:96:5e:20:14: 78:fd:88:70:d4:bd:82:d0:f7:af:8c:8d:42:5e:79:9f:44:a2: 97:78:7c:b6:48:4a:52:67:9b:f0:0b:55:09:e6:46:b9:6a:d1: 94:2f:a2:0c:41:6b:53:fd:d0:37:d8:b7:a1:14:98:c7:91:58: 70:c6:7f:a3:9f:81:33:9e:ff:f1:29:b1:d8:39:80:9d:f4:ef: 9d:bc:0b:d4:70:91:57:d4:90:e9:bd:ae:53:cb:09:f0:c5:09: 02:b5:3b:eb:a6:d2:a5:d0:b4:01:9b:3a:6a:23:1d:66:fb:10: ad:02:7e:07:f6:9a:9f:27:f6:46:93:3b:46:1f:7b:eb:2f:26: dc:e4:8b:22 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUXxTCHZqmGMPPxVRm9Wgt1+/m8/EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA2MDAzMDU5WhcNMjcwMTA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNDE4YTNlZTg0YjM4ZTEwZTMyOGYxMTljMzZmYjk1ZDQ5 NjIxODRmMGI0MGQ1MGZiNWVmYTMxNDI4OGQ5NDEwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGS8CJDJSrkTNJSHUnN5L7IK3TIsT5kZENfrKj1DGJb6Mn t/8Ihu4tR8DPqRbS39dTXikYTtvflaTmclKLiGZRYdvtJf05sx1QfCPo5ivM3NUg EY4xvlH9NOHB/te7fr3OyZFdfHwe+h3zWp7ypBi97snT7lj+nAsADpHcg0po0UAt aTz6qxC5kZivI4/xhwohcIA4DfYXimWpvVyuOOX00EkEcQfqv8QlYUxP5MsmN1xO 2JY2L8J+YUE3lR1we9ETNrpDdmpLUi73VSJMzyv3r/J4CUCG3oKVg7Uk82zVqz6D svDDo5q8f4OvupgB4DFTv5VCJV6ivHYsuq11rLJZAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUQGa6cus4bqp5iPy5qiO3OF9potcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ1MDRjODBlLTRiYTMtNDQ4ZS1hZTVlLWJkMDU3Zjc5MGMyNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+g4DANBgkqhkiG9w0BAQsFAAOCAQEAwODZRnhDidm67PD6uXJ+4pWQ UdpEk+wz0AXrzSgPnfOi6Pha/TY4WIRVU0P/ed9HFwe7FxGh8se1SgUeeLrRnM+z CMqrRSO/kYK4oYlJX7qLPCg2NWFcLa6lbLcjpgqt1X6o0wbthszaFYeWtLWpfwvc yV/6NFNJk4OWXiAUeP2IcNS9gtD3r4yNQl55n0Sil3h8tkhKUmeb8AtVCeZGuWrR lC+iDEFrU/3QN9i3oRSYx5FYcMZ/o5+BM57/8Smx2DmAnfTvnbwL1HCRV9SQ6b2u U8sJ8MUJArU766bSpdC0AZs6aiMdZvsQrQJ+B/aanyf2RpM7Rh976y8m3OSLIg== -----END CERTIFICATE-----Generated at Tue Nov 3 10:01:47 2026 by rpki-client