$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4661725a-6b3f-4d1f-b411-89e263f08205.roa File: 4661725a-6b3f-4d1f-b411-89e263f08205.roa (raw, json) Hash identifier: porQIwGhDPksFYbvR5WeAKABPVNB87uQWZcC7jMwzPQ= Subject key identifier: 3A:6F:0D:20:39:A2:FB:5D:C5:59:84:BB:A6:E3:25:91:9A:23:60:65 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4F53744F7096A1EF54A66672A78E5ADB2BF18476 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4661725a-6b3f-4d1f-b411-89e263f08205.roa Signing time: Fri 23 Oct 2026 02:10:30 +0000 ROA not before: Fri 23 Oct 2026 02:10:30 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fff:80d0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:53:74:4f:70:96:a1:ef:54:a6:66:72:a7:8e:5a:db:2b:f1:84:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 23 02:10:30 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=01f153b9425d872ce8b87295f304155b3a1f12162b753bcd1f46dddc9eaf0e7f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:27:dd:e3:a9:bf:61:d8:55:6d:f6:ad:29:0a: 4d:44:15:f0:e1:d1:c6:8f:f6:f8:ca:fe:fc:7e:e5: ee:88:6d:b6:56:82:a6:59:b3:0b:63:6b:d0:d0:47: 0e:20:6f:e0:06:93:6d:23:74:9c:37:4e:7e:88:11: 46:52:94:2d:25:aa:c2:14:e9:1c:72:0d:d1:60:88: db:e6:35:5d:75:c7:71:de:55:85:02:3b:b9:57:23: 87:60:a3:d4:4b:03:ed:bb:e0:12:85:f9:e4:c5:5f: d3:bb:4c:2c:34:95:c9:59:98:83:da:e7:35:8c:a2: 8b:3c:b7:c6:b9:a0:3a:3f:f8:c2:80:e3:f7:74:2c: c5:e3:a9:91:93:92:de:dd:cb:ec:b2:cd:91:7e:1c: 59:cd:f5:a9:a0:fd:55:cc:aa:e0:08:26:95:c8:7c: 2e:f8:18:95:99:db:7b:2a:60:02:2d:9c:3a:db:8d: e5:dc:47:5f:de:25:81:2a:2f:f2:25:7c:47:f9:26: 70:1c:a8:ad:23:ad:28:50:ac:5f:d8:1a:87:fe:34: c4:1f:e4:5e:89:c9:2f:7c:50:d9:19:2b:0a:c9:8e: bd:e8:cc:9f:dc:b6:df:df:4e:c1:cf:d2:70:85:ad: 41:cb:69:e8:97:be:3c:68:d8:44:ea:74:00:c1:34: 71:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:6F:0D:20:39:A2:FB:5D:C5:59:84:BB:A6:E3:25:91:9A:23:60:65 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4661725a-6b3f-4d1f-b411-89e263f08205.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:80d0::/48 Signature Algorithm: sha256WithRSAEncryption d4:37:c4:49:ed:dc:98:f0:11:ae:ab:77:cf:83:ff:28:3d:ba: 4d:0e:9f:db:e6:74:c2:07:0c:f1:5a:39:20:f8:c3:2f:df:2f: 4f:89:18:ef:31:a0:96:c1:1b:9b:3e:f4:2d:bf:b9:22:ad:dc: 67:3a:2d:a6:eb:7b:89:0e:83:36:6a:6a:f9:c2:c9:63:60:9f: 32:08:78:58:47:2b:b0:58:47:48:f6:19:6e:76:94:1d:85:cd: 54:68:f1:c6:a8:52:b0:21:e2:eb:e7:09:a1:3e:b0:15:b6:b5: 0a:78:56:2b:24:ca:3b:17:87:28:ca:e9:ea:ed:55:26:28:56: 58:24:93:ed:0d:49:70:3a:37:32:94:22:61:ce:6a:6d:65:92: c9:a6:83:3b:c5:24:21:3a:26:96:19:48:01:fd:4c:fd:a4:e2: e7:53:25:7c:53:4a:80:5f:1e:1e:56:63:13:98:b4:a7:94:bf: 01:74:03:c7:f1:88:53:0d:dc:53:80:4e:b6:39:a7:6d:b4:d3: 10:c0:8f:d1:8e:a1:d9:0d:8e:db:74:b2:54:ca:2a:4c:bf:4b: d2:ce:96:71:b3:96:04:9e:80:02:4a:ca:d4:4a:cf:6a:b8:8f: 3c:b3:69:c7:0c:79:5b:0f:0a:85:61:48:8a:e5:f9:11:36:62: 55:f9:6b:28 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUT1N0T3CWoe9UpmZyp45a2yvxhHYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDIxMDMwWhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMWYxNTNiOTQyNWQ4NzJjZThiODcyOTVmMzA0MTU1YjNh MWYxMjE2MmI3NTNiY2QxZjQ2ZGRkYzllYWYwZTdmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD1J93jqb9h2FVt9q0pCk1EFfDh0caP9vjK/vx+5e6IbbZW gqZZswtja9DQRw4gb+AGk20jdJw3Tn6IEUZSlC0lqsIU6RxyDdFgiNvmNV11x3He VYUCO7lXI4dgo9RLA+274BKF+eTFX9O7TCw0lclZmIPa5zWMoos8t8a5oDo/+MKA 4/d0LMXjqZGTkt7dy+yyzZF+HFnN9amg/VXMquAIJpXIfC74GJWZ23sqYAItnDrb jeXcR1/eJYEqL/IlfEf5JnAcqK0jrShQrF/YGof+NMQf5F6JyS98UNkZKwrJjr3o zJ/ctt/fTsHP0nCFrUHLaeiXvjxo2ETqdADBNHHtAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUOm8NIDmi+13FWYS7puMlkZojYGUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ2NjE3MjVhLTZiM2YtNGQxZi1iNDExLTg5ZTI2M2YwODIwNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//gNAwDQYJKoZIhvcNAQELBQADggEBANQ3xEnt3JjwEa6rd8+D/yg9 uk0On9vmdMIHDPFaOSD4wy/fL0+JGO8xoJbBG5s+9C2/uSKt3Gc6Labre4kOgzZq avnCyWNgnzIIeFhHK7BYR0j2GW52lB2FzVRo8caoUrAh4uvnCaE+sBW2tQp4Visk yjsXhyjK6ertVSYoVlgkk+0NSXA6NzKUImHOam1lksmmgzvFJCE6JpYZSAH9TP2k 4udTJXxTSoBfHh5WYxOYtKeUvwF0A8fxiFMN3FOATrY5p2200xDAj9GOodkNjtt0 slTKKky/S9LOlnGzlgSegAJKytRKz2q4jzyzaccMeVsPCoVhSIrl+RE2YlX5ayg= -----END CERTIFICATE-----Generated at Wed Nov 4 21:13:41 2026 by rpki-client