$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/487617ae-96ad-49b0-adf7-b548cc4f6370.roa File: 487617ae-96ad-49b0-adf7-b548cc4f6370.roa (raw, json) Hash identifier: 5sau0hVptvLxzDw+TbpDV5LDZh8KraYpZHDS63QPZEo= Subject key identifier: 37:CD:A1:4E:DA:B0:E3:DA:82:3A:6E:B4:2E:5C:88:31:28:E6:00:70 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 24E22BE871DDD9DB44230E54C501F26859D4EFA7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/487617ae-96ad-49b0-adf7-b548cc4f6370.roa Signing time: Mon 12 Oct 2026 00:51:20 +0000 ROA not before: Mon 12 Oct 2026 00:51:20 +0000 ROA not after: Sun 10 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1ff4:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:e2:2b:e8:71:dd:d9:db:44:23:0e:54:c5:01:f2:68:59:d4:ef:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 12 00:51:20 2026 GMT Not After : Jan 10 23:59:59 2027 GMT Subject: serialNumber=c72eb3c6dedd1d12ee712c80df677c33bd7f477012644343c7acf5947e667df8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:49:d9:15:17:2f:07:c4:41:ec:6d:7b:73:23: 0a:57:aa:0a:85:da:55:a6:1d:3f:2d:fb:54:26:b8: 2c:e3:6d:cf:0e:40:e5:df:9c:d1:b7:cd:52:0a:6c: 87:25:b8:41:c1:01:43:05:b5:b0:23:f8:b3:3a:a8: e3:d8:0f:cb:48:ff:c3:86:89:d4:f8:76:9a:e3:58: 83:4b:b1:e8:61:e3:32:77:06:5b:e2:9a:0a:a6:37: 0e:2a:a2:70:1b:e5:43:d1:e2:b1:50:a3:51:d9:f1: 0c:68:ee:e8:62:86:51:0f:40:7f:5e:16:75:0b:1f: ec:1c:88:63:0f:e7:ab:82:e2:dc:e3:b4:3b:3e:df: 34:ac:f2:c7:79:31:21:7a:80:3a:a1:a1:02:b4:4b: 4b:80:a5:d7:77:88:78:e5:60:20:fb:63:e8:4b:96: 44:69:9d:97:97:e0:cf:2b:db:39:01:60:d4:a9:33: 56:02:61:fd:b2:fa:4d:5d:ea:93:0a:be:90:15:44: 81:b1:5c:e4:b8:52:d5:46:0f:99:1b:00:ec:ca:b0: 1c:77:b4:de:3c:d3:19:5d:95:25:06:15:21:d5:7e: bf:d9:53:07:e9:48:79:ac:b4:36:68:d9:fd:6a:70: d5:f2:14:1e:49:94:43:e4:23:b8:cc:48:a8:67:bc: 5a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:CD:A1:4E:DA:B0:E3:DA:82:3A:6E:B4:2E:5C:88:31:28:E6:00:70 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/487617ae-96ad-49b0-adf7-b548cc4f6370.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff4:1000::/40 Signature Algorithm: sha256WithRSAEncryption d3:a0:63:0e:d8:72:62:02:7d:d3:8b:0f:42:d4:3d:3f:1d:e5: 20:41:d7:bb:f7:62:83:d1:a3:86:e8:d1:58:65:46:f4:74:8c: 6f:1d:00:ff:00:90:a6:91:58:41:3e:69:fe:c3:05:e4:47:a6: 97:01:4b:a1:4b:1f:1d:65:9d:5a:84:43:42:ec:72:fc:68:37: 27:06:e3:ba:6a:b5:8e:dd:f3:81:00:50:f8:10:d5:f7:04:9a: bb:fc:b3:80:48:2b:f5:6f:b7:23:cf:89:b6:b8:ab:5a:8b:f8: 6f:f8:9a:72:f7:42:83:e1:9e:16:32:e3:57:90:96:0d:02:3d: 13:22:a0:6e:d6:97:7e:5f:0a:7e:6d:88:ea:d6:3e:10:ef:05: 33:c6:e8:33:fb:32:2f:1a:57:d0:2e:2f:12:f2:c6:98:93:f5: 13:49:f7:72:5d:cb:f9:9d:db:12:53:52:27:2c:b6:b1:0f:c5: bd:3e:f6:b5:fe:6b:52:07:07:63:f8:03:83:68:87:c6:c8:8b: 6c:4d:1c:b5:d6:d9:ea:84:30:98:13:40:c6:46:a8:5a:64:4c: 6a:54:fa:7e:d9:46:1e:6f:3e:95:6b:cd:22:12:4f:7b:df:60: 71:fe:a8:2a:a4:aa:8f:84:af:9f:ec:7f:01:cc:e8:bd:2f:61: 56:fc:82:73 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUJOIr6HHd2dtEIw5UxQHyaFnU76cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDEyMDA1MTIwWhcNMjcwMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNzJlYjNjNmRlZGQxZDEyZWU3MTJjODBkZjY3N2MzM2Jk N2Y0NzcwMTI2NDQzNDNjN2FjZjU5NDdlNjY3ZGY4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDcSdkVFy8HxEHsbXtzIwpXqgqF2lWmHT8t+1QmuCzjbc8O QOXfnNG3zVIKbIcluEHBAUMFtbAj+LM6qOPYD8tI/8OGidT4dprjWINLsehh4zJ3 BlvimgqmNw4qonAb5UPR4rFQo1HZ8Qxo7uhihlEPQH9eFnULH+wciGMP56uC4tzj tDs+3zSs8sd5MSF6gDqhoQK0S0uApdd3iHjlYCD7Y+hLlkRpnZeX4M8r2zkBYNSp M1YCYf2y+k1d6pMKvpAVRIGxXOS4UtVGD5kbAOzKsBx3tN480xldlSUGFSHVfr/Z UwfpSHmstDZo2f1qcNXyFB5JlEPkI7jMSKhnvFolAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUN82hTtqw49qCOm60LlyIMSjmAHAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ4NzYxN2FlLTk2YWQtNDliMC1hZGY3LWI1NDhjYzRmNjM3MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/0EDANBgkqhkiG9w0BAQsFAAOCAQEA06BjDthyYgJ904sPQtQ9Px3l IEHXu/dig9GjhujRWGVG9HSMbx0A/wCQppFYQT5p/sMF5EemlwFLoUsfHWWdWoRD Quxy/Gg3Jwbjumq1jt3zgQBQ+BDV9wSau/yzgEgr9W+3I8+JtrirWov4b/iacvdC g+GeFjLjV5CWDQI9EyKgbtaXfl8Kfm2I6tY+EO8FM8boM/syLxpX0C4vEvLGmJP1 E0n3cl3L+Z3bElNSJyy2sQ/FvT72tf5rUgcHY/gDg2iHxsiLbE0ctdbZ6oQwmBNA xkaoWmRMalT6ftlGHm8+lWvNIhJPe99gcf6oKqSqj4Svn+x/AczovS9hVvyCcw== -----END CERTIFICATE-----Generated at Mon Nov 2 22:30:13 2026 by rpki-client