$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a18ebcc-cbd8-4707-ac04-bf70f7a8a564.roa File: 4a18ebcc-cbd8-4707-ac04-bf70f7a8a564.roa (raw, json) Hash identifier: LHd/VxJ7+057zoY71PddRiqN2KP2w+LEtpIjSXRWM/A= Subject key identifier: 3F:4B:C7:E0:C7:B5:88:68:B8:2D:1E:69:9B:E2:5C:3F:89:E4:95:51 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1EF27530F2C51F8F9280CE94FEFE3D4B4A784708 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a18ebcc-cbd8-4707-ac04-bf70f7a8a564.roa Signing time: Tue 06 Oct 2026 00:10:44 +0000 ROA not before: Tue 06 Oct 2026 00:10:44 +0000 ROA not after: Mon 04 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f01:4804::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:f2:75:30:f2:c5:1f:8f:92:80:ce:94:fe:fe:3d:4b:4a:78:47:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 6 00:10:44 2026 GMT Not After : Jan 4 23:59:59 2027 GMT Subject: serialNumber=e0ca4b9156a937332c6113ed9f7de317f8196e2713552e84b55f4095edcdedd8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c5:a8:50:fa:6e:75:99:2a:5c:3c:93:0f:6d: bd:88:1b:58:c5:c1:d2:73:27:49:24:1b:0d:f4:2f: aa:de:17:fe:cf:13:a8:d5:60:8f:8e:d8:60:e0:a8: 48:e9:fd:a7:00:d8:19:cc:af:47:ba:12:0d:49:45: 4d:43:87:49:4c:4e:87:68:0e:12:09:97:4f:8d:8f: 7f:8f:83:4c:c1:e3:e8:ef:7a:9b:e0:1c:e0:5e:82: 16:5f:66:e1:d4:ae:e9:46:de:5c:c2:58:70:a2:2c: c2:96:28:2a:89:23:ff:9f:5b:91:df:11:00:47:36: 21:76:3a:7c:7c:1b:95:ce:30:a1:b5:04:35:5a:3f: 16:5d:c6:10:d5:67:43:c9:a4:33:66:9e:e3:63:af: a7:4c:0d:8a:67:74:0b:00:6a:17:0a:46:c0:84:c4: 6c:1d:a4:12:d0:0b:5a:b4:27:1b:28:9d:43:a3:b5: bf:ed:dd:61:79:8b:c3:90:49:ef:c8:d5:3c:53:bd: 58:f6:b4:cd:ce:f2:18:69:98:56:92:b5:e8:3e:c6: 08:d2:48:8b:1c:13:d8:1f:76:fc:8f:21:9f:e3:c9: 97:49:91:46:69:09:db:9b:7e:87:84:20:8d:8f:4a: 29:75:62:be:a3:b6:d5:06:ce:cb:7e:7d:d5:1c:eb: f0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:4B:C7:E0:C7:B5:88:68:B8:2D:1E:69:9B:E2:5C:3F:89:E4:95:51 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a18ebcc-cbd8-4707-ac04-bf70f7a8a564.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f01:4804::/47 Signature Algorithm: sha256WithRSAEncryption 17:37:38:dc:67:f4:ad:23:dc:34:f9:b0:7c:46:fe:09:e2:10: f4:16:81:ce:37:a6:f0:b8:6f:73:8b:b3:17:83:28:7d:86:04: 0c:6f:fe:b9:3d:7e:07:07:98:12:a0:b2:8f:ec:e9:80:74:da: 97:ed:12:e8:aa:dc:8e:20:9a:96:30:da:d5:d0:eb:cd:8a:3d: 38:f7:96:36:d3:92:d0:b5:37:49:53:89:5b:62:e6:3e:9b:8b: 75:7d:04:25:2d:50:3d:6a:d0:9a:14:bd:12:34:0d:45:c2:78: 26:ae:2c:99:fd:20:e1:c3:b5:fd:f1:3a:3d:44:cb:dd:0b:ab: 6e:e0:58:7d:0c:dc:cc:cf:75:83:53:be:17:0d:cd:13:e5:c9: 1e:2e:2d:06:6f:9a:58:3f:cf:94:ab:17:8a:28:ec:82:b1:77: ca:74:db:1d:21:7a:be:fb:08:7c:37:d2:77:48:ba:7a:58:e7: f4:b5:ec:45:3c:ef:92:00:db:4a:93:dc:44:1d:92:34:5f:1d: 3e:ff:6a:22:f3:a8:eb:03:70:63:ec:02:63:7b:c6:f7:ef:b3: cd:f1:d0:df:19:d8:58:18:24:ef:d1:47:4e:ec:d4:98:75:8c: d4:8a:52:48:84:12:fa:48:2f:50:3d:49:f6:38:7e:21:80:75: ce:52:fd:6d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUHvJ1MPLFH4+SgM6U/v49S0p4RwgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA2MDAxMDQ0WhcNMjcwMTA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMGNhNGI5MTU2YTkzNzMzMmM2MTEzZWQ5ZjdkZTMxN2Y4 MTk2ZTI3MTM1NTJlODRiNTVmNDA5NWVkY2RlZGQ4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFxahQ+m51mSpcPJMPbb2IG1jFwdJzJ0kkGw30L6reF/7P E6jVYI+O2GDgqEjp/acA2BnMr0e6Eg1JRU1Dh0lMTodoDhIJl0+Nj3+Pg0zB4+jv epvgHOBeghZfZuHUrulG3lzCWHCiLMKWKCqJI/+fW5HfEQBHNiF2Onx8G5XOMKG1 BDVaPxZdxhDVZ0PJpDNmnuNjr6dMDYpndAsAahcKRsCExGwdpBLQC1q0JxsonUOj tb/t3WF5i8OQSe/I1TxTvVj2tM3O8hhpmFaSteg+xgjSSIscE9gfdvyPIZ/jyZdJ kUZpCdubfoeEII2PSil1Yr6jttUGzst+fdUc6/CTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUP0vH4Me1iGi4LR5pm+JcP4nklVEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRhMThlYmNjLWNiZDgtNDcwNy1hYzA0LWJmNzBmN2E4YTU2NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAB8BSAQwDQYJKoZIhvcNAQELBQADggEBABc3ONxn9K0j3DT5sHxG/gni EPQWgc43pvC4b3OLsxeDKH2GBAxv/rk9fgcHmBKgso/s6YB02pftEuiq3I4gmpYw 2tXQ682KPTj3ljbTktC1N0lTiVti5j6bi3V9BCUtUD1q0JoUvRI0DUXCeCauLJn9 IOHDtf3xOj1Ey90Lq27gWH0M3MzPdYNTvhcNzRPlyR4uLQZvmlg/z5SrF4oo7IKx d8p02x0her77CHw30ndIunpY5/S17EU875IA20qT3EQdkjRfHT7/aiLzqOsDcGPs AmN7xvfvs83x0N8Z2FgYJO/RR07s1Jh1jNSKUkiEEvpIL1A9SfY4fiGAdc5S/W0= -----END CERTIFICATE-----Generated at Mon Nov 2 21:09:25 2026 by rpki-client