$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4adbd4db-9c77-456a-9a38-aae1df82a18a.roa File: 4adbd4db-9c77-456a-9a38-aae1df82a18a.roa (raw, json) Hash identifier: jO4d3kr5a0ngGHzCJ9k1QBW9zoQtcRNhUvscBByn5UU= Subject key identifier: 07:5C:85:7F:0F:CE:83:EF:51:F3:22:09:37:A4:83:36:C4:DA:67:44 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5FB36DA83A1FB9A6FAE1C073C52A4CB243DA59E3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4adbd4db-9c77-456a-9a38-aae1df82a18a.roa Signing time: Fri 23 Oct 2026 00:40:33 +0000 ROA not before: Fri 23 Oct 2026 00:40:33 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f1b:4000::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:b3:6d:a8:3a:1f:b9:a6:fa:e1:c0:73:c5:2a:4c:b2:43:da:59:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 23 00:40:33 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=913dfb2a492a9f9077cc7d508b8be59abc812fa45c1f1f0d50c5731ab648d385, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:86:ed:87:d9:98:d9:92:82:db:cb:bc:61:1d: 63:d5:9f:2d:08:3e:f7:76:10:ad:6c:44:e6:69:7e: f7:4b:ba:93:bc:95:cb:b1:c3:60:02:e1:a5:96:3b: aa:a5:e5:23:7a:d3:95:7c:58:f7:3f:16:fd:9a:20: b1:9e:63:eb:9c:c9:2d:52:3a:d3:94:4e:30:46:c1: 27:c6:92:34:22:88:2c:15:9a:f8:88:0b:af:7b:5b: e8:c3:c0:28:5d:82:9f:26:e4:08:6f:ec:39:d6:d7: 0a:35:3b:b7:6b:fa:5b:64:eb:95:d7:b5:96:a2:58: 94:19:23:ad:09:bc:18:3c:75:cb:08:d3:05:b1:f0: c0:4f:0b:d4:9f:de:89:28:ad:e1:96:e4:35:96:ca: 87:ad:6b:1b:71:40:ef:e2:24:53:37:13:df:33:23: e0:f4:11:28:fe:72:a5:c7:3e:74:e4:31:b7:69:c0: e8:72:ca:b5:59:55:b2:a1:3a:d1:7c:65:3d:09:a0: f7:12:7a:2b:e4:8f:d8:c6:34:82:eb:31:b2:bd:9f: 6c:d2:67:98:38:c2:9c:8e:8c:2c:37:49:b9:26:48: c4:c8:4d:d5:c1:dc:5b:52:84:05:19:2d:fb:e8:c5: 0c:00:82:ea:1b:e5:65:23:50:91:19:d5:6c:9a:e0: 25:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:5C:85:7F:0F:CE:83:EF:51:F3:22:09:37:A4:83:36:C4:DA:67:44 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4adbd4db-9c77-456a-9a38-aae1df82a18a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f1b:4000::/37 Signature Algorithm: sha256WithRSAEncryption 94:f8:55:53:a1:b6:b5:cf:ec:1f:0b:53:35:a3:d9:21:1d:1b: e6:53:8d:54:98:2c:c8:ac:15:29:e0:2e:e4:c0:6c:f6:d9:81: 36:d1:57:1d:d5:b4:26:d5:91:e3:16:00:55:f7:55:10:59:1c: 36:28:04:6b:80:14:08:fe:f0:71:5b:6b:6a:65:d9:cf:8d:b8: 52:a9:83:7b:90:74:75:e4:69:8e:3b:a6:d1:76:50:af:25:fc: 2d:43:b2:02:08:2c:cb:4f:be:73:62:c6:92:22:5c:b0:e2:45: 3a:b9:b4:e4:e6:bd:37:36:27:7f:5f:33:1d:0c:89:4f:b7:29: 48:90:3b:f5:18:fc:1c:f7:ea:57:ea:76:9e:cb:f2:35:34:56: 96:3c:6e:42:f9:23:50:f8:d7:bc:f1:3f:bd:a8:61:51:9f:b4: c5:f2:99:9f:86:9e:4f:6e:b4:f6:3a:89:a9:b3:9f:26:98:19: f0:8e:29:83:9d:56:87:e1:48:f5:9e:77:02:7d:f0:34:a2:e1: be:2c:93:a9:29:77:30:29:75:77:9d:51:59:0f:6e:e9:8c:27: e3:f6:1f:a2:bf:03:59:16:54:c6:ab:8f:8f:ca:45:a3:87:c0: d8:c3:2b:99:d8:6b:57:25:d6:29:30:13:85:38:cb:75:d0:0c: a4:d5:e9:75 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUX7NtqDofuab64cBzxSpMskPaWeMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDA0MDMzWhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MTNkZmIyYTQ5MmE5ZjkwNzdjYzdkNTA4YjhiZTU5YWJj ODEyZmE0NWMxZjFmMGQ1MGM1NzMxYWI2NDhkMzg1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxhu2H2ZjZkoLby7xhHWPVny0IPvd2EK1sROZpfvdLupO8 lcuxw2AC4aWWO6ql5SN605V8WPc/Fv2aILGeY+ucyS1SOtOUTjBGwSfGkjQiiCwV mviIC697W+jDwChdgp8m5Ahv7DnW1wo1O7dr+ltk65XXtZaiWJQZI60JvBg8dcsI 0wWx8MBPC9Sf3okoreGW5DWWyoetaxtxQO/iJFM3E98zI+D0ESj+cqXHPnTkMbdp wOhyyrVZVbKhOtF8ZT0JoPcSeivkj9jGNILrMbK9n2zSZ5g4wpyOjCw3SbkmSMTI TdXB3FtShAUZLfvoxQwAguob5WUjUJEZ1Wya4CXxAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUB1yFfw/Og+9R8yIJN6SDNsTaZ0QwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRhZGJkNGRiLTljNzctNDU2YS05YTM4LWFhZTFkZjgyYTE4YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8bQDANBgkqhkiG9w0BAQsFAAOCAQEAlPhVU6G2tc/sHwtTNaPZIR0b 5lONVJgsyKwVKeAu5MBs9tmBNtFXHdW0JtWR4xYAVfdVEFkcNigEa4AUCP7wcVtr amXZz424UqmDe5B0deRpjjum0XZQryX8LUOyAggsy0++c2LGkiJcsOJFOrm05Oa9 NzYnf18zHQyJT7cpSJA79Rj8HPfqV+p2nsvyNTRWljxuQvkjUPjXvPE/vahhUZ+0 xfKZn4aeT2609jqJqbOfJpgZ8I4pg51Wh+FI9Z53An3wNKLhviyTqSl3MCl1d51R WQ9u6Ywn4/Yfor8DWRZUxquPj8pFo4fA2MMrmdhrVyXWKTAThTjLddAMpNXpdQ== -----END CERTIFICATE-----Generated at Mon Nov 2 16:46:09 2026 by rpki-client