$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c24d76f-a988-4548-a654-37a30aa8d32c.roa File: 4c24d76f-a988-4548-a654-37a30aa8d32c.roa (raw, json) Hash identifier: dUh2RgBvUJACaFPD/xy/wje/ynaB8uYkIOvOfD0XT40= Subject key identifier: 09:62:92:6E:A1:1B:9E:6E:FB:82:70:B4:5C:C1:67:28:27:6B:AB:9D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 197B2D83A33D5130BD8BF44936A0E979301A8D7E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c24d76f-a988-4548-a654-37a30aa8d32c.roa Signing time: Fri 23 Oct 2026 01:20:46 +0000 ROA not before: Fri 23 Oct 2026 01:20:46 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f1c:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:7b:2d:83:a3:3d:51:30:bd:8b:f4:49:36:a0:e9:79:30:1a:8d:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 23 01:20:46 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=e4776292a99869ba87ba117544661984d92536de173f2aca55c9ffb53293496c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9f:39:68:05:db:6d:51:33:a8:91:88:26:7a: f9:9a:11:2d:5d:39:27:fb:d7:9b:a2:35:05:3b:79: 7e:2e:12:57:e7:5c:84:c9:df:5b:1b:f0:60:61:50: a3:ac:3c:a4:3d:13:fb:9f:c5:f0:8e:9d:a5:80:97: e3:92:dc:d3:c0:d3:1d:2a:17:ae:0c:bc:32:92:26: c7:4d:10:ef:c9:2b:21:00:70:56:48:97:f6:a9:21: 8a:4f:6e:c2:ef:d1:64:99:d6:6f:ac:e7:e3:45:50: 91:1f:5a:1a:d3:3f:cb:f6:58:f9:b2:2b:35:22:3f: 4b:0a:a6:66:54:85:b9:06:a9:df:e1:ee:ea:33:91: b1:f9:e8:ac:36:d3:d8:6e:6e:b0:2f:e6:32:b3:03: fa:1b:8d:49:67:55:ab:43:37:9c:dd:c5:64:14:ee: a8:0d:7d:5d:fa:a4:6e:82:a3:5a:ea:70:9d:f3:5d: 4f:cd:eb:49:a7:c5:39:4a:12:91:b0:b9:e9:40:16: 20:0a:2a:9b:00:3d:4f:14:17:cc:78:ef:ae:b2:73: 90:1b:12:34:2f:55:0f:6c:10:e1:8e:bc:ba:ee:88: 37:d3:5d:8d:b3:e2:88:d9:40:92:02:16:0e:e8:14: fc:7a:a6:fe:bb:62:3c:5b:b5:7b:ce:67:2c:83:61: e2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:62:92:6E:A1:1B:9E:6E:FB:82:70:B4:5C:C1:67:28:27:6B:AB:9D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c24d76f-a988-4548-a654-37a30aa8d32c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f1c:4000::/36 Signature Algorithm: sha256WithRSAEncryption 91:92:69:cc:35:a0:b4:86:d3:02:69:1e:2d:85:01:1f:f6:1d: 4c:dc:31:4d:b1:68:ba:f8:44:7e:a5:b1:85:29:fa:7b:35:78: 31:5e:13:a8:8f:fa:14:4d:40:4d:1e:e5:7d:dd:2a:ec:8d:bf: 1c:7a:68:b6:a3:e5:d3:4f:2e:9e:a8:ba:ed:eb:cd:5b:52:0a: 84:42:58:cc:84:66:f7:7d:00:04:fe:b7:6a:b3:11:bc:95:5e: 93:bd:ba:27:41:b9:f2:ec:23:bb:10:f8:00:55:8e:0a:da:a0: 98:96:8a:03:d8:db:13:07:c1:68:8d:10:d1:89:fa:dc:e4:2a: d9:a3:b7:39:cb:37:33:0e:0d:4f:61:bc:0b:4f:6b:8f:5c:e0: 07:7b:6e:44:8b:98:59:5b:61:d7:69:95:a4:9e:71:b1:57:3f: 52:b8:f9:1f:de:50:b9:57:93:2c:19:66:f7:c8:cb:dc:0e:e8: 70:9d:9d:c2:8c:b8:02:e2:ab:a1:2d:5f:c8:22:a4:7d:c3:a3: db:22:e2:09:39:f0:b5:f7:b0:7a:48:d2:e2:75:59:41:cd:c8: 61:65:18:c3:b8:66:92:f7:a3:16:c3:34:8e:38:db:97:6b:f2: 78:9b:6e:d5:75:2d:79:70:2f:44:d8:f8:a1:25:34:37:61:57: 6f:7a:81:88 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUGXstg6M9UTC9i/RJNqDpeTAajX4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDEyMDQ2WhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNDc3NjI5MmE5OTg2OWJhODdiYTExNzU0NDY2MTk4NGQ5 MjUzNmRlMTczZjJhY2E1NWM5ZmZiNTMyOTM0OTZjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/nzloBdttUTOokYgmevmaES1dOSf715uiNQU7eX4uElfn XITJ31sb8GBhUKOsPKQ9E/ufxfCOnaWAl+OS3NPA0x0qF64MvDKSJsdNEO/JKyEA cFZIl/apIYpPbsLv0WSZ1m+s5+NFUJEfWhrTP8v2WPmyKzUiP0sKpmZUhbkGqd/h 7uozkbH56Kw209hubrAv5jKzA/objUlnVatDN5zdxWQU7qgNfV36pG6Co1rqcJ3z XU/N60mnxTlKEpGwuelAFiAKKpsAPU8UF8x4766yc5AbEjQvVQ9sEOGOvLruiDfT XY2z4ojZQJICFg7oFPx6pv67YjxbtXvOZyyDYeJjAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUCWKSbqEbnm77gnC0XMFnKCdrq50wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRjMjRkNzZmLWE5ODgtNDU0OC1hNjU0LTM3YTMwYWE4ZDMyYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8cQDANBgkqhkiG9w0BAQsFAAOCAQEAkZJpzDWgtIbTAmkeLYUBH/Yd TNwxTbFouvhEfqWxhSn6ezV4MV4TqI/6FE1ATR7lfd0q7I2/HHpotqPl008unqi6 7evNW1IKhEJYzIRm930ABP63arMRvJVek726J0G58uwjuxD4AFWOCtqgmJaKA9jb EwfBaI0Q0Yn63OQq2aO3Ocs3Mw4NT2G8C09rj1zgB3tuRIuYWVth12mVpJ5xsVc/ Urj5H95QuVeTLBlm98jL3A7ocJ2dwoy4AuKroS1fyCKkfcOj2yLiCTnwtfewekjS 4nVZQc3IYWUYw7hmkvejFsM0jjjbl2vyeJtu1XUteXAvRNj4oSU0N2FXb3qBiA== -----END CERTIFICATE-----Generated at Mon Nov 2 22:29:34 2026 by rpki-client