$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c978c10-7c26-4131-9992-5da0a473806f.roa File: 4c978c10-7c26-4131-9992-5da0a473806f.roa (raw, json) Hash identifier: 1MyCKZQ5jM0vawDlmZd52unQ2+FYQE3ThlO46X2nOIc= Subject key identifier: D9:50:25:A2:CB:F9:83:32:93:27:EF:1F:14:D5:BD:2E:2E:68:1A:32 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4C40A9C008A04ED4CAC34D060E469E2F468954FB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c978c10-7c26-4131-9992-5da0a473806f.roa Signing time: Fri 09 Oct 2026 01:10:13 +0000 ROA not before: Fri 09 Oct 2026 01:10:13 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fea:4080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:40:a9:c0:08:a0:4e:d4:ca:c3:4d:06:0e:46:9e:2f:46:89:54:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 9 01:10:13 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=3c75b62f78a963ec7a0dcc0e9606a38623cb6b2d523949b7a125dd6e20fc7d33, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7e:e8:ca:ab:7f:bf:4a:73:6d:0d:26:7c:88: 60:8f:5a:66:e3:3b:95:a5:bb:ba:64:bb:1d:88:01: 24:04:4d:59:9a:65:00:9a:8d:70:ea:6c:bb:b1:10: 02:1d:22:fd:31:7b:69:18:aa:0e:8e:9d:26:00:05: 1f:87:1c:6b:36:49:3c:cd:fa:e0:89:f5:72:6f:44: 9c:43:f6:97:13:c0:70:8b:62:ea:00:98:c8:8d:39: 3d:eb:39:cb:41:92:aa:e0:2a:25:fd:83:6e:78:d3: b1:43:bd:6c:bc:99:04:18:1e:4d:3e:93:3a:48:2e: 96:bd:42:26:05:22:ee:d7:3f:65:88:74:44:a2:a5: 77:f1:dd:dd:17:4b:7d:02:5f:a9:8b:e9:08:33:b9: e4:85:46:fc:cc:90:fb:2f:34:d7:4a:3f:df:96:09: ae:13:99:4c:c8:0d:1a:bf:d3:07:52:cf:8c:d5:15: 3f:52:bd:97:a0:3d:9d:9e:ea:13:5d:b6:17:f2:bb: 6d:48:42:cc:73:6d:65:b2:18:76:88:33:0e:c6:1b: 7b:b4:e8:3f:a2:ff:f9:44:4f:9a:c2:06:79:b4:c4: 1c:c2:34:16:98:52:60:49:ec:f0:35:43:df:89:a6: 8a:e4:1d:74:f0:fb:8f:61:f2:a0:bb:9b:c7:a9:28: 98:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:50:25:A2:CB:F9:83:32:93:27:EF:1F:14:D5:BD:2E:2E:68:1A:32 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c978c10-7c26-4131-9992-5da0a473806f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fea:4080::/48 Signature Algorithm: sha256WithRSAEncryption 19:74:cc:b6:87:09:44:b2:60:f6:89:88:15:a4:9a:6d:57:df: 15:7c:f3:76:84:2f:8a:24:8b:4a:17:e9:28:26:a8:e8:5e:67: 30:78:9c:71:57:0b:7a:16:1d:99:f4:ee:2d:61:fd:3d:a1:d1: 0f:21:84:74:4c:46:a1:a7:8b:79:dd:a0:d3:76:d3:94:4b:95: bd:db:58:52:cd:db:20:43:3f:07:29:78:81:c9:94:8d:1e:b5: a1:af:3b:25:8b:3e:fa:91:3a:bc:52:d8:6a:c9:64:e0:7e:2a: 36:dc:dd:f3:c0:4a:39:b9:d9:dc:df:7e:c8:d0:b4:22:a8:21: 7e:52:be:d2:0e:6f:63:05:45:08:a0:72:26:2b:98:62:65:32: d6:59:69:09:73:49:f1:ae:19:3c:ca:71:83:ad:29:22:a4:e6: 78:37:0c:6b:09:a8:fd:23:70:67:db:56:46:45:62:da:9e:b6: 92:e4:94:ea:28:28:0b:95:b3:24:a1:50:7c:d6:57:4d:24:a9: 8b:c7:9a:b5:c5:69:ab:75:28:bf:9a:fa:fb:d2:a4:88:2d:17: b7:cc:82:92:22:69:e0:2c:5a:72:ea:1c:4b:94:89:09:e7:f4: 97:31:d1:9a:d2:f8:69:f7:96:fc:50:25:d2:f3:10:92:74:d2: 85:d0:d9:ad -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTECpwAigTtTKw00GDkaeL0aJVPswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA5MDExMDEzWhcNMjcwMTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYzc1YjYyZjc4YTk2M2VjN2EwZGNjMGU5NjA2YTM4NjIz Y2I2YjJkNTIzOTQ5YjdhMTI1ZGQ2ZTIwZmM3ZDMzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIfujKq3+/SnNtDSZ8iGCPWmbjO5Wlu7pkux2IASQETVma ZQCajXDqbLuxEAIdIv0xe2kYqg6OnSYABR+HHGs2STzN+uCJ9XJvRJxD9pcTwHCL YuoAmMiNOT3rOctBkqrgKiX9g25407FDvWy8mQQYHk0+kzpILpa9QiYFIu7XP2WI dESipXfx3d0XS30CX6mL6QgzueSFRvzMkPsvNNdKP9+WCa4TmUzIDRq/0wdSz4zV FT9SvZegPZ2e6hNdthfyu21IQsxzbWWyGHaIMw7GG3u06D+i//lET5rCBnm0xBzC NBaYUmBJ7PA1Q9+JporkHXTw+49h8qC7m8epKJhvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU2VAlosv5gzKTJ+8fFNW9Li5oGjIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRjOTc4YzEwLTdjMjYtNDEzMS05OTkyLTVkYTBhNDczODA2Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/qQIAwDQYJKoZIhvcNAQELBQADggEBABl0zLaHCUSyYPaJiBWkmm1X 3xV883aEL4oki0oX6SgmqOheZzB4nHFXC3oWHZn07i1h/T2h0Q8hhHRMRqGni3nd oNN205RLlb3bWFLN2yBDPwcpeIHJlI0etaGvOyWLPvqROrxS2GrJZOB+Kjbc3fPA Sjm52dzffsjQtCKoIX5SvtIOb2MFRQigciYrmGJlMtZZaQlzSfGuGTzKcYOtKSKk 5ng3DGsJqP0jcGfbVkZFYtqetpLklOooKAuVsyShUHzWV00kqYvHmrXFaat1KL+a +vvSpIgtF7fMgpIiaeAsWnLqHEuUiQnn9Jcx0ZrS+Gn3lvxQJdLzEJJ00oXQ2a0= -----END CERTIFICATE-----Generated at Tue Nov 3 12:08:16 2026 by rpki-client