$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4cd2cc9b-78f0-4971-a170-a90ca08b933f.roa File: 4cd2cc9b-78f0-4971-a170-a90ca08b933f.roa (raw, json) Hash identifier: clF9PGieVl+r1BS+iWPdpQunxiUPEwEMfM2WSDBpJIs= Subject key identifier: 05:23:3D:C7:81:6D:F4:62:75:64:8B:B9:2E:AA:DF:CC:5C:BD:1D:2C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4BC26AF3614D58914D0C355E9F4162D7BA11F7E0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4cd2cc9b-78f0-4971-a170-a90ca08b933f.roa Signing time: Fri 23 Oct 2026 01:10:11 +0000 ROA not before: Fri 23 Oct 2026 01:10:11 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f10:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:c2:6a:f3:61:4d:58:91:4d:0c:35:5e:9f:41:62:d7:ba:11:f7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 23 01:10:11 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=0265da756cff2f930bb19766ba3fbe114abd2f73c39036216450fd0a17d322a0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:20:87:be:e5:fd:3b:8b:6b:bc:22:a8:e3:f9: fb:a5:d4:b6:d2:3d:0e:bc:07:9b:f0:5e:af:7a:cf: 72:f1:1c:c6:3c:4a:85:db:19:7f:06:61:5e:a7:98: 5c:ba:3a:ea:49:9e:93:02:a8:79:e8:04:2e:47:39: e1:87:5e:13:0b:64:78:72:06:02:41:89:5c:cc:86: e5:63:88:79:ae:cd:be:3a:b5:0d:52:a1:81:a0:74: d0:74:78:10:f4:4b:80:6c:98:9d:1d:58:ee:83:cb: 90:d9:e3:6d:b8:fe:4a:01:96:18:b3:be:91:19:97: 00:9b:c7:92:3e:9e:46:cb:34:81:26:0d:28:45:13: 77:7b:62:dd:a8:c5:c7:de:0d:88:e1:db:76:79:49: 66:f2:ec:27:8a:b9:5f:59:58:2f:d1:eb:f7:c4:a6: 3a:56:85:d9:8e:d5:1d:2c:68:ab:a6:7c:74:4e:6f: b6:56:61:5f:2e:72:1b:e6:f1:c3:af:a3:0f:62:1f: ec:2a:40:3c:f7:6e:79:00:d5:ea:8f:5b:ab:11:13: eb:9d:4c:ae:3f:3b:85:16:38:2e:f5:49:5a:22:17: 67:9e:45:1b:62:d4:f3:e9:0f:e9:eb:11:10:ce:65: 87:0c:34:2b:9a:0b:9e:43:ba:07:bb:6d:38:6f:d2: b0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:23:3D:C7:81:6D:F4:62:75:64:8B:B9:2E:AA:DF:CC:5C:BD:1D:2C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4cd2cc9b-78f0-4971-a170-a90ca08b933f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f10:4000::/36 Signature Algorithm: sha256WithRSAEncryption 4b:67:42:25:e5:e9:a8:64:1b:21:b9:e6:ab:19:66:af:a8:30: ad:dc:98:da:65:f6:ee:54:08:0c:5c:72:70:b8:89:1b:c7:af: e7:de:ac:49:6a:c4:4a:d7:01:35:b9:6e:26:53:2b:53:ce:2d: db:25:dc:f0:6f:3c:b1:85:c7:40:0a:89:8f:23:81:41:6a:bd: 31:f8:e8:76:e5:3e:73:d5:02:dc:4b:94:e8:e2:59:b4:10:26: e7:a2:0d:0d:c7:3c:4f:f7:1d:54:03:db:d7:7a:da:2b:93:7b: 0e:4a:83:a8:e8:97:4f:37:7f:dd:65:80:c3:77:d1:ad:d1:ae: 82:84:3b:41:d0:59:b1:21:26:c9:71:e4:2c:16:73:ae:25:c3: d6:44:db:0c:0f:0a:d1:8b:3f:75:5e:d8:1b:bf:41:ea:1a:13: 03:09:d9:ea:3d:c7:07:0d:4c:75:81:ce:03:17:aa:74:d9:9d: 4d:45:42:ee:e9:81:4f:f1:96:9d:93:29:41:37:f9:ca:ba:94: eb:6c:ce:bf:7c:22:c0:84:ee:59:79:83:8a:87:49:f1:5f:3a: b0:f5:fb:72:fe:02:ef:45:4f:e6:d0:f7:6a:ff:9e:f7:f1:7f: f0:09:af:a2:8a:dd:26:42:3c:39:24:1d:6f:ed:26:df:68:79: 52:ac:a0:70 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUS8Jq82FNWJFNDDVen0Fi17oR9+AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDExMDExWhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMjY1ZGE3NTZjZmYyZjkzMGJiMTk3NjZiYTNmYmUxMTRh YmQyZjczYzM5MDM2MjE2NDUwZmQwYTE3ZDMyMmEwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFIIe+5f07i2u8Iqjj+ful1LbSPQ68B5vwXq96z3LxHMY8 SoXbGX8GYV6nmFy6OupJnpMCqHnoBC5HOeGHXhMLZHhyBgJBiVzMhuVjiHmuzb46 tQ1SoYGgdNB0eBD0S4BsmJ0dWO6Dy5DZ4224/koBlhizvpEZlwCbx5I+nkbLNIEm DShFE3d7Yt2oxcfeDYjh23Z5SWby7CeKuV9ZWC/R6/fEpjpWhdmO1R0saKumfHRO b7ZWYV8uchvm8cOvow9iH+wqQDz3bnkA1eqPW6sRE+udTK4/O4UWOC71SVoiF2ee RRti1PPpD+nrERDOZYcMNCuaC55Duge7bThv0rCBAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUBSM9x4Ft9GJ1ZIu5LqrfzFy9HSwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRjZDJjYzliLTc4ZjAtNDk3MS1hMTcwLWE5MGNhMDhiOTMzZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8QQDANBgkqhkiG9w0BAQsFAAOCAQEAS2dCJeXpqGQbIbnmqxlmr6gw rdyY2mX27lQIDFxycLiJG8ev596sSWrEStcBNbluJlMrU84t2yXc8G88sYXHQAqJ jyOBQWq9MfjoduU+c9UC3EuU6OJZtBAm56INDcc8T/cdVAPb13raK5N7DkqDqOiX Tzd/3WWAw3fRrdGugoQ7QdBZsSEmyXHkLBZzriXD1kTbDA8K0Ys/dV7YG79B6hoT AwnZ6j3HBw1MdYHOAxeqdNmdTUVC7umBT/GWnZMpQTf5yrqU62zOv3wiwITuWXmD iodJ8V86sPX7cv4C70VP5tD3av+e9/F/8AmvoordJkI8OSQdb+0m32h5UqygcA== -----END CERTIFICATE-----Generated at Mon Nov 2 18:48:18 2026 by rpki-client