$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4e4c4e2b-fe1d-4e28-be53-b19977d83728.roa File: 4e4c4e2b-fe1d-4e28-be53-b19977d83728.roa (raw, json) Hash identifier: UnD17csSS3wW8k5N7EZHWtyrjMzmckYQQPw8r212cGc= Subject key identifier: 23:89:BB:3A:1D:3D:4B:22:BF:8D:8A:B4:D1:B3:A8:3C:60:28:D4:B2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4BD58AA14AC474CC5C92B76927F785E8C6C4683F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4e4c4e2b-fe1d-4e28-be53-b19977d83728.roa Signing time: Thu 15 Oct 2026 00:30:15 +0000 ROA not before: Thu 15 Oct 2026 00:30:15 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff6:6000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:d5:8a:a1:4a:c4:74:cc:5c:92:b7:69:27:f7:85:e8:c6:c4:68:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 15 00:30:15 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=af77ea6ff47263fc89ee266389a543d3193a91d289519412e6f3fd1b06f360e8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4e:8a:5e:a9:5a:27:41:09:79:dc:a1:e0:db: 6e:11:5e:da:ed:98:c1:5d:af:fc:aa:09:f6:a3:a0: 3d:87:b5:64:99:5e:5c:cc:41:c0:a1:e8:14:31:eb: 1b:33:6f:60:7c:0d:7d:fd:96:8a:ba:38:55:1a:b1: 6d:ac:bc:93:a6:99:f3:27:18:58:f9:40:cf:cc:5a: 20:3b:42:8c:27:49:52:81:07:1f:58:f0:ed:3a:4f: 24:95:b9:fc:ba:63:39:e9:0d:ea:68:6e:91:b3:9d: 8a:20:2b:7e:1c:be:45:49:28:0a:f6:a5:d2:a7:4f: 0b:7b:cd:94:db:68:4b:48:00:57:66:be:c9:2a:7b: 62:9c:e8:3a:a5:07:6c:31:7c:c7:86:e3:63:b3:e2: 8e:5b:40:95:e1:4c:a1:b7:c3:ad:bf:74:b7:a8:e3: 6e:65:a2:ee:2f:28:94:5b:ad:e7:2e:eb:94:61:f8: a8:b0:e2:e1:51:b1:02:b5:79:d8:6c:d1:cc:d9:49: 7a:6f:4b:f7:6f:3e:da:f2:12:1a:25:ee:4c:63:0f: 4f:dd:e4:ae:86:81:c9:94:a9:88:61:d1:e5:4a:70: 2c:6a:f4:9e:46:ab:8c:6c:3c:df:8a:13:59:b4:5b: 0f:cc:36:ec:f3:c5:81:38:91:a8:a3:1f:ed:1e:44: 63:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:89:BB:3A:1D:3D:4B:22:BF:8D:8A:B4:D1:B3:A8:3C:60:28:D4:B2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4e4c4e2b-fe1d-4e28-be53-b19977d83728.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff6:6000::/48 Signature Algorithm: sha256WithRSAEncryption 54:5e:69:77:d3:eb:ef:8d:2c:04:08:f1:66:d0:64:25:ce:77: 69:97:ee:68:e2:30:4d:9f:12:4f:72:84:a9:84:e0:55:7e:77: 38:78:70:08:af:59:ef:b7:28:2d:b2:a1:26:80:68:29:b9:37: a6:69:8e:9c:08:2d:6b:de:19:91:9d:d8:d5:b3:f8:db:15:91: fc:5f:bc:d6:5e:a8:4f:2d:96:87:c2:95:7e:6c:d3:bd:81:97: 25:cb:17:7d:71:fe:38:de:c2:0f:9b:38:7b:fe:5e:12:8b:8d: cf:85:60:19:6b:ee:2b:eb:0c:11:24:f9:81:6c:3d:a7:80:46: 21:30:6e:35:13:b8:c7:4f:c2:74:c2:ac:87:2c:9b:4f:a4:b4: 00:d7:f6:9a:c3:36:b2:cc:a6:56:ff:4c:7b:c3:4b:bb:8a:48: 43:36:e1:22:5a:0c:34:3f:9a:98:a4:47:0e:92:78:4a:85:20: 35:24:04:35:d0:a7:fc:08:e6:4b:a4:36:4f:61:d3:97:bb:88: 49:03:6f:33:fc:4e:8e:fc:f6:4b:c0:84:9c:68:be:b2:1d:96: 2f:f3:a3:4d:cf:16:49:9c:94:b2:e7:7b:fa:df:7d:3e:16:2f: 40:b5:ac:60:fc:9d:ce:bb:f9:eb:86:61:ce:52:82:e8:a8:3d: 5f:31:8b:4b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUS9WKoUrEdMxckrdpJ/eF6MbEaD8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE1MDAzMDE1WhcNMjcwMTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhZjc3ZWE2ZmY0NzI2M2ZjODllZTI2NjM4OWE1NDNkMzE5 M2E5MWQyODk1MTk0MTJlNmYzZmQxYjA2ZjM2MGU4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9TopeqVonQQl53KHg224RXtrtmMFdr/yqCfajoD2HtWSZ XlzMQcCh6BQx6xszb2B8DX39loq6OFUasW2svJOmmfMnGFj5QM/MWiA7QownSVKB Bx9Y8O06TySVufy6YznpDepobpGznYogK34cvkVJKAr2pdKnTwt7zZTbaEtIAFdm vskqe2Kc6DqlB2wxfMeG42Oz4o5bQJXhTKG3w62/dLeo425lou4vKJRbrecu65Rh +Kiw4uFRsQK1edhs0czZSXpvS/dvPtryEhol7kxjD0/d5K6GgcmUqYhh0eVKcCxq 9J5Gq4xsPN+KE1m0Ww/MNuzzxYE4kaijH+0eRGOLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUI4m7Oh09SyK/jYq00bOoPGAo1LIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRlNGM0ZTJiLWZlMWQtNGUyOC1iZTUzLWIxOTk3N2Q4MzcyOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/2YAAwDQYJKoZIhvcNAQELBQADggEBAFReaXfT6++NLAQI8WbQZCXO d2mX7mjiME2fEk9yhKmE4FV+dzh4cAivWe+3KC2yoSaAaCm5N6ZpjpwILWveGZGd 2NWz+NsVkfxfvNZeqE8tlofClX5s072BlyXLF31x/jjewg+bOHv+XhKLjc+FYBlr 7ivrDBEk+YFsPaeARiEwbjUTuMdPwnTCrIcsm0+ktADX9prDNrLMplb/THvDS7uK SEM24SJaDDQ/mpikRw6SeEqFIDUkBDXQp/wI5kukNk9h05e7iEkDbzP8To789kvA hJxovrIdli/zo03PFkmclLLne/rffT4WL0C1rGD8nc67+euGYc5SguioPV8xi0s= -----END CERTIFICATE-----Generated at Wed Nov 4 23:18:15 2026 by rpki-client