$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/538d0377-3611-4c1a-a172-2e35b6509d3f.roa File: 538d0377-3611-4c1a-a172-2e35b6509d3f.roa (raw, json) Hash identifier: QdaWv0s3fh0RS27HHAnlQ+NwSyzdYc4lhSB44lsU/RM= Subject key identifier: 4A:FC:12:6B:3E:35:35:1C:16:E4:6B:E7:92:91:01:EE:D6:7F:82:AC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 397856FA54E954EC5E6C0A581C5D8B6F744F4153 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/538d0377-3611-4c1a-a172-2e35b6509d3f.roa Signing time: Thu 22 Oct 2026 00:31:15 +0000 ROA not before: Thu 22 Oct 2026 00:31:15 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:80a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:78:56:fa:54:e9:54:ec:5e:6c:0a:58:1c:5d:8b:6f:74:4f:41:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 22 00:31:15 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=af612afa4a04f149d6234cc70c8918895483a069aa3fc7bac853b06a54174813, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:16:e4:38:6c:ec:53:25:2a:ea:28:07:df:ba: 24:4e:fe:54:bb:a5:2b:79:72:fe:a6:a8:14:fd:f4: 90:6b:9d:e2:73:76:7c:02:89:d4:fd:5e:89:db:81: 26:d6:6c:61:2d:6b:99:d3:6e:c1:27:95:d8:89:43: 5b:21:a2:65:00:c7:06:fc:17:81:11:6b:9c:17:49: 77:1a:7c:e0:11:fb:ed:65:06:f6:cf:ef:4e:f7:79: 90:21:e8:f5:35:b3:6e:d8:98:f0:9b:a8:e2:16:25: a0:7a:c4:4f:5c:d6:0f:68:3a:70:f8:ad:eb:2f:e2: ef:d3:52:26:9b:b5:ae:48:34:60:75:39:63:fd:7e: d6:a2:33:30:55:e5:e7:af:86:f1:bd:f4:a7:4a:45: 0e:f6:0c:0c:1e:52:4c:08:6e:f4:25:a2:10:21:6e: 9e:93:3c:58:54:b8:c7:b5:eb:89:22:10:a9:93:70: 50:24:c1:9b:ba:76:00:3c:f5:15:26:0c:99:5d:f9: 11:2b:d2:f4:5f:e8:89:42:8f:2f:f9:0e:56:94:be: d6:9c:06:db:f2:26:04:23:85:f0:1d:1f:14:12:d6: c0:5f:26:8a:74:c0:88:12:e1:ab:62:a1:12:1a:31: 30:13:b4:cd:03:55:88:fa:ed:05:b7:3c:71:1f:19: 46:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:FC:12:6B:3E:35:35:1C:16:E4:6B:E7:92:91:01:EE:D6:7F:82:AC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/538d0377-3611-4c1a-a172-2e35b6509d3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:80a0::/48 Signature Algorithm: sha256WithRSAEncryption a7:88:57:62:77:10:db:f2:88:9a:14:84:86:a2:12:2d:34:01: b8:05:52:93:23:e9:0c:f5:bc:e3:08:0c:95:e5:96:6d:0e:f4: 31:c0:65:d4:bf:76:2b:0e:c4:56:ab:ee:a0:d8:00:be:58:ca: ed:29:55:ed:ee:a6:3b:3f:77:d9:f6:26:b1:71:0b:4d:07:91: bd:7d:9b:b6:71:00:0e:05:a0:d3:d7:f9:40:d7:0a:1b:fb:c1: 3a:f9:31:fb:8d:57:38:53:3a:f2:4c:e8:25:ea:a2:03:21:8c: 51:06:eb:1d:55:02:41:34:7c:95:9b:da:cc:45:85:09:72:c5: b3:ac:65:57:b5:cf:1a:42:48:94:4e:b8:bd:0c:78:f6:9f:86: 98:95:cf:9e:24:d3:54:14:c7:65:0b:1b:47:bc:0e:cc:00:91: e9:21:46:f5:95:6a:73:cb:94:57:7d:6b:66:1c:55:33:51:5e: f4:ff:52:18:34:b8:3c:4a:bc:9e:05:c1:01:5d:1c:a5:e0:c4: 5e:c2:b1:87:9b:0c:e3:fa:92:6e:9d:ae:69:c4:04:55:85:d7: 71:0f:e1:c2:b2:e7:18:a0:bc:82:46:0e:20:ea:ca:24:b6:a9: 11:6f:45:ea:74:51:92:f2:f3:83:bb:75:76:25:e5:7f:9f:93: 34:de:b2:db -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUOXhW+lTpVOxebApYHF2Lb3RPQVMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIyMDAzMTE1WhcNMjcwMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhZjYxMmFmYTRhMDRmMTQ5ZDYyMzRjYzcwYzg5MTg4OTU0 ODNhMDY5YWEzZmM3YmFjODUzYjA2YTU0MTc0ODEzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOFuQ4bOxTJSrqKAffuiRO/lS7pSt5cv6mqBT99JBrneJz dnwCidT9XonbgSbWbGEta5nTbsEnldiJQ1shomUAxwb8F4ERa5wXSXcafOAR++1l BvbP7073eZAh6PU1s27YmPCbqOIWJaB6xE9c1g9oOnD4resv4u/TUiabta5INGB1 OWP9ftaiMzBV5eevhvG99KdKRQ72DAweUkwIbvQlohAhbp6TPFhUuMe164kiEKmT cFAkwZu6dgA89RUmDJld+REr0vRf6IlCjy/5DlaUvtacBtvyJgQjhfAdHxQS1sBf Jop0wIgS4atioRIaMTATtM0DVYj67QW3PHEfGUY5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUSvwSaz41NRwW5GvnkpEB7tZ/gqwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzUzOGQwMzc3LTM2MTEtNGMxYS1hMTcyLTJlMzViNjUwOWQzZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//gKAwDQYJKoZIhvcNAQELBQADggEBAKeIV2J3ENvyiJoUhIaiEi00 AbgFUpMj6Qz1vOMIDJXllm0O9DHAZdS/disOxFar7qDYAL5Yyu0pVe3upjs/d9n2 JrFxC00Hkb19m7ZxAA4FoNPX+UDXChv7wTr5MfuNVzhTOvJM6CXqogMhjFEG6x1V AkE0fJWb2sxFhQlyxbOsZVe1zxpCSJROuL0MePafhpiVz54k01QUx2ULG0e8DswA kekhRvWVanPLlFd9a2YcVTNRXvT/Uhg0uDxKvJ4FwQFdHKXgxF7CsYebDOP6km6d rmnEBFWF13EP4cKy5xigvIJGDiDqyiS2qRFvRep0UZLy84O7dXYl5X+fkzTests= -----END CERTIFICATE-----Generated at Mon Nov 2 23:58:22 2026 by rpki-client