$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/568a89e6-9390-4dde-bcf7-9756e7065ef3.roa File: 568a89e6-9390-4dde-bcf7-9756e7065ef3.roa (raw, json) Hash identifier: 0RNuNQ64t9LIoEffFZ4bs/QMRtIBkcHDyUYIypI+nS8= Subject key identifier: 9C:C4:92:35:E3:FA:75:01:D6:04:A5:1F:82:59:72:CD:1B:C9:C8:0F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6B1AA10A703EFD1CA700BD1067CC7982D0AFC7E0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/568a89e6-9390-4dde-bcf7-9756e7065ef3.roa Signing time: Thu 22 Oct 2026 00:30:11 +0000 ROA not before: Thu 22 Oct 2026 00:30:11 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffd:803f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:1a:a1:0a:70:3e:fd:1c:a7:00:bd:10:67:cc:79:82:d0:af:c7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 22 00:30:11 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=fc988f1dd4434d56375710651860fc4e94d1faed682fa0ca1774bb23ffd9030c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ca:1d:30:b0:dd:da:40:69:8a:14:b9:9b:58: b8:29:bf:5d:f7:aa:e9:0d:fc:08:2c:c9:25:c7:94: 10:ea:b3:4b:bf:f7:72:cd:62:d0:12:68:cb:70:e3: db:9e:63:88:bd:ba:37:54:9b:92:87:27:64:b6:97: 57:b0:e5:59:8a:8f:0f:d2:59:03:13:31:a3:8a:f7: 2d:dc:5a:13:e9:58:d5:e3:d7:b4:a0:c1:60:68:8e: f8:ce:da:35:6e:dc:2b:c7:2a:d1:19:8d:67:d7:6e: 3c:02:e0:8a:66:2d:f4:91:48:b8:59:d7:90:99:fc: 63:60:1e:08:7a:46:d4:61:ae:f5:46:af:65:81:52: cc:46:42:10:1b:fc:7e:bd:68:d2:bc:1f:34:a8:ed: d2:5b:a3:94:4b:11:ad:26:7a:5c:19:5e:82:20:e1: 11:68:b6:55:8d:5b:73:41:31:b6:e4:1c:42:64:88: cd:85:e7:3b:df:44:cd:ac:34:88:22:2e:ca:27:27: b3:8a:74:c7:f4:6e:3f:fc:af:1b:8a:1a:70:eb:b4: 80:f5:16:61:05:d5:bd:7d:44:94:c4:43:5c:68:de: b9:45:0d:c5:d9:9c:17:45:e9:fe:9d:73:75:3d:d4: 5f:ed:52:df:dc:3b:cc:79:8e:63:e6:69:d7:9c:72: 89:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C4:92:35:E3:FA:75:01:D6:04:A5:1F:82:59:72:CD:1B:C9:C8:0F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/568a89e6-9390-4dde-bcf7-9756e7065ef3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffd:803f::/48 Signature Algorithm: sha256WithRSAEncryption 79:aa:21:42:07:31:ed:a8:b4:d6:69:7f:28:ea:59:c0:bd:5f: 81:4f:88:fb:3e:91:29:9b:32:1c:5d:16:d1:4e:0b:9c:b0:6d: f4:99:4e:bf:30:92:7a:5c:57:fb:20:37:c0:39:99:8f:11:14: 13:83:f8:0b:6f:9f:c4:04:a6:88:a3:88:94:be:3b:67:c0:8b: 20:26:29:d3:d7:c0:b4:bd:d5:9c:fe:80:65:0e:df:c4:59:ad: 81:f3:01:00:45:f4:9a:69:4e:70:c3:3d:db:8e:9c:b3:ad:78: 2a:a0:a2:1e:4f:04:31:4b:e4:62:9c:c9:8c:28:85:a8:dc:44: ad:20:b5:05:f0:6e:da:81:18:28:67:0a:7a:29:f3:ea:7b:93: b7:35:e7:c5:8f:2d:85:12:0f:30:75:aa:db:1d:c5:67:dc:ac: 63:0a:e8:61:fe:61:c9:da:05:16:a5:57:88:1b:00:d7:68:72: c1:3c:82:d7:1d:a9:b5:28:fc:86:9f:ca:c3:65:55:38:45:7f: e4:b3:90:37:45:f6:02:19:d6:57:b3:5f:60:ee:f3:e8:b9:1d: 11:ae:0b:d1:6b:05:76:26:22:b2:b8:ca:99:97:76:dc:7d:18: 43:59:5c:3a:fb:d3:d5:59:af:60:3f:0d:b8:76:98:4c:89:7b: 0b:05:ef:f5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUaxqhCnA+/RynAL0QZ8x5gtCvx+AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIyMDAzMDExWhcNMjcwMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmYzk4OGYxZGQ0NDM0ZDU2Mzc1NzEwNjUxODYwZmM0ZTk0 ZDFmYWVkNjgyZmEwY2ExNzc0YmIyM2ZmZDkwMzBjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUyh0wsN3aQGmKFLmbWLgpv133qukN/AgsySXHlBDqs0u/ 93LNYtASaMtw49ueY4i9ujdUm5KHJ2S2l1ew5VmKjw/SWQMTMaOK9y3cWhPpWNXj 17SgwWBojvjO2jVu3CvHKtEZjWfXbjwC4IpmLfSRSLhZ15CZ/GNgHgh6RtRhrvVG r2WBUsxGQhAb/H69aNK8HzSo7dJbo5RLEa0melwZXoIg4RFotlWNW3NBMbbkHEJk iM2F5zvfRM2sNIgiLsonJ7OKdMf0bj/8rxuKGnDrtID1FmEF1b19RJTEQ1xo3rlF DcXZnBdF6f6dc3U91F/tUt/cO8x5jmPmadeccokZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUnMSSNeP6dQHWBKUfgllyzRvJyA8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU2OGE4OWU2LTkzOTAtNGRkZS1iY2Y3LTk3NTZlNzA2NWVmMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/9gD8wDQYJKoZIhvcNAQELBQADggEBAHmqIUIHMe2otNZpfyjqWcC9 X4FPiPs+kSmbMhxdFtFOC5ywbfSZTr8wknpcV/sgN8A5mY8RFBOD+Atvn8QEpoij iJS+O2fAiyAmKdPXwLS91Zz+gGUO38RZrYHzAQBF9JppTnDDPduOnLOteCqgoh5P BDFL5GKcyYwohajcRK0gtQXwbtqBGChnCnop8+p7k7c158WPLYUSDzB1qtsdxWfc rGMK6GH+YcnaBRalV4gbANdocsE8gtcdqbUo/IafysNlVThFf+SzkDdF9gIZ1lez X2Du8+i5HRGuC9FrBXYmIrK4ypmXdtx9GENZXDr709VZr2A/Dbh2mEyJewsF7/U= -----END CERTIFICATE-----Generated at Mon Nov 2 22:30:24 2026 by rpki-client