$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61c42399-dc36-4b89-880c-a8d3b151c7e9.roa File: 61c42399-dc36-4b89-880c-a8d3b151c7e9.roa (raw, json) Hash identifier: jybY4OwUlsFmjLCR74cb9iYFD+7mE4TR21oZ6wrcJzo= Subject key identifier: BE:C1:4B:4B:0C:0A:ED:A7:29:AD:93:6C:AD:B7:55:E3:44:84:61:75 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4E9D0F19916618EF1EA063AC5B7627C797AA079A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61c42399-dc36-4b89-880c-a8d3b151c7e9.roa Signing time: Thu 29 Oct 2026 00:20:08 +0000 ROA not before: Thu 29 Oct 2026 00:20:08 +0000 ROA not after: Wed 27 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f61:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:9d:0f:19:91:66:18:ef:1e:a0:63:ac:5b:76:27:c7:97:aa:07:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 29 00:20:08 2026 GMT Not After : Jan 27 23:59:59 2027 GMT Subject: serialNumber=2e4973f9d0c0825730687590ed98f4bb9846d3e72a42c39515a1d479aa21cea6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d4:ec:48:3a:4c:9e:1b:71:46:97:40:22:40: 42:2c:71:34:df:38:26:83:0e:05:b4:16:0f:42:77: e8:c6:9b:9a:b1:0c:de:7a:62:63:58:68:dd:22:4a: 18:b8:f2:af:66:c0:3e:a6:71:a6:88:c5:e4:68:27: 2d:27:dd:84:66:af:9c:75:d6:94:90:41:af:63:da: 34:14:d8:c0:b4:7a:e2:05:38:80:7a:6c:0e:82:24: 01:72:ba:cd:fc:b9:bb:0c:2e:65:1a:d1:29:08:2a: 06:2c:83:3c:ed:b4:3e:b6:43:84:1e:40:24:ed:19: db:0f:0c:60:1f:3f:a2:fd:32:a6:09:f7:46:2c:20: ef:02:1b:13:42:3a:09:66:94:05:af:88:81:ab:8d: 93:c8:46:66:cc:f2:9a:0d:37:55:ed:e3:39:65:b9: 4c:0e:42:25:ff:64:45:76:60:26:15:a8:72:54:4a: e8:df:7e:a4:27:03:f7:6b:a6:59:60:f2:46:09:e3: a2:f7:09:28:54:2d:3f:d2:36:a9:8d:06:0e:b4:48: cd:0f:f8:dc:24:5f:6b:c9:4f:06:55:03:05:b7:0e: 13:3f:ae:5c:3c:b1:47:bc:78:43:0d:d4:29:27:57: f5:1c:39:39:28:6f:3f:d7:18:5e:05:a6:db:cd:77: 53:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:C1:4B:4B:0C:0A:ED:A7:29:AD:93:6C:AD:B7:55:E3:44:84:61:75 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61c42399-dc36-4b89-880c-a8d3b151c7e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f61:2000::/40 Signature Algorithm: sha256WithRSAEncryption 88:d7:ff:19:47:97:6d:77:93:9f:59:24:08:e9:fd:a2:fb:cd: c8:64:cc:6c:95:bb:76:b2:69:65:82:dc:30:a6:d3:1d:2d:11: 04:2a:1b:23:e0:87:a2:6f:24:a3:67:32:8c:c5:62:62:59:dc: e6:61:8a:90:80:09:ae:70:0b:ea:55:be:b9:3d:c2:b7:9e:12: a1:68:4a:be:95:d1:46:96:1b:19:f9:40:6c:80:5f:9d:78:a2: 6b:57:08:58:65:00:f1:71:48:7e:7a:0b:06:36:93:fd:03:d6: c4:aa:dd:88:7a:3d:fc:b8:b3:8e:10:0e:d2:10:96:b4:b5:fd: 23:0c:be:0c:ad:4e:9b:76:52:a6:09:f3:01:cb:9d:85:b0:21: 1b:a1:de:43:2d:3d:c3:af:7d:24:9e:96:88:85:e2:ef:93:67: dc:4d:30:74:3a:58:5b:48:ac:9d:ce:cd:8d:be:b7:f0:5b:c9: 4f:78:41:aa:6d:b2:67:a8:f8:0d:16:9b:a1:03:8b:a7:ce:9f: 5e:79:5a:8d:b2:2f:55:1a:92:d7:03:d6:89:06:7b:eb:54:db: 5c:4c:f2:a2:58:c4:95:61:ed:46:a2:9b:31:05:4d:0f:5c:8d: 32:e7:5d:59:93:6a:84:6c:c6:82:d6:c6:c5:01:d1:16:b1:b4: 85:3f:a0:4f -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUTp0PGZFmGO8eoGOsW3Ynx5eqB5owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI5MDAyMDA4WhcNMjcwMTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZTQ5NzNmOWQwYzA4MjU3MzA2ODc1OTBlZDk4ZjRiYjk4 NDZkM2U3MmE0MmMzOTUxNWExZDQ3OWFhMjFjZWE2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCI1OxIOkyeG3FGl0AiQEIscTTfOCaDDgW0Fg9Cd+jGm5qx DN56YmNYaN0iShi48q9mwD6mcaaIxeRoJy0n3YRmr5x11pSQQa9j2jQU2MC0euIF OIB6bA6CJAFyus38ubsMLmUa0SkIKgYsgzzttD62Q4QeQCTtGdsPDGAfP6L9MqYJ 90YsIO8CGxNCOglmlAWviIGrjZPIRmbM8poNN1Xt4zlluUwOQiX/ZEV2YCYVqHJU SujffqQnA/drpllg8kYJ46L3CShULT/SNqmNBg60SM0P+NwkX2vJTwZVAwW3DhM/ rlw8sUe8eEMN1CknV/UcOTkobz/XGF4FptvNd1MBAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUvsFLSwwK7acprZNsrbdV40SEYXUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYxYzQyMzk5LWRjMzYtNGI4OS04ODBjLWE4ZDNiMTUxYzdlOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9hIDANBgkqhkiG9w0BAQsFAAOCAQEAiNf/GUeXbXeTn1kkCOn9ovvN yGTMbJW7drJpZYLcMKbTHS0RBCobI+CHom8ko2cyjMViYlnc5mGKkIAJrnAL6lW+ uT3Ct54SoWhKvpXRRpYbGflAbIBfnXiia1cIWGUA8XFIfnoLBjaT/QPWxKrdiHo9 /LizjhAO0hCWtLX9Iwy+DK1Om3ZSpgnzAcudhbAhG6HeQy09w699JJ6WiIXi75Nn 3E0wdDpYW0isnc7Njb638FvJT3hBqm2yZ6j4DRaboQOLp86fXnlajbIvVRqS1wPW iQZ761TbXEzyoljElWHtRqKbMQVND1yNMuddWZNqhGzGgtbGxQHRFrG0hT+gTw== -----END CERTIFICATE-----Generated at Mon Nov 2 18:49:24 2026 by rpki-client