$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63c66212-9e91-4679-9ca9-8591346fe14e.roa File: 63c66212-9e91-4679-9ca9-8591346fe14e.roa (raw, json) Hash identifier: /wfS3lyE0kmeShcJu03OdKWYYnQWddqdrbf30XZt9Ko= Subject key identifier: E6:8B:6B:47:B8:BF:8B:50:D6:4F:D7:5B:14:6F:B4:F7:FD:96:E0:67 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 577E4B83BB513135E82C0CA6B093D7791F5561BD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63c66212-9e91-4679-9ca9-8591346fe14e.roa Signing time: Thu 29 Oct 2026 00:40:05 +0000 ROA not before: Thu 29 Oct 2026 00:40:05 +0000 ROA not after: Wed 27 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fe8:1020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:7e:4b:83:bb:51:31:35:e8:2c:0c:a6:b0:93:d7:79:1f:55:61:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 29 00:40:05 2026 GMT Not After : Jan 27 23:59:59 2027 GMT Subject: serialNumber=4a9a47e8da2cc161234bd1eefd3d63f02e9aaa08394e269dd804261055ffc78d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:69:da:38:6c:61:59:43:b4:b1:6e:38:db:b0: 95:bb:71:d0:71:7b:78:0f:21:0d:e2:3b:db:22:d1: 25:7d:d3:4e:63:88:db:a0:13:13:05:e8:46:71:8f: 52:7d:47:a2:f6:31:52:74:c2:f5:72:1c:c8:88:47: 5a:37:5d:28:58:ef:17:97:e9:05:1c:a7:ef:a8:8b: 34:3a:79:90:ad:7c:d5:7e:62:86:7a:89:22:54:e7: 71:5f:4c:a8:6f:da:70:1c:39:d0:66:64:89:ce:ef: 75:a5:28:be:3c:ec:d2:e7:b0:e0:9e:cf:37:fe:72: 23:d6:87:32:19:01:72:2c:1f:9b:fe:35:8a:10:12: 84:49:c9:31:26:da:c8:a8:e7:a0:bc:4f:d1:76:36: 37:ec:7f:e1:d2:e6:4b:64:30:ba:9b:d8:70:d5:94: db:43:3c:3e:cc:76:a4:37:ae:86:72:3a:7d:ff:26: 2d:d3:73:dc:93:ae:6b:c8:85:ea:4b:8c:87:4d:53: de:ae:1a:dd:be:81:e1:bb:fc:3d:eb:e3:65:a8:e2: ee:c4:d4:28:5e:e0:8b:b1:d5:9a:8f:30:ca:e7:60: a3:d4:b4:29:42:3f:33:10:bb:43:8d:f5:1c:fd:66: 3c:37:c0:d9:f6:2d:2d:8d:63:33:b6:98:17:cd:d7: 3f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:8B:6B:47:B8:BF:8B:50:D6:4F:D7:5B:14:6F:B4:F7:FD:96:E0:67 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63c66212-9e91-4679-9ca9-8591346fe14e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fe8:1020::/48 Signature Algorithm: sha256WithRSAEncryption d8:17:cd:bd:21:7f:df:00:3e:0d:7b:2d:f4:2b:84:6d:61:5c: 6c:2d:e2:e7:33:90:06:5d:35:d3:32:df:4b:b9:91:1e:31:91: f2:92:21:73:45:d0:b7:25:36:55:50:aa:f5:d0:d6:0f:4a:53: 06:47:87:fb:bc:ba:89:fb:a3:ce:07:12:05:51:34:c6:b6:a6: f0:60:98:ec:8a:c7:cb:d5:ac:69:ca:00:da:8d:72:4a:04:cd: 98:c2:d3:5c:8d:07:7c:7e:d9:79:d7:23:4c:84:c4:c7:e2:a7: 49:18:e8:e9:d5:df:70:57:93:d7:19:f5:d8:44:2f:50:34:d4: 98:b4:04:4a:a1:75:73:e0:0a:4e:cc:c2:bd:8d:b0:da:2f:d7: 4a:47:ae:c0:ec:a7:14:0a:66:45:62:cb:20:5e:c2:84:d9:a1: 27:ae:22:c6:d4:7c:4b:37:81:3e:df:d2:a5:97:45:10:70:7f: fb:ab:33:c4:24:ef:03:79:95:c7:65:fe:bb:dd:d7:df:45:f1: 88:32:75:13:37:3f:fe:00:5e:5c:66:cd:de:c3:63:47:7b:da: 57:48:5d:44:a7:d9:29:bf:59:6a:cd:17:fe:73:25:c8:e9:1b: 23:29:cd:bc:9f:af:ac:c0:93:1b:00:72:e3:4d:b1:34:7a:01: 21:26:63:75 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUV35Lg7tRMTXoLAymsJPXeR9VYb0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI5MDA0MDA1WhcNMjcwMTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YTlhNDdlOGRhMmNjMTYxMjM0YmQxZWVmZDNkNjNmMDJl OWFhYTA4Mzk0ZTI2OWRkODA0MjYxMDU1ZmZjNzhkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDdado4bGFZQ7SxbjjbsJW7cdBxe3gPIQ3iO9si0SV9005j iNugExMF6EZxj1J9R6L2MVJ0wvVyHMiIR1o3XShY7xeX6QUcp++oizQ6eZCtfNV+ YoZ6iSJU53FfTKhv2nAcOdBmZInO73WlKL487NLnsOCezzf+ciPWhzIZAXIsH5v+ NYoQEoRJyTEm2sio56C8T9F2Njfsf+HS5ktkMLqb2HDVlNtDPD7MdqQ3roZyOn3/ Ji3Tc9yTrmvIhepLjIdNU96uGt2+geG7/D3r42Wo4u7E1Che4Iux1ZqPMMrnYKPU tClCPzMQu0ON9Rz9Zjw3wNn2LS2NYzO2mBfN1z/lAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU5otrR7i/i1DWT9dbFG+09/2W4GcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYzYzY2MjEyLTllOTEtNDY3OS05Y2E5LTg1OTEzNDZmZTE0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/oECAwDQYJKoZIhvcNAQELBQADggEBANgXzb0hf98APg17LfQrhG1h XGwt4uczkAZdNdMy30u5kR4xkfKSIXNF0LclNlVQqvXQ1g9KUwZHh/u8uon7o84H EgVRNMa2pvBgmOyKx8vVrGnKANqNckoEzZjC01yNB3x+2XnXI0yExMfip0kY6OnV 33BXk9cZ9dhEL1A01Ji0BEqhdXPgCk7Mwr2NsNov10pHrsDspxQKZkViyyBewoTZ oSeuIsbUfEs3gT7f0qWXRRBwf/urM8Qk7wN5lcdl/rvd199F8YgydRM3P/4AXlxm zd7DY0d72ldIXUSn2Sm/WWrNF/5zJcjpGyMpzbyfr6zAkxsAcuNNsTR6ASEmY3U= -----END CERTIFICATE-----Generated at Wed Nov 4 20:16:02 2026 by rpki-client