$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63e2842f-3b08-431e-b27b-922097dd5d02.roa File: 63e2842f-3b08-431e-b27b-922097dd5d02.roa (raw, json) Hash identifier: mToePdLl2WDDSjfBEkqw4qL9VpcRS79yHHEr3jCIXHM= Subject key identifier: 1E:D2:4F:08:7C:50:AA:08:14:CE:6C:D7:56:7F:1B:EC:2D:47:19:A9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1C409D503B27B9CE7CE41E12C2311A42B65D6562 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63e2842f-3b08-431e-b27b-922097dd5d02.roa Signing time: Fri 23 Oct 2026 01:50:12 +0000 ROA not before: Fri 23 Oct 2026 01:50:12 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff6:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:40:9d:50:3b:27:b9:ce:7c:e4:1e:12:c2:31:1a:42:b6:5d:65:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 23 01:50:12 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=a5ec81652738158e675bf5e6b7abf32a93880763e753171f68ea5a8c1dbe01cb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:b7:01:7d:13:5f:56:7c:4d:8b:a7:7c:96:20: fe:54:cc:82:5d:16:09:79:60:8a:4a:c6:ad:8c:59: 49:25:ce:d8:d6:a6:43:7b:1f:27:93:a6:5b:a9:0e: 15:08:88:96:98:fe:34:3d:85:95:61:d6:47:86:49: 53:67:c2:4d:af:2d:14:29:3c:71:6a:d1:c9:4f:5c: ec:32:44:08:2d:78:01:0a:bb:31:54:0a:b8:be:fe: 4c:18:7e:c3:4d:aa:0e:fc:00:d1:cd:29:dd:05:68: 7a:a9:c3:e1:7a:25:82:77:6b:61:21:53:b3:4e:45: bc:70:61:41:86:83:7f:2f:2c:2a:6d:d1:37:2b:ed: 0a:09:d7:5b:1d:10:86:6c:0f:1d:9a:3d:4b:db:19: fb:79:0e:27:58:34:46:26:9a:9d:17:f0:9c:61:ee: 69:8b:e5:27:af:36:9b:80:e4:35:66:6f:d1:0c:6f: 87:27:12:c3:df:69:7a:45:7d:07:0f:16:89:07:22: 79:c1:0d:ad:b0:7f:09:21:4d:c6:fd:9c:7d:0f:09: c1:bc:6d:eb:d6:06:1e:d2:81:74:56:84:61:34:8f: ef:b7:4a:c9:63:3e:df:53:e9:4c:ce:27:fb:d2:32: e6:f8:1d:27:96:db:3d:4d:82:6d:59:bb:42:3d:f3: df:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:D2:4F:08:7C:50:AA:08:14:CE:6C:D7:56:7F:1B:EC:2D:47:19:A9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63e2842f-3b08-431e-b27b-922097dd5d02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff6:2000::/48 Signature Algorithm: sha256WithRSAEncryption c5:55:8e:75:6e:a4:1d:91:55:e1:50:5e:d2:d8:a6:5f:78:0b: 03:08:57:34:f9:1c:d2:03:8a:e5:49:15:cb:63:5c:66:b7:fb: 45:f0:50:27:58:e9:8a:3d:86:95:00:92:fe:a3:af:64:34:f1: e1:da:5e:e6:40:35:27:d7:73:de:74:94:e6:de:12:36:03:aa: 08:8d:a4:bd:3d:7a:ba:2b:f7:ad:11:15:59:dd:d2:fd:7e:58: 7f:15:5c:9c:ac:e6:c2:2a:b5:cb:47:d8:a9:a9:31:3c:98:ab: 44:d1:44:94:81:5f:ed:1f:7a:51:55:6f:68:bb:d1:4c:fa:c3: 00:c9:62:98:1c:ec:8c:cc:83:e4:1a:29:c4:d0:8a:c2:71:14: 99:84:96:37:f6:0b:a8:8d:5e:81:a9:47:e1:a6:ac:49:b2:4a: 23:41:51:eb:29:44:a3:bb:a3:98:e2:61:ce:fb:a6:60:9a:1c: 02:67:77:ce:56:37:47:a9:f1:c2:41:fd:03:f6:13:3f:56:9f: c3:96:8b:67:c5:4f:2e:25:e9:6e:d1:d2:0c:ba:07:bd:e7:59: 71:a0:de:9d:a0:13:84:65:5c:f6:a4:33:76:e2:ee:74:8e:98: 4c:56:a2:b2:b8:95:89:ea:e0:85:70:4d:4d:a8:ea:4f:2f:15: 89:72:bc:24 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUHECdUDsnuc585B4SwjEaQrZdZWIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDE1MDEyWhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNWVjODE2NTI3MzgxNThlNjc1YmY1ZTZiN2FiZjMyYTkz ODgwNzYzZTc1MzE3MWY2OGVhNWE4YzFkYmUwMWNiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDxtwF9E19WfE2Lp3yWIP5UzIJdFgl5YIpKxq2MWUklztjW pkN7HyeTplupDhUIiJaY/jQ9hZVh1keGSVNnwk2vLRQpPHFq0clPXOwyRAgteAEK uzFUCri+/kwYfsNNqg78ANHNKd0FaHqpw+F6JYJ3a2EhU7NORbxwYUGGg38vLCpt 0Tcr7QoJ11sdEIZsDx2aPUvbGft5DidYNEYmmp0X8Jxh7mmL5SevNpuA5DVmb9EM b4cnEsPfaXpFfQcPFokHInnBDa2wfwkhTcb9nH0PCcG8bevWBh7SgXRWhGE0j++3 SsljPt9T6UzOJ/vSMub4HSeW2z1Ngm1Zu0I989/RAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUHtJPCHxQqggUzmzXVn8b7C1HGakwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYzZTI4NDJmLTNiMDgtNDMxZS1iMjdiLTkyMjA5N2RkNWQwMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/2IAAwDQYJKoZIhvcNAQELBQADggEBAMVVjnVupB2RVeFQXtLYpl94 CwMIVzT5HNIDiuVJFctjXGa3+0XwUCdY6Yo9hpUAkv6jr2Q08eHaXuZANSfXc950 lObeEjYDqgiNpL09eror960RFVnd0v1+WH8VXJys5sIqtctH2KmpMTyYq0TRRJSB X+0felFVb2i70Uz6wwDJYpgc7IzMg+QaKcTQisJxFJmEljf2C6iNXoGpR+GmrEmy SiNBUespRKO7o5jiYc77pmCaHAJnd85WN0ep8cJB/QP2Ez9Wn8OWi2fFTy4l6W7R 0gy6B73nWXGg3p2gE4RlXPakM3bi7nSOmExWorK4lYnq4IVwTU2o6k8vFYlyvCQ= -----END CERTIFICATE-----Generated at Mon Nov 2 22:30:15 2026 by rpki-client