$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/64c4cac5-bd6c-4ca5-84cb-f235a46201cd.roa File: 64c4cac5-bd6c-4ca5-84cb-f235a46201cd.roa (raw, json) Hash identifier: pwuEK/fQ/t1xBGgGbvsRUpV6xVfqlv3CxJrhyeIfy3k= Subject key identifier: C3:4B:43:32:D5:3A:28:B7:F3:C6:C9:D7:A1:D8:28:46:73:81:8D:BD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3C2EC70DE261A432B97BE604591AA01908B736BB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/64c4cac5-bd6c-4ca5-84cb-f235a46201cd.roa Signing time: Tue 13 Oct 2026 00:40:08 +0000 ROA not before: Tue 13 Oct 2026 00:40:08 +0000 ROA not after: Mon 11 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fb8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:2e:c7:0d:e2:61:a4:32:b9:7b:e6:04:59:1a:a0:19:08:b7:36:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 13 00:40:08 2026 GMT Not After : Jan 11 23:59:59 2027 GMT Subject: serialNumber=3d51c9bc2ab736a56adde5a0a4d42560cd54adbf4cbab399bc6a2e9aff93ad24, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:68:fa:3a:d5:f3:88:03:f6:77:dd:13:57:b1: fe:d4:59:bc:d7:be:e1:3b:97:79:84:19:81:59:32: 80:d6:96:97:14:2c:c1:43:ea:8f:eb:23:cf:d8:f4: 60:a6:05:25:c6:57:6a:91:6b:2a:97:31:bd:35:87: c0:98:f2:32:d2:51:69:fc:8f:c7:59:1a:b3:43:af: 31:fd:30:7f:8a:47:91:59:af:75:1d:94:89:e9:fa: 3e:cd:d6:50:26:86:85:b8:f9:23:22:cf:d5:7f:2c: 23:bb:cd:28:f6:9c:18:df:aa:24:97:a7:ce:36:aa: 9f:29:0e:e6:d9:5f:65:23:dc:18:18:6e:59:d9:78: d3:d4:f8:e9:8b:07:ae:3f:ba:d7:66:5d:de:39:5c: da:c9:0f:e8:27:22:73:69:a0:75:84:6a:83:15:af: a9:7b:f1:f1:52:ac:1a:64:66:25:ae:22:b3:62:8a: 74:08:e6:59:68:a0:aa:e1:60:16:49:dc:94:85:9e: 7a:02:a9:86:e9:df:62:23:cc:a4:6d:dc:cd:65:4a: e5:55:f0:a9:b9:9a:36:86:81:8e:23:9f:a9:2c:aa: 31:eb:94:b5:df:6d:1d:ec:bb:39:74:c1:ce:6c:da: 2b:6f:bf:b5:6a:33:50:ef:c6:41:d8:d2:5c:83:47: 5c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:4B:43:32:D5:3A:28:B7:F3:C6:C9:D7:A1:D8:28:46:73:81:8D:BD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/64c4cac5-bd6c-4ca5-84cb-f235a46201cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fb8::/32 Signature Algorithm: sha256WithRSAEncryption c5:55:c3:9d:b8:23:98:b7:76:ab:5a:7d:0d:cf:4f:2f:7f:a2: 05:21:ef:b4:ea:f2:56:27:c7:ee:6e:27:fd:e8:27:49:55:29: 70:45:6a:4a:db:f0:ea:75:e4:f4:91:94:54:7f:71:24:74:57: b4:a0:90:42:a7:8c:e8:7d:67:59:1b:06:08:c6:d9:ec:3c:44: dd:e8:d6:63:3d:f2:d8:99:e6:3f:48:f4:4d:05:23:7a:8e:23: d9:c9:de:a4:54:fa:44:80:22:58:6f:f3:95:3e:7d:bc:a4:d6: 64:42:ad:c7:d3:66:1e:d5:9b:4e:e3:ed:a9:de:88:4e:02:77: ce:72:56:a5:00:e9:6a:77:7b:b1:fd:4f:45:c7:1e:6b:25:86: 74:e9:04:de:f8:ce:b9:8a:0c:13:21:63:60:31:0c:70:11:fa: 59:29:54:e1:9a:0f:5f:94:1a:a4:16:94:a0:4e:8e:ce:cd:f4: 7f:45:c2:d7:da:d0:a2:0f:bb:eb:0a:f1:58:ad:67:52:75:22: f4:08:55:ee:66:3e:dc:d6:2f:01:d8:40:4b:1a:e2:14:1f:31: ff:66:e5:5d:dd:68:45:4f:e4:72:66:52:23:19:4e:28:6b:72: 78:e9:6f:c5:97:a2:34:e7:00:06:ee:f5:d0:f0:c4:90:20:ab: 5b:e4:42:97 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUPC7HDeJhpDK5e+YEWRqgGQi3NrswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDEzMDA0MDA4WhcNMjcwMTExMjM1OTU5 WjB6MUkwRwYDVQQFE0AzZDUxYzliYzJhYjczNmE1NmFkZGU1YTBhNGQ0MjU2MGNk NTRhZGJmNGNiYWIzOTliYzZhMmU5YWZmOTNhZDI0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbaPo61fOIA/Z33RNXsf7UWbzXvuE7l3mEGYFZMoDWlpcU LMFD6o/rI8/Y9GCmBSXGV2qRayqXMb01h8CY8jLSUWn8j8dZGrNDrzH9MH+KR5FZ r3UdlInp+j7N1lAmhoW4+SMiz9V/LCO7zSj2nBjfqiSXp842qp8pDubZX2Uj3BgY blnZeNPU+OmLB64/utdmXd45XNrJD+gnInNpoHWEaoMVr6l78fFSrBpkZiWuIrNi inQI5llooKrhYBZJ3JSFnnoCqYbp32IjzKRt3M1lSuVV8Km5mjaGgY4jn6ksqjHr lLXfbR3suzl0wc5s2itvv7VqM1DvxkHY0lyDR1wtAgMBAAGjggKyMIICrjAdBgNV HQ4EFgQUw0tDMtU6KLfzxsnXodgoRnOBjb0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY0YzRjYWM1LWJkNmMtNGNhNS04NGNiLWYyMzVhNDYyMDFjZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAmAB+4MA0GCSqGSIb3DQEBCwUAA4IBAQDFVcOduCOYt3arWn0Nz08vf6IF Ie+06vJWJ8fubif96CdJVSlwRWpK2/DqdeT0kZRUf3EkdFe0oJBCp4zofWdZGwYI xtnsPETd6NZjPfLYmeY/SPRNBSN6jiPZyd6kVPpEgCJYb/OVPn28pNZkQq3H02Ye 1ZtO4+2p3ohOAnfOclalAOlqd3ux/U9Fxx5rJYZ06QTe+M65igwTIWNgMQxwEfpZ KVThmg9flBqkFpSgTo7OzfR/RcLX2tCiD7vrCvFYrWdSdSL0CFXuZj7c1i8B2EBL GuIUHzH/ZuVd3WhFT+RyZlIjGU4oa3J46W/Fl6I05wAG7vXQ8MSQIKtb5EKX -----END CERTIFICATE-----Generated at Tue Nov 3 22:39:35 2026 by rpki-client