$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67f40a44-f534-4bd5-82d5-3d7ba1d41e1d.roa File: 67f40a44-f534-4bd5-82d5-3d7ba1d41e1d.roa (raw, json) Hash identifier: QydhzSkjE9G6WN3O5O/7y5Zba8AeifQiszysmiHcci0= Subject key identifier: 79:E4:0D:E4:F4:6C:B0:52:5E:52:40:40:F4:17:A1:03:36:F6:AF:96 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2E38ACEEE585B8ED564C28179B2E599892E9B53D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67f40a44-f534-4bd5-82d5-3d7ba1d41e1d.roa Signing time: Tue 06 Oct 2026 00:31:43 +0000 ROA not before: Tue 06 Oct 2026 00:31:43 +0000 ROA not after: Mon 04 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f26:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:38:ac:ee:e5:85:b8:ed:56:4c:28:17:9b:2e:59:98:92:e9:b5:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 6 00:31:43 2026 GMT Not After : Jan 4 23:59:59 2027 GMT Subject: serialNumber=434c913a7cbb7a18e19744bfba2c61552eec30ec6b65e48dddb983f310a0f7ec, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:fe:57:aa:ce:ff:51:d8:cc:ba:48:99:bb:36: ed:be:5c:49:45:b1:8d:3b:48:e0:b8:06:c0:e5:d1: 14:07:e3:99:32:45:8a:33:f9:99:39:99:6b:0a:84: ad:67:a4:d9:1b:e6:55:b9:1f:3c:18:f5:98:a0:c8: e4:3d:72:5b:14:26:da:d5:81:1c:9f:d4:dc:cd:a4: b5:2a:0e:9c:a9:fd:4c:65:14:6f:93:d9:81:33:76: 12:48:c6:a0:40:9f:2b:97:a1:7f:04:26:0b:39:5d: 7b:64:4d:8d:67:a5:e0:1a:0d:76:bf:de:fe:52:d4: 35:73:17:8f:e5:0e:27:fe:aa:25:7d:33:d4:98:39: d5:82:f6:ec:73:31:9d:f4:09:af:66:1e:6b:42:ec: 28:82:b9:f7:c6:7b:23:c4:b7:d2:7c:9d:77:8a:48: b7:3b:82:57:52:32:d0:8e:49:ca:01:27:32:ab:14: c4:dd:c9:50:e2:28:9d:8d:d3:12:a4:fb:86:b9:fa: 97:f5:b0:65:21:4e:5b:09:f3:b3:c4:d3:8c:41:ba: 94:da:61:45:9c:4e:99:4f:89:91:2c:8a:b2:bc:e0: d4:52:d0:87:2a:9a:19:85:a0:e3:71:8e:13:9e:15: 0d:5d:13:7c:e6:d3:2e:c2:b8:5a:29:9c:d0:a9:db: 8e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:E4:0D:E4:F4:6C:B0:52:5E:52:40:40:F4:17:A1:03:36:F6:AF:96 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67f40a44-f534-4bd5-82d5-3d7ba1d41e1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f26:8000::/36 Signature Algorithm: sha256WithRSAEncryption 22:2c:fe:ca:10:6d:f8:8a:93:e0:96:18:87:86:7e:cf:80:1a: 21:a5:f8:10:9e:06:75:e7:c6:6e:b0:d4:fd:b8:70:88:2e:60: 80:c7:93:ec:bf:ae:c2:28:29:19:2b:54:a0:6e:43:16:84:08: b2:cc:22:bb:16:33:a1:91:8f:09:ba:83:93:52:26:55:d3:56: 8f:97:80:bc:6b:ef:0e:e0:3e:76:03:0d:12:76:ca:4b:10:58: 1c:8d:de:87:36:e9:17:8e:89:a1:53:ea:a2:7e:0d:2d:2b:a5: 82:f8:01:7c:b7:02:3e:2d:af:74:74:f3:ea:60:04:a9:3d:ad: 5f:56:79:be:79:d6:e7:2a:9e:fc:3a:ef:86:59:e6:23:a9:94: da:09:18:82:3d:df:51:c8:43:e5:e3:a5:ac:44:d1:c5:fd:c1: 16:45:bd:c9:11:67:28:e4:8b:89:e9:05:4d:69:a2:e7:43:13: 98:9a:7a:f0:4c:d6:70:cc:4d:1a:b1:8f:78:3a:b5:78:19:9f: 74:af:e4:64:95:01:2a:60:bf:a1:48:f5:07:7d:8e:b0:a9:94: 35:c6:e6:52:b4:1f:eb:a1:70:27:b4:51:60:07:10:29:b7:2d: 50:fa:09:cb:67:49:4a:bd:eb:7f:ca:b1:06:45:aa:da:94:49: 21:ae:14:d3 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIULjis7uWFuO1WTCgXmy5ZmJLptT0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA2MDAzMTQzWhcNMjcwMTA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MzRjOTEzYTdjYmI3YTE4ZTE5NzQ0YmZiYTJjNjE1NTJl ZWMzMGVjNmI2NWU0OGRkZGI5ODNmMzEwYTBmN2VjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCO/leqzv9R2My6SJm7Nu2+XElFsY07SOC4BsDl0RQH45ky RYoz+Zk5mWsKhK1npNkb5lW5HzwY9ZigyOQ9clsUJtrVgRyf1NzNpLUqDpyp/Uxl FG+T2YEzdhJIxqBAnyuXoX8EJgs5XXtkTY1npeAaDXa/3v5S1DVzF4/lDif+qiV9 M9SYOdWC9uxzMZ30Ca9mHmtC7CiCuffGeyPEt9J8nXeKSLc7gldSMtCOScoBJzKr FMTdyVDiKJ2N0xKk+4a5+pf1sGUhTlsJ87PE04xBupTaYUWcTplPiZEsirK84NRS 0IcqmhmFoONxjhOeFQ1dE3zm0y7CuFopnNCp247RAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUeeQN5PRssFJeUkBA9BehAzb2r5YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY3ZjQwYTQ0LWY1MzQtNGJkNS04MmQ1LTNkN2JhMWQ0MWUxZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8mgDANBgkqhkiG9w0BAQsFAAOCAQEAIiz+yhBt+IqT4JYYh4Z+z4Aa IaX4EJ4GdefGbrDU/bhwiC5ggMeT7L+uwigpGStUoG5DFoQIsswiuxYzoZGPCbqD k1ImVdNWj5eAvGvvDuA+dgMNEnbKSxBYHI3ehzbpF46JoVPqon4NLSulgvgBfLcC Pi2vdHTz6mAEqT2tX1Z5vnnW5yqe/DrvhlnmI6mU2gkYgj3fUchD5eOlrETRxf3B FkW9yRFnKOSLiekFTWmi50MTmJp68EzWcMxNGrGPeDq1eBmfdK/kZJUBKmC/oUj1 B32OsKmUNcbmUrQf66FwJ7RRYAcQKbctUPoJy2dJSr3rf8qxBkWq2pRJIa4U0w== -----END CERTIFICATE-----Generated at Wed Nov 4 14:08:43 2026 by rpki-client