$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/686a3662-44c6-401f-838f-01047fd9927a.roa File: 686a3662-44c6-401f-838f-01047fd9927a.roa (raw, json) Hash identifier: qZLrccJ4R0okKQS5SicYGgyukFnunKB1P7Si3eExjUY= Subject key identifier: 8F:45:86:D5:38:47:E0:45:DD:8C:BB:3B:32:07:DC:5E:55:ED:45:70 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7E6BD298B3C67B4AF8D7CF625434C4361419D1AE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/686a3662-44c6-401f-838f-01047fd9927a.roa Signing time: Fri 09 Oct 2026 01:10:10 +0000 ROA not before: Fri 09 Oct 2026 01:10:10 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fea:ecc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:6b:d2:98:b3:c6:7b:4a:f8:d7:cf:62:54:34:c4:36:14:19:d1:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 9 01:10:10 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=fd99d1845438e96981d6235f0843e853a096fcabff98829a51d1c114325acc8c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8f:08:9a:78:b3:95:11:8e:45:36:11:36:61: 27:b8:e0:0f:a1:b2:2d:3e:3d:2c:86:2d:08:ec:67: fa:5e:7a:45:c3:26:52:97:68:8b:90:a3:2d:d2:be: f4:fa:74:e2:7a:95:4a:3b:d5:14:b9:c0:82:25:40: a3:b8:75:9e:bd:d2:38:34:4b:d9:64:d1:5e:08:06: b2:61:c6:54:59:69:18:e6:07:5b:ea:e1:48:d1:e7: 2a:74:9d:50:0a:d5:de:7e:75:92:46:f2:c8:68:26: 26:6c:b5:0f:0e:67:79:2a:bc:65:42:dd:98:1f:e1: 95:78:5f:62:37:7f:f1:7e:8b:a4:45:1e:e0:d7:57: 9b:69:a8:c2:33:fe:eb:73:30:d8:5e:38:7e:ad:39: b0:8b:86:2a:27:ae:a5:4d:54:b8:fe:d1:2d:b6:00: 39:7e:c0:b0:c8:38:d8:4c:3b:ec:b6:55:7a:51:d0: 41:ec:09:d3:59:7b:67:09:78:52:2c:ce:4f:99:a6: 37:c4:61:47:1a:ee:0d:6c:66:90:b5:a7:09:c1:a1: 80:ff:10:05:44:ba:c2:f6:fa:1a:2b:e0:69:27:a3: ed:10:da:1e:29:47:fb:9b:e6:63:8e:05:34:66:9f: ae:73:e6:d4:1e:95:72:88:d8:39:77:22:b9:e7:5a: d7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:45:86:D5:38:47:E0:45:DD:8C:BB:3B:32:07:DC:5E:55:ED:45:70 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/686a3662-44c6-401f-838f-01047fd9927a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fea:ecc0::/48 Signature Algorithm: sha256WithRSAEncryption 96:cd:56:c4:fd:25:64:ac:7d:99:23:2d:18:fb:43:c0:7d:1e: dd:44:04:21:c8:2a:83:7c:c6:1b:4a:1e:cc:36:93:1c:45:d4: 82:20:e7:e5:a4:81:3f:ca:d1:45:35:21:05:bf:6a:9c:c0:6f: 7c:75:0b:5c:22:2d:ba:b8:d6:bd:9a:6e:bb:66:0b:a4:17:26: e8:27:e3:16:28:46:d5:da:f9:7d:43:33:39:1d:0d:50:04:d7: 2a:0b:13:d7:fc:19:13:26:3a:3e:e3:c5:77:6f:80:9d:77:1b: f0:21:26:86:4e:17:95:dc:f3:00:2f:e7:43:f2:40:9b:2b:43: 45:9d:94:a7:31:b0:3f:d7:d3:dd:5f:77:40:81:39:ee:0f:ad: ab:42:59:8c:f5:99:b7:f3:44:46:ee:33:97:15:ba:ee:35:7f: 99:44:92:b8:d9:5b:d1:0a:6a:ae:a6:f5:3d:6f:27:3b:5c:7d: 06:a8:95:f8:89:85:41:9e:75:24:b1:cb:86:f1:3e:89:e1:6f: bb:b3:dc:3e:6a:97:b2:d6:b9:e5:06:88:34:1d:8e:e3:c5:fd: 35:2f:e7:a8:10:9f:e4:95:23:04:d4:29:19:c4:bf:e7:43:ff: 99:de:d1:c4:93:0c:3d:88:2c:ab:96:eb:b2:2c:e3:ea:a2:fb: dc:4b:cf:56 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfmvSmLPGe0r4189iVDTENhQZ0a4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA5MDExMDEwWhcNMjcwMTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZDk5ZDE4NDU0MzhlOTY5ODFkNjIzNWYwODQzZTg1M2Ew OTZmY2FiZmY5ODgyOWE1MWQxYzExNDMyNWFjYzhjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBjwiaeLOVEY5FNhE2YSe44A+hsi0+PSyGLQjsZ/peekXD JlKXaIuQoy3SvvT6dOJ6lUo71RS5wIIlQKO4dZ690jg0S9lk0V4IBrJhxlRZaRjm B1vq4UjR5yp0nVAK1d5+dZJG8shoJiZstQ8OZ3kqvGVC3Zgf4ZV4X2I3f/F+i6RF HuDXV5tpqMIz/utzMNheOH6tObCLhionrqVNVLj+0S22ADl+wLDIONhMO+y2VXpR 0EHsCdNZe2cJeFIszk+ZpjfEYUca7g1sZpC1pwnBoYD/EAVEusL2+hor4Gkno+0Q 2h4pR/ub5mOOBTRmn65z5tQelXKI2Dl3IrnnWtddAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUj0WG1ThH4EXdjLs7MgfcXlXtRXAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY4NmEzNjYyLTQ0YzYtNDAxZi04MzhmLTAxMDQ3ZmQ5OTI3YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/q7MAwDQYJKoZIhvcNAQELBQADggEBAJbNVsT9JWSsfZkjLRj7Q8B9 Ht1EBCHIKoN8xhtKHsw2kxxF1IIg5+WkgT/K0UU1IQW/apzAb3x1C1wiLbq41r2a brtmC6QXJugn4xYoRtXa+X1DMzkdDVAE1yoLE9f8GRMmOj7jxXdvgJ13G/AhJoZO F5Xc8wAv50PyQJsrQ0WdlKcxsD/X091fd0CBOe4PratCWYz1mbfzREbuM5cVuu41 f5lEkrjZW9EKaq6m9T1vJztcfQaolfiJhUGedSSxy4bxPonhb7uz3D5ql7LWueUG iDQdjuPF/TUv56gQn+SVIwTUKRnEv+dD/5ne0cSTDD2ILKuW67Is4+qi+9xLz1Y= -----END CERTIFICATE-----Generated at Tue Nov 3 08:23:26 2026 by rpki-client