$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c921a1b-c5be-4c53-9918-5f35190b51a3.roa File: 6c921a1b-c5be-4c53-9918-5f35190b51a3.roa (raw, json) Hash identifier: knq2JJoO7oJEYgaWXd+vnaduC5vCTZ0Gl8Zc8VBpUY0= Subject key identifier: D5:91:ED:50:26:A5:F5:2C:72:29:0A:87:32:DC:E9:F1:28:11:B7:EA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 78375F62D2F753817F08D246A98456DEA68D8432 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c921a1b-c5be-4c53-9918-5f35190b51a3.roa Signing time: Fri 23 Oct 2026 02:10:32 +0000 ROA not before: Fri 23 Oct 2026 02:10:32 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:3400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:37:5f:62:d2:f7:53:81:7f:08:d2:46:a9:84:56:de:a6:8d:84:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 23 02:10:32 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=3137d174db9312e3a4dc26b0bae091b2d763e42a0dda57f45e9ca92edf037b37, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7a:09:87:c3:4c:a8:5f:2d:a0:0b:7f:80:28: 30:ac:90:1a:3f:1d:71:78:bc:09:9b:42:c8:81:2c: 1e:c1:fc:73:50:20:95:2f:22:47:de:8e:31:e2:4c: 38:8a:67:bb:b1:c7:5c:e9:64:25:95:86:fc:39:f6: 7c:ee:99:e6:b8:d5:d4:cc:04:f2:2b:5f:96:f0:01: 63:65:98:2d:79:51:5c:50:35:91:e0:48:5a:99:5b: 79:23:52:b3:5a:95:c4:65:6d:0d:86:ef:f0:27:93: 85:ca:b4:8a:92:af:0b:9f:5a:07:04:fc:03:22:8f: 8e:71:9c:bc:58:7e:4c:35:85:0e:82:5a:ec:49:9c: e2:d3:9f:86:86:29:a3:de:4b:99:72:d7:37:06:e2: 0f:a2:4e:9c:3a:ba:50:30:56:00:16:57:ff:b0:a1: 50:56:7b:c8:bf:27:5f:9d:7a:6e:13:4b:69:54:ab: ab:dc:69:c5:60:7e:29:5c:d6:a6:6f:a3:31:af:8d: 03:61:ec:1f:79:a3:63:06:c3:9e:c5:b7:17:e1:64: c2:b6:17:ad:98:e0:a4:d5:9b:66:79:34:a2:d4:98: 34:cc:4c:e0:70:48:f8:06:97:b6:10:47:c6:5f:bf: fe:a3:13:e3:5b:57:e9:27:d4:8f:0c:2b:d9:8d:78: 66:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:91:ED:50:26:A5:F5:2C:72:29:0A:87:32:DC:E9:F1:28:11:B7:EA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c921a1b-c5be-4c53-9918-5f35190b51a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:3400::/40 Signature Algorithm: sha256WithRSAEncryption c6:06:b8:99:cc:62:71:da:f6:54:23:e5:13:72:f2:0f:da:40: 4b:39:6b:26:bd:38:9f:41:9c:80:f3:17:cc:a6:e0:44:5d:aa: a7:f2:fb:36:3e:02:37:02:28:0d:1b:fe:5a:06:20:96:fc:52: 36:d5:4b:d5:ff:72:1c:9a:07:ca:d8:57:b6:e2:e2:1e:a6:3a: ce:96:eb:ae:0b:8e:bf:dc:88:24:d1:85:ab:9f:3c:3c:45:4e: 04:6f:a1:84:b1:1c:d3:15:40:a8:49:f6:37:d9:ed:fd:06:32: aa:2e:b0:7e:f7:71:5c:95:80:f3:fd:b2:3a:92:82:1c:a4:96: 5d:78:23:a1:7d:1a:1f:5f:89:2e:57:66:18:93:2b:37:f3:d0: 7c:1e:79:d4:85:ab:23:28:51:44:8d:4d:47:aa:2e:5e:ea:a6: 24:5d:04:7a:ab:5c:19:7f:f9:89:3a:2a:ce:5b:88:b6:c5:e8: dd:b8:f4:67:28:7f:33:49:0c:11:9f:1b:6a:49:4c:10:c7:27: 44:fc:f2:26:ec:2e:1f:e4:1d:0f:ec:6e:22:bb:36:b2:8b:ec: 63:9c:51:e2:1e:15:b2:5d:49:c1:5d:ab:57:9c:32:e8:d3:9f: 6d:28:55:6a:fc:11:fe:98:b7:9c:8a:70:17:08:de:29:cf:39: 4b:d5:12:f5 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUeDdfYtL3U4F/CNJGqYRW3qaNhDIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDIxMDMyWhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMTM3ZDE3NGRiOTMxMmUzYTRkYzI2YjBiYWUwOTFiMmQ3 NjNlNDJhMGRkYTU3ZjQ1ZTljYTkyZWRmMDM3YjM3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgegmHw0yoXy2gC3+AKDCskBo/HXF4vAmbQsiBLB7B/HNQ IJUvIkfejjHiTDiKZ7uxx1zpZCWVhvw59nzumea41dTMBPIrX5bwAWNlmC15UVxQ NZHgSFqZW3kjUrNalcRlbQ2G7/Ank4XKtIqSrwufWgcE/AMij45xnLxYfkw1hQ6C WuxJnOLTn4aGKaPeS5ly1zcG4g+iTpw6ulAwVgAWV/+woVBWe8i/J1+dem4TS2lU q6vcacVgfilc1qZvozGvjQNh7B95o2MGw57FtxfhZMK2F62Y4KTVm2Z5NKLUmDTM TOBwSPgGl7YQR8Zfv/6jE+NbV+kn1I8MK9mNeGZ9AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU1ZHtUCal9SxyKQqHMtzp8SgRt+owHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZjOTIxYTFiLWM1YmUtNGM1My05OTE4LTVmMzUxOTBiNTFhMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB8ANDANBgkqhkiG9w0BAQsFAAOCAQEAxga4mcxicdr2VCPlE3LyD9pA SzlrJr04n0GcgPMXzKbgRF2qp/L7Nj4CNwIoDRv+WgYglvxSNtVL1f9yHJoHythX tuLiHqY6zpbrrguOv9yIJNGFq588PEVOBG+hhLEc0xVAqEn2N9nt/QYyqi6wfvdx XJWA8/2yOpKCHKSWXXgjoX0aH1+JLldmGJMrN/PQfB551IWrIyhRRI1NR6ouXuqm JF0EeqtcGX/5iToqzluItsXo3bj0Zyh/M0kMEZ8baklMEMcnRPzyJuwuH+QdD+xu Irs2sovsY5xR4h4Vsl1JwV2rV5wy6NOfbShVavwR/pi3nIpwFwjeKc85S9US9Q== -----END CERTIFICATE-----Generated at Tue Nov 3 08:22:51 2026 by rpki-client