$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6faaf4ca-5e33-4dd3-b129-514b40c8555d.roa File: 6faaf4ca-5e33-4dd3-b129-514b40c8555d.roa (raw, json) Hash identifier: qSw6XynjfAzvewf6c689jsCSfnQllEWCIqYyv4CZJeE= Subject key identifier: 09:34:99:5E:AF:76:C8:37:C0:D1:06:1C:E1:76:F4:C3:DF:2E:85:7E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 707F01C0618D71D44A94B8C61914C12D9F00CB23 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6faaf4ca-5e33-4dd3-b129-514b40c8555d.roa Signing time: Tue 13 Oct 2026 00:40:39 +0000 ROA not before: Tue 13 Oct 2026 00:40:39 +0000 ROA not after: Mon 11 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 56.126.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:7f:01:c0:61:8d:71:d4:4a:94:b8:c6:19:14:c1:2d:9f:00:cb:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 13 00:40:39 2026 GMT Not After : Jan 11 23:59:59 2027 GMT Subject: serialNumber=888893088d175e51b5187366c146df695723ba31b91d4f6e4ca0a9c1201fb6d3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2d:7e:99:c2:e2:49:eb:6c:d6:ff:9b:d7:37: b2:27:34:f4:cc:33:12:4e:71:10:56:d3:1d:97:2f: 19:0e:3d:d7:fe:cf:81:55:fa:5a:8f:11:76:48:9e: 1e:1a:0d:b5:6a:fc:74:29:39:f6:40:27:d9:8b:40: e2:c9:c8:07:f0:ab:29:a1:cf:45:6e:85:46:85:9b: b3:c1:53:90:c2:af:d5:6d:80:63:28:1e:bf:f2:d8: e1:19:95:3d:0d:87:eb:b0:89:b8:33:0b:92:cd:88: d8:c3:e9:d0:14:29:b5:11:99:0d:64:51:7a:79:fd: bd:0c:0c:8c:37:4d:9c:95:7f:21:b9:1f:70:41:42: 88:13:f9:ca:c4:50:06:b2:d5:f1:14:87:1e:80:ed: e9:ab:c4:d4:09:c7:db:eb:dc:e7:2e:ed:67:b8:ca: 8f:42:51:1d:8d:80:4b:49:12:96:ec:03:0d:8b:18: 20:2d:64:ae:b1:57:4c:fd:5b:fa:22:00:5c:ab:5d: 1c:2f:8b:c7:05:fe:73:2c:9b:13:fb:09:5a:03:ca: b0:72:a4:9f:89:38:e5:3e:3a:f9:6d:b6:64:91:e3: 44:5e:e7:03:b0:c3:95:e2:fc:8d:fa:f0:f1:1c:c2: 2f:de:4e:13:1b:b5:e0:8a:2a:bd:cd:ca:33:85:93: 9d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:34:99:5E:AF:76:C8:37:C0:D1:06:1C:E1:76:F4:C3:DF:2E:85:7E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6faaf4ca-5e33-4dd3-b129-514b40c8555d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 56.126.0.0/16 Signature Algorithm: sha256WithRSAEncryption c3:81:70:df:11:d4:11:2c:ba:6d:81:a3:9a:39:f9:47:e7:a0: d1:c5:d8:22:1a:3b:08:a4:69:ab:62:1e:73:80:9a:73:6c:dc: d6:37:f2:e1:7c:27:43:86:26:ac:ed:15:e2:4a:fe:db:1a:92: 0e:c5:d6:4a:e5:f0:8f:bc:be:09:a4:fb:bb:5d:93:41:9d:14: 14:bf:2c:3b:60:a9:86:2a:7f:3b:fa:ae:3f:b1:0a:a2:df:a7: 0d:2a:3c:4d:60:69:20:d9:6a:1e:e8:d2:63:06:6c:e3:86:e8: 53:a1:19:55:7f:0c:a9:97:19:ab:8d:49:4c:aa:ff:90:b0:16: f7:4d:2f:5f:7a:1e:e3:a3:90:0d:ae:e5:d4:6a:5c:d1:da:96: bd:55:a6:95:d1:48:f3:88:25:3f:43:a9:68:64:f2:be:4a:38: 2a:38:bd:98:42:33:26:8a:a7:49:4d:31:f3:31:6d:e8:33:ac: 88:8f:9b:13:39:2e:0a:13:7d:77:92:cf:fd:65:ca:9d:98:c6: c5:51:34:eb:18:b6:18:41:ca:9b:89:03:78:0f:35:d4:87:0d: 63:1f:e3:5a:83:9b:25:9a:3a:7f:6f:28:62:1b:02:55:bf:8b: 07:ee:a9:72:2c:db:10:11:fd:61:03:63:a4:b3:f0:8a:a6:60: fb:95:c3:e3 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUcH8BwGGNcdRKlLjGGRTBLZ8AyyMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDEzMDA0MDM5WhcNMjcwMTExMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ODg4OTMwODhkMTc1ZTUxYjUxODczNjZjMTQ2ZGY2OTU3 MjNiYTMxYjkxZDRmNmU0Y2EwYTljMTIwMWZiNmQzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiLX6ZwuJJ62zW/5vXN7InNPTMMxJOcRBW0x2XLxkOPdf+ z4FV+lqPEXZInh4aDbVq/HQpOfZAJ9mLQOLJyAfwqymhz0VuhUaFm7PBU5DCr9Vt gGMoHr/y2OEZlT0Nh+uwibgzC5LNiNjD6dAUKbURmQ1kUXp5/b0MDIw3TZyVfyG5 H3BBQogT+crEUAay1fEUhx6A7emrxNQJx9vr3Ocu7We4yo9CUR2NgEtJEpbsAw2L GCAtZK6xV0z9W/oiAFyrXRwvi8cF/nMsmxP7CVoDyrBypJ+JOOU+OvlttmSR40Re 5wOww5Xi/I368PEcwi/eThMbteCKKr3NyjOFk529AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUCTSZXq92yDfA0QYc4Xb0w98uhX4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZmYWFmNGNhLTVlMzMtNGRkMy1iMTI5LTUxNGI0MGM4NTU1ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA4fjANBgkqhkiG9w0BAQsFAAOCAQEAw4Fw3xHUESy6bYGjmjn5R+eg0cXY Iho7CKRpq2Iec4Cac2zc1jfy4XwnQ4YmrO0V4kr+2xqSDsXWSuXwj7y+CaT7u12T QZ0UFL8sO2Cphip/O/quP7EKot+nDSo8TWBpINlqHujSYwZs44boU6EZVX8MqZcZ q41JTKr/kLAW900vX3oe46OQDa7l1Gpc0dqWvVWmldFI84glP0OpaGTyvko4Kji9 mEIzJoqnSU0x8zFt6DOsiI+bEzkuChN9d5LP/WXKnZjGxVE06xi2GEHKm4kDeA81 1IcNYx/jWoObJZo6f28oYhsCVb+LB+6pcizbEBH9YQNjpLPwiqZg+5XD4w== -----END CERTIFICATE-----Generated at Tue Nov 3 11:57:05 2026 by rpki-client