$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/712df843-0f79-4044-bae3-174bd1f87fce.roa File: 712df843-0f79-4044-bae3-174bd1f87fce.roa (raw, json) Hash identifier: wCqJnTo9MuTDKK4od73G3zF3kEopMM/Xg+/YEhsx/d0= Subject key identifier: 08:D4:F2:A1:77:11:F7:BB:88:75:E5:14:C1:69:EB:75:F4:28:3E:12 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 01D850D891C00218E0B7A92559032328547ED713 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/712df843-0f79-4044-bae3-174bd1f87fce.roa Signing time: Tue 13 Oct 2026 00:40:36 +0000 ROA not before: Tue 13 Oct 2026 00:40:36 +0000 ROA not after: Mon 11 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff5:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:d8:50:d8:91:c0:02:18:e0:b7:a9:25:59:03:23:28:54:7e:d7:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 13 00:40:36 2026 GMT Not After : Jan 11 23:59:59 2027 GMT Subject: serialNumber=98274a4dfd6f0549e5381713a965ebc29acd650d4680f944ce6f22c42ae6ea56, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3b:42:ed:8a:3b:4a:48:32:3a:8f:fc:f7:87: 99:7b:8c:6f:cc:ce:8e:9d:b5:32:7a:e5:8b:59:09: b5:27:95:4f:31:40:fa:2c:f7:74:55:1a:90:08:7d: 7d:46:1e:96:d5:77:b2:82:bf:40:e2:39:c2:ed:c0: ea:82:8a:e6:d0:c0:4a:73:7d:1a:f1:55:10:95:6a: bd:e9:ef:42:66:64:d6:b1:95:c2:35:92:2a:04:98: 50:da:c3:09:89:fa:15:07:dc:85:ba:fa:ab:45:ef: da:c6:66:ed:96:76:c3:11:42:1c:89:4e:59:e9:e9: 88:38:b2:31:07:81:76:06:f6:1a:97:23:f9:92:52: 78:a2:1f:59:83:56:ed:97:04:ae:db:c5:11:57:69: 0a:c2:a0:86:95:8c:66:bc:7e:e8:fb:b5:29:1b:63: 9b:bc:1e:b6:e0:17:2b:38:9e:38:1c:3b:e7:77:d6: d3:1f:d0:e8:d3:10:ae:87:cb:ae:11:50:00:64:53: 56:3a:7f:65:2d:47:9e:6f:fd:07:cf:67:de:60:d6: f4:08:a1:fa:1c:c9:06:dc:f2:9b:22:d1:77:c4:22: 03:3a:41:6b:0e:ea:d5:c4:b9:84:32:e2:ae:1a:e6: 62:da:5e:4a:65:a5:98:47:da:23:69:aa:a5:3c:54: b1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D4:F2:A1:77:11:F7:BB:88:75:E5:14:C1:69:EB:75:F4:28:3E:12 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/712df843-0f79-4044-bae3-174bd1f87fce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff5:e000::/40 Signature Algorithm: sha256WithRSAEncryption bf:37:c2:98:fb:d8:d5:d3:3f:0c:f7:52:23:4d:e0:01:ac:10: d8:3a:e8:02:9e:89:ba:b9:41:2e:31:a9:35:45:af:b2:bf:b0: 7e:9d:12:7f:8a:5e:ae:e2:d3:7c:64:a0:47:c0:48:ab:0a:30: 9e:33:25:8e:a7:03:e2:6e:32:d2:57:49:66:e0:67:5a:3c:bb: 31:33:04:fa:52:c9:8b:74:b0:50:a8:0a:c5:23:19:d6:cb:1f: b1:15:bb:27:d2:13:2c:e3:47:54:cb:21:a4:2c:47:1d:8d:f4: ab:86:bb:7c:27:2d:67:73:3e:95:29:15:33:2b:84:eb:71:eb: 09:37:b7:44:cd:ca:23:71:58:42:7d:25:ce:90:8a:33:f7:ab: af:c2:8f:ba:95:69:7c:24:f4:b5:ab:3d:8a:9e:5f:6c:c5:49: 77:32:28:9f:27:80:a0:cb:0d:63:82:86:ac:4b:d2:36:a1:c8: ee:ed:7a:c9:e5:3a:a4:53:72:32:53:e0:95:ab:6b:1c:8a:c8: 01:77:71:dc:f9:71:be:93:76:a8:86:eb:b5:cb:bd:f4:09:cf: 21:80:32:0c:82:b9:32:aa:90:2d:f0:10:46:5b:a9:6e:44:a5: 67:f9:bf:ad:c3:15:3d:2b:99:35:ec:51:c1:73:ec:0d:28:4a: 0e:d5:88:98 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUAdhQ2JHAAhjgt6klWQMjKFR+1xMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDEzMDA0MDM2WhcNMjcwMTExMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ODI3NGE0ZGZkNmYwNTQ5ZTUzODE3MTNhOTY1ZWJjMjlh Y2Q2NTBkNDY4MGY5NDRjZTZmMjJjNDJhZTZlYTU2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtO0LtijtKSDI6j/z3h5l7jG/Mzo6dtTJ65YtZCbUnlU8x QPos93RVGpAIfX1GHpbVd7KCv0DiOcLtwOqCiubQwEpzfRrxVRCVar3p70JmZNax lcI1kioEmFDawwmJ+hUH3IW6+qtF79rGZu2WdsMRQhyJTlnp6Yg4sjEHgXYG9hqX I/mSUniiH1mDVu2XBK7bxRFXaQrCoIaVjGa8fuj7tSkbY5u8HrbgFys4njgcO+d3 1tMf0OjTEK6Hy64RUABkU1Y6f2UtR55v/QfPZ95g1vQIofocyQbc8psi0XfEIgM6 QWsO6tXEuYQy4q4a5mLaXkplpZhH2iNpqqU8VLEDAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUCNTyoXcR97uIdeUUwWnrdfQoPhIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzcxMmRmODQzLTBmNzktNDA0NC1iYWUzLTE3NGJkMWY4N2ZjZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/14DANBgkqhkiG9w0BAQsFAAOCAQEAvzfCmPvY1dM/DPdSI03gAawQ 2DroAp6JurlBLjGpNUWvsr+wfp0Sf4peruLTfGSgR8BIqwownjMljqcD4m4y0ldJ ZuBnWjy7MTME+lLJi3SwUKgKxSMZ1ssfsRW7J9ITLONHVMshpCxHHY30q4a7fCct Z3M+lSkVMyuE63HrCTe3RM3KI3FYQn0lzpCKM/err8KPupVpfCT0tas9ip5fbMVJ dzIonyeAoMsNY4KGrEvSNqHI7u16yeU6pFNyMlPglatrHIrIAXdx3PlxvpN2qIbr tcu99AnPIYAyDIK5MqqQLfAQRlupbkSlZ/m/rcMVPSuZNexRwXPsDShKDtWImA== -----END CERTIFICATE-----Generated at Wed Nov 4 05:39:20 2026 by rpki-client