$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/757648fe-b9ed-4698-b882-bc956e1c2d7a.roa File: 757648fe-b9ed-4698-b882-bc956e1c2d7a.roa (raw, json) Hash identifier: Gke1H9RVRoRhT+LrFsjTZZJS8W2A7gTxhuzB87N45wo= Subject key identifier: 16:66:2A:7E:95:04:6A:33:43:73:A5:31:3E:3F:1E:DB:E3:89:A2:19 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4C8DB56E7C729BA77295E48185E7E5D98E89C555 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/757648fe-b9ed-4698-b882-bc956e1c2d7a.roa Signing time: Fri 23 Oct 2026 01:30:16 +0000 ROA not before: Fri 23 Oct 2026 01:30:16 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f11:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:8d:b5:6e:7c:72:9b:a7:72:95:e4:81:85:e7:e5:d9:8e:89:c5:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 23 01:30:16 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=00c560ef480e8b5fc350b4c8cb0c20ed9a142216ace769091f690c79a8d6e555, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c6:07:e6:97:7e:ba:b1:e5:cd:f3:7d:1e:fb: 8f:84:49:a7:b3:95:62:c7:da:48:1b:d6:60:74:bb: 5a:d3:4c:bb:ef:56:3c:64:98:6f:85:8d:5e:f2:91: 4d:a1:0a:1f:93:31:bf:c0:04:38:a7:fb:01:de:31: 99:ec:f8:f9:9e:67:04:a6:37:0e:f1:09:38:bf:7a: 6b:28:5f:b5:b8:c6:41:a6:e5:4f:7a:89:1b:e9:5c: 2e:b8:77:58:85:24:cd:03:77:9a:b4:56:c1:08:d3: 67:48:99:4f:c9:fa:a2:f9:5b:78:f3:71:fb:97:fc: 7b:c6:c1:57:8b:00:0a:08:2d:2a:69:7c:3c:9c:66: 1f:3a:af:45:d5:64:2d:0c:c0:c4:8f:94:9b:40:53: 72:69:32:a7:1b:01:28:9b:5a:35:e7:95:96:4b:38: 6f:e6:ba:81:4a:33:db:3d:eb:db:2d:e4:ea:7f:68: 7c:2b:85:8b:a5:ed:74:e0:3f:2f:f6:79:61:e8:80: d5:04:c3:43:50:5a:ab:87:4e:35:9b:71:81:a0:b2: a5:f4:06:d9:82:66:2f:b4:f9:eb:65:6a:5a:cd:18: fb:98:00:62:8e:82:10:9e:1b:db:fb:2c:71:24:cf: 19:e7:43:9c:f3:75:cb:3b:db:e0:e2:9a:0c:fd:1e: 31:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:66:2A:7E:95:04:6A:33:43:73:A5:31:3E:3F:1E:DB:E3:89:A2:19 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/757648fe-b9ed-4698-b882-bc956e1c2d7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f11:400::/38 Signature Algorithm: sha256WithRSAEncryption 2a:f6:e8:39:20:d8:ac:ec:f0:47:19:d7:43:b5:a7:f1:a8:bd: b1:0f:e7:e6:dd:5f:69:a4:5c:7f:d0:8f:98:fb:bf:e8:8c:05: 4c:3c:fc:2c:7d:2d:12:0c:5b:cc:ed:e4:ed:ab:81:34:97:d8: 1a:96:1b:a1:0c:98:a2:a9:81:1e:c1:a5:7a:eb:81:00:4a:03: 7f:8f:5e:c5:e5:60:fc:0e:66:a6:0e:29:8a:3a:47:f8:e3:fa: 21:25:54:70:ae:c1:97:46:17:ed:96:0b:b4:87:d9:60:8d:29: 7d:66:47:b6:74:ac:a7:26:b3:26:ed:20:05:01:5c:59:23:1d: 99:90:d5:8a:b1:c3:21:40:93:94:8d:0b:f1:b1:a5:55:e5:a1: 0d:6b:86:de:6a:14:bf:ca:1d:6c:ce:71:05:ee:36:c1:7a:40: dd:b5:70:50:01:d2:e9:fc:e5:57:99:bd:64:7c:31:29:2d:2c: 9b:c2:b2:bd:64:fe:7d:da:3a:fb:f0:13:ad:b0:32:c0:90:c4: eb:7f:0e:c1:1e:ae:34:69:47:ec:88:9e:af:8d:33:d1:83:a5: 44:10:db:0a:25:b6:80:1f:c9:41:95:eb:9e:cb:bd:60:37:f5: 14:a8:0e:9d:9b:a3:94:38:ac:90:ce:f1:f4:a5:dd:f4:90:f2: 1c:1e:07:38 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUTI21bnxym6dyleSBhefl2Y6JxVUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDEzMDE2WhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMGM1NjBlZjQ4MGU4YjVmYzM1MGI0YzhjYjBjMjBlZDlh MTQyMjE2YWNlNzY5MDkxZjY5MGM3OWE4ZDZlNTU1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQxgfml366seXN830e+4+ESaezlWLH2kgb1mB0u1rTTLvv VjxkmG+FjV7ykU2hCh+TMb/ABDin+wHeMZns+PmeZwSmNw7xCTi/emsoX7W4xkGm 5U96iRvpXC64d1iFJM0Dd5q0VsEI02dImU/J+qL5W3jzcfuX/HvGwVeLAAoILSpp fDycZh86r0XVZC0MwMSPlJtAU3JpMqcbASibWjXnlZZLOG/muoFKM9s969st5Op/ aHwrhYul7XTgPy/2eWHogNUEw0NQWquHTjWbcYGgsqX0BtmCZi+0+etlalrNGPuY AGKOghCeG9v7LHEkzxnnQ5zzdcs72+Dimgz9HjFfAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUFmYqfpUEajNDc6UxPj8e2+OJohkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc1NzY0OGZlLWI5ZWQtNDY5OC1iODgyLWJjOTU2ZTFjMmQ3YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgImAB8RBDANBgkqhkiG9w0BAQsFAAOCAQEAKvboOSDYrOzwRxnXQ7Wn8ai9 sQ/n5t1faaRcf9CPmPu/6IwFTDz8LH0tEgxbzO3k7auBNJfYGpYboQyYoqmBHsGl euuBAEoDf49exeVg/A5mpg4pijpH+OP6ISVUcK7Bl0YX7ZYLtIfZYI0pfWZHtnSs pyazJu0gBQFcWSMdmZDVirHDIUCTlI0L8bGlVeWhDWuG3moUv8odbM5xBe42wXpA 3bVwUAHS6fzlV5m9ZHwxKS0sm8KyvWT+fdo6+/ATrbAywJDE638OwR6uNGlH7Iie r40z0YOlRBDbCiW2gB/JQZXrnsu9YDf1FKgOnZujlDiskM7x9KXd9JDyHB4HOA== -----END CERTIFICATE-----Generated at Wed Nov 4 05:39:44 2026 by rpki-client