$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c84c8b4-b6fd-476d-84bf-094c6f9e6769.roa File: 7c84c8b4-b6fd-476d-84bf-094c6f9e6769.roa (raw, json) Hash identifier: aVQ7jJihYTIhG3fSF0rulxbFfG9UkVCyk6XHvmADU0U= Subject key identifier: 95:38:72:D7:84:C2:44:FB:12:6E:EC:31:06:CA:B3:F6:0B:62:E9:1B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 506EAF303ABF4D9CB73BB530E0D6164B6C9B4838 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c84c8b4-b6fd-476d-84bf-094c6f9e6769.roa Signing time: Mon 12 Oct 2026 00:40:05 +0000 ROA not before: Mon 12 Oct 2026 00:40:05 +0000 ROA not after: Sun 10 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fbb::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:6e:af:30:3a:bf:4d:9c:b7:3b:b5:30:e0:d6:16:4b:6c:9b:48:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 12 00:40:05 2026 GMT Not After : Jan 10 23:59:59 2027 GMT Subject: serialNumber=7f798c0a074071ab9eab9845bf95d0f8ea06aa66f9c98e141e324ca268a0752d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f6:6d:3f:c7:20:12:d2:be:ac:17:35:ea:78: b4:c2:49:4d:6b:79:49:12:18:59:67:2a:ea:db:2c: 77:15:d2:96:93:7b:42:70:e1:19:49:0e:0f:c2:16: f6:f0:46:7f:68:06:c7:84:ff:86:13:df:9d:04:1e: 1f:6a:d3:a7:54:19:3c:e0:fa:11:c7:06:e3:01:3e: 49:c9:86:15:b1:53:01:d6:b2:36:2d:4a:fe:48:59: b5:4f:28:db:d0:ba:66:10:15:9b:93:15:f6:1a:a0: 16:bb:5c:aa:45:22:50:dc:9a:78:cb:83:39:40:a8: ff:b2:83:2e:53:f3:6b:c4:32:54:da:cd:b6:9f:bf: 2a:02:ec:7e:df:45:7a:7b:49:98:c9:b5:e5:46:7f: 72:b6:0d:e1:7c:d0:76:6c:e4:f2:33:fc:a9:f0:33: 55:2e:58:76:ba:ba:a9:9b:8e:5d:00:34:dd:81:66: ad:85:43:4c:83:29:09:7f:be:ea:1d:46:3a:ca:69: ac:ec:28:a9:fb:61:21:f7:e5:e1:7b:39:47:44:fa: 48:2b:80:9d:8b:59:bc:01:c4:d0:a7:2d:6a:6f:a9: 55:0d:b1:e0:a0:f1:c4:d1:bc:fa:e2:74:78:51:18: 14:28:3f:2a:28:09:a0:dc:e5:89:27:68:a8:14:1d: 18:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:38:72:D7:84:C2:44:FB:12:6E:EC:31:06:CA:B3:F6:0B:62:E9:1B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c84c8b4-b6fd-476d-84bf-094c6f9e6769.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fbb::/32 Signature Algorithm: sha256WithRSAEncryption 4a:d0:76:7c:da:83:b4:97:a7:0e:a5:6d:e1:f2:0b:4c:7d:f7: 7b:f7:91:90:e3:d0:e2:33:c8:6b:60:d2:0f:b2:4a:e8:ac:2e: fc:f2:a5:da:3d:d4:23:e7:4a:94:c2:2a:0f:3b:ee:91:83:ef: 1d:ee:d8:ff:26:32:e1:c1:8c:e1:5b:05:3a:48:e8:d2:da:85: 2a:6c:49:26:cd:d6:32:13:d6:3f:e5:56:d7:49:93:7f:45:f3: a3:57:3c:42:ce:93:c8:3a:fd:ce:3a:51:65:cb:0d:6f:20:29: 26:f9:80:34:0e:df:3a:fa:2a:81:bd:4a:98:a1:a7:ad:f8:b6: c9:9e:d7:0e:72:d2:d9:6e:fc:3e:27:ed:0b:42:51:e9:a5:ad: b5:6b:95:69:a9:bf:05:47:97:8d:ae:44:24:46:24:1a:b2:50: d7:9b:e0:90:42:65:15:17:8a:c7:92:8d:2d:79:26:5d:23:17: 71:ac:87:d9:4b:89:65:8b:2c:21:df:f4:7e:a4:a8:44:7a:43: 57:47:57:bd:f1:d7:e2:27:7e:5c:ea:f7:fa:1b:4e:47:52:6a: 8a:dd:88:79:f8:80:9c:c3:c2:80:48:2f:54:70:3d:ab:d0:cc: 7f:6f:1f:a9:c2:e9:99:d0:ee:1e:3b:3a:bd:c5:d7:de:94:ea: 76:71:5a:e3 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUUG6vMDq/TZy3O7Uw4NYWS2ybSDgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDEyMDA0MDA1WhcNMjcwMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3Zjc5OGMwYTA3NDA3MWFiOWVhYjk4NDViZjk1ZDBmOGVh MDZhYTY2ZjljOThlMTQxZTMyNGNhMjY4YTA3NTJkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDF9m0/xyAS0r6sFzXqeLTCSU1reUkSGFlnKurbLHcV0paT e0Jw4RlJDg/CFvbwRn9oBseE/4YT350EHh9q06dUGTzg+hHHBuMBPknJhhWxUwHW sjYtSv5IWbVPKNvQumYQFZuTFfYaoBa7XKpFIlDcmnjLgzlAqP+ygy5T82vEMlTa zbafvyoC7H7fRXp7SZjJteVGf3K2DeF80HZs5PIz/KnwM1UuWHa6uqmbjl0ANN2B Zq2FQ0yDKQl/vuodRjrKaazsKKn7YSH35eF7OUdE+kgrgJ2LWbwBxNCnLWpvqVUN seCg8cTRvPridHhRGBQoPyooCaDc5YknaKgUHRjJAgMBAAGjggKyMIICrjAdBgNV HQ4EFgQUlThy14TCRPsSbuwxBsqz9gti6RswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdjODRjOGI0LWI2ZmQtNDc2ZC04NGJmLTA5NGM2ZjllNjc2OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAmAB+7MA0GCSqGSIb3DQEBCwUAA4IBAQBK0HZ82oO0l6cOpW3h8gtMffd7 95GQ49DiM8hrYNIPskrorC788qXaPdQj50qUwioPO+6Rg+8d7tj/JjLhwYzhWwU6 SOjS2oUqbEkmzdYyE9Y/5VbXSZN/RfOjVzxCzpPIOv3OOlFlyw1vICkm+YA0Dt86 +iqBvUqYoaet+LbJntcOctLZbvw+J+0LQlHppa21a5Vpqb8FR5eNrkQkRiQaslDX m+CQQmUVF4rHko0teSZdIxdxrIfZS4lliywh3/R+pKhEekNXR1e98dfiJ35c6vf6 G05HUmqK3Yh5+ICcw8KASC9UcD2r0Mx/bx+pwumZ0O4eOzq9xdfelOp2cVrj -----END CERTIFICATE-----Generated at Wed Nov 4 18:56:46 2026 by rpki-client