$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7dbec330-e7ce-48df-8a7e-fb241155ebde.roa File: 7dbec330-e7ce-48df-8a7e-fb241155ebde.roa (raw, json) Hash identifier: bgSfsO55LEILYClS1ltzAtmH2EkLPtSaavz3Ho3wPfo= Subject key identifier: 28:68:A3:93:4B:55:0C:98:BC:42:6A:ED:E1:0C:7B:94:EE:39:BC:F5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 205BB85284796B623B8BAF425C007329D1F9C7FB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7dbec330-e7ce-48df-8a7e-fb241155ebde.roa Signing time: Thu 29 Oct 2026 00:31:03 +0000 ROA not before: Thu 29 Oct 2026 00:31:03 +0000 ROA not after: Wed 27 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fe8:4080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:5b:b8:52:84:79:6b:62:3b:8b:af:42:5c:00:73:29:d1:f9:c7:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 29 00:31:03 2026 GMT Not After : Jan 27 23:59:59 2027 GMT Subject: serialNumber=60f469de612f9c0532f8e43f483883cae6290f1bf64416560c3b83011eed6185, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f6:48:80:7e:4d:64:33:53:1a:42:b2:42:a5: 10:61:8f:e1:36:db:95:5f:64:89:55:b2:67:10:66: ef:32:5f:9d:fa:62:92:12:0c:69:08:b2:f0:1c:f6: 54:02:83:53:6a:81:b8:03:68:11:6b:3e:f4:ad:91: a4:ff:29:48:0f:44:90:9d:2d:97:1f:2c:91:cf:d3: 13:38:fb:aa:01:ea:0e:81:03:62:ff:4d:04:64:d4: 0c:90:6b:69:bb:04:38:4c:dc:25:22:86:cf:d0:f3: a9:75:38:7a:be:82:37:c2:e3:03:88:ad:93:66:c6: 42:45:da:69:8e:15:e4:b8:05:74:f9:e3:9b:6a:6c: bf:e4:15:c1:97:4d:5b:29:56:42:85:10:eb:42:00: 80:48:0f:15:07:e8:06:29:ac:2b:d5:63:2d:5d:4d: 76:71:15:58:95:49:df:d4:3f:13:be:dc:ec:a7:0f: a1:0b:7d:12:ac:02:b5:e1:f2:6d:ab:bf:3e:17:56: c8:12:19:0a:67:37:3b:64:82:53:c5:04:36:53:b4: ce:03:81:89:c4:c4:bd:ef:60:de:19:db:5a:74:e6: 78:ca:f1:9d:3d:b0:66:eb:82:62:54:c8:84:07:67: 4c:27:2c:01:0f:09:a8:72:89:51:f4:d7:ad:df:7e: c9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:68:A3:93:4B:55:0C:98:BC:42:6A:ED:E1:0C:7B:94:EE:39:BC:F5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7dbec330-e7ce-48df-8a7e-fb241155ebde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fe8:4080::/48 Signature Algorithm: sha256WithRSAEncryption 50:3d:7d:7e:1e:d6:98:a2:bd:ac:62:1e:c8:f7:f5:00:4d:e1: b6:e4:1f:6d:43:01:6f:3b:6c:48:9f:05:44:88:06:e4:69:7f: 3e:5b:67:df:7b:96:21:93:30:f0:d2:ec:e1:86:98:4b:34:6d: 46:8b:bf:52:18:78:03:94:98:e1:2a:70:d3:8f:37:23:22:2e: b3:82:50:35:ec:fb:bb:b9:38:48:ce:3f:50:9b:ea:ea:ce:0b: a1:50:08:af:7b:01:a2:5b:19:fa:2d:34:03:15:63:ab:27:6f: d7:30:52:7f:77:d5:05:eb:4a:f3:a4:10:da:ba:7d:42:81:a5: 5a:d1:ed:88:68:e8:8b:15:6d:ba:f7:b4:1e:34:55:95:75:c5: 07:6a:e0:4a:c2:c0:f9:5b:72:d0:25:5f:ce:a2:bc:6e:04:d3: 7b:86:c1:ca:c7:e6:fe:e9:13:b0:65:d1:e6:d3:74:c3:c9:a5: 23:c0:0b:69:98:4b:92:f0:8c:ce:dc:14:5e:05:1a:27:c1:fe: 3c:76:c8:74:e0:2c:a1:04:ff:52:0c:f6:b0:f6:bf:9e:98:1a: b3:da:0c:9d:ee:5a:d4:d5:42:46:e9:d4:66:0e:b4:5e:bb:87: 8f:b9:5c:64:f4:c8:d1:33:67:6d:fc:dc:17:20:cc:6a:c5:ea: e3:13:f5:c7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUIFu4UoR5a2I7i69CXABzKdH5x/swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI5MDAzMTAzWhcNMjcwMTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MGY0NjlkZTYxMmY5YzA1MzJmOGU0M2Y0ODM4ODNjYWU2 MjkwZjFiZjY0NDE2NTYwYzNiODMwMTFlZWQ2MTg1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCD9kiAfk1kM1MaQrJCpRBhj+E225VfZIlVsmcQZu8yX536 YpISDGkIsvAc9lQCg1NqgbgDaBFrPvStkaT/KUgPRJCdLZcfLJHP0xM4+6oB6g6B A2L/TQRk1AyQa2m7BDhM3CUihs/Q86l1OHq+gjfC4wOIrZNmxkJF2mmOFeS4BXT5 45tqbL/kFcGXTVspVkKFEOtCAIBIDxUH6AYprCvVYy1dTXZxFViVSd/UPxO+3Oyn D6ELfRKsArXh8m2rvz4XVsgSGQpnNztkglPFBDZTtM4DgYnExL3vYN4Z21p05njK 8Z09sGbrgmJUyIQHZ0wnLAEPCahyiVH0163ffskhAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUKGijk0tVDJi8Qmrt4Qx7lO45vPUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdkYmVjMzMwLWU3Y2UtNDhkZi04YTdlLWZiMjQxMTU1ZWJkZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/oQIAwDQYJKoZIhvcNAQELBQADggEBAFA9fX4e1piivaxiHsj39QBN 4bbkH21DAW87bEifBUSIBuRpfz5bZ997liGTMPDS7OGGmEs0bUaLv1IYeAOUmOEq cNOPNyMiLrOCUDXs+7u5OEjOP1Cb6urOC6FQCK97AaJbGfotNAMVY6snb9cwUn93 1QXrSvOkENq6fUKBpVrR7Yho6IsVbbr3tB40VZV1xQdq4ErCwPlbctAlX86ivG4E 03uGwcrH5v7pE7Bl0ebTdMPJpSPAC2mYS5LwjM7cFF4FGifB/jx2yHTgLKEE/1IM 9rD2v56YGrPaDJ3uWtTVQkbp1GYOtF67h4+5XGT0yNEzZ2383BcgzGrF6uMT9cc= -----END CERTIFICATE-----Generated at Tue Nov 3 23:56:35 2026 by rpki-client