$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7fb1c7ab-2535-4869-a7ee-185076455e71.roa File: 7fb1c7ab-2535-4869-a7ee-185076455e71.roa (raw, json) Hash identifier: +rrSenQhCuI2SItGcIbZCTW7LlX4yqrp8b/Rp5v67SU= Subject key identifier: 92:E1:6C:E6:84:57:92:B4:EA:2B:53:D0:DE:AD:E4:2F:D8:06:01:BD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1B2662CDDE0E6150C18F3F964712EE3E262EFB98 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7fb1c7ab-2535-4869-a7ee-185076455e71.roa Signing time: Fri 23 Oct 2026 01:10:05 +0000 ROA not before: Fri 23 Oct 2026 01:10:05 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f12::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:26:62:cd:de:0e:61:50:c1:8f:3f:96:47:12:ee:3e:26:2e:fb:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 23 01:10:05 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=1684832f1b4f8fee1ed18ab38b1f4f799f77ac070958447ab0702e33fb76d20a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:fb:91:61:32:a7:17:36:ac:42:2c:35:5e:7a: be:04:27:b6:33:d9:86:c4:fd:2b:b7:64:34:54:94: 52:6f:bd:a7:0a:33:bd:49:4e:b3:e8:d7:cc:4a:87: 9e:ff:77:81:a8:60:01:88:54:ac:2e:db:86:35:7c: 0a:08:96:3c:e3:3f:c9:4b:b0:84:f4:64:1a:ff:76: ad:d6:9d:f4:96:82:5d:db:fb:81:cf:cb:b2:e6:38: 72:b7:c5:bc:cb:91:ab:fb:4c:b6:35:d8:61:a3:d4: dc:e1:a4:73:25:3a:7f:fa:04:16:a6:c9:36:7a:6e: 1a:f0:b4:96:27:5c:98:6e:e8:c9:cd:cc:2b:e5:d9: e5:7a:61:81:42:04:16:5e:ad:dd:cc:65:14:19:1b: 6b:67:40:38:78:a8:6e:8e:71:cf:cb:a8:5b:86:69: de:cf:08:32:51:66:8d:be:cf:75:7a:0b:cc:64:90: 81:47:dc:c6:8c:d1:4f:cc:d7:8b:21:05:17:c4:be: e1:23:3e:c0:73:21:59:19:c9:aa:b7:c2:61:39:8b: 81:ed:8b:04:9d:e9:37:99:70:16:81:52:57:51:00: 71:0f:64:76:a4:af:f5:eb:e3:c0:3a:2c:54:25:68: d3:19:42:bb:79:d2:00:9a:86:a3:96:3b:bf:f6:04: 8c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:E1:6C:E6:84:57:92:B4:EA:2B:53:D0:DE:AD:E4:2F:D8:06:01:BD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7fb1c7ab-2535-4869-a7ee-185076455e71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f12::/36 Signature Algorithm: sha256WithRSAEncryption 94:4f:19:87:c8:fb:a9:34:ff:78:e9:c4:6e:25:1e:1f:8a:42: df:86:eb:9e:d0:75:5e:20:83:b7:16:41:7d:03:7a:44:b3:3b: 66:84:52:9c:af:59:89:9a:c1:22:e6:90:0a:9e:0c:68:25:5a: 96:64:89:ec:91:44:9d:c2:21:ff:60:fa:69:7e:81:c8:6c:9b: b6:b1:a1:ff:e4:a0:83:c9:1b:38:9f:51:a1:cc:18:6c:3a:6b: d5:92:94:81:57:30:c3:dc:1e:7b:c0:2e:97:eb:0d:d7:7c:33: 80:50:32:02:1c:41:bb:11:43:75:b9:8b:12:77:e0:6d:25:83: 17:6a:f1:25:bf:71:ea:1c:ba:e1:72:49:22:2a:3b:41:59:bb: 27:b1:bb:12:e7:0e:ba:37:b4:fb:ee:c9:47:4f:e4:ef:1c:cb: cc:75:28:e6:ae:80:77:ee:6f:e9:18:99:34:40:ca:8b:87:23: da:d1:a5:d7:c1:ae:81:58:45:49:5e:d9:59:6c:f1:20:d4:eb: 98:88:14:95:a6:02:00:47:f3:55:0b:6d:3c:8d:72:01:63:f3: e1:e2:ba:b8:29:3f:d0:24:29:dd:36:7e:d7:f5:35:70:e9:13: 28:44:9c:af:1c:ad:b3:b9:b6:74:03:d2:4d:6e:fa:91:79:5b: 3c:e6:b0:79 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUGyZizd4OYVDBjz+WRxLuPiYu+5gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDExMDA1WhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNjg0ODMyZjFiNGY4ZmVlMWVkMThhYjM4YjFmNGY3OTlm NzdhYzA3MDk1ODQ0N2FiMDcwMmUzM2ZiNzZkMjBhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCO+5FhMqcXNqxCLDVeer4EJ7Yz2YbE/Su3ZDRUlFJvvacK M71JTrPo18xKh57/d4GoYAGIVKwu24Y1fAoIljzjP8lLsIT0ZBr/dq3WnfSWgl3b +4HPy7LmOHK3xbzLkav7TLY12GGj1NzhpHMlOn/6BBamyTZ6bhrwtJYnXJhu6MnN zCvl2eV6YYFCBBZerd3MZRQZG2tnQDh4qG6Occ/LqFuGad7PCDJRZo2+z3V6C8xk kIFH3MaM0U/M14shBRfEvuEjPsBzIVkZyaq3wmE5i4HtiwSd6TeZcBaBUldRAHEP ZHakr/Xr48A6LFQlaNMZQrt50gCahqOWO7/2BIw1AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUkuFs5oRXkrTqK1PQ3q3kL9gGAb0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdmYjFjN2FiLTI1MzUtNDg2OS1hN2VlLTE4NTA3NjQ1NWU3MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8SADANBgkqhkiG9w0BAQsFAAOCAQEAlE8Zh8j7qTT/eOnEbiUeH4pC 34brntB1XiCDtxZBfQN6RLM7ZoRSnK9ZiZrBIuaQCp4MaCValmSJ7JFEncIh/2D6 aX6ByGybtrGh/+Sgg8kbOJ9RocwYbDpr1ZKUgVcww9wee8Aul+sN13wzgFAyAhxB uxFDdbmLEnfgbSWDF2rxJb9x6hy64XJJIio7QVm7J7G7EucOuje0++7JR0/k7xzL zHUo5q6Ad+5v6RiZNEDKi4cj2tGl18GugVhFSV7ZWWzxINTrmIgUlaYCAEfzVQtt PI1yAWPz4eK6uCk/0CQp3TZ+1/U1cOkTKEScrxyts7m2dAPSTW76kXlbPOaweQ== -----END CERTIFICATE-----Generated at Tue Nov 3 19:19:21 2026 by rpki-client