$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/840c3edc-37da-4000-b1b9-30b0ddf8ed0d.roa File: 840c3edc-37da-4000-b1b9-30b0ddf8ed0d.roa (raw, json) Hash identifier: uLPIqCpIp3FA2aaNOf4dwmeRcISdI5sDxayUXjQojbE= Subject key identifier: 9B:42:FB:B6:8B:FC:B7:D5:4D:4C:1B:7D:E0:98:EC:EA:5E:E6:6D:91 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3052C9F104D70285DC27F3BC7BD651391AE0E144 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/840c3edc-37da-4000-b1b9-30b0ddf8ed0d.roa Signing time: Fri 23 Oct 2026 02:11:09 +0000 ROA not before: Fri 23 Oct 2026 02:11:09 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f1e:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:52:c9:f1:04:d7:02:85:dc:27:f3:bc:7b:d6:51:39:1a:e0:e1:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 23 02:11:09 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=898676d2bfd88c933151e3e56a6bba722925727ba126b16c0f82c3ec8a83d5d2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c2:b8:c5:e0:71:74:e7:77:32:3c:bc:0f:c2: c5:68:31:5d:c1:06:34:51:e8:01:a1:bc:e7:c5:6d: 05:49:75:fd:2c:ea:cb:10:10:89:6d:ea:a0:f1:a7: a4:63:75:4d:7d:83:2b:44:96:67:4f:65:f3:07:f3: 0e:5b:9c:1e:86:57:bd:9c:a2:f9:97:75:ae:3d:5a: 3f:09:03:9a:55:7b:9f:5f:fd:e8:fc:95:cc:65:18: 53:06:f0:b6:c1:9a:9d:d6:7f:79:d6:c3:47:59:9f: 20:ee:1d:d5:06:18:d7:65:df:ea:5f:b8:94:1a:f0: bf:bd:b9:68:4c:45:e5:2d:3c:87:60:e0:60:c4:a5: 3a:81:56:7b:f3:b1:b5:1e:b4:4b:65:8a:b8:c3:67: 3c:d6:58:ee:e3:0b:b3:08:e3:05:12:5c:81:3a:1a: 0b:c8:26:47:db:f8:24:b6:5e:1f:bd:43:1f:8c:71: df:8a:6e:90:0c:f0:09:c7:88:fb:30:3f:7e:f1:08: 73:91:d1:44:f7:ea:10:51:20:4a:f0:a3:17:5a:68: 9e:57:66:81:12:94:41:e2:34:d3:89:23:67:3e:17: 17:cf:6b:d8:f5:53:06:bd:31:56:bc:78:f6:e6:86: aa:8d:43:c5:42:f4:36:19:63:8b:45:5d:0f:9c:01: d8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:42:FB:B6:8B:FC:B7:D5:4D:4C:1B:7D:E0:98:EC:EA:5E:E6:6D:91 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/840c3edc-37da-4000-b1b9-30b0ddf8ed0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f1e:c00::/38 Signature Algorithm: sha256WithRSAEncryption 7f:72:f7:c1:d1:0f:10:b2:2c:3a:4b:93:87:ba:4b:07:5a:ff: 0c:d8:29:9b:c0:95:bb:42:03:b8:56:8e:4b:cf:78:8e:6a:b2: d2:26:e4:93:ae:80:df:b4:58:7b:66:99:cf:7a:33:49:93:fd: c9:55:24:d5:8f:3b:c7:80:98:95:85:bf:f6:ea:c5:19:19:ee: 89:71:af:12:6a:0c:13:8e:b5:a8:93:5f:c5:51:d0:e8:49:0f: 06:e8:bb:95:7a:fb:4b:92:25:ff:1f:67:5e:51:52:67:c4:70: 06:50:6a:c5:25:5f:eb:44:65:a2:2b:37:9a:b9:78:04:53:ea: 04:3a:37:e3:17:ee:a0:bb:e0:c3:29:ec:5b:2b:33:d6:3c:d3: 85:cd:5a:a8:56:31:47:3c:25:f3:1f:5a:7a:e8:3d:cb:b6:31: 0a:84:e5:37:73:00:0d:28:28:6a:e1:f1:22:4f:80:2b:b2:e7: 8e:42:73:0c:54:4d:7a:02:2f:26:ee:4f:86:ec:de:b9:f4:5e: bd:4d:8d:c0:8a:d0:f2:4a:c8:44:73:f7:0b:52:2d:3f:c7:55: 12:f9:2e:26:a5:90:e6:63:9c:cd:6b:07:f8:eb:d8:2c:7e:41: 5d:fc:4b:67:15:fd:b2:9e:47:2d:5f:2e:5a:65:42:e6:c7:9b: 0e:dd:a0:06 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUMFLJ8QTXAoXcJ/O8e9ZRORrg4UQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDIxMTA5WhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4OTg2NzZkMmJmZDg4YzkzMzE1MWUzZTU2YTZiYmE3MjI5 MjU3MjdiYTEyNmIxNmMwZjgyYzNlYzhhODNkNWQyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLwrjF4HF053cyPLwPwsVoMV3BBjRR6AGhvOfFbQVJdf0s 6ssQEIlt6qDxp6RjdU19gytElmdPZfMH8w5bnB6GV72covmXda49Wj8JA5pVe59f /ej8lcxlGFMG8LbBmp3Wf3nWw0dZnyDuHdUGGNdl3+pfuJQa8L+9uWhMReUtPIdg 4GDEpTqBVnvzsbUetEtlirjDZzzWWO7jC7MI4wUSXIE6GgvIJkfb+CS2Xh+9Qx+M cd+KbpAM8AnHiPswP37xCHOR0UT36hBRIErwoxdaaJ5XZoESlEHiNNOJI2c+FxfP a9j1Uwa9MVa8ePbmhqqNQ8VC9DYZY4tFXQ+cAdijAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUm0L7tov8t9VNTBt94Jjs6l7mbZEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg0MGMzZWRjLTM3ZGEtNDAwMC1iMWI5LTMwYjBkZGY4ZWQwZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgImAB8eDDANBgkqhkiG9w0BAQsFAAOCAQEAf3L3wdEPELIsOkuTh7pLB1r/ DNgpm8CVu0IDuFaOS894jmqy0ibkk66A37RYe2aZz3ozSZP9yVUk1Y87x4CYlYW/ 9urFGRnuiXGvEmoME461qJNfxVHQ6EkPBui7lXr7S5Il/x9nXlFSZ8RwBlBqxSVf 60Rlois3mrl4BFPqBDo34xfuoLvgwynsWysz1jzThc1aqFYxRzwl8x9aeug9y7Yx CoTlN3MADSgoauHxIk+AK7LnjkJzDFRNegIvJu5PhuzeufRevU2NwIrQ8krIRHP3 C1ItP8dVEvkuJqWQ5mOczWsH+OvYLH5BXfxLZxX9sp5HLV8uWmVC5sebDt2gBg== -----END CERTIFICATE-----Generated at Mon Nov 2 22:10:59 2026 by rpki-client