$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86197c56-a887-4e1c-bf5a-f36ba8505330.roa File: 86197c56-a887-4e1c-bf5a-f36ba8505330.roa (raw, json) Hash identifier: ssD55Yf1tJZdvM+f0OLpIdBRUT7pXDH2vXvrzegWO3I= Subject key identifier: BE:BC:08:01:9C:B3:1D:EE:36:15:E0:09:8E:22:33:2F:34:6C:A4:A6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7321B3821519FA8ECA357C96CB9FC7AD9FF49EAA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86197c56-a887-4e1c-bf5a-f36ba8505330.roa Signing time: Tue 20 Oct 2026 00:41:37 +0000 ROA not before: Tue 20 Oct 2026 00:41:37 +0000 ROA not after: Mon 18 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fec:fc00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:21:b3:82:15:19:fa:8e:ca:35:7c:96:cb:9f:c7:ad:9f:f4:9e:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 20 00:41:37 2026 GMT Not After : Jan 18 23:59:59 2027 GMT Subject: serialNumber=8c36f007835926ab7d206c5f04ee9f79af3010005616085df76fceaa8c1e0e77, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0a:1e:f7:41:35:0c:15:55:30:cd:62:0f:22: aa:30:d0:55:cd:72:f7:a6:3d:80:08:7b:63:f4:e5: 3c:4f:41:32:15:75:78:40:df:ca:bf:e5:68:84:af: a5:47:b0:94:59:2d:04:19:01:7a:3e:91:c0:dc:49: 83:55:7e:5c:f7:b4:83:31:10:ef:06:ae:d4:a2:b4: 74:03:1f:dc:32:6e:0e:9e:9b:aa:6d:66:9c:f6:8e: 60:40:73:01:5d:b9:30:75:ff:13:dd:81:15:2c:d1: 0d:6d:f7:48:52:72:19:e6:0e:47:ce:d6:90:ef:1c: db:97:57:1b:32:56:a3:da:b5:17:6c:c0:03:e9:92: 49:43:24:ac:36:6b:02:b0:7e:1d:ac:38:7c:d8:03: 0b:59:d6:0c:82:98:40:07:ce:a8:ea:85:d6:63:cb: 1f:c0:d3:53:b8:6a:e0:50:ec:c3:86:4a:8d:fc:af: 9b:d5:3c:c9:60:4a:cb:cc:a1:34:a9:3f:a1:7e:c8: 57:20:c6:ba:b5:5c:0a:7a:c2:2d:93:be:d1:e0:d1: b4:03:aa:7a:4e:fa:9c:4f:24:c7:b1:12:ec:a0:01: ef:c3:11:d6:32:4d:9b:1b:76:f7:ec:e7:f8:1b:88: 01:15:87:db:a4:2d:72:80:ce:91:7f:78:d4:a5:5a: ba:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:BC:08:01:9C:B3:1D:EE:36:15:E0:09:8E:22:33:2F:34:6C:A4:A6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86197c56-a887-4e1c-bf5a-f36ba8505330.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fec:fc00::/48 Signature Algorithm: sha256WithRSAEncryption 79:9e:8a:d8:ef:b4:53:df:ed:07:4d:b0:27:d0:db:03:c6:f2: ca:04:3d:60:f3:ea:98:55:0b:0f:a5:52:18:3e:27:16:c8:b9: 80:dc:4f:f6:af:a2:55:4a:a8:f2:fd:b9:cb:1a:66:5a:a6:38: 8f:3d:bf:2f:3c:bb:17:68:02:f6:ae:32:45:d4:fc:09:0e:15: 25:8b:43:e3:39:75:3c:da:a7:11:20:50:2a:06:8a:76:59:e4: a1:a9:5a:06:af:fd:6d:30:c3:42:9b:46:51:b9:20:88:1e:c8: 68:c7:34:f7:87:1e:be:01:bd:28:e6:2f:a5:45:33:bf:f9:ea: 40:3f:6d:37:92:17:77:3b:ff:51:5d:2d:7e:5a:c9:30:cb:62: 11:53:56:19:91:65:1d:05:c1:34:02:40:66:2e:e8:b2:79:0e: 05:d2:d8:ee:f6:0f:4f:b4:0d:1d:44:39:2c:57:60:1a:79:fa: ba:f8:68:00:b1:4f:dd:30:cd:74:d0:4e:c7:a7:43:d9:a0:6b: 39:ba:35:3e:55:19:f9:9f:da:3f:b9:e4:2b:cf:1a:d7:d8:7a: a5:cd:de:5c:e0:ae:07:a5:1f:e9:69:49:b7:7e:b8:ca:b7:9e: d6:36:c8:fe:76:b9:72:33:51:b7:20:1d:02:91:be:7b:62:00: b0:57:35:34 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcyGzghUZ+o7KNXyWy5/HrZ/0nqowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIwMDA0MTM3WhcNMjcwMTE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A4YzM2ZjAwNzgzNTkyNmFiN2QyMDZjNWYwNGVlOWY3OWFm MzAxMDAwNTYxNjA4NWRmNzZmY2VhYThjMWUwZTc3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDCh73QTUMFVUwzWIPIqow0FXNcvemPYAIe2P05TxPQTIV dXhA38q/5WiEr6VHsJRZLQQZAXo+kcDcSYNVflz3tIMxEO8GrtSitHQDH9wybg6e m6ptZpz2jmBAcwFduTB1/xPdgRUs0Q1t90hSchnmDkfO1pDvHNuXVxsyVqPatRds wAPpkklDJKw2awKwfh2sOHzYAwtZ1gyCmEAHzqjqhdZjyx/A01O4auBQ7MOGSo38 r5vVPMlgSsvMoTSpP6F+yFcgxrq1XAp6wi2TvtHg0bQDqnpO+pxPJMexEuygAe/D EdYyTZsbdvfs5/gbiAEVh9ukLXKAzpF/eNSlWrpvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUvrwIAZyzHe42FeAJjiIzLzRspKYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg2MTk3YzU2LWE4ODctNGUxYy1iZjVhLWYzNmJhODUwNTMzMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/s/AAwDQYJKoZIhvcNAQELBQADggEBAHmeitjvtFPf7QdNsCfQ2wPG 8soEPWDz6phVCw+lUhg+JxbIuYDcT/avolVKqPL9ucsaZlqmOI89vy88uxdoAvau MkXU/AkOFSWLQ+M5dTzapxEgUCoGinZZ5KGpWgav/W0ww0KbRlG5IIgeyGjHNPeH Hr4BvSjmL6VFM7/56kA/bTeSF3c7/1FdLX5ayTDLYhFTVhmRZR0FwTQCQGYu6LJ5 DgXS2O72D0+0DR1EOSxXYBp5+rr4aACxT90wzXTQTsenQ9mgazm6NT5VGfmf2j+5 5CvPGtfYeqXN3lzgrgelH+lpSbd+uMq3ntY2yP52uXIzUbcgHQKRvntiALBXNTQ= -----END CERTIFICATE-----Generated at Mon Nov 2 21:33:38 2026 by rpki-client