$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/87590a70-b188-452e-8d94-9699d66820b9.roa File: 87590a70-b188-452e-8d94-9699d66820b9.roa (raw, json) Hash identifier: 0PI3YqJfM6Cz/GsQdGdsusXR9uWH8Vs5208snZi0UbQ= Subject key identifier: 12:EA:AD:08:13:E5:A5:B2:E8:BC:82:6D:7C:A0:E2:17:E8:38:03:45 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3DD1DE06519931EBD79E0DB0C47DBB3B035BB625 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/87590a70-b188-452e-8d94-9699d66820b9.roa Signing time: Thu 29 Oct 2026 00:41:13 +0000 ROA not before: Thu 29 Oct 2026 00:41:13 +0000 ROA not after: Wed 27 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fe8:34c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:d1:de:06:51:99:31:eb:d7:9e:0d:b0:c4:7d:bb:3b:03:5b:b6:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 29 00:41:13 2026 GMT Not After : Jan 27 23:59:59 2027 GMT Subject: serialNumber=e7025a3856c5c058db59c486ffd57c373c3fe60d3896124acda8a0181963fce0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d4:9a:48:c7:08:3f:ed:91:a5:33:7d:f9:4d: 22:dd:d7:cd:a1:69:da:65:dd:1f:27:a4:d2:35:cc: 9d:c1:56:73:45:94:0d:05:26:1b:c1:08:4e:ea:ba: 8e:68:67:d5:34:41:d1:7f:03:a5:4a:14:ed:e2:7e: 76:d2:b9:ea:26:4e:9f:a1:64:b8:33:58:c3:05:c2: 90:3a:a4:17:ed:ad:42:35:73:15:58:1c:27:dd:80: a7:7c:6b:73:a7:f6:13:29:fe:66:b2:a2:0b:be:42: a5:ee:c0:ee:e6:51:8b:52:fd:83:71:59:8c:07:2c: fd:88:03:9d:e6:ef:91:49:be:e0:7a:2c:3f:65:05: fb:f3:bc:15:19:0c:3b:ac:c0:69:46:29:a9:9a:57: 1d:1d:01:7e:06:20:ff:90:23:7f:d2:7a:e7:8b:d3: 41:91:ea:fb:ea:e9:6c:a0:48:42:57:6d:25:6a:14: 2a:1b:b1:b3:c8:a8:40:68:71:af:ea:ae:f0:f0:c4: 36:82:c1:89:b6:a0:fd:36:67:9f:85:6f:6f:79:48: db:0d:d2:53:5b:74:4f:48:a1:3a:0e:70:de:0f:29: 04:fe:27:bd:98:e0:30:fa:ba:9d:0f:65:7a:26:16: 51:1c:df:65:5e:99:41:f9:2d:85:98:31:f6:bf:5d: 1f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:EA:AD:08:13:E5:A5:B2:E8:BC:82:6D:7C:A0:E2:17:E8:38:03:45 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/87590a70-b188-452e-8d94-9699d66820b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fe8:34c0::/48 Signature Algorithm: sha256WithRSAEncryption 86:b9:37:cc:da:5f:5a:ea:f5:8b:bd:e1:41:7a:53:ce:03:43: eb:cc:3d:e8:03:4e:ad:85:28:a3:cb:dc:8a:f4:4a:b5:77:c0: 11:e0:73:26:0b:45:10:7e:e1:87:7f:c7:1e:30:e8:ed:b5:ba: f1:af:59:69:47:f6:85:25:69:d1:83:eb:47:bd:b5:e3:bb:9b: b0:8f:d2:17:08:66:32:0b:ee:d6:ef:dd:25:7a:38:0b:46:3c: 6a:e3:70:0f:17:81:f9:81:c8:4d:18:0d:b8:98:d9:39:29:cd: e9:3f:33:93:53:f0:d3:ba:88:ec:2e:63:31:76:50:98:c5:08: f9:1f:1f:f3:48:13:6c:5a:71:80:8f:43:61:a4:62:d4:65:dd: af:3c:2d:9a:77:74:ac:0c:de:e2:0d:c5:23:a6:6b:9e:e0:df: 17:b0:9f:94:37:01:e3:9a:1a:8b:6e:02:cb:36:2c:37:4f:ad: a7:a6:b2:09:68:b7:96:59:7f:41:c8:0c:05:69:aa:30:e2:d3: 2a:fe:bd:87:f2:44:2d:0d:1f:8c:d8:e3:be:f8:9d:40:51:5f: 5a:cd:1c:fd:63:6b:f2:a5:fc:8c:42:b9:45:3c:66:33:64:ac: 0b:16:a0:9a:11:08:84:23:62:1d:8b:7b:97:36:75:5e:a0:cc: 36:2e:45:e0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUPdHeBlGZMevXng2wxH27OwNbtiUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI5MDA0MTEzWhcNMjcwMTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNzAyNWEzODU2YzVjMDU4ZGI1OWM0ODZmZmQ1N2MzNzNj M2ZlNjBkMzg5NjEyNGFjZGE4YTAxODE5NjNmY2UwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCO1JpIxwg/7ZGlM335TSLd182hadpl3R8npNI1zJ3BVnNF lA0FJhvBCE7quo5oZ9U0QdF/A6VKFO3ifnbSueomTp+hZLgzWMMFwpA6pBftrUI1 cxVYHCfdgKd8a3On9hMp/mayogu+QqXuwO7mUYtS/YNxWYwHLP2IA53m75FJvuB6 LD9lBfvzvBUZDDuswGlGKamaVx0dAX4GIP+QI3/SeueL00GR6vvq6WygSEJXbSVq FCobsbPIqEBoca/qrvDwxDaCwYm2oP02Z5+Fb295SNsN0lNbdE9IoToOcN4PKQT+ J72Y4DD6up0PZXomFlEc32VemUH5LYWYMfa/XR8XAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUEuqtCBPlpbLovIJtfKDiF+g4A0UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg3NTkwYTcwLWIxODgtNDUyZS04ZDk0LTk2OTlkNjY4MjBiOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/oNMAwDQYJKoZIhvcNAQELBQADggEBAIa5N8zaX1rq9Yu94UF6U84D Q+vMPegDTq2FKKPL3Ir0SrV3wBHgcyYLRRB+4Yd/xx4w6O21uvGvWWlH9oUladGD 60e9teO7m7CP0hcIZjIL7tbv3SV6OAtGPGrjcA8XgfmByE0YDbiY2Tkpzek/M5NT 8NO6iOwuYzF2UJjFCPkfH/NIE2xacYCPQ2GkYtRl3a88LZp3dKwM3uINxSOma57g 3xewn5Q3AeOaGotuAss2LDdPraemsglot5ZZf0HIDAVpqjDi0yr+vYfyRC0NH4zY 4774nUBRX1rNHP1ja/Kl/IxCuUU8ZjNkrAsWoJoRCIQjYh2Le5c2dV6gzDYuReA= -----END CERTIFICATE-----Generated at Tue Nov 3 12:02:19 2026 by rpki-client