$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d864abe-fc66-4c0d-90e8-605fc9ba487c.roa File: 8d864abe-fc66-4c0d-90e8-605fc9ba487c.roa (raw, json) Hash identifier: rwTcgTQUGUTHPnuRRjy7PKjCg9k+b3Q0f+x+geasGko= Subject key identifier: 23:4E:F6:C6:74:AD:08:54:56:4A:40:C1:FE:C0:F1:A1:08:80:16:DA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 04266ECDEFEC46D77CE95D6BF3EB82AEF5958C8D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d864abe-fc66-4c0d-90e8-605fc9ba487c.roa Signing time: Fri 23 Oct 2026 02:10:06 +0000 ROA not before: Fri 23 Oct 2026 02:10:06 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff2:4040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:26:6e:cd:ef:ec:46:d7:7c:e9:5d:6b:f3:eb:82:ae:f5:95:8c:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 23 02:10:06 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=5fde1705a097662b47813c104298950d969ed813483d058bc6daa113550502bf, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:52:f9:0c:4b:41:2b:b1:77:64:c0:83:18:88: fa:13:1d:4d:73:24:87:8d:b1:8a:14:a8:15:dd:55: d2:e7:86:dc:ed:a7:d9:94:9e:cd:09:6a:d5:87:96: a8:6b:b1:bd:e3:05:fb:55:cf:31:17:6e:57:8b:8b: e1:ab:0d:0c:c9:6e:41:3b:4d:4e:51:52:9d:b4:b0: 2b:97:b4:ef:fb:01:16:00:20:76:c2:10:5f:e5:57: 63:fc:45:69:69:0f:ff:d6:ab:50:36:a3:29:00:64: ef:8d:53:fb:3e:ab:ee:6d:88:0f:b7:b0:2a:a0:d5: 8b:ee:3c:ac:f7:45:a2:1d:a3:65:46:6d:7f:cb:fa: 68:45:fe:1a:7c:16:7a:e2:bb:61:1a:0d:7c:6a:bf: e9:57:bb:12:84:c8:eb:70:25:6f:44:79:71:cc:64: ac:16:e7:30:e4:7b:f5:1c:8e:d9:dd:74:1e:aa:44: 17:05:f6:cc:ae:fe:83:53:c9:77:bc:0c:9c:8f:71: 58:48:66:c9:92:c1:08:49:f8:02:3b:30:fd:c6:38: 1f:25:a4:ab:b7:4f:5a:1d:b8:97:ad:fc:f8:c8:ec: 22:a0:c7:f1:66:02:9d:74:6c:0d:15:98:6b:65:9a: ba:78:35:7a:99:3d:64:24:fd:03:6e:c0:28:b8:bf: 6b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:4E:F6:C6:74:AD:08:54:56:4A:40:C1:FE:C0:F1:A1:08:80:16:DA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d864abe-fc66-4c0d-90e8-605fc9ba487c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff2:4040::/48 Signature Algorithm: sha256WithRSAEncryption 2d:41:79:86:01:21:55:b1:56:2c:82:4c:5d:38:ee:67:64:75: be:3b:51:64:4e:a4:c6:87:b6:e1:8e:a4:87:81:d2:40:2e:97: 28:8e:9f:4a:50:31:dc:69:c9:ec:14:af:16:fe:bd:b7:78:2f: e5:59:28:32:52:b1:83:e0:4d:36:1f:c9:d2:35:2c:cd:54:8c: 07:cb:b7:75:63:5a:23:c0:50:bd:e3:0d:07:b0:30:95:97:55: f8:39:e5:e1:ec:d8:80:7a:ce:4d:4d:c4:7c:ed:c2:6d:6f:c5: 55:f3:78:4b:5c:21:2a:fa:70:0e:4a:e8:bf:1d:97:80:98:d4: d1:17:76:7d:94:c6:85:7e:bb:aa:bb:5e:0e:69:aa:c8:41:55: aa:6e:84:22:9c:73:98:ca:14:f5:d2:b8:50:33:8a:27:ff:25: 8b:de:47:df:e4:9c:0e:10:e4:0c:83:14:60:07:d9:9b:f7:a6: c3:d2:44:6c:ba:ca:56:5c:ca:aa:1e:4c:1a:a5:62:74:d5:bd: 0c:e6:6d:40:ec:69:4e:99:11:48:e7:ed:9b:fc:6e:b2:30:1e: 13:c4:bb:81:0a:39:39:f3:67:1d:07:d0:5a:bd:21:ca:b6:01: af:b1:f6:96:b4:09:38:0e:82:8e:6e:55:a0:d4:b2:19:2f:55: a8:47:9f:0a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBCZuze/sRtd86V1r8+uCrvWVjI0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDIxMDA2WhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZmRlMTcwNWEwOTc2NjJiNDc4MTNjMTA0Mjk4OTUwZDk2 OWVkODEzNDgzZDA1OGJjNmRhYTExMzU1MDUwMmJmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDzUvkMS0ErsXdkwIMYiPoTHU1zJIeNsYoUqBXdVdLnhtzt p9mUns0JatWHlqhrsb3jBftVzzEXbleLi+GrDQzJbkE7TU5RUp20sCuXtO/7ARYA IHbCEF/lV2P8RWlpD//Wq1A2oykAZO+NU/s+q+5tiA+3sCqg1YvuPKz3RaIdo2VG bX/L+mhF/hp8Fnriu2EaDXxqv+lXuxKEyOtwJW9EeXHMZKwW5zDke/UcjtnddB6q RBcF9syu/oNTyXe8DJyPcVhIZsmSwQhJ+AI7MP3GOB8lpKu3T1oduJet/PjI7CKg x/FmAp10bA0VmGtlmrp4NXqZPWQk/QNuwCi4v2vZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUI072xnStCFRWSkDB/sDxoQiAFtowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhkODY0YWJlLWZjNjYtNGMwZC05MGU4LTYwNWZjOWJhNDg3Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/yQEAwDQYJKoZIhvcNAQELBQADggEBAC1BeYYBIVWxViyCTF047mdk db47UWROpMaHtuGOpIeB0kAulyiOn0pQMdxpyewUrxb+vbd4L+VZKDJSsYPgTTYf ydI1LM1UjAfLt3VjWiPAUL3jDQewMJWXVfg55eHs2IB6zk1NxHztwm1vxVXzeEtc ISr6cA5K6L8dl4CY1NEXdn2UxoV+u6q7Xg5pqshBVapuhCKcc5jKFPXSuFAziif/ JYveR9/knA4Q5AyDFGAH2Zv3psPSRGy6ylZcyqoeTBqlYnTVvQzmbUDsaU6ZEUjn 7Zv8brIwHhPEu4EKOTnzZx0H0Fq9Icq2Aa+x9pa0CTgOgo5uVaDUshkvVahHnwo= -----END CERTIFICATE-----Generated at Wed Nov 4 20:26:33 2026 by rpki-client