$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f05e9af-40c1-4b64-8acd-465c0b672d25.roa File: 8f05e9af-40c1-4b64-8acd-465c0b672d25.roa (raw, json) Hash identifier: R/XjMthLOahsnyJ9TexdEJT4ywqI5q3g7LBnk0fUix0= Subject key identifier: 8A:B8:45:43:A7:4D:77:5F:C4:92:E7:A2:F0:4B:FC:03:90:B2:9B:E9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6CAE54BB2691A53CC5C41C953916231A9EBB4AB0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f05e9af-40c1-4b64-8acd-465c0b672d25.roa Signing time: Fri 09 Oct 2026 01:06:53 +0000 ROA not before: Fri 09 Oct 2026 01:06:53 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff3:e000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:ae:54:bb:26:91:a5:3c:c5:c4:1c:95:39:16:23:1a:9e:bb:4a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 9 01:06:53 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=fc4442c8c4eef2e733087b14377f7aa2a0fb6a493f93458ac06987b95ca1e1cb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:18:61:a7:d6:15:d8:d3:10:b5:f0:7b:25:e8: d7:a6:d8:a3:14:34:12:14:b5:cf:da:6f:e1:d7:ec: bf:1e:c7:d0:f9:7a:b6:9b:78:fe:66:2f:31:65:f0: 83:6a:1a:f6:22:4c:25:01:c1:ed:7b:0e:a7:f5:b2: a9:64:1d:c7:8b:33:3c:16:8e:02:26:63:c5:6d:68: af:15:af:b5:24:55:83:33:82:45:ac:66:5c:d6:ca: f8:95:13:41:0a:62:35:70:12:de:d2:ff:9c:a9:0a: 74:09:48:ca:02:92:8b:e7:85:3f:8c:9a:f4:97:45: 2c:49:08:99:b3:7b:b7:77:04:51:ec:fb:f4:5e:76: dc:50:04:22:22:06:95:ec:8b:6a:37:47:1d:95:6f: 2c:42:b0:22:74:19:7f:d6:56:be:93:1a:fb:09:f8: 54:c1:84:64:13:2f:5d:2a:63:2e:c3:29:60:ac:e3: 12:0d:27:83:0c:84:8e:13:ae:a4:ed:62:73:32:7b: 25:eb:e6:b6:06:94:97:01:b6:b3:9c:f9:40:c2:01: 63:4e:62:67:d3:ec:1c:21:84:e6:7f:50:2a:72:63: fc:97:90:8d:96:68:a9:4a:27:ce:4b:7c:aa:da:0c: 4c:ba:c4:67:ad:e2:08:b9:81:92:8e:e9:85:ca:cc: f7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B8:45:43:A7:4D:77:5F:C4:92:E7:A2:F0:4B:FC:03:90:B2:9B:E9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f05e9af-40c1-4b64-8acd-465c0b672d25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff3:e000::/40 Signature Algorithm: sha256WithRSAEncryption 9f:5a:98:27:cc:8f:25:6b:d7:e3:bf:5c:70:e0:62:79:71:77: 5a:03:26:3c:70:19:02:5b:47:12:5a:ea:f5:2d:68:3e:8a:7a: 59:1f:17:71:de:9f:10:4c:c2:31:96:95:6c:c5:78:2f:b8:5b: 0c:92:a9:d4:17:05:c0:31:1b:73:4e:3b:06:b6:c5:77:7c:b0: 09:78:3f:60:79:5c:a1:4b:0e:cc:dc:77:69:12:7a:0b:38:38: 5f:fd:c3:02:05:3c:93:d6:21:32:9a:99:87:6e:d7:58:2c:4a: be:f4:b2:8d:7f:6f:8a:bb:8c:e5:da:dc:df:7d:40:cb:ce:c9: fe:15:e2:3b:ca:0b:05:38:9a:7f:04:83:d0:51:57:d5:01:73: 4b:c4:97:46:46:c9:6d:7f:ea:b4:71:08:74:72:3d:1c:4d:73: 8b:22:a8:69:38:d2:85:42:e7:c8:0a:8c:46:ee:4d:23:d1:69: 6c:f1:8e:ef:ac:1d:24:41:24:17:ce:79:49:c5:1b:d8:c1:de: 2c:80:b4:c2:e2:2b:7a:4e:38:8a:c9:47:27:32:e2:c9:46:a6: 2c:76:d2:09:08:7b:4a:b0:1c:e3:2b:4c:c4:f8:ea:0c:22:db: 59:39:32:a8:72:37:dd:5b:c1:ed:30:81:67:52:a0:f6:67:83: 20:3d:97:ba -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUbK5UuyaRpTzFxByVORYjGp67SrAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA5MDEwNjUzWhcNMjcwMTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYzQ0NDJjOGM0ZWVmMmU3MzMwODdiMTQzNzdmN2FhMmEw ZmI2YTQ5M2Y5MzQ1OGFjMDY5ODdiOTVjYTFlMWNiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGGGGn1hXY0xC18Hsl6Nem2KMUNBIUtc/ab+HX7L8ex9D5 erabeP5mLzFl8INqGvYiTCUBwe17Dqf1sqlkHceLMzwWjgImY8VtaK8Vr7UkVYMz gkWsZlzWyviVE0EKYjVwEt7S/5ypCnQJSMoCkovnhT+MmvSXRSxJCJmze7d3BFHs +/RedtxQBCIiBpXsi2o3Rx2VbyxCsCJ0GX/WVr6TGvsJ+FTBhGQTL10qYy7DKWCs 4xINJ4MMhI4TrqTtYnMyeyXr5rYGlJcBtrOc+UDCAWNOYmfT7BwhhOZ/UCpyY/yX kI2WaKlKJ85LfKraDEy6xGet4gi5gZKO6YXKzPcTAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUirhFQ6dNd1/Ekuei8Ev8A5Cym+kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhmMDVlOWFmLTQwYzEtNGI2NC04YWNkLTQ2NWMwYjY3MmQyNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/z4DANBgkqhkiG9w0BAQsFAAOCAQEAn1qYJ8yPJWvX479ccOBieXF3 WgMmPHAZAltHElrq9S1oPop6WR8Xcd6fEEzCMZaVbMV4L7hbDJKp1BcFwDEbc047 BrbFd3ywCXg/YHlcoUsOzNx3aRJ6Czg4X/3DAgU8k9YhMpqZh27XWCxKvvSyjX9v iruM5drc331Ay87J/hXiO8oLBTiafwSD0FFX1QFzS8SXRkbJbX/qtHEIdHI9HE1z iyKoaTjShULnyAqMRu5NI9FpbPGO76wdJEEkF855ScUb2MHeLIC0wuIrek44islH JzLiyUamLHbSCQh7SrAc4ytMxPjqDCLbWTkyqHI33VvB7TCBZ1Kg9meDID2Xug== -----END CERTIFICATE-----Generated at Wed Nov 4 16:52:38 2026 by rpki-client