$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91a249fd-41bf-4450-a8bc-cec7195b3682.roa File: 91a249fd-41bf-4450-a8bc-cec7195b3682.roa (raw, json) Hash identifier: 4gQE/UIORWFuiHnCZ5XlgQq4bME0xAz7Q2rjjBgSNJQ= Subject key identifier: 38:0F:FC:DA:21:44:D6:48:36:71:E2:84:A4:4E:E4:DB:67:B5:B9:76 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 28D20CFCCE3ED938A300D6BA9F10C246602D3076 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91a249fd-41bf-4450-a8bc-cec7195b3682.roa Signing time: Thu 22 Oct 2026 01:20:06 +0000 ROA not before: Thu 22 Oct 2026 01:20:06 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:80a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:d2:0c:fc:ce:3e:d9:38:a3:00:d6:ba:9f:10:c2:46:60:2d:30:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 22 01:20:06 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=7933fce006a236fd0b7013a1da134f9a1500c0ccb024b10e1d143217cac5bf91, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:8f:dc:27:e1:22:3b:09:c7:40:77:d2:ca:29: 86:b4:7d:3d:2a:a6:21:f5:55:82:37:b6:c1:46:7a: fa:9b:7e:f9:b4:ec:db:3b:2f:81:17:35:30:30:51: 9a:4c:e9:df:09:24:5f:44:1f:93:35:a4:b6:eb:6b: bc:7b:4e:c5:e9:c5:4a:f0:4d:f3:df:7b:74:75:32: 21:f9:1a:18:8a:70:8f:c9:34:af:09:58:52:08:f6: bb:d3:c8:c2:82:68:1f:27:5d:a7:e8:47:c2:b3:1f: db:fe:66:d4:45:24:0c:f2:8e:8b:13:00:07:b0:85: 1f:8d:66:6a:10:03:4d:59:d9:d0:64:a3:cf:cb:e9: 93:99:75:c6:ea:08:18:84:65:b5:92:ea:f2:43:02: 0d:12:e5:df:d0:aa:18:dc:8f:ea:07:80:ce:71:53: c3:2d:8b:3e:f4:a0:0a:db:25:bc:1d:8e:9d:2c:9f: 7d:54:3b:74:8b:ea:ad:10:43:07:26:79:2b:8f:f9: 1e:ca:96:1e:e0:4e:a4:51:35:99:db:40:a0:da:f8: 14:91:39:89:66:3e:df:7e:93:c2:da:5f:ce:72:50: 56:6e:87:0e:0f:3f:fd:ba:83:cc:9b:3a:df:71:66: ff:e8:f1:3f:53:57:f9:65:08:8d:c1:55:02:52:8b: 41:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:0F:FC:DA:21:44:D6:48:36:71:E2:84:A4:4E:E4:DB:67:B5:B9:76 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91a249fd-41bf-4450-a8bc-cec7195b3682.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:80a0::/48 Signature Algorithm: sha256WithRSAEncryption c2:da:36:cd:64:97:e7:a5:07:e6:bd:29:e2:f5:dc:84:8e:76: d7:55:c7:16:b1:34:fe:c8:25:f7:62:a1:9d:f6:82:e1:1a:f3: 3b:14:3f:8a:76:2a:8c:c7:ca:54:b2:ff:ec:25:b5:e8:62:d7: 83:8c:28:0b:48:11:57:a6:b0:a2:27:8e:2f:c2:48:96:87:4d: 52:82:34:7d:a5:85:6f:3e:a8:68:7d:81:ff:d1:42:94:18:35: a1:51:8b:47:a6:b0:15:9e:41:c5:c6:86:af:3f:67:dc:00:4e: e6:2f:a3:8f:9b:cb:51:2a:10:00:ff:b1:10:a8:3b:cd:04:27: 9b:78:87:77:7c:b5:71:9a:c8:5c:af:04:01:be:72:0d:48:a5: 30:19:8a:cf:98:3b:eb:ad:30:01:04:0f:17:15:77:59:c9:3a: cb:41:75:6a:d0:93:d6:c8:cf:d3:a5:18:3e:b1:9e:0c:c6:23: 8f:a2:dd:ee:3e:37:cc:10:3c:35:f9:b0:9d:ac:34:c7:e7:b6: d4:4f:0b:4f:02:cf:01:21:1e:8c:e4:64:b3:c9:62:78:04:1b: ff:d4:ad:2c:2e:7b:e9:1c:d0:38:d6:81:8f:c9:f0:70:db:20: 30:35:e6:1a:61:0e:49:99:3f:6a:e4:00:6c:0e:a7:e6:6d:9e: ad:aa:67:85 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKNIM/M4+2TijANa6nxDCRmAtMHYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIyMDEyMDA2WhcNMjcwMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3OTMzZmNlMDA2YTIzNmZkMGI3MDEzYTFkYTEzNGY5YTE1 MDBjMGNjYjAyNGIxMGUxZDE0MzIxN2NhYzViZjkxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCPj9wn4SI7CcdAd9LKKYa0fT0qpiH1VYI3tsFGevqbfvm0 7Ns7L4EXNTAwUZpM6d8JJF9EH5M1pLbra7x7TsXpxUrwTfPfe3R1MiH5GhiKcI/J NK8JWFII9rvTyMKCaB8nXafoR8KzH9v+ZtRFJAzyjosTAAewhR+NZmoQA01Z2dBk o8/L6ZOZdcbqCBiEZbWS6vJDAg0S5d/Qqhjcj+oHgM5xU8Mtiz70oArbJbwdjp0s n31UO3SL6q0QQwcmeSuP+R7Klh7gTqRRNZnbQKDa+BSROYlmPt9+k8LaX85yUFZu hw4PP/26g8ybOt9xZv/o8T9TV/llCI3BVQJSi0HxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUOA/82iFE1kg2ceKEpE7k22e1uXYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkxYTI0OWZkLTQxYmYtNDQ1MC1hOGJjLWNlYzcxOTViMzY4Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AgKAwDQYJKoZIhvcNAQELBQADggEBAMLaNs1kl+elB+a9KeL13ISO dtdVxxaxNP7IJfdioZ32guEa8zsUP4p2KozHylSy/+wltehi14OMKAtIEVemsKIn ji/CSJaHTVKCNH2lhW8+qGh9gf/RQpQYNaFRi0emsBWeQcXGhq8/Z9wATuYvo4+b y1EqEAD/sRCoO80EJ5t4h3d8tXGayFyvBAG+cg1IpTAZis+YO+utMAEEDxcVd1nJ OstBdWrQk9bIz9OlGD6xngzGI4+i3e4+N8wQPDX5sJ2sNMfnttRPC08CzwEhHozk ZLPJYngEG//UrSwue+kc0DjWgY/J8HDbIDA15hphDkmZP2rkAGwOp+Ztnq2qZ4U= -----END CERTIFICATE-----Generated at Tue Nov 3 19:22:49 2026 by rpki-client