$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/935554bb-6d4f-4ce6-9c67-38656b1d3c1e.roa File: 935554bb-6d4f-4ce6-9c67-38656b1d3c1e.roa (raw, json) Hash identifier: OzvYrbC3n6gcF9YWmfVJE+XtS9sRS4221R9a/i6Sso8= Subject key identifier: E0:F8:10:F9:17:36:81:20:EF:FD:B8:5A:BE:25:66:36:4D:F0:44:7B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 23D4F917A74D9D579518E1FA1E7919015397E306 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/935554bb-6d4f-4ce6-9c67-38656b1d3c1e.roa Signing time: Fri 23 Oct 2026 01:11:30 +0000 ROA not before: Fri 23 Oct 2026 01:11:30 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f1b:4800::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:d4:f9:17:a7:4d:9d:57:95:18:e1:fa:1e:79:19:01:53:97:e3:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 23 01:11:30 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=9dbf82cb8c0fee87b27670e55e5ee1b3fd8dac4d487ed18e51cbe12ea2edfff6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:bf:30:3b:b8:c1:fc:bf:1e:6c:9b:cd:54:8f: f2:44:f9:01:fd:f5:3d:e3:29:26:6f:72:85:e0:c6: a6:b8:3c:4c:cc:90:74:41:da:50:0f:26:fe:65:41: b6:20:98:b4:81:3a:e7:ea:2c:4f:ca:95:07:ea:42: 8b:e2:c7:77:e4:3f:81:26:a6:fa:02:bf:23:49:47: 37:f0:20:32:00:05:bb:3e:48:4c:61:62:3a:01:50: ea:52:cd:d9:27:ad:ec:7d:97:db:81:d4:93:71:c4: d7:fa:0b:33:69:6d:d7:8f:e3:8c:27:77:c6:95:78: 53:e1:0a:50:64:d7:45:17:cf:c3:94:64:1d:97:45: f3:97:6d:0f:0e:0e:d7:5a:26:f4:12:45:2b:f2:0f: 34:b6:a4:85:ac:ad:1b:00:3a:d5:62:a0:78:fa:10: ed:63:be:dc:0d:32:42:eb:29:92:e3:16:cd:c2:54: 9d:c1:3a:58:35:50:d0:4b:88:07:a3:2e:7c:07:f8: c2:f8:a2:ea:13:58:e3:bd:66:de:fd:df:d2:9a:27: e9:7c:29:18:6b:c2:77:64:d6:fb:eb:09:01:3d:a2: 93:ac:f1:3f:ce:2a:c9:25:f7:4b:e7:22:b5:ea:15: 0f:a3:b5:21:ea:94:00:1a:65:77:0c:33:7a:30:0b: 00:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:F8:10:F9:17:36:81:20:EF:FD:B8:5A:BE:25:66:36:4D:F0:44:7B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/935554bb-6d4f-4ce6-9c67-38656b1d3c1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f1b:4800::/37 Signature Algorithm: sha256WithRSAEncryption 41:9a:8e:67:f5:89:6f:cc:dd:7c:ea:74:a0:8d:75:64:47:52: b9:e2:0b:95:77:23:41:fb:d7:90:74:f5:b6:66:80:76:3f:c0: 61:f5:b7:80:36:3f:80:14:59:5b:d8:ce:ab:7a:dc:06:a5:15: 77:e5:26:8a:9f:27:33:40:73:97:a0:85:ba:d6:b5:df:6b:10: 6d:92:71:6b:77:cb:3b:b8:b3:0f:79:4c:8d:ab:61:aa:5e:c2: e7:f8:70:97:f6:57:8d:75:19:06:ca:6b:09:2a:68:97:c4:18: 01:8f:a9:60:66:a2:28:d2:63:24:d5:d2:71:d8:19:5a:7e:4a: af:88:a7:8b:0e:e4:0e:e6:75:c8:68:79:c9:fb:57:83:82:26: 40:e9:74:5d:c8:e3:94:49:3a:63:f2:eb:9c:a0:da:59:e2:4d: da:db:ca:6f:7e:e8:d8:0d:fd:6a:20:31:ce:f9:c9:1e:fa:b9: df:97:f2:f5:c8:ab:31:cb:a5:ee:0e:c2:b2:71:17:a5:92:dc: 5a:c5:5e:60:2d:e5:49:54:da:8f:ef:1d:4f:6b:b2:a9:f1:ca: 6a:8c:28:52:29:2a:83:cc:e9:d2:35:ac:93:b1:e5:9c:11:5e: 8d:eb:2d:b9:0d:c9:73:f7:81:20:30:a6:40:c8:ec:0a:08:49: af:9e:28:bd -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUI9T5F6dNnVeVGOH6HnkZAVOX4wYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDExMTMwWhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZGJmODJjYjhjMGZlZTg3YjI3NjcwZTU1ZTVlZTFiM2Zk OGRhYzRkNDg3ZWQxOGU1MWNiZTEyZWEyZWRmZmY2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTvzA7uMH8vx5sm81Uj/JE+QH99T3jKSZvcoXgxqa4PEzM kHRB2lAPJv5lQbYgmLSBOufqLE/KlQfqQovix3fkP4EmpvoCvyNJRzfwIDIABbs+ SExhYjoBUOpSzdknrex9l9uB1JNxxNf6CzNpbdeP44wnd8aVeFPhClBk10UXz8OU ZB2XRfOXbQ8ODtdaJvQSRSvyDzS2pIWsrRsAOtVioHj6EO1jvtwNMkLrKZLjFs3C VJ3BOlg1UNBLiAejLnwH+ML4ouoTWOO9Zt7939KaJ+l8KRhrwndk1vvrCQE9opOs 8T/OKskl90vnIrXqFQ+jtSHqlAAaZXcMM3owCwBTAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU4PgQ+Rc2gSDv/bhaviVmNk3wRHswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkzNTU1NGJiLTZkNGYtNGNlNi05YzY3LTM4NjU2YjFkM2MxZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8bSDANBgkqhkiG9w0BAQsFAAOCAQEAQZqOZ/WJb8zdfOp0oI11ZEdS ueILlXcjQfvXkHT1tmaAdj/AYfW3gDY/gBRZW9jOq3rcBqUVd+Umip8nM0Bzl6CF uta132sQbZJxa3fLO7izD3lMjathql7C5/hwl/ZXjXUZBsprCSpol8QYAY+pYGai KNJjJNXScdgZWn5Kr4iniw7kDuZ1yGh5yftXg4ImQOl0XcjjlEk6Y/LrnKDaWeJN 2tvKb37o2A39aiAxzvnJHvq535fy9cirMcul7g7CsnEXpZLcWsVeYC3lSVTaj+8d T2uyqfHKaowoUikqg8zp0jWsk7HlnBFejestuQ3Jc/eBIDCmQMjsCghJr54ovQ== -----END CERTIFICATE-----Generated at Mon Nov 2 23:55:52 2026 by rpki-client