$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/974e6dfc-61bf-4f05-b26a-c4ebcc875cfc.roa File: 974e6dfc-61bf-4f05-b26a-c4ebcc875cfc.roa (raw, json) Hash identifier: FFIlRqb94ipC8Nzi97Ayc5sfPTeuCXQ3YY/o+IhLLzQ= Subject key identifier: 6A:33:8B:4B:13:08:44:9E:F6:27:BB:35:D6:CF:51:89:21:E0:AE:CD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6B3FD81C32D33F082BACD99763ABE818282E552D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/974e6dfc-61bf-4f05-b26a-c4ebcc875cfc.roa Signing time: Tue 06 Oct 2026 00:41:05 +0000 ROA not before: Tue 06 Oct 2026 00:41:05 +0000 ROA not after: Mon 04 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f21::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 31 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:3f:d8:1c:32:d3:3f:08:2b:ac:d9:97:63:ab:e8:18:28:2e:55:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 6 00:41:05 2026 GMT Not After : Jan 4 23:59:59 2027 GMT Subject: serialNumber=39439a6a8fdb2dd05dc503943fd4dbfabaf69565b7b8c6e28f69a8ac1f60907e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:12:bf:3f:2e:92:7f:02:d8:81:dc:2f:23:72: 82:70:49:4d:43:eb:f7:6d:6d:c4:95:77:6d:fb:17: 17:f9:65:c4:78:92:74:4c:bd:10:b4:64:35:76:f4: 98:81:a4:40:5f:c2:e7:b7:e5:76:f7:4d:42:31:4a: 61:ee:59:f7:60:9a:3f:65:d9:15:95:1d:b5:70:5d: c0:75:a7:97:3a:8b:f7:56:8f:11:01:16:6a:37:6f: ad:11:41:3a:02:6c:a1:1a:f7:f4:a5:16:97:1a:d2: 18:7b:80:ad:4c:cb:d0:d6:6f:c0:d2:39:01:31:bf: 5f:4a:4b:46:b7:de:d5:34:05:3c:24:76:a0:2c:17: ca:60:1e:17:3a:8e:0b:a1:75:d6:00:08:0d:fc:4a: 77:33:f4:4a:0e:92:9f:e8:e8:bc:01:30:b1:2b:f4: f7:8a:77:4d:b7:bb:24:00:e9:e4:66:f5:81:1d:5c: d9:1a:08:6e:61:0c:ec:d5:10:e7:c7:13:6f:b7:7b: 07:e2:25:90:bc:90:9d:dc:aa:78:06:8c:c8:b0:5e: 00:1a:ea:34:8c:dc:09:65:94:d2:94:8e:70:08:98: 07:81:e9:af:3b:35:07:40:19:d3:be:95:ce:f0:02: 68:3e:4d:93:c4:41:dc:25:6d:e3:51:f0:26:df:d8: d1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:33:8B:4B:13:08:44:9E:F6:27:BB:35:D6:CF:51:89:21:E0:AE:CD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/974e6dfc-61bf-4f05-b26a-c4ebcc875cfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f21::/36 Signature Algorithm: sha256WithRSAEncryption 9f:72:68:65:51:81:3a:6f:bb:3c:ba:fc:cd:a1:f1:c4:b4:fe: d8:d6:a0:3f:6e:18:14:bd:6a:8e:0e:a7:6e:a4:fc:c0:12:20: a3:7b:e2:d4:0e:21:36:eb:7a:37:4d:a4:db:04:d0:38:72:c9: 01:7d:98:a9:84:35:bf:f3:90:4e:1f:62:9a:83:cc:7a:4d:c8: 0d:98:95:0a:66:b6:da:5a:91:ec:4d:62:9a:42:69:9a:b8:49: 10:f3:4e:e6:79:c3:7b:37:85:ee:8b:da:7c:a9:f1:83:2a:c2: 98:77:1b:e2:b5:d8:ea:7a:87:22:40:9b:45:1c:c2:81:09:20: 4c:20:81:92:9b:d0:d4:71:bd:9a:9d:53:6e:36:90:93:08:6e: 54:af:9b:42:69:59:23:34:52:f1:aa:ae:2e:ac:11:b2:91:e6: ac:1f:8f:49:56:83:43:5b:8e:fa:bc:d2:ee:11:ba:4c:85:eb: 93:1f:52:30:e3:18:18:7c:c6:26:9f:12:d9:70:45:b9:e1:f5: 6d:66:74:d4:c5:f3:3b:63:4b:cb:70:66:85:10:3b:14:ed:36: cc:06:be:96:54:89:e3:db:22:7f:45:47:9e:ef:1e:63:fe:8c: 53:ab:70:22:6b:6d:cb:48:9f:8a:94:58:c7:9c:97:40:73:62: ed:56:29:9d -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUaz/YHDLTPwgrrNmXY6voGCguVS0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA2MDA0MTA1WhcNMjcwMTA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzOTQzOWE2YThmZGIyZGQwNWRjNTAzOTQzZmQ0ZGJmYWJh ZjY5NTY1YjdiOGM2ZTI4ZjY5YThhYzFmNjA5MDdlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAEr8/LpJ/AtiB3C8jcoJwSU1D6/dtbcSVd237Fxf5ZcR4 knRMvRC0ZDV29JiBpEBfwue35Xb3TUIxSmHuWfdgmj9l2RWVHbVwXcB1p5c6i/dW jxEBFmo3b60RQToCbKEa9/SlFpca0hh7gK1My9DWb8DSOQExv19KS0a33tU0BTwk dqAsF8pgHhc6jguhddYACA38Sncz9EoOkp/o6LwBMLEr9PeKd023uyQA6eRm9YEd XNkaCG5hDOzVEOfHE2+3ewfiJZC8kJ3cqngGjMiwXgAa6jSM3AlllNKUjnAImAeB 6a87NQdAGdO+lc7wAmg+TZPEQdwlbeNR8Cbf2NEtAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUajOLSxMIRJ72J7s11s9RiSHgrs0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk3NGU2ZGZjLTYxYmYtNGYwNS1iMjZhLWM0ZWJjYzg3NWNmYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8hADANBgkqhkiG9w0BAQsFAAOCAQEAn3JoZVGBOm+7PLr8zaHxxLT+ 2NagP24YFL1qjg6nbqT8wBIgo3vi1A4hNut6N02k2wTQOHLJAX2YqYQ1v/OQTh9i moPMek3IDZiVCma22lqR7E1imkJpmrhJEPNO5nnDezeF7ovafKnxgyrCmHcb4rXY 6nqHIkCbRRzCgQkgTCCBkpvQ1HG9mp1TbjaQkwhuVK+bQmlZIzRS8aquLqwRspHm rB+PSVaDQ1uO+rzS7hG6TIXrkx9SMOMYGHzGJp8S2XBFueH1bWZ01MXzO2NLy3Bm hRA7FO02zAa+llSJ49sif0VHnu8eY/6MU6twImtty0ifipRYx5yXQHNi7VYpnQ== -----END CERTIFICATE-----Generated at Fri Oct 30 14:22:08 2026 by rpki-client