$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98210af0-508f-49b8-a5e8-71d021460617.roa File: 98210af0-508f-49b8-a5e8-71d021460617.roa (raw, json) Hash identifier: TNOBlgXyovE9/yZkx7IL/xY/pYm8DnZaS1OlgSTuqMM= Subject key identifier: E1:F1:E2:C8:9E:E0:4F:48:CD:5B:A2:DE:A8:23:3E:46:81:C7:C4:DB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 24DE0DD068831A63B762D0186BB01FC117549C7D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98210af0-508f-49b8-a5e8-71d021460617.roa Signing time: Fri 23 Oct 2026 02:10:07 +0000 ROA not before: Fri 23 Oct 2026 02:10:07 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f18:6000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:de:0d:d0:68:83:1a:63:b7:62:d0:18:6b:b0:1f:c1:17:54:9c:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 23 02:10:07 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=bf7ff26af76cf9ae7078bfdaa5793ded9caecf36eda199b25a4bebbe24b8d954, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a5:26:0e:52:2b:18:8c:4d:d2:7a:5b:f4:84: 29:54:e9:eb:dc:fd:f7:69:42:f4:8a:f5:70:30:60: 57:9e:0c:98:22:f6:90:45:e2:ee:43:7a:7e:85:1c: be:2c:89:c4:6e:28:17:1d:63:8d:bf:d4:67:ad:85: c6:6c:26:80:df:2c:bd:a9:73:6b:b5:b0:9d:4e:5b: a0:16:a1:1b:2b:61:82:ba:2e:fc:84:1e:ca:a4:67: a3:5a:f0:f9:4c:c6:6d:2f:be:bc:58:fb:62:5f:37: 4b:ed:8c:39:03:ab:34:af:34:79:d2:9a:ca:70:19: ae:32:f3:24:ae:6c:51:64:6e:e9:86:61:ab:2a:38: 7e:da:3b:80:19:61:5b:6d:d9:15:20:43:4f:c1:90: 8a:bc:72:95:fb:eb:d6:9c:3a:1e:dc:74:3e:50:4c: 72:13:ce:bc:fa:54:c1:68:01:33:52:ac:69:cd:d8: 2c:4c:b1:25:51:d5:15:23:1d:a3:3a:3d:56:19:c2: 39:c4:bc:ed:84:72:3e:2e:b7:1f:8e:86:e3:a8:d3: c8:86:ba:47:03:a0:78:0e:86:4e:c4:7e:63:cf:f0: e4:24:c8:13:e3:ee:c5:52:d7:f2:6a:e8:27:ba:59: 2c:92:ec:69:fb:17:4f:b8:4e:c6:55:2b:8a:39:e5: 16:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F1:E2:C8:9E:E0:4F:48:CD:5B:A2:DE:A8:23:3E:46:81:C7:C4:DB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98210af0-508f-49b8-a5e8-71d021460617.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f18:6000::/35 Signature Algorithm: sha256WithRSAEncryption ae:87:be:67:64:78:1e:10:55:0c:c6:80:b5:c5:68:5d:e0:f1: ca:7c:ad:d2:a5:97:ac:fc:84:ad:09:99:a9:fe:e5:4f:97:2d: 0a:99:ad:4d:d2:6c:6c:75:29:ca:c3:13:03:f9:da:65:83:1f: 61:72:73:5f:01:91:47:a5:2e:4f:a9:66:f2:6e:0d:02:d8:67: 54:e5:1e:f3:23:ec:6f:4b:da:9c:02:25:e3:9d:54:03:31:0e: f3:92:cf:0a:2a:7a:02:af:bf:de:27:03:41:2e:be:6b:94:1c: f5:71:d2:93:68:2c:88:d6:54:61:5a:db:bf:76:22:43:4d:dd: 4c:2d:da:9e:09:b9:ea:5f:58:61:56:6e:62:8a:e9:63:d2:d9: a8:fe:66:29:4c:dd:b8:a5:ce:00:b8:4c:5f:29:e8:6d:26:d7: 18:63:27:31:f8:ee:7b:d3:47:ce:97:fc:6b:45:af:b2:13:c6: 7c:2d:48:60:f2:44:90:28:65:86:f9:26:ea:99:d1:19:07:1c: ef:97:fb:b7:5a:73:a5:31:e1:da:7a:22:b0:a4:ba:14:52:b1: af:48:2b:11:b6:53:28:d0:c3:e1:23:80:69:14:c9:ae:b9:a7: 3c:4b:7b:b2:55:1d:85:28:4f:c1:ce:00:03:6d:b6:5b:a7:e0: 52:6c:f4:b1 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUJN4N0GiDGmO3YtAYa7AfwRdUnH0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDIxMDA3WhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiZjdmZjI2YWY3NmNmOWFlNzA3OGJmZGFhNTc5M2RlZDlj YWVjZjM2ZWRhMTk5YjI1YTRiZWJiZTI0YjhkOTU0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCHpSYOUisYjE3Selv0hClU6evc/fdpQvSK9XAwYFeeDJgi 9pBF4u5Den6FHL4sicRuKBcdY42/1GethcZsJoDfLL2pc2u1sJ1OW6AWoRsrYYK6 LvyEHsqkZ6Na8PlMxm0vvrxY+2JfN0vtjDkDqzSvNHnSmspwGa4y8ySubFFkbumG YasqOH7aO4AZYVtt2RUgQ0/BkIq8cpX769acOh7cdD5QTHITzrz6VMFoATNSrGnN 2CxMsSVR1RUjHaM6PVYZwjnEvO2Ecj4utx+OhuOo08iGukcDoHgOhk7EfmPP8OQk yBPj7sVS1/Jq6Ce6WSyS7Gn7F0+4TsZVK4o55RY/AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU4fHiyJ7gT0jNW6LeqCM+RoHHxNswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk4MjEwYWYwLTUwOGYtNDliOC1hNWU4LTcxZDAyMTQ2MDYxNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgUmAB8YYDANBgkqhkiG9w0BAQsFAAOCAQEAroe+Z2R4HhBVDMaAtcVoXeDx ynyt0qWXrPyErQmZqf7lT5ctCpmtTdJsbHUpysMTA/naZYMfYXJzXwGRR6UuT6lm 8m4NAthnVOUe8yPsb0vanAIl451UAzEO85LPCip6Aq+/3icDQS6+a5Qc9XHSk2gs iNZUYVrbv3YiQ03dTC3angm56l9YYVZuYorpY9LZqP5mKUzduKXOALhMXynobSbX GGMnMfjue9NHzpf8a0WvshPGfC1IYPJEkChlhvkm6pnRGQcc75f7t1pzpTHh2noi sKS6FFKxr0grEbZTKNDD4SOAaRTJrrmnPEt7slUdhShPwc4AA222W6fgUmz0sQ== -----END CERTIFICATE-----Generated at Mon Nov 2 18:51:27 2026 by rpki-client