$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b376600-e7a7-4f72-970d-db5a821fb019.roa File: 9b376600-e7a7-4f72-970d-db5a821fb019.roa (raw, json) Hash identifier: nd0TFL9Wc3nIdjcHhsKczE8ZH4kQVJApm+NxeiPby0Y= Subject key identifier: 9D:69:9A:15:3D:A8:57:6B:82:B0:5E:63:D8:ED:B6:0D:C2:4C:E0:C7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5ECE93A05A60858536D68A7D933AF9A73D61AFEB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b376600-e7a7-4f72-970d-db5a821fb019.roa Signing time: Thu 29 Oct 2026 00:51:13 +0000 ROA not before: Thu 29 Oct 2026 00:51:13 +0000 ROA not after: Wed 27 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f69:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:ce:93:a0:5a:60:85:85:36:d6:8a:7d:93:3a:f9:a7:3d:61:af:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 29 00:51:13 2026 GMT Not After : Jan 27 23:59:59 2027 GMT Subject: serialNumber=19f241ca2e5c723179aa948bcbdec80e2c8b22b313f2bd58a037f47d166484af, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e9:46:4c:1d:37:40:1f:1a:f0:b1:56:50:80: 79:fb:26:3c:02:35:25:e7:7b:39:1e:dd:0b:bf:0a: df:47:20:cb:3e:88:74:50:ff:30:9d:6a:4b:e5:c3: 2d:a2:b6:7d:a7:79:67:f2:8d:fb:bd:80:b4:3c:49: 7b:16:a3:8a:fa:2f:fc:ee:cf:69:4a:96:1c:0f:28: 82:fb:ae:1e:cf:af:fc:6f:cb:2a:97:a8:d1:79:ba: bd:cc:1e:8a:fe:5e:dc:fe:c7:17:6b:41:bc:e0:0b: 5a:27:6d:2d:35:64:58:ac:c2:ec:45:fb:73:6b:6c: 75:0e:01:4f:e3:b7:e6:4f:35:e8:2c:36:0e:7f:4a: 0f:dc:6c:2b:2d:ac:b6:4f:e6:bd:e7:62:66:bc:08: 01:e1:8a:c0:91:84:c2:b5:95:9e:c2:7b:30:3c:2e: 53:2e:98:d4:a6:e8:73:15:fb:3c:f0:1a:d5:bf:d2: 62:ac:29:33:4e:58:4b:04:57:65:8a:d9:2e:8d:34: ab:40:83:48:44:49:0d:d3:50:e8:3e:e8:4b:ff:12: d7:9e:fc:a6:d2:44:d1:d9:5e:55:7c:40:ff:79:c1: 10:42:1a:47:4d:9f:18:33:b4:19:31:87:a6:f2:ea: 34:cc:10:cb:8e:5a:78:80:e9:ab:33:01:9c:cc:4c: 02:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:69:9A:15:3D:A8:57:6B:82:B0:5E:63:D8:ED:B6:0D:C2:4C:E0:C7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b376600-e7a7-4f72-970d-db5a821fb019.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f69:800::/40 Signature Algorithm: sha256WithRSAEncryption 34:d0:6d:ae:05:36:2b:4b:6c:8f:f6:3a:18:32:88:59:78:1c: f5:18:dd:8f:79:06:42:0a:4a:f6:4c:a3:0b:63:68:48:eb:e8: 10:fa:11:a1:71:2c:4e:fd:29:52:53:59:0b:dc:f9:a9:2c:f4: 75:17:5b:0f:c4:2d:43:08:05:7f:b4:89:94:2c:2d:a7:05:f9: 3d:b6:96:eb:a4:d8:5e:63:ff:a1:5e:db:e4:1c:d0:9a:9b:c3: e3:14:8a:fd:c6:81:e6:b7:e9:e9:79:ad:cf:95:23:e7:80:92: a3:e6:46:2f:e4:8e:8d:61:15:5d:73:3b:e2:1e:e7:52:d5:1c: b1:b2:ad:e3:e9:d1:12:63:a9:de:00:fb:b8:4f:75:b5:66:dd: dd:03:7b:4f:a3:13:f2:57:75:53:72:3e:77:5f:b7:d7:eb:4e: 31:fa:7b:e5:03:b3:67:40:58:9d:de:a5:93:5c:a0:53:87:4a: 06:bb:12:5a:b3:55:b6:8b:d0:e3:85:df:94:9a:03:00:03:1b: 27:a4:69:19:2a:c9:1d:17:4c:e7:95:64:78:2a:55:5e:ac:2b: 02:31:e1:57:47:11:5c:71:4c:a2:c5:55:68:7d:9e:b5:54:d3: f2:71:b3:97:84:01:6d:bd:88:93:1b:e4:d3:81:d0:b2:17:e1: 7a:6d:06:86 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUXs6ToFpghYU21op9kzr5pz1hr+swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI5MDA1MTEzWhcNMjcwMTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxOWYyNDFjYTJlNWM3MjMxNzlhYTk0OGJjYmRlYzgwZTJj OGIyMmIzMTNmMmJkNThhMDM3ZjQ3ZDE2NjQ4NGFmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDB6UZMHTdAHxrwsVZQgHn7JjwCNSXnezke3Qu/Ct9HIMs+ iHRQ/zCdakvlwy2itn2neWfyjfu9gLQ8SXsWo4r6L/zuz2lKlhwPKIL7rh7Pr/xv yyqXqNF5ur3MHor+Xtz+xxdrQbzgC1onbS01ZFiswuxF+3NrbHUOAU/jt+ZPNegs Ng5/Sg/cbCstrLZP5r3nYma8CAHhisCRhMK1lZ7CezA8LlMumNSm6HMV+zzwGtW/ 0mKsKTNOWEsEV2WK2S6NNKtAg0hESQ3TUOg+6Ev/Etee/KbSRNHZXlV8QP95wRBC GkdNnxgztBkxh6by6jTMEMuOWniA6aszAZzMTAK1AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUnWmaFT2oV2uCsF5j2O22DcJM4McwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzliMzc2NjAwLWU3YTctNGY3Mi05NzBkLWRiNWE4MjFmYjAxOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9pCDANBgkqhkiG9w0BAQsFAAOCAQEANNBtrgU2K0tsj/Y6GDKIWXgc 9Rjdj3kGQgpK9kyjC2NoSOvoEPoRoXEsTv0pUlNZC9z5qSz0dRdbD8QtQwgFf7SJ lCwtpwX5PbaW66TYXmP/oV7b5BzQmpvD4xSK/caB5rfp6Xmtz5Uj54CSo+ZGL+SO jWEVXXM74h7nUtUcsbKt4+nREmOp3gD7uE91tWbd3QN7T6MT8ld1U3I+d1+31+tO Mfp75QOzZ0BYnd6lk1ygU4dKBrsSWrNVtovQ44XflJoDAAMbJ6RpGSrJHRdM55Vk eCpVXqwrAjHhV0cRXHFMosVVaH2etVTT8nGzl4QBbb2Ikxvk04HQshfhem0Ghg== -----END CERTIFICATE-----Generated at Mon Nov 2 21:07:53 2026 by rpki-client