$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ba2ce80-eb0e-4b14-a805-90235a26899d.roa File: 9ba2ce80-eb0e-4b14-a805-90235a26899d.roa (raw, json) Hash identifier: UwcSyMjS1pwixMapMRP2AorEw+yMlIYNCX1LhG/cWiU= Subject key identifier: 13:3B:6C:C4:77:94:57:25:A7:3B:29:34:8B:07:3B:ED:39:92:31:A3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7B7B3962BBC34B84D911815C9B5A09EC869A0295 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ba2ce80-eb0e-4b14-a805-90235a26899d.roa Signing time: Thu 22 Oct 2026 00:40:06 +0000 ROA not before: Thu 22 Oct 2026 00:40:06 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:7b:39:62:bb:c3:4b:84:d9:11:81:5c:9b:5a:09:ec:86:9a:02:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 22 00:40:06 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=019639539762bc3b64b8f933ed3f74042941720efe60d310545c8184090589e7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:94:63:d7:25:2d:cf:49:f6:9c:5f:2f:fc:9e: 1d:a2:60:3a:be:fe:1d:76:af:0c:f8:f2:32:1d:99: c7:6a:ca:43:55:04:99:d7:e3:20:33:24:16:e6:2f: 27:31:ee:83:ba:7b:35:69:71:12:be:6f:63:a1:ce: 5e:4e:90:14:56:e2:9f:8e:46:af:88:c5:bd:d6:c1: 80:45:2d:90:55:bc:fb:3b:f8:e8:53:b8:cd:02:1b: 00:31:8b:26:7a:87:9d:17:6c:b2:56:82:16:14:83: f2:a9:15:07:df:e4:e8:40:c2:a4:b9:7a:89:38:ce: c8:92:fe:8f:5f:a3:09:e4:84:5d:6e:df:52:58:c1: 7d:c1:12:23:da:d5:9f:d2:47:30:e5:c1:1a:35:95: fa:ce:2c:ff:6d:bd:5d:48:9b:8c:fd:5d:75:73:ad: df:f0:9a:a7:17:0b:81:26:af:27:76:a0:94:48:cc: 2c:6b:65:3d:0e:81:0b:64:67:76:83:10:fc:95:cc: f6:69:37:f6:78:3f:bc:81:4d:ee:68:48:74:92:50: 2f:d1:19:7d:d0:df:8e:50:6f:97:70:8b:a3:d0:26: 5b:b0:c2:d3:2c:18:a4:21:5e:05:88:db:0a:de:a5: a0:f3:e5:71:ef:ef:7a:66:78:fc:58:c7:c6:9c:c6: fb:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:3B:6C:C4:77:94:57:25:A7:3B:29:34:8B:07:3B:ED:39:92:31:A3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ba2ce80-eb0e-4b14-a805-90235a26899d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:2000::/40 Signature Algorithm: sha256WithRSAEncryption 71:8a:11:e7:47:1a:14:be:47:8d:a8:10:69:7e:83:ea:91:ac: 5e:41:d8:83:ec:4e:98:e1:55:93:ba:2a:9f:87:4e:7b:64:9d: 26:84:2e:7a:19:59:23:ce:d3:da:98:c5:05:42:be:29:2e:87: 05:74:33:91:32:eb:76:cd:2a:ea:a4:e4:41:b0:01:6e:b2:fe: e1:7d:72:f1:0e:c6:15:d0:35:d8:52:63:5d:8a:9c:2d:22:ee: 4f:75:6f:34:79:9a:5a:c1:b6:1a:2e:c8:a1:2d:86:78:aa:8b: dd:ad:f1:72:53:c8:42:50:81:9b:67:1a:19:09:74:92:dc:d1: af:0f:a8:78:2a:b2:87:4f:9e:3c:96:79:91:fd:82:95:d2:40: 9f:20:5d:81:4d:01:ce:8b:21:8f:7e:95:38:4b:eb:4c:4e:70: 79:20:19:d3:16:95:d8:85:5b:21:1a:1b:2a:a4:57:47:7c:e5: 7f:31:90:e5:6f:66:90:ff:e5:13:fc:d7:3b:55:6b:82:0d:1a: af:a7:05:1b:c3:6b:85:2b:dc:1d:aa:4b:c0:d5:3c:c0:8e:64: fa:50:61:30:06:f0:f7:0d:e4:7c:f5:a1:1f:6e:ce:3f:a7:9a: 7a:2d:17:89:96:c1:91:08:d8:25:7f:69:47:c1:ca:9e:4c:0d: f1:53:f8:64 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUe3s5YrvDS4TZEYFcm1oJ7IaaApUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIyMDA0MDA2WhcNMjcwMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMTk2Mzk1Mzk3NjJiYzNiNjRiOGY5MzNlZDNmNzQwNDI5 NDE3MjBlZmU2MGQzMTA1NDVjODE4NDA5MDU4OWU3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPlGPXJS3PSfacXy/8nh2iYDq+/h12rwz48jIdmcdqykNV BJnX4yAzJBbmLycx7oO6ezVpcRK+b2Ohzl5OkBRW4p+ORq+Ixb3WwYBFLZBVvPs7 +OhTuM0CGwAxiyZ6h50XbLJWghYUg/KpFQff5OhAwqS5eok4zsiS/o9fownkhF1u 31JYwX3BEiPa1Z/SRzDlwRo1lfrOLP9tvV1Im4z9XXVzrd/wmqcXC4Emryd2oJRI zCxrZT0OgQtkZ3aDEPyVzPZpN/Z4P7yBTe5oSHSSUC/RGX3Q345Qb5dwi6PQJluw wtMsGKQhXgWI2wrepaDz5XHv73pmePxYx8acxvsNAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUEztsxHeUVyWnOyk0iwc77TmSMaMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzliYTJjZTgwLWViMGUtNGIxNC1hODA1LTkwMjM1YTI2ODk5ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB8AIDANBgkqhkiG9w0BAQsFAAOCAQEAcYoR50caFL5HjagQaX6D6pGs XkHYg+xOmOFVk7oqn4dOe2SdJoQuehlZI87T2pjFBUK+KS6HBXQzkTLrds0q6qTk QbABbrL+4X1y8Q7GFdA12FJjXYqcLSLuT3VvNHmaWsG2Gi7IoS2GeKqL3a3xclPI QlCBm2caGQl0ktzRrw+oeCqyh0+ePJZ5kf2CldJAnyBdgU0Bzoshj36VOEvrTE5w eSAZ0xaV2IVbIRobKqRXR3zlfzGQ5W9mkP/lE/zXO1Vrgg0ar6cFG8NrhSvcHapL wNU8wI5k+lBhMAbw9w3kfPWhH27OP6eaei0XiZbBkQjYJX9pR8HKnkwN8VP4ZA== -----END CERTIFICATE-----Generated at Tue Nov 3 16:17:17 2026 by rpki-client