$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a09db272-bac0-463b-8246-97b1294220fc.roa File: a09db272-bac0-463b-8246-97b1294220fc.roa (raw, json) Hash identifier: OliObnkyS3QfLAiJUAtEgbfcbYgUISo8oIm6UAlLPEY= Subject key identifier: 4F:43:3C:2B:9B:FD:1C:20:DB:CD:D7:AE:40:18:9B:89:0F:16:E2:6D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6F91E163CB17F4CE2526A405542D7ED70F605CB2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a09db272-bac0-463b-8246-97b1294220fc.roa Signing time: Thu 29 Oct 2026 00:50:41 +0000 ROA not before: Thu 29 Oct 2026 00:50:41 +0000 ROA not after: Wed 27 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fe8:a440::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:91:e1:63:cb:17:f4:ce:25:26:a4:05:54:2d:7e:d7:0f:60:5c:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 29 00:50:41 2026 GMT Not After : Jan 27 23:59:59 2027 GMT Subject: serialNumber=e6a1f813c03a1069c3e757114c6b7e03fb5ce5a2bf0c50d2f39a8fbe9b6f1939, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:96:a6:24:94:36:f7:7b:34:33:bb:57:2d:f0: d3:26:4c:5a:52:0d:ec:90:4e:be:6e:e3:a5:9b:84: 83:a5:4e:e6:36:23:62:2b:b9:76:de:8b:d3:1a:c7: dc:f7:0b:5f:b9:37:6d:67:a4:69:15:0b:1d:98:bc: 7d:92:04:fe:f1:ac:20:cc:a8:7d:83:89:b5:70:97: b6:44:95:0a:34:46:b4:19:91:a9:2b:06:70:30:20: 97:a6:d3:af:0c:9c:eb:66:31:4d:14:9a:d8:28:26: 03:a8:57:84:17:b2:c6:76:bf:d5:11:65:f4:96:d9: 5a:09:d1:88:95:c4:70:30:9b:e3:d9:ab:0c:c0:19: ff:c3:ae:65:48:34:a4:9c:8f:eb:c6:f1:47:e3:97: a8:fa:f5:f3:61:16:85:d5:a7:4c:c3:72:cb:36:aa: f6:48:c5:39:18:06:89:e0:47:72:33:91:7f:ad:67: 84:d2:67:83:a6:2c:e7:9e:dc:c1:a2:a9:32:b0:ca: 0f:8f:96:9d:7e:7c:e2:28:25:35:a1:39:38:9d:4d: 8a:c7:90:21:c9:2b:ef:d4:7b:2a:0b:a9:af:71:87: 34:85:15:95:82:0d:53:fc:83:e7:bc:a8:2a:85:10: e9:de:c1:56:54:6d:ac:d2:56:fb:bd:5e:c9:03:14: 13:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:43:3C:2B:9B:FD:1C:20:DB:CD:D7:AE:40:18:9B:89:0F:16:E2:6D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a09db272-bac0-463b-8246-97b1294220fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fe8:a440::/48 Signature Algorithm: sha256WithRSAEncryption 40:c6:96:bf:cf:95:f0:d8:7a:8b:db:af:3e:fd:38:8c:8c:7e: 8f:dd:9b:8a:03:f6:be:54:22:72:cb:07:71:2e:d7:ea:0a:4b: dc:73:e8:6c:85:00:44:37:2d:80:65:d1:b3:37:f7:49:3e:65: e5:4e:a4:c1:f3:dc:0b:30:49:f2:c8:30:f3:0a:c9:a2:97:8c: fe:ea:c3:fb:26:2f:66:12:2a:f1:97:d7:cb:d3:9a:59:c0:4d: eb:d2:53:ec:e9:5f:15:3f:96:09:d9:ee:ea:ac:0a:3f:59:75: 3b:8e:c0:9c:fc:dd:4b:23:7a:29:64:79:88:85:2a:82:90:ac: cf:75:49:ac:16:33:e1:82:d7:fd:d4:26:b6:e0:71:20:8d:60: 81:4c:60:32:4f:e0:99:be:02:10:57:39:dd:c2:7a:2f:60:d3: 21:2a:6d:18:dc:08:0a:c5:36:69:14:9d:1e:03:c0:b5:a0:36: 68:7e:51:17:2c:9c:95:9f:a3:df:ce:93:be:b9:eb:21:3a:8b: 94:29:b6:02:c7:59:9d:6a:3a:e8:e7:df:53:74:0d:3e:5d:f5: eb:3e:c2:b9:df:b7:2f:7a:f7:c3:73:eb:be:f1:a1:a2:de:9a: d2:81:51:e0:58:98:d5:12:3f:6b:b4:93:b0:6f:93:68:2b:b5: 9f:4b:b2:88 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUb5HhY8sX9M4lJqQFVC1+1w9gXLIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI5MDA1MDQxWhcNMjcwMTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNmExZjgxM2MwM2ExMDY5YzNlNzU3MTE0YzZiN2UwM2Zi NWNlNWEyYmYwYzUwZDJmMzlhOGZiZTliNmYxOTM5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDslqYklDb3ezQzu1ct8NMmTFpSDeyQTr5u46WbhIOlTuY2 I2IruXbei9Max9z3C1+5N21npGkVCx2YvH2SBP7xrCDMqH2DibVwl7ZElQo0RrQZ kakrBnAwIJem068MnOtmMU0UmtgoJgOoV4QXssZ2v9URZfSW2VoJ0YiVxHAwm+PZ qwzAGf/DrmVINKScj+vG8Ufjl6j69fNhFoXVp0zDcss2qvZIxTkYBongR3IzkX+t Z4TSZ4OmLOee3MGiqTKwyg+Plp1+fOIoJTWhOTidTYrHkCHJK+/UeyoLqa9xhzSF FZWCDVP8g+e8qCqFEOnewVZUbazSVvu9XskDFBPpAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUT0M8K5v9HCDbzdeuQBibiQ8W4m0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EwOWRiMjcyLWJhYzAtNDYzYi04MjQ2LTk3YjEyOTQyMjBmYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/opEAwDQYJKoZIhvcNAQELBQADggEBAEDGlr/PlfDYeovbrz79OIyM fo/dm4oD9r5UInLLB3Eu1+oKS9xz6GyFAEQ3LYBl0bM390k+ZeVOpMHz3AswSfLI MPMKyaKXjP7qw/smL2YSKvGX18vTmlnATevSU+zpXxU/lgnZ7uqsCj9ZdTuOwJz8 3UsjeilkeYiFKoKQrM91SawWM+GC1/3UJrbgcSCNYIFMYDJP4Jm+AhBXOd3Cei9g 0yEqbRjcCArFNmkUnR4DwLWgNmh+URcsnJWfo9/Ok7656yE6i5QptgLHWZ1qOujn 31N0DT5d9es+wrnfty9698Nz677xoaLemtKBUeBYmNUSP2u0k7Bvk2grtZ9Lsog= -----END CERTIFICATE-----Generated at Tue Nov 3 01:27:55 2026 by rpki-client