$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0a18a3e-46bc-42c8-8cd7-4ade48129a2d.roa File: a0a18a3e-46bc-42c8-8cd7-4ade48129a2d.roa (raw, json) Hash identifier: tC3KtzrS9cmmd83EWZ45DETxUD/akXZQRinf9NByD1Q= Subject key identifier: 55:CB:6C:1E:9B:D0:84:23:28:07:9C:A1:71:85:75:11:08:74:6A:AE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 33BC8AF5B9065539BD61070ACF9F561BCF497B2A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0a18a3e-46bc-42c8-8cd7-4ade48129a2d.roa Signing time: Fri 23 Oct 2026 00:30:17 +0000 ROA not before: Fri 23 Oct 2026 00:30:17 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f38:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:bc:8a:f5:b9:06:55:39:bd:61:07:0a:cf:9f:56:1b:cf:49:7b:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 23 00:30:17 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=28c4ce81920e81e225d084fa42abe282b7d599b2becda703e03c9ce0e82943d0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:76:8a:58:5d:02:c9:1b:f3:b0:7c:a6:c1:0f: bc:0b:9d:d1:dc:2e:b1:98:02:19:d9:4f:9d:a0:85: a6:45:ae:0f:0d:22:7b:68:5c:56:db:fe:71:cc:0f: 3f:15:01:da:20:87:1a:57:39:f0:1c:c7:59:4c:5e: f6:14:4b:72:d5:33:52:0c:f7:b8:69:6b:f0:09:98: 82:c8:c7:6e:5b:10:0e:5b:e3:f2:d0:a8:dc:e9:4e: 12:a6:c5:b1:e9:84:43:17:a9:4b:1d:c6:39:bb:c0: 04:71:3e:1f:85:75:ad:22:10:5a:95:fc:37:f5:f2: 75:62:46:e0:ad:11:3f:a2:1c:07:71:d0:fe:37:4e: 36:60:86:77:aa:a2:ea:82:dd:2c:af:bb:87:94:f5: 56:d3:49:31:b8:ed:44:ec:ff:e1:ab:ba:77:1d:cc: 53:fe:b2:f3:f8:43:2b:75:0c:8c:cb:ac:c3:b8:ce: dc:4e:7d:c2:08:d8:09:f8:86:e3:65:18:7c:d6:31: ac:18:1c:9a:be:c8:a1:04:a4:75:8e:de:1c:b9:86: e5:82:d1:c1:f6:ea:dc:5b:97:d6:af:75:bc:e8:ab: 8d:50:ea:4d:df:14:34:43:dc:03:c9:86:1c:6d:12: 17:ce:c2:57:92:21:8e:9f:25:02:ef:b2:6f:69:be: 5b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:CB:6C:1E:9B:D0:84:23:28:07:9C:A1:71:85:75:11:08:74:6A:AE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0a18a3e-46bc-42c8-8cd7-4ade48129a2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f38:e000::/40 Signature Algorithm: sha256WithRSAEncryption 91:aa:94:b7:57:69:ad:17:e7:d1:97:63:35:55:ea:55:d0:30: c5:fb:79:aa:f2:60:d9:f3:d8:7b:31:93:5f:35:cc:b6:65:1f: 91:77:c7:05:50:e6:63:a4:5d:a0:d8:8e:19:fd:0c:20:82:59: b3:8a:93:7b:9c:50:09:67:ed:9d:20:10:d9:47:70:cc:3d:c8: 0d:b5:58:25:32:0c:83:1f:55:ab:cd:78:4b:f6:76:f0:8d:6f: 67:25:83:2c:6d:c1:d0:e2:08:aa:fa:aa:98:91:f8:30:b8:8a: 02:ee:ec:79:73:b4:6b:99:d1:35:36:da:4e:80:68:6e:1c:17: 36:8a:c9:95:c7:65:74:b4:10:73:a7:d8:be:c6:8d:41:03:37: a0:0c:91:ae:14:03:ef:ca:85:b1:44:e3:36:62:fc:0d:f2:e5: b9:20:27:f5:f9:01:a6:e7:70:30:d4:bb:be:4d:5d:0d:2d:63: 86:89:d7:7c:3a:3e:f7:53:de:b4:cd:b3:59:42:3a:6e:9a:38: d5:9e:29:06:57:82:d4:53:4c:ba:84:4f:4b:54:35:60:2e:74: 13:ba:b5:2f:1a:3f:02:aa:a6:a8:57:2a:0a:99:6b:c8:82:47: 45:f4:e5:6f:13:10:60:9c:8f:cb:57:4c:36:7d:f1:59:88:32: d9:27:83:6d -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUM7yK9bkGVTm9YQcKz59WG89JeyowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDAzMDE3WhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyOGM0Y2U4MTkyMGU4MWUyMjVkMDg0ZmE0MmFiZTI4MmI3 ZDU5OWIyYmVjZGE3MDNlMDNjOWNlMGU4Mjk0M2QwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvdopYXQLJG/OwfKbBD7wLndHcLrGYAhnZT52ghaZFrg8N IntoXFbb/nHMDz8VAdoghxpXOfAcx1lMXvYUS3LVM1IM97hpa/AJmILIx25bEA5b 4/LQqNzpThKmxbHphEMXqUsdxjm7wARxPh+Fda0iEFqV/Df18nViRuCtET+iHAdx 0P43TjZghneqouqC3Syvu4eU9VbTSTG47UTs/+GruncdzFP+svP4Qyt1DIzLrMO4 ztxOfcII2An4huNlGHzWMawYHJq+yKEEpHWO3hy5huWC0cH26txbl9avdbzoq41Q 6k3fFDRD3APJhhxtEhfOwleSIY6fJQLvsm9pvlt7AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUVctsHpvQhCMoB5yhcYV1EQh0aq4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EwYTE4YTNlLTQ2YmMtNDJjOC04Y2Q3LTRhZGU0ODEyOWEyZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB844DANBgkqhkiG9w0BAQsFAAOCAQEAkaqUt1dprRfn0ZdjNVXqVdAw xft5qvJg2fPYezGTXzXMtmUfkXfHBVDmY6RdoNiOGf0MIIJZs4qTe5xQCWftnSAQ 2UdwzD3IDbVYJTIMgx9Vq814S/Z28I1vZyWDLG3B0OIIqvqqmJH4MLiKAu7seXO0 a5nRNTbaToBobhwXNorJlcdldLQQc6fYvsaNQQM3oAyRrhQD78qFsUTjNmL8DfLl uSAn9fkBpudwMNS7vk1dDS1jhonXfDo+91PetM2zWUI6bpo41Z4pBleC1FNMuoRP S1Q1YC50E7q1Lxo/AqqmqFcqCplryIJHRfTlbxMQYJyPy1dMNn3xWYgy2SeDbQ== -----END CERTIFICATE-----Generated at Mon Nov 2 21:08:41 2026 by rpki-client