$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a152fc40-a444-4cdd-97b2-9a2e70a778e9.roa File: a152fc40-a444-4cdd-97b2-9a2e70a778e9.roa (raw, json) Hash identifier: WF3vBy/6yhX3MwYrkIBr/gAFpo+0A/HuSOXEc0id4Gk= Subject key identifier: 44:34:9E:23:2D:3C:2F:99:6D:C6:2F:57:5E:CE:9C:01:EF:FE:16:AF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 471E29E33EC3E5201F668A6B0A90F03C2F8FF6BB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a152fc40-a444-4cdd-97b2-9a2e70a778e9.roa Signing time: Fri 23 Oct 2026 00:30:48 +0000 ROA not before: Fri 23 Oct 2026 00:30:48 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f2c:c800::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:1e:29:e3:3e:c3:e5:20:1f:66:8a:6b:0a:90:f0:3c:2f:8f:f6:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 23 00:30:48 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=49fa7a075a916b12690b64a2f98650f2050452b3ead9d921356feff2fc2f7ac0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:32:bc:cd:e4:6d:e9:ba:eb:88:c3:44:00:72: 8d:b7:61:88:fd:57:c6:1c:d4:f7:1c:f8:47:39:38: 22:f0:de:60:5e:c6:d9:b8:03:8f:45:a0:61:eb:fc: c9:e4:91:c3:a3:2c:0a:bc:7d:d7:76:22:3e:ed:90: d4:c8:d2:0c:43:35:36:c9:a2:ec:4e:ba:11:9a:28: 99:18:ca:00:af:99:d0:99:99:44:3f:b3:68:90:ea: b7:df:2b:65:d8:0b:f5:31:95:85:c5:93:2f:65:66: 62:e9:10:b9:a6:06:4b:33:31:ae:07:ab:7c:db:89: 0e:28:a0:32:b5:7d:fe:6d:2f:1f:5d:4f:95:b4:5e: 5c:bc:87:38:18:69:8b:a6:f7:9d:06:1a:d1:91:08: 5f:54:c2:ad:5b:7e:68:31:d0:60:56:c4:f5:32:13: 7e:d9:d1:56:d2:e2:c8:1e:b0:32:9d:e7:21:7b:ce: f3:08:39:c9:74:3e:0e:7e:68:1b:95:a6:cb:48:d0: e5:62:d6:20:71:4c:da:f0:34:3b:25:aa:fc:91:cb: 20:86:20:4e:1e:cd:e8:2d:84:b6:e5:78:51:1e:72: 58:58:5f:87:67:91:8c:f6:c4:3a:26:42:59:d2:38: 1e:f9:b8:e3:3e:05:7f:7c:17:e0:af:cc:80:b7:19: 9f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:34:9E:23:2D:3C:2F:99:6D:C6:2F:57:5E:CE:9C:01:EF:FE:16:AF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a152fc40-a444-4cdd-97b2-9a2e70a778e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f2c:c800::/37 Signature Algorithm: sha256WithRSAEncryption 92:4b:54:34:cc:b8:96:d6:9c:6a:a6:c3:b3:c9:5a:8f:87:54: 21:5c:9c:52:53:d0:e7:37:5e:04:69:7a:19:71:97:45:1a:5e: 3e:6e:d7:44:be:c6:41:e2:c0:40:06:1e:a0:c7:0a:9a:40:0c: 72:af:57:61:ce:86:48:f5:9b:27:d0:83:df:2f:99:cc:6c:02: 9a:34:fa:d2:69:d3:93:78:cb:06:a7:eb:a5:5c:4b:85:96:4a: 1c:f3:c5:2c:75:84:a2:2e:9a:17:c4:ad:71:9d:99:41:0c:2c: d0:08:82:9d:d7:0e:60:ae:9f:d7:47:29:03:42:bc:2d:69:41: 11:4c:e5:7a:cc:e5:e8:7c:4b:51:21:94:6c:00:8d:ed:17:54: f5:ec:2f:24:5a:7a:84:07:bc:37:3e:fb:a2:c6:f0:f2:eb:4b: fb:98:6a:19:b7:45:41:a1:51:03:81:dd:50:90:db:2c:e7:92: 67:b0:9a:3c:1c:a5:dd:7e:1a:04:57:b7:96:fe:74:13:9e:70: e8:9c:25:b6:16:ad:6d:02:83:f2:8d:65:66:cc:72:6a:8b:6b: e1:95:53:1a:ad:83:31:15:d3:32:b2:ae:cb:bd:a8:83:5f:67: 47:e3:50:77:36:a9:11:c9:86:06:08:64:0c:fe:bd:cb:07:e9: f5:29:40:c3 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIURx4p4z7D5SAfZoprCpDwPC+P9rswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDAzMDQ4WhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A0OWZhN2EwNzVhOTE2YjEyNjkwYjY0YTJmOTg2NTBmMjA1 MDQ1MmIzZWFkOWQ5MjEzNTZmZWZmMmZjMmY3YWMwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClMrzN5G3puuuIw0QAco23YYj9V8Yc1Pcc+Ec5OCLw3mBe xtm4A49FoGHr/MnkkcOjLAq8fdd2Ij7tkNTI0gxDNTbJouxOuhGaKJkYygCvmdCZ mUQ/s2iQ6rffK2XYC/UxlYXFky9lZmLpELmmBkszMa4Hq3zbiQ4ooDK1ff5tLx9d T5W0Xly8hzgYaYum950GGtGRCF9Uwq1bfmgx0GBWxPUyE37Z0VbS4sgesDKd5yF7 zvMIOcl0Pg5+aBuVpstI0OVi1iBxTNrwNDslqvyRyyCGIE4ezegthLbleFEeclhY X4dnkYz2xDomQlnSOB75uOM+BX98F+CvzIC3GZ+fAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQURDSeIy08L5ltxi9XXs6cAe/+Fq8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ExNTJmYzQwLWE0NDQtNGNkZC05N2IyLTlhMmU3MGE3NzhlOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8syDANBgkqhkiG9w0BAQsFAAOCAQEAkktUNMy4ltacaqbDs8laj4dU IVycUlPQ5zdeBGl6GXGXRRpePm7XRL7GQeLAQAYeoMcKmkAMcq9XYc6GSPWbJ9CD 3y+ZzGwCmjT60mnTk3jLBqfrpVxLhZZKHPPFLHWEoi6aF8StcZ2ZQQws0AiCndcO YK6f10cpA0K8LWlBEUzleszl6HxLUSGUbACN7RdU9ewvJFp6hAe8Nz77osbw8utL +5hqGbdFQaFRA4HdUJDbLOeSZ7CaPByl3X4aBFe3lv50E55w6JwlthatbQKD8o1l Zsxyaotr4ZVTGq2DMRXTMrKuy72og19nR+NQdzapEcmGBghkDP69ywfp9SlAww== -----END CERTIFICATE-----Generated at Sat Oct 31 05:39:24 2026 by rpki-client