$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a29322c3-3b0b-4d57-b8e7-b17bddb4b1d6.roa File: a29322c3-3b0b-4d57-b8e7-b17bddb4b1d6.roa (raw, json) Hash identifier: YVTYciPwYcESAT91cBQgKnBq5GYhL/lohVCNiyUHSpg= Subject key identifier: 9B:E0:BF:F6:61:52:F4:62:2D:57:4A:C0:C5:D5:DC:5D:74:0C:26:09 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7998339BC848400477D2F32A8165ECB88438B1C7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a29322c3-3b0b-4d57-b8e7-b17bddb4b1d6.roa Signing time: Fri 09 Oct 2026 01:10:32 +0000 ROA not before: Fri 09 Oct 2026 01:10:32 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fea:8050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:98:33:9b:c8:48:40:04:77:d2:f3:2a:81:65:ec:b8:84:38:b1:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 9 01:10:32 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=74713aecd936e33fac75d23dbf6a37b607f91160dba9ff63ceca4747e1ec71a3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:af:09:e0:d3:00:f7:8d:70:cf:e9:75:02:2c: 36:aa:98:30:f1:4f:01:c5:77:0e:b1:64:34:58:0e: a8:60:51:db:03:39:df:5f:5a:21:13:d7:7c:c9:1c: 0f:0e:bb:ce:60:2d:85:42:93:58:54:5a:7c:a9:42: 42:1a:00:82:46:99:70:28:d2:ae:dc:2f:ab:04:b1: 9f:9d:93:47:09:9a:0e:a3:45:d7:ba:c4:19:8d:f6: ff:d5:b7:30:5d:86:d8:b4:2f:e4:5b:20:21:e4:d5: 06:d0:ec:4c:27:13:60:e5:26:c2:5b:2e:b9:1b:23: 74:dc:6d:90:51:09:a7:b5:1c:c9:2d:a6:02:fa:4d: e0:f8:00:40:c5:2a:f7:72:be:23:41:06:c8:af:37: fe:3e:84:81:a9:03:f7:b2:23:b3:d1:6f:77:29:68: fc:eb:c8:56:40:aa:75:24:ac:bb:82:df:d2:d7:67: 23:f5:d2:21:2a:3e:b4:1b:af:d2:f7:ff:f5:41:36: 1a:b5:da:de:f8:b1:d9:a9:a6:0d:70:de:ae:9c:8b: 12:4d:36:28:25:b8:20:98:e7:51:66:24:6b:35:67: 43:c9:c9:98:a7:d5:76:fe:f0:c9:cc:31:6a:df:74: 02:e9:ec:fe:53:3c:f1:f5:77:84:c3:25:97:51:4a: aa:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:E0:BF:F6:61:52:F4:62:2D:57:4A:C0:C5:D5:DC:5D:74:0C:26:09 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a29322c3-3b0b-4d57-b8e7-b17bddb4b1d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fea:8050::/48 Signature Algorithm: sha256WithRSAEncryption 37:94:58:5f:cf:f5:07:d9:4c:fb:d7:bd:4a:01:bf:c1:ee:1f: 05:b0:97:84:3d:e4:49:b4:9e:d8:ca:dd:33:d6:b8:92:2a:3b: 82:fc:92:08:19:77:fe:76:f1:17:42:4a:16:f8:fd:0b:e0:e7: fa:2c:79:9f:4f:0a:11:35:a6:ce:bf:42:95:68:41:35:d3:42: 47:04:60:ab:a4:86:3d:2a:bc:ca:da:41:19:71:a6:6c:89:4b: 81:80:c0:1f:8d:ea:41:26:ac:8f:9c:28:e1:19:07:09:60:b0: a8:87:98:b7:ee:f2:20:84:11:7c:4f:e8:b6:a8:ec:e6:f4:06: 37:ba:3d:ff:91:49:ed:97:d5:9e:9a:a0:0c:32:c8:39:35:0f: 57:8a:ac:59:97:3f:93:fd:15:ed:44:37:3d:aa:a9:f1:6f:29: 2e:7c:46:f1:cb:6b:88:32:f1:0d:82:af:4b:5e:e0:11:85:ac: 84:aa:11:00:f2:09:e8:85:c6:da:f3:f1:f3:d2:96:89:61:44: 1c:f4:72:89:37:c6:16:cb:05:a8:3b:98:fa:11:e9:ad:c8:86: ad:8e:4f:8c:26:42:85:c7:cb:4f:04:d0:fc:21:90:c1:1e:9f: 2e:65:02:1f:10:93:90:69:e3:bb:eb:94:8b:77:f8:60:88:fb: 5c:a7:3f:c4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUeZgzm8hIQAR30vMqgWXsuIQ4sccwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA5MDExMDMyWhcNMjcwMTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NDcxM2FlY2Q5MzZlMzNmYWM3NWQyM2RiZjZhMzdiNjA3 ZjkxMTYwZGJhOWZmNjNjZWNhNDc0N2UxZWM3MWEzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7rwng0wD3jXDP6XUCLDaqmDDxTwHFdw6xZDRYDqhgUdsD Od9fWiET13zJHA8Ou85gLYVCk1hUWnypQkIaAIJGmXAo0q7cL6sEsZ+dk0cJmg6j Rde6xBmN9v/VtzBdhti0L+RbICHk1QbQ7EwnE2DlJsJbLrkbI3TcbZBRCae1HMkt pgL6TeD4AEDFKvdyviNBBsivN/4+hIGpA/eyI7PRb3cpaPzryFZAqnUkrLuC39LX ZyP10iEqPrQbr9L3//VBNhq12t74sdmppg1w3q6cixJNNigluCCY51FmJGs1Z0PJ yZin1Xb+8MnMMWrfdALp7P5TPPH1d4TDJZdRSqqtAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUm+C/9mFS9GItV0rAxdXcXXQMJgkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EyOTMyMmMzLTNiMGItNGQ1Ny1iOGU3LWIxN2JkZGI0YjFkNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/qgFAwDQYJKoZIhvcNAQELBQADggEBADeUWF/P9QfZTPvXvUoBv8Hu HwWwl4Q95Em0ntjK3TPWuJIqO4L8kggZd/528RdCShb4/Qvg5/oseZ9PChE1ps6/ QpVoQTXTQkcEYKukhj0qvMraQRlxpmyJS4GAwB+N6kEmrI+cKOEZBwlgsKiHmLfu 8iCEEXxP6Lao7Ob0Bje6Pf+RSe2X1Z6aoAwyyDk1D1eKrFmXP5P9Fe1ENz2qqfFv KS58RvHLa4gy8Q2Cr0te4BGFrISqEQDyCeiFxtrz8fPSlolhRBz0cok3xhbLBag7 mPoR6a3Ihq2OT4wmQoXHy08E0PwhkMEeny5lAh8Qk5Bp47vrlIt3+GCI+1ynP8Q= -----END CERTIFICATE-----Generated at Mon Nov 2 21:30:29 2026 by rpki-client