$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3d9b6ff-3f01-4607-84ed-49405cb324e7.roa File: a3d9b6ff-3f01-4607-84ed-49405cb324e7.roa (raw, json) Hash identifier: mQ1RrZbiuMwTUXJWLTz6En4sbVjP8EC/p61ubP136D4= Subject key identifier: 34:F9:7F:A7:45:CA:69:A3:7B:09:1C:FB:B9:DC:A4:2B:25:93:1C:CA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1A2AE0CEC249434CF96ACE2F0518B8B77A46A094 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3d9b6ff-3f01-4607-84ed-49405cb324e7.roa Signing time: Fri 23 Oct 2026 00:30:49 +0000 ROA not before: Fri 23 Oct 2026 00:30:49 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f70:4000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:2a:e0:ce:c2:49:43:4c:f9:6a:ce:2f:05:18:b8:b7:7a:46:a0:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 23 00:30:49 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=4e9606026565ac7e9c6123e8a87be983e66c29575854ee1193faef576fde5015, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d9:e6:ea:ad:11:1b:1f:77:78:ea:ab:e7:46: 31:24:59:5f:d0:4d:d9:de:fc:3e:7e:8e:06:37:7c: 03:ff:86:2d:b8:7a:a5:bf:47:66:42:6c:f7:5b:7d: d7:18:4b:7c:d1:38:30:7a:55:c6:96:1c:fb:05:89: 62:3d:f7:54:6d:18:75:cc:28:76:03:af:a1:2f:20: 08:fb:6f:b4:49:81:10:3d:16:44:e2:af:27:50:4d: 3e:23:f9:37:b5:3d:4e:57:18:55:e3:15:98:bc:81: ec:4f:b3:d3:45:18:0a:c6:bf:02:44:25:76:46:ee: 62:63:5e:17:04:58:3c:e1:f8:78:80:c4:78:85:d1: a2:05:20:87:60:0e:20:d5:9f:46:d8:a3:41:66:f3: a0:4b:ec:e0:dd:a3:0b:4b:e9:b1:5b:90:d2:d5:a8: c6:92:ea:38:a3:47:cb:44:1d:b4:35:df:f8:5c:e1: db:0a:30:89:9f:55:3d:2c:8b:e4:fe:c0:a0:b9:57: 75:dc:a9:41:d5:f7:c0:ed:77:2d:41:4f:fa:83:77: 0f:a0:da:b3:d2:95:5b:d2:fd:e2:ed:7d:9a:9c:f2: 88:56:3c:fe:1a:d5:75:17:74:90:48:61:46:dd:f3: 85:99:0c:22:0f:0a:fe:67:49:98:3a:a1:8c:09:00: 1f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F9:7F:A7:45:CA:69:A3:7B:09:1C:FB:B9:DC:A4:2B:25:93:1C:CA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3d9b6ff-3f01-4607-84ed-49405cb324e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f70:4000::/40 Signature Algorithm: sha256WithRSAEncryption 3a:e7:cd:ba:0a:45:7e:78:60:c0:23:e0:82:d1:76:04:ef:11: f4:23:9a:e9:47:ba:bc:36:a7:43:4f:c5:91:ae:e5:00:a8:31: a4:ac:13:b1:b6:fa:aa:5a:d5:85:ca:7d:3f:93:a5:b4:ab:d1: 22:79:ff:c8:f3:47:1d:02:5f:97:70:55:cf:0a:d7:2e:4e:42: 91:08:7f:32:75:22:86:29:97:bc:b5:f6:8a:a6:23:e0:06:ec: 33:5b:f2:1c:bf:f9:57:f8:c0:78:a9:9b:cc:fa:8e:f8:ae:07: 33:6d:a4:85:86:c4:d1:e2:d1:32:a4:f5:48:b8:c2:60:d9:02: 0e:33:14:36:75:16:43:c3:d0:e4:47:34:a9:c4:48:07:24:6a: 9e:78:13:ae:9e:f3:e7:43:40:8f:47:d2:5a:a2:54:fa:a7:60: ef:24:59:00:f1:b7:46:c6:dc:80:ce:d5:1b:8d:7c:89:6d:42: fa:4a:87:54:43:a5:34:13:fa:26:9d:7f:36:49:21:e8:31:0a: e3:f2:05:0e:8b:fd:c4:f7:86:c7:cd:dd:a8:80:46:6e:5e:f4: 34:84:3a:2f:36:bb:32:79:98:03:1b:e9:5e:0f:80:18:c0:00: b6:78:d7:3b:8b:01:74:4b:b2:7b:d7:3e:6e:da:bd:5c:04:cb: a4:54:4e:7a -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUGirgzsJJQ0z5as4vBRi4t3pGoJQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDAzMDQ5WhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZTk2MDYwMjY1NjVhYzdlOWM2MTIzZThhODdiZTk4M2U2 NmMyOTU3NTg1NGVlMTE5M2ZhZWY1NzZmZGU1MDE1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDS2ebqrREbH3d46qvnRjEkWV/QTdne/D5+jgY3fAP/hi24 eqW/R2ZCbPdbfdcYS3zRODB6VcaWHPsFiWI991RtGHXMKHYDr6EvIAj7b7RJgRA9 FkTirydQTT4j+Te1PU5XGFXjFZi8gexPs9NFGArGvwJEJXZG7mJjXhcEWDzh+HiA xHiF0aIFIIdgDiDVn0bYo0Fm86BL7ODdowtL6bFbkNLVqMaS6jijR8tEHbQ13/hc 4dsKMImfVT0si+T+wKC5V3XcqUHV98Dtdy1BT/qDdw+g2rPSlVvS/eLtfZqc8ohW PP4a1XUXdJBIYUbd84WZDCIPCv5nSZg6oYwJAB/BAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUNPl/p0XKaaN7CRz7udykKyWTHMowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EzZDliNmZmLTNmMDEtNDYwNy04NGVkLTQ5NDA1Y2IzMjRlNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9wQDANBgkqhkiG9w0BAQsFAAOCAQEAOufNugpFfnhgwCPggtF2BO8R 9COa6Ue6vDanQ0/Fka7lAKgxpKwTsbb6qlrVhcp9P5OltKvRInn/yPNHHQJfl3BV zwrXLk5CkQh/MnUihimXvLX2iqYj4AbsM1vyHL/5V/jAeKmbzPqO+K4HM22khYbE 0eLRMqT1SLjCYNkCDjMUNnUWQ8PQ5Ec0qcRIByRqnngTrp7z50NAj0fSWqJU+qdg 7yRZAPG3RsbcgM7VG418iW1C+kqHVEOlNBP6Jp1/Nkkh6DEK4/IFDov9xPeGx83d qIBGbl70NIQ6Lza7MnmYAxvpXg+AGMAAtnjXO4sBdEuye9c+btq9XATLpFROeg== -----END CERTIFICATE-----Generated at Sat Oct 31 06:09:43 2026 by rpki-client