$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4130699-dfb5-4db7-81a6-b209888061e9.roa File: a4130699-dfb5-4db7-81a6-b209888061e9.roa (raw, json) Hash identifier: 7YwS072aA1faqBvqqZW6/3pPM7mDHEr1FoUZgHKvjUk= Subject key identifier: A8:E5:B8:A7:19:D6:DB:1A:50:15:0F:B2:24:DE:8C:04:69:A9:89:12 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4A59B4D6E63EAE70E5E0041C51B6597870249673 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4130699-dfb5-4db7-81a6-b209888061e9.roa Signing time: Mon 12 Oct 2026 00:50:08 +0000 ROA not before: Mon 12 Oct 2026 00:50:08 +0000 ROA not after: Sun 10 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fb9:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:59:b4:d6:e6:3e:ae:70:e5:e0:04:1c:51:b6:59:78:70:24:96:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 12 00:50:08 2026 GMT Not After : Jan 10 23:59:59 2027 GMT Subject: serialNumber=6957fe1df7a7333e69b5173a7d8cbd71c8c4f543e0199362308aa568b7714a2e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:17:9a:1b:85:00:09:08:20:ee:7a:d7:a8:76: d1:55:4b:98:ad:05:95:c4:09:25:3f:97:e4:f3:ed: 69:b4:e5:1f:80:a3:96:64:5f:da:d0:7d:c0:3e:4d: e0:9a:1f:ab:d1:02:ad:6d:ec:ef:b6:de:18:d6:68: 2e:16:fd:f1:c6:21:c9:3b:c3:1f:8e:b5:07:7d:8a: 37:0d:1d:d5:3c:e6:b5:f7:fe:b5:9d:66:a0:70:2f: b1:cf:45:03:2f:9b:0c:ef:8d:68:17:1e:48:5f:1c: de:d7:71:b3:f1:7b:92:16:c8:46:ef:ba:bd:38:e7: 37:e3:33:17:47:4a:f0:ae:25:d3:29:fa:e2:9c:31: d9:c5:a1:01:ee:fd:9a:84:86:e3:ba:eb:39:45:b7: ec:27:e5:24:23:05:e2:5d:3f:1e:69:a6:40:8d:11: 45:75:a9:b5:45:0f:43:50:e7:b9:86:14:87:6b:e3: e1:06:b5:38:d0:76:03:30:98:29:bc:7f:a5:86:a3: f6:95:ff:a2:c3:37:4b:c8:52:5e:ae:67:fb:f4:f0: cd:a7:3f:f6:27:fc:d4:0d:fb:25:83:2b:04:60:b8: 00:5c:af:0c:c8:b3:ce:46:9d:27:03:82:44:16:50: d9:62:b0:1b:78:c7:09:c0:a5:08:a4:cc:c1:3a:68: b1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E5:B8:A7:19:D6:DB:1A:50:15:0F:B2:24:DE:8C:04:69:A9:89:12 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4130699-dfb5-4db7-81a6-b209888061e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fb9:2000::/40 Signature Algorithm: sha256WithRSAEncryption 51:f9:a1:4b:2a:9f:0b:6a:d3:26:ad:60:10:25:74:02:a9:02: fc:ef:f7:5a:d5:33:97:48:e9:5b:bb:e5:b0:93:7c:25:32:82: cc:bd:fd:82:51:6f:fd:63:68:f5:93:d6:0e:21:80:04:a2:24: 8a:d3:9f:a0:e6:fe:a2:ae:bf:9d:06:c3:63:ad:59:e2:b5:8f: d7:f7:d7:b4:8d:00:7b:a3:db:a1:e1:61:ff:58:5e:c9:1f:b2: c3:c5:37:c1:f0:05:c7:bb:5a:ca:97:e8:8d:4f:56:3a:80:19: 96:2f:5d:de:f4:e0:75:bf:7b:20:77:81:96:f0:67:27:5a:7c: f4:3a:92:b3:da:8c:07:65:88:35:0b:ea:f5:37:d8:9f:28:84: 71:e9:c2:a0:5c:c9:f9:a2:86:50:c9:08:b8:1b:46:02:07:06: 2e:02:d1:64:77:cc:b2:76:b7:9e:c9:b1:23:80:0d:dd:83:9c: 93:e9:c6:d5:bd:b7:cc:28:fd:f9:81:67:14:d0:ed:04:24:6e: b5:a9:30:52:54:c2:f9:41:10:e5:c6:4f:30:91:04:51:93:e8: 15:90:a3:50:9d:bb:9c:0d:6e:41:d6:05:6d:67:92:e6:4a:32: ca:c6:00:fb:a7:ab:c2:8f:f4:2b:d8:a5:44:48:29:6d:4c:fe: 00:5e:8b:a9 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUSlm01uY+rnDl4AQcUbZZeHAklnMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDEyMDA1MDA4WhcNMjcwMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2OTU3ZmUxZGY3YTczMzNlNjliNTE3M2E3ZDhjYmQ3MWM4 YzRmNTQzZTAxOTkzNjIzMDhhYTU2OGI3NzE0YTJlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6F5obhQAJCCDueteodtFVS5itBZXECSU/l+Tz7Wm05R+A o5ZkX9rQfcA+TeCaH6vRAq1t7O+23hjWaC4W/fHGIck7wx+OtQd9ijcNHdU85rX3 /rWdZqBwL7HPRQMvmwzvjWgXHkhfHN7XcbPxe5IWyEbvur045zfjMxdHSvCuJdMp +uKcMdnFoQHu/ZqEhuO66zlFt+wn5SQjBeJdPx5ppkCNEUV1qbVFD0NQ57mGFIdr 4+EGtTjQdgMwmCm8f6WGo/aV/6LDN0vIUl6uZ/v08M2nP/Yn/NQN+yWDKwRguABc rwzIs85GnScDgkQWUNlisBt4xwnApQikzME6aLHzAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUqOW4pxnW2xpQFQ+yJN6MBGmpiRIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E0MTMwNjk5LWRmYjUtNGRiNy04MWE2LWIyMDk4ODgwNjFlOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+5IDANBgkqhkiG9w0BAQsFAAOCAQEAUfmhSyqfC2rTJq1gECV0AqkC /O/3WtUzl0jpW7vlsJN8JTKCzL39glFv/WNo9ZPWDiGABKIkitOfoOb+oq6/nQbD Y61Z4rWP1/fXtI0Ae6PboeFh/1heyR+yw8U3wfAFx7taypfojU9WOoAZli9d3vTg db97IHeBlvBnJ1p89DqSs9qMB2WINQvq9TfYnyiEcenCoFzJ+aKGUMkIuBtGAgcG LgLRZHfMsna3nsmxI4AN3YOck+nG1b23zCj9+YFnFNDtBCRutakwUlTC+UEQ5cZP MJEEUZPoFZCjUJ27nA1uQdYFbWeS5koyysYA+6erwo/0K9ilREgpbUz+AF6LqQ== -----END CERTIFICATE-----Generated at Tue Nov 3 19:22:19 2026 by rpki-client