$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4870125-0bce-4d77-b82a-784401a5d8f3.roa File: a4870125-0bce-4d77-b82a-784401a5d8f3.roa (raw, json) Hash identifier: 8Dcpk5pi269RaDxKvcHEw3Da+bSynrbXP8rTgf6O7jc= Subject key identifier: 5A:FF:26:3D:35:E5:E7:55:E3:33:85:BC:E8:53:BD:AC:C9:29:FF:81 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1620BAC41774956C500FE1DD7B0B20CF798B95B2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4870125-0bce-4d77-b82a-784401a5d8f3.roa Signing time: Mon 19 Oct 2026 00:50:06 +0000 ROA not before: Mon 19 Oct 2026 00:50:06 +0000 ROA not after: Sun 17 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fa0:2c00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:20:ba:c4:17:74:95:6c:50:0f:e1:dd:7b:0b:20:cf:79:8b:95:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 19 00:50:06 2026 GMT Not After : Jan 17 23:59:59 2027 GMT Subject: serialNumber=958d7cb1840fe1c85ad289913576df7afb1ce671602938c720003743c99584ab, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:48:45:66:91:0c:b2:8f:6c:8f:24:a1:e4:81: eb:b3:00:1d:01:4c:fd:fe:e4:45:c7:16:df:62:8c: 6f:20:74:6b:aa:11:48:1e:11:8a:7f:7d:3e:be:cf: b0:45:16:e0:96:97:5b:56:02:1b:75:45:40:cb:f5: 58:14:f1:f0:55:da:5e:38:c7:8f:1e:c6:26:57:13: 7d:b0:45:55:65:1f:d9:aa:d0:eb:3b:2d:b1:99:8e: 02:02:b9:3f:f9:b5:23:11:3c:5d:1d:c3:53:c9:39: 1d:ed:f8:59:30:4b:e5:d0:83:68:44:6b:62:b2:a9: cf:05:87:6a:20:51:f6:90:99:0d:ec:73:4a:8b:97: 5a:8c:02:ed:94:ac:f7:7b:a3:1b:5a:25:2e:5a:3c: fe:99:46:24:f1:72:42:62:5c:2d:7a:94:d9:0f:1e: 16:d3:9e:4e:b4:d6:6c:70:17:75:ce:a7:04:25:07: b5:2a:d6:14:a9:ae:71:8a:cc:d5:0e:fc:eb:ca:9c: 7e:46:eb:35:15:b4:c3:41:87:44:7c:bf:c3:de:a7: 26:01:43:72:36:31:5a:c0:74:79:ec:b7:2b:1a:91: 14:9e:56:f5:cd:49:64:46:13:d1:e2:0c:79:4a:ed: 47:f3:31:98:e1:43:64:49:b8:d9:8c:84:c6:eb:75: 98:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:FF:26:3D:35:E5:E7:55:E3:33:85:BC:E8:53:BD:AC:C9:29:FF:81 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4870125-0bce-4d77-b82a-784401a5d8f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fa0:2c00::/40 Signature Algorithm: sha256WithRSAEncryption 10:99:3f:e1:d6:e6:a7:5a:a0:bf:dc:1d:d5:38:5f:17:d8:9c: 55:c2:c1:7f:c4:53:79:34:f6:7b:83:4b:5b:25:72:b6:4f:f1: 0b:35:d9:af:82:50:3a:53:bc:55:89:af:b5:54:b5:db:56:db: 4c:d6:00:e8:23:b0:c2:d1:bc:7e:2a:9f:0d:f1:c0:3a:cd:58: 0d:e4:ed:25:39:2c:b8:f2:75:7a:97:fe:54:fb:6f:03:36:36: bd:48:5a:0f:54:6d:6f:f3:5d:eb:57:b2:b1:6c:46:41:ae:6b: f5:26:8d:53:7c:2a:4e:8a:f5:7f:26:ca:a8:30:cc:67:b7:0c: be:31:27:93:08:32:8d:5f:14:57:d4:13:df:29:91:ec:e8:1a: db:da:27:19:88:57:02:be:b5:52:d3:50:05:94:cb:2c:8a:e6: 02:2d:82:a9:35:d4:73:8f:28:83:81:77:b6:a0:4c:da:2e:be: a0:69:d2:62:e7:94:bb:f6:ca:2d:db:7e:4b:67:2d:99:0e:36: c8:e4:00:16:38:cb:88:86:90:35:10:73:29:ae:7c:a4:9f:c6: bf:ab:e7:01:d6:24:21:8c:dd:35:a2:71:12:3b:3a:fc:40:75: cd:98:2d:0c:64:f1:11:ed:50:2a:34:3a:6f:f9:85:06:20:67: d4:02:1f:67 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUFiC6xBd0lWxQD+Hdewsgz3mLlbIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE5MDA1MDA2WhcNMjcwMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NThkN2NiMTg0MGZlMWM4NWFkMjg5OTEzNTc2ZGY3YWZi MWNlNjcxNjAyOTM4YzcyMDAwMzc0M2M5OTU4NGFiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPSEVmkQyyj2yPJKHkgeuzAB0BTP3+5EXHFt9ijG8gdGuq EUgeEYp/fT6+z7BFFuCWl1tWAht1RUDL9VgU8fBV2l44x48exiZXE32wRVVlH9mq 0Os7LbGZjgICuT/5tSMRPF0dw1PJOR3t+FkwS+XQg2hEa2Kyqc8Fh2ogUfaQmQ3s c0qLl1qMAu2UrPd7oxtaJS5aPP6ZRiTxckJiXC16lNkPHhbTnk601mxwF3XOpwQl B7Uq1hSprnGKzNUO/OvKnH5G6zUVtMNBh0R8v8PepyYBQ3I2MVrAdHnstysakRSe VvXNSWRGE9HiDHlK7UfzMZjhQ2RJuNmMhMbrdZihAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUWv8mPTXl51XjM4W86FO9rMkp/4EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E0ODcwMTI1LTBiY2UtNGQ3Ny1iODJhLTc4NDQwMWE1ZDhmMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+gLDANBgkqhkiG9w0BAQsFAAOCAQEAEJk/4dbmp1qgv9wd1ThfF9ic VcLBf8RTeTT2e4NLWyVytk/xCzXZr4JQOlO8VYmvtVS121bbTNYA6COwwtG8fiqf DfHAOs1YDeTtJTksuPJ1epf+VPtvAzY2vUhaD1Rtb/Nd61eysWxGQa5r9SaNU3wq Tor1fybKqDDMZ7cMvjEnkwgyjV8UV9QT3ymR7Oga29onGYhXAr61UtNQBZTLLIrm Ai2CqTXUc48og4F3tqBM2i6+oGnSYueUu/bKLdt+S2ctmQ42yOQAFjjLiIaQNRBz Ka58pJ/Gv6vnAdYkIYzdNaJxEjs6/EB1zZgtDGTxEe1QKjQ6b/mFBiBn1AIfZw== -----END CERTIFICATE-----Generated at Mon Nov 2 20:33:05 2026 by rpki-client