$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5bc265a-1827-411f-8fbb-6affb77e57cd.roa File: a5bc265a-1827-411f-8fbb-6affb77e57cd.roa (raw, json) Hash identifier: hH7843xapt7w/CO0Sd31+vw/suNa0MBpBexA0kiigY0= Subject key identifier: 16:12:48:B6:93:AE:8D:C7:BC:A0:B3:8E:5F:B9:F0:9C:66:0F:79:D3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1EAB2D96EF77235875CAA1ABDB633B9621028834 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5bc265a-1827-411f-8fbb-6affb77e57cd.roa Signing time: Sat 24 Oct 2026 00:20:49 +0000 ROA not before: Sat 24 Oct 2026 00:20:49 +0000 ROA not after: Fri 22 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fb8:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:ab:2d:96:ef:77:23:58:75:ca:a1:ab:db:63:3b:96:21:02:88:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 24 00:20:49 2026 GMT Not After : Jan 22 23:59:59 2027 GMT Subject: serialNumber=706e9a036207db22750c969c9c442d897e784fe0d7160c217f411fe93f02ab78, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3f:65:c6:38:7d:6f:87:62:b4:16:89:2d:ef: 9d:98:60:46:6c:db:85:9c:52:69:91:45:ce:db:74: 94:b4:67:e8:71:16:fd:e5:c6:59:79:94:bb:bb:f0: 05:63:cc:15:ff:37:d4:77:e0:3b:88:18:8f:fa:15: 6b:60:b6:32:aa:a0:34:61:9f:15:12:ad:e1:96:ae: 6e:b9:d4:5d:ea:2c:7a:75:ee:b9:1f:45:ae:23:39: ce:30:d9:12:86:01:2c:e9:14:0b:32:25:39:75:89: 43:0c:45:fb:98:ca:b9:e4:0a:fa:82:e6:f6:f3:f3: 29:f7:f1:a2:69:c3:5d:ba:66:88:70:30:bb:e2:54: 40:f5:09:7b:d9:90:43:fb:1c:5a:90:11:e5:37:3c: 47:46:83:b0:4e:71:71:d2:80:30:99:01:e6:11:63: c6:8b:df:80:9e:d0:91:c4:f1:f3:30:18:73:2a:8b: 99:bf:ec:b2:1a:fc:bb:f5:00:04:d4:78:0d:88:60: 37:f5:07:6b:c3:9c:90:18:be:98:75:bb:f7:be:d5: fd:85:12:60:a7:57:06:50:a3:7c:5f:5a:c5:b1:4d: cd:56:ab:d7:d5:3f:9d:bc:85:2a:4b:d4:cf:ab:6c: fc:5d:0f:a7:3e:da:cc:0b:09:cc:87:af:1c:39:54: 09:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:12:48:B6:93:AE:8D:C7:BC:A0:B3:8E:5F:B9:F0:9C:66:0F:79:D3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5bc265a-1827-411f-8fbb-6affb77e57cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fb8:5000::/40 Signature Algorithm: sha256WithRSAEncryption 11:ed:3d:05:bd:12:99:6a:d8:80:36:c4:41:01:7e:d8:5a:9f: 0e:35:81:93:a6:df:6b:d6:aa:f0:66:3c:94:ae:36:d7:cc:e8: 98:21:2b:0f:6f:98:ea:6a:48:c9:6d:b5:0d:7c:88:04:f8:19: c4:35:36:19:88:45:a1:6d:89:10:a0:41:b6:87:ba:a5:4d:58: 38:1b:b8:96:9f:46:12:73:b2:10:e5:c6:aa:f9:8c:7e:7c:8c: 7a:c1:c3:75:77:a6:b4:71:4f:f2:c5:e9:9e:ed:e8:b6:38:75: d7:79:b7:66:b5:43:53:e8:15:53:a8:f9:f8:b9:9f:8d:2f:ba: e2:b8:19:3a:1c:f6:d3:9c:47:97:8c:fd:43:fe:11:be:b1:f4: b3:53:22:be:78:fc:04:06:ac:fa:10:02:f2:79:42:98:ea:dc: a6:9c:55:5f:ba:f8:f7:e9:26:4b:ae:2d:31:77:a6:b9:bc:62: a9:0a:e9:67:1c:a6:fa:96:30:49:9e:56:e6:04:33:f6:58:5b: 2d:42:97:e6:94:d9:3f:b9:ca:bc:d1:70:e9:4e:5f:40:20:fd: 86:20:e2:4b:81:c2:d2:27:07:20:cc:6a:b9:08:79:a6:14:98: 71:7e:e6:3d:8d:d4:57:0b:cb:df:2a:11:87:4f:2c:d6:5d:fa: e6:16:08:4f -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUHqstlu93I1h1yqGr22M7liECiDQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI0MDAyMDQ5WhcNMjcwMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MDZlOWEwMzYyMDdkYjIyNzUwYzk2OWM5YzQ0MmQ4OTdl Nzg0ZmUwZDcxNjBjMjE3ZjQxMWZlOTNmMDJhYjc4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6P2XGOH1vh2K0Fokt752YYEZs24WcUmmRRc7bdJS0Z+hx Fv3lxll5lLu78AVjzBX/N9R34DuIGI/6FWtgtjKqoDRhnxUSreGWrm651F3qLHp1 7rkfRa4jOc4w2RKGASzpFAsyJTl1iUMMRfuYyrnkCvqC5vbz8yn38aJpw126Zohw MLviVED1CXvZkEP7HFqQEeU3PEdGg7BOcXHSgDCZAeYRY8aL34Ce0JHE8fMwGHMq i5m/7LIa/Lv1AATUeA2IYDf1B2vDnJAYvph1u/e+1f2FEmCnVwZQo3xfWsWxTc1W q9fVP528hSpL1M+rbPxdD6c+2swLCcyHrxw5VAnxAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUFhJItpOujce8oLOOX7nwnGYPedMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E1YmMyNjVhLTE4MjctNDExZi04ZmJiLTZhZmZiNzdlNTdjZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+4UDANBgkqhkiG9w0BAQsFAAOCAQEAEe09Bb0SmWrYgDbEQQF+2Fqf DjWBk6bfa9aq8GY8lK4218zomCErD2+Y6mpIyW21DXyIBPgZxDU2GYhFoW2JEKBB toe6pU1YOBu4lp9GEnOyEOXGqvmMfnyMesHDdXemtHFP8sXpnu3otjh113m3ZrVD U+gVU6j5+LmfjS+64rgZOhz205xHl4z9Q/4RvrH0s1Mivnj8BAas+hAC8nlCmOrc ppxVX7r49+kmS64tMXemubxiqQrpZxym+pYwSZ5W5gQz9lhbLUKX5pTZP7nKvNFw 6U5fQCD9hiDiS4HC0icHIMxquQh5phSYcX7mPY3UVwvL3yoRh08s1l365hYITw== -----END CERTIFICATE-----Generated at Mon Nov 2 21:08:45 2026 by rpki-client