$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a6d8bc30-4c41-4acf-9bba-ec8eba709195.roa File: a6d8bc30-4c41-4acf-9bba-ec8eba709195.roa (raw, json) Hash identifier: eIus5UteMFBiRGt0Fj2ouitvZ+v6/gbogiRujvWaUFQ= Subject key identifier: 45:C3:D8:A2:E2:E7:58:2A:17:95:9C:64:87:4F:4D:87:35:E7:75:7B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 50E1653464B417B79765CE7D53E48A975FD381FA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a6d8bc30-4c41-4acf-9bba-ec8eba709195.roa Signing time: Fri 09 Oct 2026 01:10:11 +0000 ROA not before: Fri 09 Oct 2026 01:10:11 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fea:3400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:e1:65:34:64:b4:17:b7:97:65:ce:7d:53:e4:8a:97:5f:d3:81:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 9 01:10:11 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=7e98189b49c03d8763ae830e93260a148f2935f5ae705ff317083c03e0f3e5db, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d9:db:5e:da:94:a3:31:38:29:1b:bb:4d:bc: 20:6f:18:99:00:7c:1c:17:6f:a9:4f:cb:30:88:df: ad:a5:45:37:23:32:fb:8a:ff:09:9c:4b:77:98:2d: c7:f2:a3:c9:00:c3:ff:0b:32:1b:47:05:99:4c:37: 48:b5:6d:09:14:e9:96:d6:b3:af:4b:cd:ad:68:d7: f1:4e:ba:a5:40:e2:39:b1:86:ae:71:46:8c:01:6f: 42:5a:ad:1e:00:8f:6b:b3:cf:ba:8b:55:4c:9f:2a: 07:cc:f3:42:7f:67:58:49:27:e8:40:5b:68:a1:f1: d7:fe:99:1a:aa:db:79:19:3b:e1:ed:1b:38:ef:3c: e6:54:2e:ec:fc:45:9d:e2:e6:15:d5:96:ef:11:b3: 03:93:21:a2:12:f4:ec:e6:8e:de:5b:51:6a:8d:a4: 65:68:c4:44:32:a8:f3:c4:3c:1b:d0:9a:48:db:3f: df:80:42:ae:19:dd:c1:df:32:07:48:38:bf:b9:32: 1f:72:82:81:1f:32:6c:46:3e:f9:79:78:21:be:33: e4:7f:5f:c0:3b:52:d9:79:f5:f3:16:c1:11:4d:12: 48:a1:d8:ed:db:8c:2d:6b:13:3d:07:4b:3b:03:e8: 3a:0d:e6:5e:d3:7b:8f:0e:ca:f5:a6:a6:1b:7e:66: eb:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:C3:D8:A2:E2:E7:58:2A:17:95:9C:64:87:4F:4D:87:35:E7:75:7B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a6d8bc30-4c41-4acf-9bba-ec8eba709195.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fea:3400::/40 Signature Algorithm: sha256WithRSAEncryption 59:69:2b:d3:74:9d:9a:08:f2:b5:e1:15:84:3d:3b:a1:15:7e: 3f:44:ac:e0:e5:41:34:8d:9c:ea:83:16:d8:c1:85:e6:68:93: 00:6b:51:6f:fd:7f:4f:19:d5:04:b0:28:0f:7f:8c:ad:b8:22: e0:27:24:0b:92:b6:6f:8b:90:08:f3:20:d7:3d:c3:73:fc:0a: 44:8a:31:94:ea:64:2d:ad:25:51:68:b2:07:43:3d:bf:34:49: c0:fa:dc:4d:a0:bb:04:dd:c5:60:74:10:66:45:27:fd:bd:49: b9:06:86:ed:bc:da:a5:19:7c:15:cf:65:05:d9:87:e3:d5:bc: 07:c1:8c:cc:6e:37:fe:37:ef:c2:02:00:6a:e0:5b:e6:e6:56: 7a:7b:6e:f8:8d:aa:de:c2:b0:e0:33:16:23:28:b4:59:f8:2c: e7:4c:d9:27:4d:4f:1e:82:ba:c1:54:21:7b:7f:71:2b:21:b3: 78:f3:d0:97:c8:9e:bb:b1:c9:8a:0c:d6:8b:21:56:97:0d:3b: c9:1b:d3:79:fc:b7:1c:35:8e:91:83:ae:ce:9f:ba:60:76:be: 5e:d1:47:03:a0:bc:a9:74:25:c6:3e:c1:01:8d:3c:a7:c6:b0: 28:ff:b8:ee:b6:93:00:a7:54:51:22:19:5b:0d:41:f2:67:f5: 45:14:68:a7 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUUOFlNGS0F7eXZc59U+SKl1/TgfowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA5MDExMDExWhcNMjcwMTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZTk4MTg5YjQ5YzAzZDg3NjNhZTgzMGU5MzI2MGExNDhm MjkzNWY1YWU3MDVmZjMxNzA4M2MwM2UwZjNlNWRiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDF2dte2pSjMTgpG7tNvCBvGJkAfBwXb6lPyzCI362lRTcj MvuK/wmcS3eYLcfyo8kAw/8LMhtHBZlMN0i1bQkU6ZbWs69Lza1o1/FOuqVA4jmx hq5xRowBb0JarR4Aj2uzz7qLVUyfKgfM80J/Z1hJJ+hAW2ih8df+mRqq23kZO+Ht GzjvPOZULuz8RZ3i5hXVlu8RswOTIaIS9Ozmjt5bUWqNpGVoxEQyqPPEPBvQmkjb P9+AQq4Z3cHfMgdIOL+5Mh9ygoEfMmxGPvl5eCG+M+R/X8A7Utl59fMWwRFNEkih 2O3bjC1rEz0HSzsD6DoN5l7Te48OyvWmpht+ZutLAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQURcPYouLnWCoXlZxkh09NhzXndXswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E2ZDhiYzMwLTRjNDEtNGFjZi05YmJhLWVjOGViYTcwOTE5NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/qNDANBgkqhkiG9w0BAQsFAAOCAQEAWWkr03SdmgjyteEVhD07oRV+ P0Ss4OVBNI2c6oMW2MGF5miTAGtRb/1/TxnVBLAoD3+Mrbgi4CckC5K2b4uQCPMg 1z3Dc/wKRIoxlOpkLa0lUWiyB0M9vzRJwPrcTaC7BN3FYHQQZkUn/b1JuQaG7bza pRl8Fc9lBdmH49W8B8GMzG43/jfvwgIAauBb5uZWentu+I2q3sKw4DMWIyi0Wfgs 50zZJ01PHoK6wVQhe39xKyGzePPQl8ieu7HJigzWiyFWlw07yRvTefy3HDWOkYOu zp+6YHa+XtFHA6C8qXQlxj7BAY08p8awKP+47raTAKdUUSIZWw1B8mf1RRRopw== -----END CERTIFICATE-----Generated at Mon Nov 2 16:45:06 2026 by rpki-client