$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa20b4d1-0cb7-4c87-a727-673bb17fed37.roa File: aa20b4d1-0cb7-4c87-a727-673bb17fed37.roa (raw, json) Hash identifier: 72PAu3WsHKXAb7HadgpZwLjIH6ImxmckhmpgCca3CQ8= Subject key identifier: 8C:BC:F4:1A:2E:C5:2E:48:A4:88:33:84:00:69:C2:52:88:C3:17:5F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0AC02EC7EBC6F930B90D162E5D87B4EF93C8D35D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa20b4d1-0cb7-4c87-a727-673bb17fed37.roa Signing time: Thu 29 Oct 2026 00:20:04 +0000 ROA not before: Thu 29 Oct 2026 00:20:04 +0000 ROA not after: Wed 27 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fe2:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:c0:2e:c7:eb:c6:f9:30:b9:0d:16:2e:5d:87:b4:ef:93:c8:d3:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 29 00:20:04 2026 GMT Not After : Jan 27 23:59:59 2027 GMT Subject: serialNumber=a4241e48ab016b410bdc9593e7f435d79cc41384aca033602a645afd656b0162, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c4:4b:51:f4:c8:99:e9:e4:8e:27:29:db:dc: ee:aa:7d:79:ba:e8:2d:66:e0:97:09:c4:ce:17:0e: 62:1d:04:d2:c5:09:df:b8:f6:d8:7e:12:48:90:20: 35:f8:02:0c:30:38:b8:d0:cf:e7:dd:2a:94:9e:bb: 2c:c8:87:70:9e:57:16:88:82:72:55:96:8d:1e:12: c2:af:ec:b1:7a:80:3b:68:1c:ec:39:ec:ab:13:6b: 00:1a:c6:13:75:1d:ad:68:27:a3:af:c3:da:76:62: af:be:e2:65:26:fa:7e:6a:82:a5:7c:94:cb:6f:2e: d0:23:e8:ab:35:08:08:89:6a:9b:d4:45:82:5d:96: 84:0d:9b:f9:24:aa:84:23:45:a2:07:bb:15:0a:35: 64:51:fc:12:90:97:03:47:a4:46:32:2d:57:d2:4c: ce:f7:47:94:59:23:e0:66:d5:fc:2a:da:9e:9d:3f: 44:95:dd:bb:2d:bc:bc:7d:71:be:62:b2:ec:f5:3f: 6c:53:65:c6:52:8c:48:f0:a9:6b:63:09:68:3e:66: 8b:ed:08:1f:3b:9b:1c:df:6f:e6:81:6d:29:e7:d1: 29:05:fe:5a:42:bb:e5:68:22:e1:9d:6c:0c:a2:54: 83:f1:38:0e:c6:82:f6:47:33:7b:25:33:5e:df:b3: 5e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:BC:F4:1A:2E:C5:2E:48:A4:88:33:84:00:69:C2:52:88:C3:17:5F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa20b4d1-0cb7-4c87-a727-673bb17fed37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fe2:1000::/40 Signature Algorithm: sha256WithRSAEncryption 7b:1e:e1:aa:b2:92:5c:a1:d6:15:0c:1b:f3:2e:bf:80:c8:56: 75:e2:b4:65:18:8a:72:6e:5f:dd:bd:57:98:25:1e:fe:21:29: f9:82:3e:56:70:7a:4c:59:ec:62:4d:97:7a:e7:91:2a:02:c8: 42:b9:7d:30:7d:a1:aa:31:74:a7:66:ea:fd:06:7a:3d:ce:ae: f5:ec:4d:ea:d7:d8:8a:58:12:74:de:34:f8:10:fd:23:b3:20: af:78:d5:fb:64:5e:7a:de:23:d1:84:b8:60:e0:3e:58:6b:f8: 10:20:31:4e:c9:45:5f:b5:65:b4:9e:ff:2a:35:c7:96:cf:7d: d7:45:d5:26:a0:f9:e1:1d:97:0d:b3:e2:d6:25:fb:7e:0f:ce: f7:07:9c:0a:05:60:10:be:36:09:59:ee:b2:91:ef:48:5a:0b: b4:f6:3a:8a:60:52:37:89:8e:b2:d0:fe:d4:da:24:3d:10:70: 47:65:0e:9c:8c:53:cb:55:61:ba:91:5b:4a:59:35:4e:34:0a: 4f:16:00:d9:d5:14:5a:19:e1:a0:b3:2a:30:a8:9a:52:63:33: b6:b9:d4:ec:bf:c6:7e:0a:2d:1c:e6:b3:dc:72:2d:36:52:4d: f3:d7:fd:f4:62:5d:7c:6c:cf:7c:3b:3d:74:4e:68:38:2f:bb: f7:47:08:16 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUCsAux+vG+TC5DRYuXYe075PI010wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI5MDAyMDA0WhcNMjcwMTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNDI0MWU0OGFiMDE2YjQxMGJkYzk1OTNlN2Y0MzVkNzlj YzQxMzg0YWNhMDMzNjAyYTY0NWFmZDY1NmIwMTYyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOxEtR9MiZ6eSOJynb3O6qfXm66C1m4JcJxM4XDmIdBNLF Cd+49th+EkiQIDX4AgwwOLjQz+fdKpSeuyzIh3CeVxaIgnJVlo0eEsKv7LF6gDto HOw57KsTawAaxhN1Ha1oJ6Ovw9p2Yq++4mUm+n5qgqV8lMtvLtAj6Ks1CAiJapvU RYJdloQNm/kkqoQjRaIHuxUKNWRR/BKQlwNHpEYyLVfSTM73R5RZI+Bm1fwq2p6d P0SV3bstvLx9cb5isuz1P2xTZcZSjEjwqWtjCWg+ZovtCB87mxzfb+aBbSnn0SkF /lpCu+VoIuGdbAyiVIPxOA7GgvZHM3slM17fs14lAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUjLz0Gi7FLkikiDOEAGnCUojDF18wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FhMjBiNGQxLTBjYjctNGM4Ny1hNzI3LTY3M2JiMTdmZWQzNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/iEDANBgkqhkiG9w0BAQsFAAOCAQEAex7hqrKSXKHWFQwb8y6/gMhW deK0ZRiKcm5f3b1XmCUe/iEp+YI+VnB6TFnsYk2XeueRKgLIQrl9MH2hqjF0p2bq /QZ6Pc6u9exN6tfYilgSdN40+BD9I7Mgr3jV+2Reet4j0YS4YOA+WGv4ECAxTslF X7VltJ7/KjXHls9910XVJqD54R2XDbPi1iX7fg/O9wecCgVgEL42CVnuspHvSFoL tPY6imBSN4mOstD+1NokPRBwR2UOnIxTy1VhupFbSlk1TjQKTxYA2dUUWhnhoLMq MKiaUmMztrnU7L/GfgotHOaz3HItNlJN89f99GJdfGzPfDs9dE5oOC+790cIFg== -----END CERTIFICATE-----Generated at Thu Nov 5 01:43:56 2026 by rpki-client