$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa4b93c4-5123-4d2f-a2e4-dd98abc19e76.roa File: aa4b93c4-5123-4d2f-a2e4-dd98abc19e76.roa (raw, json) Hash identifier: tJbfsaAOLziDzbywFTSD25+Tqp1UFKPxzHsPd77x16k= Subject key identifier: FE:18:AA:79:2B:C7:82:B0:9E:1B:3B:5F:79:25:E9:24:6F:D4:FA:10 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 30310EB84508FF682FC51F6282DE60B95B6B4C7A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa4b93c4-5123-4d2f-a2e4-dd98abc19e76.roa Signing time: Thu 22 Oct 2026 01:50:13 +0000 ROA not before: Thu 22 Oct 2026 01:50:13 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 7224 IP address blocks: 2600:1ffd:1008::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:31:0e:b8:45:08:ff:68:2f:c5:1f:62:82:de:60:b9:5b:6b:4c:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 22 01:50:13 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=74e52a17420d4e7b3dcfd0c5f21c4ae6eee9d8f92146fa78e1dbad4921fd5817, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:0f:10:37:f8:46:2b:32:23:62:85:49:ec:13: ea:c2:68:f6:a2:56:ec:a0:5c:b7:c9:f0:2b:3c:c5: 26:91:01:19:d8:8b:1e:08:bc:ab:88:85:2a:2b:51: de:48:96:9b:0d:6e:b7:c3:39:a9:fa:d2:01:8d:f9: d4:de:c8:b6:b8:38:48:ad:7e:fb:03:17:5e:c1:a2: 0f:f4:af:04:61:f0:c0:8d:25:27:26:59:12:87:55: 2b:06:f4:2e:6e:97:8d:a3:86:73:6d:7e:7f:d5:c2: fd:2a:93:cb:3a:76:c8:9f:7a:80:3f:cd:0a:07:62: 83:16:7a:59:f8:8a:b5:26:ac:ae:23:e2:cf:a8:bf: 39:54:1a:b0:dc:8d:1a:1c:da:1b:ea:f7:b5:33:66: 9b:16:b5:ce:4a:9f:9c:43:ed:91:34:e8:fb:74:94: ec:41:8d:53:fe:97:fc:06:bb:4a:d8:9e:d3:a9:17: 50:37:18:bc:47:f8:ac:a0:d1:ed:71:8d:79:9d:58: 77:3b:0a:47:60:14:99:cf:6e:d3:f0:ab:b7:1c:77: 1d:0f:46:cd:18:1f:ed:73:3b:64:b5:91:31:16:9f: 07:aa:f3:54:ad:d5:21:d4:81:30:b9:42:ff:7e:0d: 29:fd:25:fd:20:ec:dc:0a:16:f9:38:fa:94:40:c1: aa:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:18:AA:79:2B:C7:82:B0:9E:1B:3B:5F:79:25:E9:24:6F:D4:FA:10 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa4b93c4-5123-4d2f-a2e4-dd98abc19e76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffd:1008::/48 Signature Algorithm: sha256WithRSAEncryption 35:9d:25:54:49:2e:d0:a7:96:b3:94:c5:d4:8e:4b:6a:cc:53: ef:10:79:cb:cc:cc:98:68:fc:6d:b8:06:39:01:ec:a1:ac:d2: 00:17:42:16:49:3a:72:c6:ae:95:b5:46:29:b6:48:f0:41:98: 6a:19:74:d4:a6:01:89:7a:c1:f1:76:98:bc:e7:42:73:41:58: 0b:8b:25:6b:c0:80:70:7e:2c:d7:1d:cf:4c:11:5e:fa:11:3e: bb:6b:b9:5a:ce:38:ac:66:d0:a9:34:58:2a:2b:c9:ec:cb:5d: 55:fe:ec:fb:bd:dc:7d:b8:9d:5a:38:3f:ba:b8:c1:53:c8:e3: 52:4c:18:4d:59:b6:90:8a:95:74:6d:c7:69:d1:b4:dd:f7:63: 51:a9:45:46:8a:56:b9:b4:76:44:a1:e4:64:b1:b3:93:d0:e6: a1:60:60:ba:25:6f:0d:a8:2f:06:14:59:84:2b:37:b4:9a:7e: e2:2b:e3:9a:d8:49:b9:80:4c:20:35:33:4f:d1:1a:93:0a:49: 97:97:fd:2b:c5:e6:95:9c:1a:31:41:0f:c8:16:01:4d:25:71: 6c:b4:fc:7d:d8:b5:b3:f4:41:79:e5:98:48:62:15:7c:1e:74: ed:8f:ee:02:08:1e:30:78:39:f8:47:c3:f7:f7:8d:3f:a6:01: ca:b4:7d:4f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMDEOuEUI/2gvxR9igt5guVtrTHowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIyMDE1MDEzWhcNMjcwMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NGU1MmExNzQyMGQ0ZTdiM2RjZmQwYzVmMjFjNGFlNmVl ZTlkOGY5MjE0NmZhNzhlMWRiYWQ0OTIxZmQ1ODE3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDwDxA3+EYrMiNihUnsE+rCaPaiVuygXLfJ8Cs8xSaRARnY ix4IvKuIhSorUd5IlpsNbrfDOan60gGN+dTeyLa4OEitfvsDF17Bog/0rwRh8MCN JScmWRKHVSsG9C5ul42jhnNtfn/Vwv0qk8s6dsifeoA/zQoHYoMWeln4irUmrK4j 4s+ovzlUGrDcjRoc2hvq97UzZpsWtc5Kn5xD7ZE06Pt0lOxBjVP+l/wGu0rYntOp F1A3GLxH+Kyg0e1xjXmdWHc7CkdgFJnPbtPwq7ccdx0PRs0YH+1zO2S1kTEWnweq 81St1SHUgTC5Qv9+DSn9Jf0g7NwKFvk4+pRAwaobAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU/hiqeSvHgrCeGztfeSXpJG/U+hAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FhNGI5M2M0LTUxMjMtNGQyZi1hMmU0LWRkOThhYmMxOWU3Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/9EAgwDQYJKoZIhvcNAQELBQADggEBADWdJVRJLtCnlrOUxdSOS2rM U+8QecvMzJho/G24BjkB7KGs0gAXQhZJOnLGrpW1Rim2SPBBmGoZdNSmAYl6wfF2 mLznQnNBWAuLJWvAgHB+LNcdz0wRXvoRPrtruVrOOKxm0Kk0WCoryezLXVX+7Pu9 3H24nVo4P7q4wVPI41JMGE1ZtpCKlXRtx2nRtN33Y1GpRUaKVrm0dkSh5GSxs5PQ 5qFgYLolbw2oLwYUWYQrN7SafuIr45rYSbmATCA1M0/RGpMKSZeX/SvF5pWcGjFB D8gWAU0lcWy0/H3YtbP0QXnlmEhiFXwedO2P7gIIHjB4OfhHw/f3jT+mAcq0fU8= -----END CERTIFICATE-----Generated at Wed Nov 4 14:25:18 2026 by rpki-client