$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abdbb1fc-71cb-4117-b953-95f82ecba7e2.roa File: abdbb1fc-71cb-4117-b953-95f82ecba7e2.roa (raw, json) Hash identifier: nxauYPqWDytz9aJeyHYAZ4WgiMyki/G9bbIMYOPace0= Subject key identifier: CD:BA:3A:49:3D:D4:95:DC:1F:83:23:C4:1B:E1:96:45:59:D1:BC:ED Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 341C855DBCDC89F245B29581C66BC1C8A4AED2FB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abdbb1fc-71cb-4117-b953-95f82ecba7e2.roa Signing time: Mon 19 Oct 2026 00:30:46 +0000 ROA not before: Mon 19 Oct 2026 00:30:46 +0000 ROA not after: Sun 17 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fec:1400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:1c:85:5d:bc:dc:89:f2:45:b2:95:81:c6:6b:c1:c8:a4:ae:d2:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 19 00:30:46 2026 GMT Not After : Jan 17 23:59:59 2027 GMT Subject: serialNumber=2bd4e66c6000aef4d81dd7f7b5100caaa9d0e3f7bbd7a486acba78b56b3a72dd, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:20:13:69:9b:87:f0:73:50:d9:ee:ce:ab:e7: a7:2c:9a:26:39:c1:73:ef:c6:40:20:c8:f1:93:8f: f7:0c:56:b1:9b:7f:6d:16:fd:87:1b:ad:5d:85:f0: 41:18:3b:76:71:30:b0:a4:85:41:03:02:3c:24:a3: 5b:ec:ed:46:4f:b6:1c:93:52:f7:22:3e:0d:33:38: 85:13:2b:aa:0b:90:e2:f2:b3:a4:1e:71:73:ef:9e: a7:a5:34:2f:f4:13:65:c2:3b:fa:de:29:ed:27:c8: f8:e6:a9:69:e8:3b:00:05:4a:68:dd:a1:f3:7b:a9: 0d:60:fd:57:6f:4d:8f:0e:68:1a:54:f4:30:30:a5: 46:fe:d7:66:00:f4:f7:03:21:67:de:72:be:8d:90: d0:b1:8f:3d:fd:16:76:03:33:27:e3:9c:9b:b9:fb: 20:a3:37:6a:f4:1c:23:a6:ec:ff:69:39:2c:03:7f: f9:9f:64:cf:68:a4:bf:25:38:80:72:18:6e:46:d9: cb:30:96:18:ed:d2:f2:44:e7:35:6d:1b:f5:c8:1f: e1:08:87:0c:93:4c:8c:83:35:b0:1b:d4:91:fc:45: b7:5b:9c:40:82:7f:a2:18:a5:5d:52:91:85:73:08: d0:94:3c:ff:2f:78:0b:df:d6:a1:7e:de:a7:0e:2d: 75:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:BA:3A:49:3D:D4:95:DC:1F:83:23:C4:1B:E1:96:45:59:D1:BC:ED X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abdbb1fc-71cb-4117-b953-95f82ecba7e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fec:1400::/48 Signature Algorithm: sha256WithRSAEncryption d5:38:a9:2e:b7:8a:b1:f2:de:7d:76:36:34:fc:6d:18:8e:88: 2b:fe:ad:2a:95:b9:b0:0d:40:d6:81:cd:f8:b5:5b:17:61:5d: 39:a0:f0:8a:2e:27:70:c5:67:a9:24:87:a8:f8:95:e4:3f:3e: 40:16:6b:c1:6a:18:2e:e4:ff:40:e2:16:e5:3b:8e:a7:83:b1: fe:94:fa:05:2c:43:14:93:06:d5:6c:5c:a9:e2:63:14:26:ad: f0:ad:23:7d:67:da:8b:bd:bb:65:3c:12:6c:21:6f:9c:71:1c: 7a:3b:f1:ec:3e:5b:a3:fb:24:0e:a8:15:7a:76:f7:0d:af:7a: db:83:6b:a2:3a:08:d0:11:a7:f6:76:cd:d9:65:24:d6:a4:69: ee:75:74:2d:57:d9:ef:e7:63:e1:ed:8d:35:8f:7c:93:5c:ff: 0a:cf:22:91:97:49:45:51:47:40:6c:b0:8b:27:b9:f0:72:a7: 23:47:53:e3:9d:d9:9b:78:fc:db:52:8b:29:65:5d:cf:ee:1c: 88:89:bf:72:0a:a7:5d:7c:17:7d:55:5a:4a:2e:3c:c6:65:a7: b3:39:36:c5:60:f7:b0:2b:0d:95:cc:33:04:e6:e0:fb:0b:d6: 4f:d7:dd:40:ad:ed:c7:87:17:9d:77:56:b4:33:b4:d9:bc:ac: 56:ff:54:42 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUNByFXbzcifJFspWBxmvByKSu0vswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE5MDAzMDQ2WhcNMjcwMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyYmQ0ZTY2YzYwMDBhZWY0ZDgxZGQ3ZjdiNTEwMGNhYWE5 ZDBlM2Y3YmJkN2E0ODZhY2JhNzhiNTZiM2E3MmRkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1IBNpm4fwc1DZ7s6r56csmiY5wXPvxkAgyPGTj/cMVrGb f20W/YcbrV2F8EEYO3ZxMLCkhUEDAjwko1vs7UZPthyTUvciPg0zOIUTK6oLkOLy s6QecXPvnqelNC/0E2XCO/reKe0nyPjmqWnoOwAFSmjdofN7qQ1g/VdvTY8OaBpU 9DAwpUb+12YA9PcDIWfecr6NkNCxjz39FnYDMyfjnJu5+yCjN2r0HCOm7P9pOSwD f/mfZM9opL8lOIByGG5G2cswlhjt0vJE5zVtG/XIH+EIhwyTTIyDNbAb1JH8Rbdb nECCf6IYpV1SkYVzCNCUPP8veAvf1qF+3qcOLXVbAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUzbo6ST3UldwfgyPEG+GWRVnRvO0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FiZGJiMWZjLTcxY2ItNDExNy1iOTUzLTk1ZjgyZWNiYTdlMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/sFAAwDQYJKoZIhvcNAQELBQADggEBANU4qS63irHy3n12NjT8bRiO iCv+rSqVubANQNaBzfi1WxdhXTmg8IouJ3DFZ6kkh6j4leQ/PkAWa8FqGC7k/0Di FuU7jqeDsf6U+gUsQxSTBtVsXKniYxQmrfCtI31n2ou9u2U8Emwhb5xxHHo78ew+ W6P7JA6oFXp29w2vetuDa6I6CNARp/Z2zdllJNakae51dC1X2e/nY+HtjTWPfJNc /wrPIpGXSUVRR0BssIsnufBypyNHU+Od2Zt4/NtSiyllXc/uHIiJv3IKp118F31V WkouPMZlp7M5NsVg97ArDZXMMwTm4PsL1k/X3UCt7ceHF513VrQztNm8rFb/VEI= -----END CERTIFICATE-----Generated at Mon Nov 2 18:31:27 2026 by rpki-client