$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/afeead1b-cace-4d32-ae69-2fce918f96df.roa File: afeead1b-cace-4d32-ae69-2fce918f96df.roa (raw, json) Hash identifier: n6XQbf4quiue619h3CV8KV+VOG9L4U9/eJs5dmhteTs= Subject key identifier: 61:0F:0E:E5:12:11:6C:93:4F:BF:3A:6B:82:04:94:AA:62:B7:80:BB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 31C297D30E77622A74B03FF11DFDC71B23CE5B03 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/afeead1b-cace-4d32-ae69-2fce918f96df.roa Signing time: Fri 23 Oct 2026 01:10:29 +0000 ROA not before: Fri 23 Oct 2026 01:10:29 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f1d:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:c2:97:d3:0e:77:62:2a:74:b0:3f:f1:1d:fd:c7:1b:23:ce:5b:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 23 01:10:29 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=3ca2c153cabca300e62b2affc80dda931937df06c616486a7a9642dbbd4a469d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fe:b4:0a:bc:22:a5:40:e7:f8:0f:3f:f5:29: a9:34:e5:b8:c1:a6:50:b4:0a:39:1f:b2:b6:0a:c2: 19:df:ae:18:7e:fc:b6:5e:a3:96:b0:9f:cd:58:e9: 49:20:22:b3:76:56:c2:c8:aa:67:d3:e4:7a:aa:59: d0:ae:9a:87:cb:45:e7:85:09:5a:ea:c0:b3:c7:ff: 36:ce:a3:d4:09:b7:53:d6:05:79:08:5a:13:fc:ef: 08:fc:5a:e2:92:8e:17:21:3c:11:e8:21:df:76:61: bf:61:5f:31:f3:39:49:38:e6:8b:60:46:79:29:29: 00:c9:78:f4:98:2d:87:8c:56:43:70:02:f6:cd:39: 1c:2b:c1:bf:f6:89:75:28:52:7f:13:45:d9:2d:70: f1:38:b0:08:4d:37:6e:1f:26:24:f6:af:8e:ee:1c: 11:6a:ce:99:16:ee:25:73:7e:a1:6c:ff:1a:9f:26: ae:a9:3c:6c:74:8b:4e:df:98:36:d4:cb:bd:7b:54: 59:c4:8e:7d:dd:13:23:10:ad:9f:9d:84:3c:2b:c0: e1:e0:04:1a:4e:8d:49:23:a8:3e:00:2d:40:ef:71: 62:41:86:c1:a6:51:ef:de:6e:35:f2:3e:3a:3d:be: 79:f2:61:3d:c0:c6:57:0a:6f:37:9c:a7:97:75:e0: 66:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:0F:0E:E5:12:11:6C:93:4F:BF:3A:6B:82:04:94:AA:62:B7:80:BB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/afeead1b-cace-4d32-ae69-2fce918f96df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f1d:4000::/36 Signature Algorithm: sha256WithRSAEncryption c5:c0:ef:e5:35:a7:f5:64:3c:f4:87:58:56:77:90:2f:4a:c9: 19:82:7e:5b:ab:87:5d:3a:99:ee:ce:65:53:a5:e1:21:1b:54: 59:e9:e9:72:e2:23:e0:8b:13:28:d3:88:20:5b:15:1b:bd:2b: 6b:be:10:b4:8d:27:bd:7a:73:f4:39:d6:f8:a4:43:eb:5d:e2: 72:c6:83:95:17:35:69:be:27:ea:9b:67:82:1d:0f:17:8e:49: b8:ed:96:d6:c4:46:b9:40:c7:7b:d1:6c:01:7d:01:4d:15:ef: 3c:67:92:91:b9:4d:da:6a:c0:5f:51:f5:fe:a5:9e:a0:36:28: 92:dc:86:78:fb:b4:ab:51:93:27:ef:ef:da:1c:7a:6a:d4:01: fe:9a:ff:81:89:65:2b:90:d1:62:7d:ff:ad:a5:da:94:27:6b: 1a:1b:32:be:ce:5f:4d:60:e2:61:f3:c1:3c:7d:a8:7c:17:9d: 64:e3:52:43:a2:28:72:67:f2:99:27:17:d4:35:fc:e2:a0:08: bd:32:45:1e:4c:06:a0:8c:e9:ad:c4:9d:ec:42:51:72:eb:f4: b1:f5:26:43:df:39:6b:1f:a1:f3:0f:a4:6e:81:09:e4:ef:3d: 2b:fe:79:db:b2:b3:d1:da:42:ab:66:e7:61:78:fc:f1:b8:e4: 15:34:57:f0 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUMcKX0w53Yip0sD/xHf3HGyPOWwMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDExMDI5WhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AzY2EyYzE1M2NhYmNhMzAwZTYyYjJhZmZjODBkZGE5MzE5 MzdkZjA2YzYxNjQ4NmE3YTk2NDJkYmJkNGE0NjlkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDE/rQKvCKlQOf4Dz/1Kak05bjBplC0CjkfsrYKwhnfrhh+ /LZeo5awn81Y6UkgIrN2VsLIqmfT5HqqWdCumofLReeFCVrqwLPH/zbOo9QJt1PW BXkIWhP87wj8WuKSjhchPBHoId92Yb9hXzHzOUk45otgRnkpKQDJePSYLYeMVkNw AvbNORwrwb/2iXUoUn8TRdktcPE4sAhNN24fJiT2r47uHBFqzpkW7iVzfqFs/xqf Jq6pPGx0i07fmDbUy717VFnEjn3dEyMQrZ+dhDwrwOHgBBpOjUkjqD4ALUDvcWJB hsGmUe/ebjXyPjo9vnnyYT3AxlcKbzecp5d14GZfAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUYQ8O5RIRbJNPvzprggSUqmK3gLswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FmZWVhZDFiLWNhY2UtNGQzMi1hZTY5LTJmY2U5MThmOTZkZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8dQDANBgkqhkiG9w0BAQsFAAOCAQEAxcDv5TWn9WQ89IdYVneQL0rJ GYJ+W6uHXTqZ7s5lU6XhIRtUWenpcuIj4IsTKNOIIFsVG70ra74QtI0nvXpz9DnW +KRD613icsaDlRc1ab4n6ptngh0PF45JuO2W1sRGuUDHe9FsAX0BTRXvPGeSkblN 2mrAX1H1/qWeoDYoktyGePu0q1GTJ+/v2hx6atQB/pr/gYllK5DRYn3/raXalCdr Ghsyvs5fTWDiYfPBPH2ofBedZONSQ6IocmfymScX1DX84qAIvTJFHkwGoIzprcSd 7EJRcuv0sfUmQ985ax+h8w+kboEJ5O89K/5527Kz0dpCq2bnYXj88bjkFTRX8A== -----END CERTIFICATE-----Generated at Mon Nov 2 19:19:47 2026 by rpki-client