$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba5981d4-afd6-4470-aa62-ba6b2d148fcd.roa File: ba5981d4-afd6-4470-aa62-ba6b2d148fcd.roa (raw, json) Hash identifier: Hl3zTpLGprawMW4iD3RRItGpn6/s5E1KGruECvel/PU= Subject key identifier: 53:C2:F6:A9:B9:73:E2:71:77:F8:CF:1A:3D:90:FA:59:68:35:2F:DC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2EEC3220BF7F74644DD5831AAFB01DD9E064CC2E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba5981d4-afd6-4470-aa62-ba6b2d148fcd.roa Signing time: Fri 23 Oct 2026 02:30:15 +0000 ROA not before: Fri 23 Oct 2026 02:30:15 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:6000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:ec:32:20:bf:7f:74:64:4d:d5:83:1a:af:b0:1d:d9:e0:64:cc:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 23 02:30:15 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=b2d5998a25597007023e42b4992923bf6f5ef709f1e674edab873043b5349021, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c7:2d:fa:15:1f:83:10:27:04:3e:a2:b0:52: 1a:f8:51:12:37:6e:d4:89:27:13:8c:ec:ec:8d:81: 0a:ab:77:2e:c3:d1:1b:a3:1e:bd:86:e0:68:7c:f2: 3e:02:45:e3:b7:a2:04:29:5f:8a:69:d6:83:7b:94: 9a:f7:82:67:ad:76:9b:aa:d7:dd:dd:9b:f5:1a:ef: 6d:2a:b7:67:22:91:6b:ee:f5:a0:a2:fb:45:62:3a: 8c:bc:ef:a6:b0:eb:23:e7:35:76:0b:69:86:99:40: 02:d1:50:33:42:21:74:7d:f7:2b:02:af:4d:ea:2f: d9:b1:5b:44:b4:a2:74:23:44:bb:04:64:f3:ee:e0: d9:38:38:3e:d7:4f:f5:25:59:f9:4d:ee:90:ea:4e: d4:eb:e3:e1:47:b4:50:c3:a1:86:1c:5f:45:98:9c: 66:65:76:89:0c:da:d2:88:00:a4:b9:08:08:25:a0: 3f:aa:c6:a0:07:68:59:7f:3f:dc:d1:e5:47:9e:ce: 43:69:a5:eb:30:3f:51:f5:1d:1a:ab:b6:13:e7:75: 9d:71:e7:db:35:78:94:14:c8:c4:0b:84:af:fb:7c: 95:46:11:b9:84:d1:c1:5f:8c:ac:0a:92:50:84:1d: f4:b2:49:91:86:02:f8:a8:95:66:ff:ef:f7:06:ab: 8e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C2:F6:A9:B9:73:E2:71:77:F8:CF:1A:3D:90:FA:59:68:35:2F:DC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba5981d4-afd6-4470-aa62-ba6b2d148fcd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:6000::/40 Signature Algorithm: sha256WithRSAEncryption 23:00:8d:6a:51:5c:51:b2:45:c7:7b:2f:e5:e1:f4:2e:03:57: e6:1b:4b:ef:a9:72:4c:ec:11:94:d6:92:bd:34:47:ac:87:a2: 72:b2:d2:04:f3:12:3a:af:6c:32:94:14:c3:9d:ba:91:d7:7f: 3f:7a:fa:d4:47:0d:27:25:28:e9:e1:33:0e:c8:3c:37:55:a3: bf:f9:b1:28:43:94:33:43:cd:20:cc:dc:12:7e:4a:6b:aa:f5: 81:80:7e:56:69:7d:67:3e:65:e4:01:80:ec:3d:23:dc:70:68: e6:96:7e:da:66:a6:f8:1e:45:6b:21:2e:d1:da:85:f4:65:8f: 9e:ca:98:47:c3:45:58:66:8f:5d:fc:ba:19:e4:0e:8f:d7:b9: 99:71:fd:63:4b:13:0a:0d:29:79:53:81:21:80:8d:47:01:74: f7:0d:49:2d:4b:0c:4e:83:0b:2b:fb:ef:88:ee:ec:4a:34:5c: 7b:86:d4:f5:64:82:e4:75:40:28:f1:44:2b:42:7e:51:6a:f3: 91:ec:84:5c:08:96:96:09:b2:40:25:3f:4b:25:9b:4b:62:86: 3d:e7:70:be:b4:df:a3:aa:2a:e3:8a:96:4e:e6:0b:1b:f2:e9: 43:a9:eb:ce:f5:e2:10:18:bc:c2:fa:8b:05:eb:4d:10:a7:cb: 29:67:a9:2d -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIULuwyIL9/dGRN1YMar7Ad2eBkzC4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDIzMDE1WhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMmQ1OTk4YTI1NTk3MDA3MDIzZTQyYjQ5OTI5MjNiZjZm NWVmNzA5ZjFlNjc0ZWRhYjg3MzA0M2I1MzQ5MDIxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1xy36FR+DECcEPqKwUhr4URI3btSJJxOM7OyNgQqrdy7D 0RujHr2G4Gh88j4CReO3ogQpX4pp1oN7lJr3gmetdpuq193dm/Ua720qt2cikWvu 9aCi+0ViOoy876aw6yPnNXYLaYaZQALRUDNCIXR99ysCr03qL9mxW0S0onQjRLsE ZPPu4Nk4OD7XT/UlWflN7pDqTtTr4+FHtFDDoYYcX0WYnGZldokM2tKIAKS5CAgl oD+qxqAHaFl/P9zR5UeezkNppeswP1H1HRqrthPndZ1x59s1eJQUyMQLhK/7fJVG EbmE0cFfjKwKklCEHfSySZGGAviolWb/7/cGq47zAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUU8L2qblz4nF3+M8aPZD6WWg1L9wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JhNTk4MWQ0LWFmZDYtNDQ3MC1hYTYyLWJhNmIyZDE0OGZjZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB//YDANBgkqhkiG9w0BAQsFAAOCAQEAIwCNalFcUbJFx3sv5eH0LgNX 5htL76lyTOwRlNaSvTRHrIeicrLSBPMSOq9sMpQUw526kdd/P3r61EcNJyUo6eEz Dsg8N1Wjv/mxKEOUM0PNIMzcEn5Ka6r1gYB+Vml9Zz5l5AGA7D0j3HBo5pZ+2mam +B5FayEu0dqF9GWPnsqYR8NFWGaPXfy6GeQOj9e5mXH9Y0sTCg0peVOBIYCNRwF0 9w1JLUsMToMLK/vviO7sSjRce4bU9WSC5HVAKPFEK0J+UWrzkeyEXAiWlgmyQCU/ SyWbS2KGPedwvrTfo6oq44qWTuYLG/LpQ6nrzvXiEBi8wvqLBetNEKfLKWepLQ== -----END CERTIFICATE-----Generated at Mon Nov 2 16:45:37 2026 by rpki-client