$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bbac56dd-763f-4156-a2fe-12b5d4647aec.roa File: bbac56dd-763f-4156-a2fe-12b5d4647aec.roa (raw, json) Hash identifier: t4oo/QEmVD3uCQh4Xn4e3aENQ11uUyODSQZxoQ+OJqk= Subject key identifier: B8:F4:80:68:6B:0E:85:CE:CF:86:FD:F0:15:6E:E8:D0:18:A0:70:61 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 71DDE05972A9B2BB1CE9C5C00251807DFB3AEA68 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bbac56dd-763f-4156-a2fe-12b5d4647aec.roa Signing time: Thu 22 Oct 2026 02:11:15 +0000 ROA not before: Thu 22 Oct 2026 02:11:15 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:80e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:dd:e0:59:72:a9:b2:bb:1c:e9:c5:c0:02:51:80:7d:fb:3a:ea:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 22 02:11:15 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=c30501d63c1a70512cc3d3efa56c19a197cfa9ec779d7a853c1a029507f043eb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a8:1d:bd:a2:f9:4b:20:25:38:f1:bd:f8:67: 98:d7:e1:b8:01:02:f7:3e:07:d3:89:55:d8:da:97: ca:23:49:2c:61:2a:36:4c:a9:0d:ab:41:6f:d2:a5: 91:87:06:45:e8:67:86:32:f5:be:10:36:37:a8:f4: 6d:cf:bf:72:40:0b:9c:08:f2:ea:65:22:bb:42:d9: 47:a2:8a:0d:74:bb:76:65:56:41:01:b9:ab:02:96: 29:fa:39:12:9e:00:ba:41:7d:3a:e0:71:b0:f4:4f: dd:79:22:b4:2c:db:ed:e0:6e:cf:7a:8d:bd:ce:e8: 01:d8:31:36:fe:f4:9e:7a:da:ae:ab:5c:81:b0:eb: 62:ea:3c:e6:40:ae:12:17:a7:06:16:6d:7c:85:5c: ca:5f:af:50:a0:23:91:48:55:34:5d:51:77:ff:2b: 6e:c1:72:0b:61:d0:7f:32:05:05:56:d1:6a:25:16: 77:a2:9a:eb:8f:83:0f:da:30:bc:ee:82:5b:78:53: cc:a7:d8:a2:4f:7c:a9:1d:91:f7:72:6d:44:35:f3: 3d:da:70:34:fb:5a:fb:51:8d:56:1f:1d:b2:bd:70: 53:11:c4:23:80:a8:fa:41:74:5f:b4:04:a2:f3:ae: 58:75:b3:e8:71:6c:82:3e:9a:41:e9:12:10:6a:b3: d3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F4:80:68:6B:0E:85:CE:CF:86:FD:F0:15:6E:E8:D0:18:A0:70:61 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bbac56dd-763f-4156-a2fe-12b5d4647aec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:80e0::/48 Signature Algorithm: sha256WithRSAEncryption c7:cf:12:ae:53:c1:57:63:f7:be:6b:05:fc:ea:22:d8:63:b3: 4d:db:06:73:ec:ed:f7:14:ea:21:fc:7e:35:0a:d7:3b:10:f0: a1:02:fd:06:03:22:64:ff:fc:9a:b8:c9:4e:4a:44:73:35:53: 22:73:f6:b0:25:4e:65:c1:dd:65:35:98:23:70:b5:33:cb:96: 42:e5:0d:23:aa:82:5e:8d:d3:99:f7:44:7f:2d:48:74:59:b1: da:7d:76:23:ca:40:ac:a8:72:19:95:79:bd:6c:db:c3:6a:97: 47:1c:7b:64:cd:50:e3:cc:34:de:1c:70:7b:3d:ec:34:0f:1b: 6b:1d:51:a2:a5:1c:e9:79:a3:2e:d5:65:e9:e7:5a:8d:5d:92: 60:dc:b2:17:65:fa:1a:c2:f8:a0:75:a5:f5:04:84:62:e5:20: 99:1b:7d:85:e1:ec:76:e6:13:ff:e7:94:4e:a0:38:6f:3b:86: d6:a6:52:5e:29:f9:cd:ed:5e:40:c0:a4:d2:bc:ba:4e:d9:05: c9:13:69:1b:8b:40:8d:50:69:1f:17:e7:08:b5:f8:86:48:1e: 6f:ef:e9:af:b5:2d:57:06:b5:ec:8c:d4:24:f0:09:de:23:4c: 31:48:7a:22:ab:60:6c:e5:9b:3e:e1:b4:ce:ce:bd:a0:b6:5e: e3:44:4c:bf -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcd3gWXKpsrsc6cXAAlGAffs66mgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIyMDIxMTE1WhcNMjcwMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjMzA1MDFkNjNjMWE3MDUxMmNjM2QzZWZhNTZjMTlhMTk3 Y2ZhOWVjNzc5ZDdhODUzYzFhMDI5NTA3ZjA0M2ViMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVqB29ovlLICU48b34Z5jX4bgBAvc+B9OJVdjal8ojSSxh KjZMqQ2rQW/SpZGHBkXoZ4Yy9b4QNjeo9G3Pv3JAC5wI8uplIrtC2Ueiig10u3Zl VkEBuasClin6ORKeALpBfTrgcbD0T915IrQs2+3gbs96jb3O6AHYMTb+9J562q6r XIGw62LqPOZArhIXpwYWbXyFXMpfr1CgI5FIVTRdUXf/K27Bcgth0H8yBQVW0Wol FneimuuPgw/aMLzuglt4U8yn2KJPfKkdkfdybUQ18z3acDT7WvtRjVYfHbK9cFMR xCOAqPpBdF+0BKLzrlh1s+hxbII+mkHpEhBqs9PPAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUuPSAaGsOhc7Phv3wFW7o0BigcGEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JiYWM1NmRkLTc2M2YtNDE1Ni1hMmZlLTEyYjVkNDY0N2FlYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//gOAwDQYJKoZIhvcNAQELBQADggEBAMfPEq5TwVdj975rBfzqIthj s03bBnPs7fcU6iH8fjUK1zsQ8KEC/QYDImT//Jq4yU5KRHM1UyJz9rAlTmXB3WU1 mCNwtTPLlkLlDSOqgl6N05n3RH8tSHRZsdp9diPKQKyochmVeb1s28Nql0cce2TN UOPMNN4ccHs97DQPG2sdUaKlHOl5oy7VZennWo1dkmDcshdl+hrC+KB1pfUEhGLl IJkbfYXh7HbmE//nlE6gOG87htamUl4p+c3tXkDApNK8uk7ZBckTaRuLQI1QaR8X 5wi1+IZIHm/v6a+1LVcGteyM1CTwCd4jTDFIeiKrYGzlmz7htM7OvaC2XuNETL8= -----END CERTIFICATE-----Generated at Mon Nov 2 22:30:23 2026 by rpki-client