$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd5d39ce-9ed8-4564-a1f8-c329aaebb997.roa File: bd5d39ce-9ed8-4564-a1f8-c329aaebb997.roa (raw, json) Hash identifier: mmxRFhHExznP4Za0/5FpoFq20yjPcJU0AeDpFdggRZQ= Subject key identifier: E1:9F:11:B2:49:FE:51:BA:BE:FE:9B:D6:53:39:A0:FD:7A:BC:5D:49 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3684F78881C41EEA6E8296E60A1E7DAD414BC88E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd5d39ce-9ed8-4564-a1f8-c329aaebb997.roa Signing time: Tue 06 Oct 2026 00:01:33 +0000 ROA not before: Tue 06 Oct 2026 00:01:33 +0000 ROA not after: Mon 04 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffd:8190::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 19 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:84:f7:88:81:c4:1e:ea:6e:82:96:e6:0a:1e:7d:ad:41:4b:c8:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 6 00:01:33 2026 GMT Not After : Jan 4 23:59:59 2027 GMT Subject: serialNumber=5faefbb718e912dd88ca5762e0ffc3f86e6e178a4ed5afc4f156b4daf2f9e713, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4e:e6:1f:23:07:6d:2b:ee:8b:c2:34:15:1a: 41:36:5d:ad:aa:0f:66:8e:20:af:67:34:4a:08:58: aa:2a:6e:c5:c1:82:a9:06:04:cc:a9:93:3f:f2:89: 35:48:67:bc:47:64:59:e5:4f:98:df:40:d6:88:af: ad:15:32:8b:8c:1d:4c:9b:bc:c7:ff:43:1f:ed:fc: c6:04:38:fb:7d:01:74:04:a8:9f:38:e9:ec:c9:ea: db:10:e1:f9:a3:08:52:43:a4:5a:f7:22:0a:61:f4: cc:4d:9a:1f:2c:54:a1:eb:11:ac:23:51:8f:d1:61: a7:c4:10:57:bb:f5:7a:65:b0:d9:4c:34:1c:ae:48: 22:bf:24:03:a1:cc:16:1b:b6:55:a8:cc:be:bf:ed: e7:d9:06:ef:6f:93:aa:e7:4c:fb:5a:c1:03:2b:5b: 55:34:6b:38:bd:80:15:a4:82:9f:3d:02:6a:0f:9d: f9:0f:bd:ee:f2:c0:fc:d1:91:ac:b8:e8:91:04:48: 44:3f:dc:76:c8:bc:0f:43:46:d0:ee:34:10:90:ac: 93:f5:0c:17:6f:08:d5:28:99:b3:e7:c5:25:ea:89: 82:e0:a6:a3:7a:51:c1:22:7f:47:b4:58:69:da:cb: 68:7b:5f:5d:8b:48:2c:20:21:21:78:6d:14:f9:c8: 7d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:9F:11:B2:49:FE:51:BA:BE:FE:9B:D6:53:39:A0:FD:7A:BC:5D:49 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd5d39ce-9ed8-4564-a1f8-c329aaebb997.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffd:8190::/48 Signature Algorithm: sha256WithRSAEncryption 6f:2c:3d:25:ca:f9:9f:f3:a1:f0:81:cc:4e:c7:e7:02:4c:79: 12:a5:40:1f:5a:74:26:b6:13:96:6a:da:20:05:f7:2a:46:49: 2b:eb:11:6f:5f:25:c4:c9:67:5a:d1:cc:94:6c:39:a2:06:90: f2:f4:91:c0:d0:c9:de:d6:77:15:9c:6e:ab:c6:46:70:2d:d0: 3e:59:e1:9c:aa:2c:d5:b6:e1:db:26:b2:fa:ad:6f:ca:dc:6e: 2b:3c:85:71:40:f7:ea:2e:fd:1c:59:6f:10:d6:ef:0b:2b:6c: 88:ef:e2:2b:27:b4:cc:04:f7:65:97:fe:3c:84:c8:04:e1:f7: 3c:65:d7:29:30:c8:4f:c5:4b:49:06:73:06:9e:8e:ee:11:fb: c2:88:0e:70:17:61:75:96:7c:ba:0f:bd:0d:8e:19:5a:31:d3: 4a:15:bd:fd:e2:41:5c:6c:21:c0:6d:ae:b0:f3:7a:9f:41:15: 67:01:52:bc:67:7d:82:2a:80:ec:06:ac:09:91:68:4e:91:41: 42:88:f1:ee:c5:d3:9d:c1:aa:4a:49:12:07:55:ec:43:d6:70: 5c:1b:ac:d4:0f:3a:ed:6e:4b:87:be:af:c2:45:81:fd:93:d7: 81:7e:e4:65:d3:bb:30:0a:33:cf:56:d9:2b:14:4f:04:5e:15: 37:e5:8c:bf -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUNoT3iIHEHupugpbmCh59rUFLyI4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA2MDAwMTMzWhcNMjcwMTA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZmFlZmJiNzE4ZTkxMmRkODhjYTU3NjJlMGZmYzNmODZl NmUxNzhhNGVkNWFmYzRmMTU2YjRkYWYyZjllNzEzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2TuYfIwdtK+6LwjQVGkE2Xa2qD2aOIK9nNEoIWKoqbsXB gqkGBMypkz/yiTVIZ7xHZFnlT5jfQNaIr60VMouMHUybvMf/Qx/t/MYEOPt9AXQE qJ846ezJ6tsQ4fmjCFJDpFr3Igph9MxNmh8sVKHrEawjUY/RYafEEFe79XplsNlM NByuSCK/JAOhzBYbtlWozL6/7efZBu9vk6rnTPtawQMrW1U0azi9gBWkgp89AmoP nfkPve7ywPzRkay46JEESEQ/3HbIvA9DRtDuNBCQrJP1DBdvCNUombPnxSXqiYLg pqN6UcEif0e0WGnay2h7X12LSCwgISF4bRT5yH1ZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU4Z8Rskn+Ubq+/pvWUzmg/Xq8XUkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JkNWQzOWNlLTllZDgtNDU2NC1hMWY4LWMzMjlhYWViYjk5Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/9gZAwDQYJKoZIhvcNAQELBQADggEBAG8sPSXK+Z/zofCBzE7H5wJM eRKlQB9adCa2E5Zq2iAF9ypGSSvrEW9fJcTJZ1rRzJRsOaIGkPL0kcDQyd7WdxWc bqvGRnAt0D5Z4ZyqLNW24dsmsvqtb8rcbis8hXFA9+ou/RxZbxDW7wsrbIjv4isn tMwE92WX/jyEyATh9zxl1ykwyE/FS0kGcwaeju4R+8KIDnAXYXWWfLoPvQ2OGVox 00oVvf3iQVxsIcBtrrDzep9BFWcBUrxnfYIqgOwGrAmRaE6RQUKI8e7F053BqkpJ EgdV7EPWcFwbrNQPOu1uS4e+r8JFgf2T14F+5GXTuzAKM89W2SsUTwReFTfljL8= -----END CERTIFICATE-----Generated at Sun Oct 18 07:34:47 2026 by rpki-client