$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf5a2529-8e78-4ebf-be85-0c8ced5067f1.roa File: bf5a2529-8e78-4ebf-be85-0c8ced5067f1.roa (raw, json) Hash identifier: kXV8BZKyc2NudXPjNewy/XcAByo0kQVXxWYQogyF1XM= Subject key identifier: FC:8B:D0:DF:31:95:0F:DB:C0:30:E2:37:1A:09:E5:AA:0B:4D:3B:80 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2575EDE9F40DACC98242D208683E699BA41EED24 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf5a2529-8e78-4ebf-be85-0c8ced5067f1.roa Signing time: Fri 23 Oct 2026 01:03:24 +0000 ROA not before: Fri 23 Oct 2026 01:03:24 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f1d:4000::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:75:ed:e9:f4:0d:ac:c9:82:42:d2:08:68:3e:69:9b:a4:1e:ed:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 23 01:03:24 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=dd03a7939836d265f49af6d1e4c6160a1c89da9768a8b95b6f05c4b32c45fa41, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:74:3e:dd:9a:72:1a:cc:04:65:00:61:29:13: 4a:80:86:40:6c:5a:55:a2:9a:8b:9b:13:7b:ff:95: c8:26:af:f7:7f:fa:e8:b4:05:12:57:bc:b6:41:5c: 16:e7:53:23:d9:d0:1e:f3:4c:98:69:32:4d:6a:4a: f1:30:50:fb:72:f6:f8:a7:02:df:fd:00:31:34:a0: 2d:6a:b3:8f:99:74:59:35:87:9a:cd:ba:36:3b:26: d4:c8:ab:c3:f4:46:da:de:34:6d:8e:5f:59:53:33: 7a:62:7c:0d:1a:07:00:e5:95:93:48:a1:99:d1:18: 5b:4e:ff:b1:25:ed:e0:9f:82:f2:b0:84:49:52:cf: 8b:e8:9d:37:f1:3f:f1:5b:53:3b:0a:00:91:64:7e: 39:c7:90:e6:25:b8:f3:6a:92:8b:58:a5:25:3c:b7: 10:f4:70:22:6a:de:51:4c:d8:49:5e:3a:9a:11:4a: d8:34:73:90:5d:e4:46:e6:0c:81:24:30:d2:7e:a6: 5c:fe:f7:30:b7:a1:f9:f8:76:6a:80:e0:3d:ef:77: 73:d3:50:cc:07:89:28:cb:c7:8d:d9:01:d3:22:ac: 3b:22:3b:db:81:8a:54:cf:84:e4:20:ac:89:c4:79: 5b:3b:b6:60:59:a7:fc:95:96:46:97:18:6c:1f:e1: a4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:8B:D0:DF:31:95:0F:DB:C0:30:E2:37:1A:09:E5:AA:0B:4D:3B:80 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf5a2529-8e78-4ebf-be85-0c8ced5067f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f1d:4000::/37 Signature Algorithm: sha256WithRSAEncryption 4f:2d:ea:2a:14:49:33:85:a4:4d:9c:7e:0d:42:fa:17:af:24: 28:2d:2c:db:03:2a:99:3a:cd:0f:37:ce:63:7a:e4:27:51:df: 6b:6d:bb:ea:0d:b2:0d:f9:fb:38:94:f8:de:a3:5c:df:92:0a: 83:87:2b:95:90:bd:15:fe:0e:62:de:a9:d8:be:9b:e6:e4:24: ff:13:be:1f:58:c3:23:c8:c1:58:48:f2:00:b9:e3:92:b6:a8: ec:05:68:8f:61:9f:cd:4c:65:23:bb:b7:9b:2d:0d:5e:bd:64: 2f:77:d4:11:55:27:ab:26:9f:c3:ec:e0:08:22:e3:a8:64:27: 77:8d:0f:3c:11:23:92:87:30:c6:38:44:2f:13:28:d4:80:21: ab:4a:82:8d:c8:8b:18:ea:af:8f:ad:c0:9a:91:3a:cc:15:2c: 8f:58:6c:02:34:35:ad:65:17:e7:b1:d7:61:7f:e7:e3:fb:3c: 20:a4:93:52:ed:dd:e7:7d:2a:bb:1f:7c:ea:9e:86:bd:7e:6c: 81:51:51:b2:2e:2a:16:00:9f:b3:de:05:d5:1f:40:91:0c:5f: d4:7c:9b:50:8b:a9:12:ea:8b:33:f7:da:2d:8e:50:38:ae:62: d6:d3:6e:2a:37:f5:a1:be:2e:8f:04:33:23:fc:8d:60:2e:78: d1:e4:9d:ae -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUJXXt6fQNrMmCQtIIaD5pm6Qe7SQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDEwMzI0WhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZDAzYTc5Mzk4MzZkMjY1ZjQ5YWY2ZDFlNGM2MTYwYTFj ODlkYTk3NjhhOGI5NWI2ZjA1YzRiMzJjNDVmYTQxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGdD7dmnIazARlAGEpE0qAhkBsWlWimoubE3v/lcgmr/d/ +ui0BRJXvLZBXBbnUyPZ0B7zTJhpMk1qSvEwUPty9vinAt/9ADE0oC1qs4+ZdFk1 h5rNujY7JtTIq8P0RtreNG2OX1lTM3pifA0aBwDllZNIoZnRGFtO/7El7eCfgvKw hElSz4vonTfxP/FbUzsKAJFkfjnHkOYluPNqkotYpSU8txD0cCJq3lFM2EleOpoR Stg0c5Bd5EbmDIEkMNJ+plz+9zC3ofn4dmqA4D3vd3PTUMwHiSjLx43ZAdMirDsi O9uBilTPhOQgrInEeVs7tmBZp/yVlkaXGGwf4aTxAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU/IvQ3zGVD9vAMOI3GgnlqgtNO4AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JmNWEyNTI5LThlNzgtNGViZi1iZTg1LTBjOGNlZDUwNjdmMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8dQDANBgkqhkiG9w0BAQsFAAOCAQEATy3qKhRJM4WkTZx+DUL6F68k KC0s2wMqmTrNDzfOY3rkJ1Hfa2276g2yDfn7OJT43qNc35IKg4crlZC9Ff4OYt6p 2L6b5uQk/xO+H1jDI8jBWEjyALnjkrao7AVoj2GfzUxlI7u3my0NXr1kL3fUEVUn qyafw+zgCCLjqGQnd40PPBEjkocwxjhELxMo1IAhq0qCjciLGOqvj63AmpE6zBUs j1hsAjQ1rWUX57HXYX/n4/s8IKSTUu3d530qux986p6GvX5sgVFRsi4qFgCfs94F 1R9AkQxf1HybUIupEuqLM/faLY5QOK5i1tNuKjf1ob4ujwQzI/yNYC540eSdrg== -----END CERTIFICATE-----Generated at Sun Nov 1 01:51:09 2026 by rpki-client