$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/db1da63c-2a68-4ace-b196-5ef2574e6754.roa File: db1da63c-2a68-4ace-b196-5ef2574e6754.roa (raw, json) Hash identifier: Qzr+Zquj7b3j0TEloo6r85SUPokSoWl8z41GPE1Kpno= Subject key identifier: 33:E2:26:2A:33:D8:8E:0E:21:10:75:7C:05:FE:15:E1:8A:BC:D2:2F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7D24A6772971B831A5E7B55F10704410A994892F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/db1da63c-2a68-4ace-b196-5ef2574e6754.roa Signing time: Thu 22 Oct 2026 01:31:05 +0000 ROA not before: Thu 22 Oct 2026 01:31:05 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1f00:5000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:24:a6:77:29:71:b8:31:a5:e7:b5:5f:10:70:44:10:a9:94:89:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 22 01:31:05 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=f48bdcc95f27daf94a4da58ab6a9641e85fc06379cf4951cfdae630321f9dd40, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:72:6d:8b:0b:20:fb:a8:6d:c5:f1:d9:70:6b: cf:10:a7:76:df:0a:73:f7:41:63:19:c8:ea:10:b9: 92:51:76:91:16:49:eb:8a:24:41:40:70:22:ac:49: d3:65:00:71:c9:18:00:74:c1:21:76:86:7b:c7:d3: 36:36:dd:11:89:9a:44:f5:10:85:86:18:13:5b:79: df:1e:f9:37:a4:2a:fd:b1:78:77:52:b0:79:03:81: 78:bb:c0:9c:a1:bc:46:db:07:83:1d:4f:53:64:08: dc:31:6c:ec:c2:1e:ed:86:63:60:c7:59:1d:59:7d: 60:c0:6c:e8:a3:ab:da:96:8a:05:cb:ac:94:96:52: 6e:15:8f:32:12:55:be:2b:8e:50:30:32:9d:d7:6d: bf:a0:cc:93:05:e0:df:cb:af:7d:e2:d8:2d:31:cc: de:e4:fd:54:db:30:ec:de:eb:fa:69:6b:33:ba:33: 9a:cb:ce:18:a7:bb:f6:8f:7e:88:8d:3c:fb:ae:5f: a4:26:7b:26:e9:66:0e:e1:b7:d1:2b:6e:25:9c:e6: 02:a4:51:f3:7b:06:57:ed:37:ba:ad:20:e1:f1:52: 6d:39:5d:ae:49:0b:b2:b2:eb:a1:71:30:99:8a:97: 53:6f:94:16:cb:06:4a:ce:1d:2e:12:f4:63:01:5d: a3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E2:26:2A:33:D8:8E:0E:21:10:75:7C:05:FE:15:E1:8A:BC:D2:2F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/db1da63c-2a68-4ace-b196-5ef2574e6754.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:5000::/40 Signature Algorithm: sha256WithRSAEncryption 47:bc:25:f9:49:12:1b:0f:0d:11:ad:76:de:b4:89:64:c7:72: 32:a4:25:10:4d:bb:47:de:b2:ef:39:59:c6:42:53:0a:54:17: f2:79:72:4e:eb:37:f5:92:50:52:db:2e:dd:47:ab:b0:4f:f4: 98:23:c3:cf:71:d8:69:52:2d:4e:eb:12:da:e1:fb:61:09:fd: 30:b4:2b:38:30:3d:14:68:0a:df:97:d6:a4:72:d3:15:2c:72: 77:74:b7:66:4b:3c:4e:bd:e3:6e:99:da:f2:e7:59:c8:24:52: 2e:fd:88:3a:fc:d5:5b:0c:1c:a0:0e:cd:22:d1:dd:21:9e:33: c8:40:5c:8c:ea:97:31:5c:cc:46:8a:a8:02:cb:6e:e4:49:ad: e2:69:f4:d6:ed:44:ba:a9:3d:7c:f9:ab:8d:ea:5d:7d:99:88: b4:90:63:51:16:81:2a:0a:22:bf:69:55:01:0f:94:79:6a:25: 9d:e7:36:2a:79:d6:bd:d8:fc:a0:5b:49:71:2d:86:e4:e0:65: e2:7c:c9:67:ff:9f:10:1e:da:bd:02:dc:e9:5a:f7:60:4c:f5: 73:68:7c:80:a2:36:93:4b:f2:79:1d:a4:66:4f:d0:14:b9:2f: ac:87:45:97:9c:0e:2d:e1:09:8c:d9:e1:7b:85:e4:6d:a6:fd: aa:1a:04:ce -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUfSSmdylxuDGl57VfEHBEEKmUiS8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIyMDEzMTA1WhcNMjcwMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNDhiZGNjOTVmMjdkYWY5NGE0ZGE1OGFiNmE5NjQxZTg1 ZmMwNjM3OWNmNDk1MWNmZGFlNjMwMzIxZjlkZDQwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0cm2LCyD7qG3F8dlwa88Qp3bfCnP3QWMZyOoQuZJRdpEW SeuKJEFAcCKsSdNlAHHJGAB0wSF2hnvH0zY23RGJmkT1EIWGGBNbed8e+TekKv2x eHdSsHkDgXi7wJyhvEbbB4MdT1NkCNwxbOzCHu2GY2DHWR1ZfWDAbOijq9qWigXL rJSWUm4VjzISVb4rjlAwMp3Xbb+gzJMF4N/Lr33i2C0xzN7k/VTbMOze6/ppazO6 M5rLzhinu/aPfoiNPPuuX6QmeybpZg7ht9ErbiWc5gKkUfN7BlftN7qtIOHxUm05 Xa5JC7Ky66FxMJmKl1NvlBbLBkrOHS4S9GMBXaNTAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUM+ImKjPYjg4hEHV8Bf4V4Yq80i8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RiMWRhNjNjLTJhNjgtNGFjZS1iMTk2LTVlZjI1NzRlNjc1NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB8AUDANBgkqhkiG9w0BAQsFAAOCAQEAR7wl+UkSGw8NEa123rSJZMdy MqQlEE27R96y7zlZxkJTClQX8nlyTus39ZJQUtsu3UersE/0mCPDz3HYaVItTusS 2uH7YQn9MLQrODA9FGgK35fWpHLTFSxyd3S3Zks8Tr3jbpna8udZyCRSLv2IOvzV WwwcoA7NItHdIZ4zyEBcjOqXMVzMRoqoAstu5Emt4mn01u1Euqk9fPmrjepdfZmI tJBjURaBKgoiv2lVAQ+UeWolnec2KnnWvdj8oFtJcS2G5OBl4nzJZ/+fEB7avQLc 6Vr3YEz1c2h8gKI2k0vyeR2kZk/QFLkvrIdFl5wOLeEJjNnhe4Xkbab9qhoEzg== -----END CERTIFICATE-----Generated at Tue Oct 27 15:14:14 2026 by rpki-client