$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eefecc86-9a13-4739-98c4-e5b08bb89dac.roa File: eefecc86-9a13-4739-98c4-e5b08bb89dac.roa (raw, json) Hash identifier: 08rahpfvgFswRzp6TJRg8GI2Oc4oE1jV5msamOjtRxo= Subject key identifier: 3A:7B:B6:63:0D:38:B6:04:43:6F:2D:AB:8E:B6:C0:B5:9B:C3:57:73 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3DDC0C2BAB0DE4EB4E2CD5ED93DB4422B14F290F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eefecc86-9a13-4739-98c4-e5b08bb89dac.roa Signing time: Tue 27 Oct 2026 00:11:15 +0000 ROA not before: Tue 27 Oct 2026 00:11:15 +0000 ROA not after: Mon 25 Jan 2027 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1ffc:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:dc:0c:2b:ab:0d:e4:eb:4e:2c:d5:ed:93:db:44:22:b1:4f:29:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 27 00:11:15 2026 GMT Not After : Jan 25 23:59:59 2027 GMT Subject: serialNumber=507d93d05015e8525e9e6f700de5ad33f91a8440052a86678001f61a21dda44f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ec:a8:8d:54:89:ed:aa:f9:f2:e6:fc:34:b8: 52:6c:36:65:b2:8c:40:a1:02:20:19:5b:84:44:6e: b7:44:d0:4f:26:4b:55:7d:b0:33:e6:c9:e3:65:a4: a4:3a:c7:13:e0:1a:2d:2c:22:4c:c4:51:81:04:8e: 73:55:c4:63:8a:ab:94:38:33:32:1b:35:8f:8d:16: 2b:b9:fb:e0:e0:f5:b6:a0:9e:52:9b:50:be:25:8f: dd:11:ba:3b:60:21:22:10:7b:d6:7e:19:2e:3c:c4: d5:bc:92:f3:63:b9:51:78:e9:36:d2:5e:f8:ef:a2: 67:86:06:d6:20:c5:f3:28:3b:68:ad:a8:5c:2b:bd: ef:f0:09:df:30:a0:55:3a:3f:1b:d3:fc:3e:43:da: f7:09:2f:c8:0e:94:be:55:f6:0c:af:a8:cf:6b:bf: 96:f7:81:19:c2:d9:fb:6d:93:c0:cc:15:7c:ae:34: 76:ea:2d:c7:09:ee:ee:e0:cc:b0:89:4c:7a:c1:df: 47:4a:a5:23:8a:f8:2c:d8:43:a2:81:e8:79:a5:bf: ca:76:9f:28:06:a3:46:c9:e8:b7:ae:52:c4:1a:aa: 02:72:52:61:f0:52:02:7d:cb:9b:b3:21:d4:fb:60: 5b:72:86:d0:29:be:e4:4b:38:ba:dc:d4:97:26:55: be:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:7B:B6:63:0D:38:B6:04:43:6F:2D:AB:8E:B6:C0:B5:9B:C3:57:73 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eefecc86-9a13-4739-98c4-e5b08bb89dac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffc:5000::/40 Signature Algorithm: sha256WithRSAEncryption 15:4c:a4:b6:5e:55:b6:c0:46:9e:11:aa:9e:39:44:65:dd:8d: f8:d6:de:06:cd:a3:3a:27:46:01:76:15:d5:2a:9e:ff:dc:b9: 80:03:e0:fc:27:15:9f:10:56:d8:91:f7:0e:93:17:fd:d2:dc: 02:60:d8:6e:f0:80:40:20:1f:8b:d6:e6:98:dd:9f:31:bb:f3: 7e:b2:de:bd:b4:14:df:e8:68:7f:08:84:86:8f:c7:7c:9b:7c: e1:c4:a5:85:29:f6:06:21:ec:80:60:21:8b:0a:e4:f8:2b:2c: 76:9d:4d:2b:e0:e3:1d:8e:98:01:c4:07:ae:69:0b:6c:23:30: 04:47:4e:d6:39:98:e9:3d:4c:63:92:51:53:4e:b1:91:f8:75: dd:55:68:f1:97:c3:dc:fb:da:c9:3b:e0:9b:e1:36:8e:41:a3: b7:e3:46:0c:6c:de:99:e3:c3:16:f2:21:70:6c:07:de:a8:13: fd:ef:17:16:20:38:9b:4b:2b:4e:53:d9:c0:04:5c:13:2a:90: e0:33:f2:69:6e:c1:ff:83:61:76:0f:b6:d9:b6:a6:c6:cb:6d: 37:66:9c:a5:05:3a:89:26:5e:d4:c9:f6:53:00:d1:d7:c6:02: f5:5e:fe:20:bf:5a:ae:cc:02:c7:ef:b8:d7:be:49:99:d0:02: ab:b3:b0:1c -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUPdwMK6sN5OtOLNXtk9tEIrFPKQ8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI3MDAxMTE1WhcNMjcwMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MDdkOTNkMDUwMTVlODUyNWU5ZTZmNzAwZGU1YWQzM2Y5 MWE4NDQwMDUyYTg2Njc4MDAxZjYxYTIxZGRhNDRmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDH7KiNVIntqvny5vw0uFJsNmWyjEChAiAZW4REbrdE0E8m S1V9sDPmyeNlpKQ6xxPgGi0sIkzEUYEEjnNVxGOKq5Q4MzIbNY+NFiu5++Dg9bag nlKbUL4lj90RujtgISIQe9Z+GS48xNW8kvNjuVF46TbSXvjvomeGBtYgxfMoO2it qFwrve/wCd8woFU6PxvT/D5D2vcJL8gOlL5V9gyvqM9rv5b3gRnC2fttk8DMFXyu NHbqLccJ7u7gzLCJTHrB30dKpSOK+CzYQ6KB6Hmlv8p2nygGo0bJ6LeuUsQaqgJy UmHwUgJ9y5uzIdT7YFtyhtApvuRLOLrc1JcmVb65AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUOnu2Yw04tgRDby2rjrbAtZvDV3MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VlZmVjYzg2LTlhMTMtNDczOS05OGM0LWU1YjA4YmI4OWRhYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/8UDANBgkqhkiG9w0BAQsFAAOCAQEAFUyktl5VtsBGnhGqnjlEZd2N +NbeBs2jOidGAXYV1Sqe/9y5gAPg/CcVnxBW2JH3DpMX/dLcAmDYbvCAQCAfi9bm mN2fMbvzfrLevbQU3+hofwiEho/HfJt84cSlhSn2BiHsgGAhiwrk+Cssdp1NK+Dj HY6YAcQHrmkLbCMwBEdO1jmY6T1MY5JRU06xkfh13VVo8ZfD3PvayTvgm+E2jkGj t+NGDGzemePDFvIhcGwH3qgT/e8XFiA4m0srTlPZwARcEyqQ4DPyaW7B/4Nhdg+2 2bamxsttN2acpQU6iSZe1Mn2UwDR18YC9V7+IL9arswCx++4175JmdACq7OwHA== -----END CERTIFICATE-----Generated at Wed Nov 4 17:59:09 2026 by rpki-client