$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/feef2431-67fe-49cd-bf34-5014adc5df6f.roa File: feef2431-67fe-49cd-bf34-5014adc5df6f.roa (raw, json) Hash identifier: hZC75K+kVmaSOIdXBaMOMKNN74BRIFmRgaEIVZ6gwHc= Subject key identifier: 5C:EC:F4:11:85:93:33:62:DF:8A:8B:56:DE:F5:FC:B7:60:45:70:FF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5251D90FFFB879CD21E53DDE4DD82D665FBEA531 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/feef2431-67fe-49cd-bf34-5014adc5df6f.roa Signing time: Thu 08 Oct 2026 00:31:32 +0000 ROA not before: Thu 08 Oct 2026 00:31:32 +0000 ROA not after: Wed 06 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff1:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:51:d9:0f:ff:b8:79:cd:21:e5:3d:de:4d:d8:2d:66:5f:be:a5:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 8 00:31:32 2026 GMT Not After : Jan 6 23:59:59 2027 GMT Subject: serialNumber=47899b8118ef71f636e62195563cef6f67602c42e2569712ae730cd6864409b7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:47:42:68:51:4c:62:9c:d1:1a:12:e9:da:48: d7:81:84:24:3f:e4:2f:31:69:65:66:48:e3:da:8c: bc:0d:38:b5:00:ab:85:9f:1f:f7:12:e4:dc:ac:71: 1f:e8:f4:00:a9:46:c0:98:47:65:21:98:26:9c:0c: c4:d9:ff:f7:57:8a:c2:11:85:e5:91:0d:83:fc:60: 20:f5:a3:82:75:46:37:fe:98:f5:99:0a:97:59:29: fb:ad:77:1a:cb:a0:5b:ac:ab:ab:b6:7d:2a:a3:90: b3:06:f3:dd:a1:b3:aa:54:62:d9:3b:6c:f5:0b:8a: b9:82:4b:14:86:7c:f4:e3:cf:17:76:76:67:a6:c1: 52:3c:df:66:b8:c8:09:a4:56:e8:37:04:aa:eb:53: 83:43:2d:6d:c4:49:a7:5c:92:e6:96:c1:41:13:6c: e8:10:41:d7:ee:89:c9:52:44:9d:51:4e:e6:df:f9: 18:1b:83:07:9e:a6:13:a4:ba:49:5e:ca:08:fc:38: 20:c6:5d:ac:35:81:cb:14:63:a3:c6:e4:c7:da:57: 30:f1:32:6b:87:a6:42:05:3e:75:50:f8:db:c6:1c: 0c:74:2e:50:c4:a2:cc:3e:f0:d8:c0:da:f9:56:cd: 68:94:bf:a8:54:d0:66:7e:d0:35:19:2e:8d:84:58: 08:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:EC:F4:11:85:93:33:62:DF:8A:8B:56:DE:F5:FC:B7:60:45:70:FF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/feef2431-67fe-49cd-bf34-5014adc5df6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff1:1000::/40 Signature Algorithm: sha256WithRSAEncryption 41:97:df:95:e6:b7:c2:5f:72:d1:9a:c2:da:6a:6e:f3:1d:b6: 77:a2:36:b6:7f:c6:35:23:7c:c8:34:17:6b:65:b8:94:9a:42: 77:88:97:00:9b:5c:ee:44:96:ad:fa:6c:a3:6b:1e:14:35:ba: 36:72:39:5d:32:e8:cf:93:0f:90:ab:21:70:45:21:c8:db:c0: 6f:5a:4a:e7:3d:e5:62:66:f9:e3:e0:9d:1b:77:8c:2f:c7:05: f4:57:e1:68:b9:d2:50:b1:59:6a:4e:b0:d2:3c:49:a7:32:d2: d1:8d:0e:53:93:10:aa:70:2d:2b:52:fd:5b:6a:2e:4c:9a:44: 4b:d9:d2:fc:46:f3:e3:38:b9:48:b4:d3:14:48:a1:32:43:81: b3:3d:3c:2c:76:20:01:e1:69:b4:ec:05:6d:f3:4b:1c:9e:fd: fd:be:f2:e9:0b:60:68:6d:6a:2a:e9:d5:8f:24:1b:bb:fd:30: 20:ea:99:c4:83:1e:2b:f5:ee:fc:0d:e5:35:c7:ac:91:92:33: c1:87:b3:3d:16:ed:23:96:5e:ac:0f:ca:02:fd:26:dd:b5:f4: 94:73:b7:5e:82:23:82:cc:16:72:48:34:65:76:eb:ef:61:4d: 4e:c5:c4:82:64:dc:c4:41:ce:18:05:ab:1b:97:25:d5:66:bb: 7f:f7:39:85 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUUlHZD/+4ec0h5T3eTdgtZl++pTEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA4MDAzMTMyWhcNMjcwMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A0Nzg5OWI4MTE4ZWY3MWY2MzZlNjIxOTU1NjNjZWY2ZjY3 NjAyYzQyZTI1Njk3MTJhZTczMGNkNjg2NDQwOWI3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXR0JoUUxinNEaEunaSNeBhCQ/5C8xaWVmSOPajLwNOLUA q4WfH/cS5NyscR/o9ACpRsCYR2UhmCacDMTZ//dXisIRheWRDYP8YCD1o4J1Rjf+ mPWZCpdZKfutdxrLoFusq6u2fSqjkLMG892hs6pUYtk7bPULirmCSxSGfPTjzxd2 dmemwVI832a4yAmkVug3BKrrU4NDLW3ESadckuaWwUETbOgQQdfuiclSRJ1RTubf +RgbgweephOkukleygj8OCDGXaw1gcsUY6PG5MfaVzDxMmuHpkIFPnVQ+NvGHAx0 LlDEosw+8NjA2vlWzWiUv6hU0GZ+0DUZLo2EWAjfAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUXOz0EYWTM2LfiotW3vX8t2BFcP8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZlZWYyNDMxLTY3ZmUtNDljZC1iZjM0LTUwMTRhZGM1ZGY2Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/xEDANBgkqhkiG9w0BAQsFAAOCAQEAQZfflea3wl9y0ZrC2mpu8x22 d6I2tn/GNSN8yDQXa2W4lJpCd4iXAJtc7kSWrfpso2seFDW6NnI5XTLoz5MPkKsh cEUhyNvAb1pK5z3lYmb54+CdG3eML8cF9FfhaLnSULFZak6w0jxJpzLS0Y0OU5MQ qnAtK1L9W2ouTJpES9nS/Ebz4zi5SLTTFEihMkOBsz08LHYgAeFptOwFbfNLHJ79 /b7y6QtgaG1qKunVjyQbu/0wIOqZxIMeK/Xu/A3lNceskZIzwYezPRbtI5ZerA/K Av0m3bX0lHO3XoIjgswWckg0ZXbr72FNTsXEgmTcxEHOGAWrG5cl1Wa7f/c5hQ== -----END CERTIFICATE-----Generated at Sun Oct 25 01:34:48 2026 by rpki-client