$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0cf50ad6-9442-4597-8c89-e5beb52d50eb.roa File: 0cf50ad6-9442-4597-8c89-e5beb52d50eb.roa (raw, json) Hash identifier: ZGGY9QXmp/zqtVN/dHFWH+89iX9c6eaISGLg/tdw3C0= Subject key identifier: 6A:96:CE:26:C9:60:2C:FF:D8:97:02:F6:47:8A:1F:74:5A:51:D9:38 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2B637076044E8DE8463FC634F2A2A745D98DA19B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0cf50ad6-9442-4597-8c89-e5beb52d50eb.roa Signing time: Mon 26 Oct 2026 00:31:39 +0000 ROA not before: Mon 26 Oct 2026 00:31:39 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f2a:c800::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:63:70:76:04:4e:8d:e8:46:3f:c6:34:f2:a2:a7:45:d9:8d:a1:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 26 00:31:39 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=8844d2d54a646a011e8675f7c1172760aea301d09d6ccce6092124b32a0fbc8c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cc:58:84:10:00:6f:e3:d4:c1:69:76:8e:88: 33:19:89:19:7f:10:bb:94:69:ce:be:ca:da:f0:50: 91:b7:8d:09:78:63:fa:36:af:a4:d0:65:95:45:4c: 6c:61:b6:62:b8:36:4d:d4:31:10:b4:a0:0f:7c:d9: 7f:cd:eb:32:89:58:52:bd:fe:a5:58:e9:68:64:02: e3:2f:0e:7e:da:96:6d:e4:c3:83:dd:ea:3b:b4:ac: 2f:a4:4c:5d:57:0d:bb:3a:54:ae:08:9b:c0:b7:35: dd:c9:7c:65:51:28:f9:c8:33:f9:4f:fb:97:ed:30: 21:03:d5:e2:f6:ff:25:02:b0:8d:31:72:53:17:2b: 33:f5:17:0c:cf:af:f0:4a:2f:3e:d6:0e:0e:60:f6: 3c:5c:ff:46:94:93:18:f4:45:1f:a1:60:76:ef:91: b6:30:65:4c:5b:21:27:de:95:ba:4e:73:94:c1:61: a6:ac:ca:30:10:ed:4d:4b:21:db:81:1b:a2:67:a3: 91:6e:39:5d:4d:94:f8:7a:51:6b:7d:42:02:58:d9: 65:66:df:de:46:92:b9:49:b6:2f:3c:92:9c:11:7b: 12:6d:5e:ba:67:a1:5d:f1:0c:6d:93:fe:11:e3:23: 58:7b:61:65:f6:1a:72:6c:8a:ea:97:39:6d:d1:64: d1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:96:CE:26:C9:60:2C:FF:D8:97:02:F6:47:8A:1F:74:5A:51:D9:38 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0cf50ad6-9442-4597-8c89-e5beb52d50eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f2a:c800::/37 Signature Algorithm: sha256WithRSAEncryption 20:99:05:cb:13:ac:88:a6:fa:a5:58:f6:53:04:4f:89:ea:ab: 0f:22:e1:47:0a:3e:3d:6f:a8:d5:76:34:95:12:65:f8:b8:4b: 43:91:7f:e5:c2:22:e8:d6:5e:be:ec:7c:88:f4:b2:cf:aa:e6: 6e:90:f7:38:5c:34:f9:96:d9:34:fc:2c:39:1f:e2:42:21:3a: bb:f7:33:13:f7:a6:8f:a4:99:ee:9d:89:35:bb:85:19:da:d1: 68:1d:34:b0:31:49:14:fb:42:2b:e5:86:69:f0:78:77:80:dc: 06:59:49:c6:e4:6f:b3:0e:72:3e:37:f1:8e:10:6e:a9:b2:23: c8:94:bd:2a:86:dd:6c:a9:a2:f6:64:7a:8e:99:44:e8:ba:c6: ea:67:d8:87:63:0a:2f:01:3e:99:c8:3e:47:ec:e4:10:c1:39: 3c:74:ce:54:2d:c2:bc:a3:85:05:18:18:7d:be:e6:2e:09:7b: 14:ed:4c:dc:8b:5f:a6:3b:67:5f:9b:55:10:7c:fc:80:3a:ef: dc:a3:93:b8:87:e4:65:cf:75:82:0f:2a:0d:3e:2c:f2:99:ca: 3d:3a:79:52:16:54:12:9e:4e:ab:a9:bd:0b:1b:6e:82:32:6a: aa:e4:56:22:f9:33:01:56:a0:e3:f0:46:77:13:0b:71:6e:4e: c7:e3:4f:05 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUK2NwdgROjehGP8Y08qKnRdmNoZswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI2MDAzMTM5WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ODQ0ZDJkNTRhNjQ2YTAxMWU4Njc1ZjdjMTE3Mjc2MGFl YTMwMWQwOWQ2Y2NjZTYwOTIxMjRiMzJhMGZiYzhjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyzFiEEABv49TBaXaOiDMZiRl/ELuUac6+ytrwUJG3jQl4 Y/o2r6TQZZVFTGxhtmK4Nk3UMRC0oA982X/N6zKJWFK9/qVY6WhkAuMvDn7alm3k w4Pd6ju0rC+kTF1XDbs6VK4Im8C3Nd3JfGVRKPnIM/lP+5ftMCED1eL2/yUCsI0x clMXKzP1FwzPr/BKLz7WDg5g9jxc/0aUkxj0RR+hYHbvkbYwZUxbISfelbpOc5TB YaasyjAQ7U1LIduBG6Jno5FuOV1NlPh6UWt9QgJY2WVm395GkrlJti88kpwRexJt XrpnoV3xDG2T/hHjI1h7YWX2GnJsiuqXOW3RZNHlAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUapbOJslgLP/YlwL2R4ofdFpR2TgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBjZjUwYWQ2LTk0NDItNDU5Ny04Yzg5LWU1YmViNTJkNTBlYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8qyDANBgkqhkiG9w0BAQsFAAOCAQEAIJkFyxOsiKb6pVj2UwRPieqr DyLhRwo+PW+o1XY0lRJl+LhLQ5F/5cIi6NZevux8iPSyz6rmbpD3OFw0+ZbZNPws OR/iQiE6u/czE/emj6SZ7p2JNbuFGdrRaB00sDFJFPtCK+WGafB4d4DcBllJxuRv sw5yPjfxjhBuqbIjyJS9KobdbKmi9mR6jplE6LrG6mfYh2MKLwE+mcg+R+zkEME5 PHTOVC3CvKOFBRgYfb7mLgl7FO1M3ItfpjtnX5tVEHz8gDrv3KOTuIfkZc91gg8q DT4s8pnKPTp5UhZUEp5Oq6m9CxtugjJqquRWIvkzAVag4/BGdxMLcW5Ox+NPBQ== -----END CERTIFICATE-----Generated at Thu Nov 5 04:50:52 2026 by rpki-client