$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2420c225-afa1-4f5a-9de5-881837f8bf95.roa File: 2420c225-afa1-4f5a-9de5-881837f8bf95.roa (raw, json) Hash identifier: 3XAwgflDPYk1ZlLmNj3Y5nteaTmhSxaZAduNJ1srR10= Subject key identifier: 22:0B:BE:FE:E8:83:47:9C:1E:5D:40:1E:16:90:C0:16:6D:5B:B6:CC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 04D5E7AF36A0B8194DC70F013DC6DD1B24F0BFA8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2420c225-afa1-4f5a-9de5-881837f8bf95.roa Signing time: Fri 23 Oct 2026 01:41:14 +0000 ROA not before: Fri 23 Oct 2026 01:41:14 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1f12:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:d5:e7:af:36:a0:b8:19:4d:c7:0f:01:3d:c6:dd:1b:24:f0:bf:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 23 01:41:14 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=d666645d7d1deba6acdb6de2213bfe7539f97a9af7b748d5d4e931b29d741840, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:33:57:9b:9e:74:89:e1:aa:dd:1b:f1:2a:c7: 26:13:a8:be:89:44:f9:f5:df:39:05:f3:5b:50:4f: e9:f0:58:8a:8d:06:41:70:20:96:69:e6:14:9e:35: eb:78:fa:d9:37:1c:b0:8f:e8:b1:40:70:c8:17:a0: a8:ac:8a:bb:3e:22:65:cf:d0:ae:c8:15:76:e6:71: 6b:b9:e2:48:d5:e2:f7:df:7e:b3:0c:ad:43:7d:7d: a5:22:5e:0b:a6:d8:ad:d7:fc:25:28:c4:b2:85:b0: 23:ee:02:58:c3:db:bc:90:78:99:29:b9:aa:9a:ba: b6:ea:15:60:ee:89:a2:b5:15:42:77:41:9b:09:b7: ec:e9:8b:f9:64:cf:4e:d8:bf:83:ac:5f:e8:25:a3: 8b:56:1c:c2:a4:ad:66:52:29:af:88:06:a8:bf:c3: 86:6a:f1:f3:2f:6a:06:b4:46:7a:75:de:fe:83:a4: fe:ee:c7:a0:bc:e4:5b:2c:66:a9:53:43:b0:7e:01: 35:94:f2:fd:82:eb:28:a6:70:29:49:36:30:5c:af: 81:ca:03:19:3e:1b:e1:42:19:db:d7:3e:8d:ef:52: db:d4:6e:bd:67:84:07:d0:5d:be:c0:37:19:ec:54: 54:6d:a8:50:4c:3b:e0:85:2a:5e:b0:47:ad:d6:ea: c8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:0B:BE:FE:E8:83:47:9C:1E:5D:40:1E:16:90:C0:16:6D:5B:B6:CC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2420c225-afa1-4f5a-9de5-881837f8bf95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f12:c00::/38 Signature Algorithm: sha256WithRSAEncryption 98:29:8d:05:4a:22:22:64:13:dc:85:95:74:99:73:1a:78:b5: da:ef:87:1a:70:21:60:d0:65:e2:65:af:5d:c6:fd:4b:00:ff: 24:63:44:90:a6:6a:e9:70:49:1b:38:4d:e0:62:82:72:4d:b8: ed:65:40:d3:68:20:b1:c9:53:8c:85:cf:53:e2:a4:aa:d7:f3: d7:20:88:ba:05:3c:f9:0d:75:14:44:a3:bc:bc:2b:38:a5:2e: 72:5d:82:5a:3f:27:e1:d6:c0:d0:2c:a1:48:ee:4c:5d:53:dd: 2a:22:ad:24:2a:52:71:47:24:61:bb:5c:22:02:21:1b:8d:b2: 47:f9:fd:54:67:61:f2:2d:d4:d5:f7:db:f1:94:71:13:f5:52: 07:6e:30:0b:96:a6:74:cb:73:4a:3c:78:8d:1d:cc:eb:55:0b: 87:8d:8b:26:00:96:0f:9e:48:5d:db:99:99:7a:aa:2d:ce:f9: 45:42:e9:8f:c1:16:0d:d5:39:42:06:23:e0:09:bb:12:52:99: 0a:59:a2:94:12:27:92:72:13:17:b1:e0:60:8a:8f:80:02:c8: 2c:46:38:76:23:5d:75:cf:df:aa:20:be:e0:48:c6:42:35:e3: a2:79:8c:fc:3d:d4:b7:0a:e7:5d:ff:49:01:f6:55:cb:c8:39: a3:9d:40:79 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUBNXnrzaguBlNxw8BPcbdGyTwv6gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDE0MTE0WhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNjY2NjQ1ZDdkMWRlYmE2YWNkYjZkZTIyMTNiZmU3NTM5 Zjk3YTlhZjdiNzQ4ZDVkNGU5MzFiMjlkNzQxODQwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWM1ebnnSJ4ardG/EqxyYTqL6JRPn13zkF81tQT+nwWIqN BkFwIJZp5hSeNet4+tk3HLCP6LFAcMgXoKisirs+ImXP0K7IFXbmcWu54kjV4vff frMMrUN9faUiXgum2K3X/CUoxLKFsCPuAljD27yQeJkpuaqaurbqFWDuiaK1FUJ3 QZsJt+zpi/lkz07Yv4OsX+glo4tWHMKkrWZSKa+IBqi/w4Zq8fMvaga0Rnp13v6D pP7ux6C85FssZqlTQ7B+ATWU8v2C6yimcClJNjBcr4HKAxk+G+FCGdvXPo3vUtvU br1nhAfQXb7ANxnsVFRtqFBMO+CFKl6wR63W6sjFAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUIgu+/uiDR5weXUAeFpDAFm1btswwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI0MjBjMjI1LWFmYTEtNGY1YS05ZGU1LTg4MTgzN2Y4YmY5NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgImAB8SDDANBgkqhkiG9w0BAQsFAAOCAQEAmCmNBUoiImQT3IWVdJlzGni1 2u+HGnAhYNBl4mWvXcb9SwD/JGNEkKZq6XBJGzhN4GKCck247WVA02ggsclTjIXP U+Kkqtfz1yCIugU8+Q11FESjvLwrOKUucl2CWj8n4dbA0CyhSO5MXVPdKiKtJCpS cUckYbtcIgIhG42yR/n9VGdh8i3U1ffb8ZRxE/VSB24wC5amdMtzSjx4jR3M61UL h42LJgCWD55IXduZmXqqLc75RULpj8EWDdU5QgYj4Am7ElKZClmilBInknITF7Hg YIqPgALILEY4diNddc/fqiC+4EjGQjXjonmM/D3UtwrnXf9JAfZVy8g5o51AeQ== -----END CERTIFICATE-----Generated at Thu Nov 5 12:58:46 2026 by rpki-client