$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48bea4db-fd82-4c4f-bbc6-93c7768e8187.roa File: 48bea4db-fd82-4c4f-bbc6-93c7768e8187.roa (raw, json) Hash identifier: KlIKYQf/aP/sbWwu0lbjq16+6ySHBgksu8TCFQfiplA= Subject key identifier: A7:FC:56:66:54:CB:47:44:3B:2E:FD:AE:8B:A2:08:2B:8B:98:90:14 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1F6E54EF87D1485147CF9500752C1D44493BE5CA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48bea4db-fd82-4c4f-bbc6-93c7768e8187.roa Signing time: Sat 07 Nov 2026 00:50:42 +0000 ROA not before: Sat 07 Nov 2026 00:50:42 +0000 ROA not after: Fri 05 Feb 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fba:8010::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:6e:54:ef:87:d1:48:51:47:cf:95:00:75:2c:1d:44:49:3b:e5:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 7 00:50:42 2026 GMT Not After : Feb 5 23:59:59 2027 GMT Subject: serialNumber=7654b305212f02c1af6f0a6746422e1cd914ec5152ebaa20d88a7844bf1116ef, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:11:d8:c1:cf:06:7c:5f:0c:a6:91:1c:c2:36: ab:30:44:9a:a9:54:35:12:a9:cb:6c:e3:ad:ac:64: 9a:ef:ec:36:72:05:17:4b:9e:cb:73:e2:81:f9:43: a8:a0:e0:3e:73:bb:47:3c:c0:b1:ac:c5:d2:5c:d6: 3a:2c:a1:ed:d7:81:04:e8:65:fc:49:bf:2b:85:0e: 16:ed:b1:3e:05:a0:9d:4d:06:c6:59:67:d2:ee:18: 3f:f4:2c:70:af:60:1f:14:0c:53:f0:28:7e:66:73: ac:10:97:ce:df:4c:01:11:72:c3:54:ee:04:0d:b9: 61:6f:ee:dc:80:19:b5:b4:35:96:c6:ab:6d:77:d9: aa:6a:2e:ae:a6:7d:2a:a4:c6:f4:ce:ac:8c:bd:0b: 00:fd:af:d2:9c:ab:ca:da:24:81:a9:43:87:59:1e: df:82:3c:a1:d1:17:bf:f4:8d:cb:cc:9f:63:60:d4: f0:7a:d7:08:52:91:e9:1b:8b:75:c0:87:b2:f7:a7: 47:01:c3:3e:80:18:20:c8:b7:33:74:73:b9:09:a6: 1d:a8:74:98:60:bb:ca:fa:d3:18:ed:79:51:2d:63: 36:d0:f8:0c:89:08:7a:98:21:8f:f6:64:e5:d8:fd: 39:6a:00:51:1d:18:8e:df:59:a8:3b:55:70:13:bd: 72:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FC:56:66:54:CB:47:44:3B:2E:FD:AE:8B:A2:08:2B:8B:98:90:14 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48bea4db-fd82-4c4f-bbc6-93c7768e8187.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fba:8010::/48 Signature Algorithm: sha256WithRSAEncryption 38:08:ae:07:23:32:67:36:1d:29:8e:e3:51:03:e1:cc:f6:46: 8d:bd:8b:61:e8:aa:11:26:63:b1:b7:8e:6c:23:ef:8e:41:e8: a8:52:9d:69:4b:2a:01:22:1f:34:cc:9c:af:40:56:ac:9a:94: 53:84:4b:ee:12:9f:1f:9c:07:ca:a6:89:52:a4:d4:c0:9d:68: a8:dd:61:81:17:7b:f8:2b:dc:80:39:47:56:3e:aa:ca:0d:c5: 88:f0:ae:d2:0e:2f:f5:40:2b:b4:ba:a1:38:61:b6:a1:63:a4: e5:d3:74:c8:30:d1:c7:32:4e:a5:97:c7:a8:e7:85:e5:18:02: 3f:03:4c:1e:81:6e:45:97:ab:2a:a8:ac:7a:94:e7:c0:05:1b: 3c:fb:5f:2b:e1:47:83:5a:07:4d:c3:73:aa:da:c1:58:f6:80: e4:5a:49:83:fd:16:79:f3:35:24:0a:e3:5d:70:21:90:29:07: 66:b5:55:14:85:b0:b6:11:83:a0:1f:16:6e:2c:84:d6:81:08: bd:bf:67:b2:d7:96:c4:b3:0d:4f:0b:9d:bb:4a:ae:71:a4:51: 95:36:84:36:59:c4:4d:d7:e1:5a:13:6b:a9:8e:ae:51:27:89: 1e:bb:27:fe:eb:08:c5:ad:ab:ec:44:47:d9:25:25:ef:8b:97: e0:69:5e:db -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUH25U74fRSFFHz5UAdSwdREk75cowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMTA3MDA1MDQyWhcNMjcwMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NjU0YjMwNTIxMmYwMmMxYWY2ZjBhNjc0NjQyMmUxY2Q5 MTRlYzUxNTJlYmFhMjBkODhhNzg0NGJmMTExNmVmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzEdjBzwZ8XwymkRzCNqswRJqpVDUSqcts462sZJrv7DZy BRdLnstz4oH5Q6ig4D5zu0c8wLGsxdJc1josoe3XgQToZfxJvyuFDhbtsT4FoJ1N BsZZZ9LuGD/0LHCvYB8UDFPwKH5mc6wQl87fTAERcsNU7gQNuWFv7tyAGbW0NZbG q2132apqLq6mfSqkxvTOrIy9CwD9r9Kcq8raJIGpQ4dZHt+CPKHRF7/0jcvMn2Ng 1PB61whSkekbi3XAh7L3p0cBwz6AGCDItzN0c7kJph2odJhgu8r60xjteVEtYzbQ +AyJCHqYIY/2ZOXY/TlqAFEdGI7fWag7VXATvXJNAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUp/xWZlTLR0Q7Lv2ui6IIK4uYkBQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ4YmVhNGRiLWZkODItNGM0Zi1iYmM2LTkzYzc3NjhlODE4Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB+6gBAwDQYJKoZIhvcNAQELBQADggEBADgIrgcjMmc2HSmO41ED4cz2 Ro29i2HoqhEmY7G3jmwj745B6KhSnWlLKgEiHzTMnK9AVqyalFOES+4Snx+cB8qm iVKk1MCdaKjdYYEXe/gr3IA5R1Y+qsoNxYjwrtIOL/VAK7S6oThhtqFjpOXTdMgw 0ccyTqWXx6jnheUYAj8DTB6BbkWXqyqorHqU58AFGzz7XyvhR4NaB03Dc6rawVj2 gORaSYP9FnnzNSQK411wIZApB2a1VRSFsLYRg6AfFm4shNaBCL2/Z7LXlsSzDU8L nbtKrnGkUZU2hDZZxE3X4VoTa6mOrlEniR67J/7rCMWtq+xER9klJe+Ll+BpXts= -----END CERTIFICATE-----Generated at Tue Nov 10 16:52:37 2026 by rpki-client