$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd3f2a39-7282-4ec3-9072-b4a483e7ff2a.roa File: bd3f2a39-7282-4ec3-9072-b4a483e7ff2a.roa (raw, json) Hash identifier: jrXZCUr239QgS0sst05TGm6qKG3jNTjaXwJKjZQGQw0= Subject key identifier: 76:93:CF:A4:A5:C3:F5:7F:72:3D:F3:6F:8F:E2:2A:F2:32:77:81:FD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 62D85AAA2F56CE4D3830BC7607D28F391974B71C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd3f2a39-7282-4ec3-9072-b4a483e7ff2a.roa Signing time: Mon 19 Oct 2026 00:50:32 +0000 ROA not before: Mon 19 Oct 2026 00:50:32 +0000 ROA not after: Sun 17 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fec:ac00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:d8:5a:aa:2f:56:ce:4d:38:30:bc:76:07:d2:8f:39:19:74:b7:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 19 00:50:32 2026 GMT Not After : Jan 17 23:59:59 2027 GMT Subject: serialNumber=ff0c9d810dc6a6742b927ffae19ec13c940f5dca3ce1de882f62edaa47e9ec10, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ab:40:ad:32:63:89:c5:c3:eb:97:3a:6d:47: a3:ef:1b:77:3e:5c:91:e4:3f:d8:87:55:cc:15:08: 96:23:45:3c:eb:fc:fc:bc:4b:e0:09:2b:83:93:01: f4:f9:db:66:75:09:0b:f4:a7:0c:b2:47:da:59:e8: 45:81:ce:72:07:d7:f8:64:7f:53:81:6f:d3:fc:52: 18:ec:b1:9e:e4:71:64:6b:8b:b1:95:a7:ed:b1:1e: 0a:8c:5d:c0:d8:47:b4:be:52:d2:a1:3e:0d:66:f8: 40:a0:de:f6:4d:e6:2a:53:1c:d0:8b:6b:17:d8:3c: 43:f7:37:39:18:90:c5:b0:21:d6:63:8e:bd:04:93: 74:de:f7:29:d4:aa:4f:0b:5a:18:f1:05:b6:91:81: 0c:41:e6:64:10:7e:62:39:5b:23:a8:40:99:9a:b6: a7:15:53:8e:62:6c:d2:a1:8d:b4:2f:48:fa:33:0f: e3:d2:91:74:01:aa:1d:d6:19:15:6a:b1:52:f3:e0: 63:c3:12:af:26:57:48:88:15:90:72:af:3f:f4:40: cc:17:9b:a6:78:7f:5c:7e:f9:a5:f3:c8:7b:16:99: 60:d6:b4:c0:89:85:8d:94:27:d1:5b:64:5b:da:c2: 86:ae:95:3e:30:6b:2c:34:0f:a3:20:50:95:37:ec: 55:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:93:CF:A4:A5:C3:F5:7F:72:3D:F3:6F:8F:E2:2A:F2:32:77:81:FD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd3f2a39-7282-4ec3-9072-b4a483e7ff2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fec:ac00::/48 Signature Algorithm: sha256WithRSAEncryption 27:28:a5:c0:e0:20:70:88:d0:ad:d9:8c:5e:d7:a9:5b:08:89: 70:6f:bb:ad:a9:46:49:ae:eb:da:80:ff:6a:90:41:be:19:90: b3:8e:45:a9:22:bf:ff:98:5f:3b:a7:5d:b7:3a:1e:07:df:8c: 09:63:ad:17:31:54:30:32:2f:58:b6:93:af:46:44:a2:55:61: 84:66:ae:b6:d0:00:e6:29:2c:c6:8c:41:08:94:bb:13:bb:7c: 08:da:8c:1f:4f:30:f9:57:69:67:81:32:64:25:3a:ea:52:38: 9d:af:0e:18:61:4d:bb:53:43:04:e9:d1:45:27:0a:cf:f6:e0: 4d:db:b2:c2:3f:35:d5:c3:ad:e7:f7:08:2a:3b:5f:13:94:83: e7:d7:bc:2c:11:be:f8:56:04:0b:9c:56:42:62:42:9a:b0:d2: 57:ac:d7:5e:4e:f5:1c:60:d2:ff:09:09:2e:e4:b7:0e:29:a8: b9:bd:ff:ac:a3:66:f0:51:82:11:f2:62:da:26:ab:b5:07:84: 4a:47:5d:65:e2:25:c8:bb:66:ee:13:3c:f4:4c:c0:23:71:a3: b5:53:1a:df:df:f5:5c:c6:a1:2d:e4:77:6f:4d:3a:50:e4:06: da:8c:85:31:8a:71:be:c5:d3:d7:ae:79:aa:9c:3d:ae:8a:74: e8:b5:9c:cc -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUYthaqi9Wzk04MLx2B9KPORl0txwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE5MDA1MDMyWhcNMjcwMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZjBjOWQ4MTBkYzZhNjc0MmI5MjdmZmFlMTllYzEzYzk0 MGY1ZGNhM2NlMWRlODgyZjYyZWRhYTQ3ZTllYzEwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChq0CtMmOJxcPrlzptR6PvG3c+XJHkP9iHVcwVCJYjRTzr /Py8S+AJK4OTAfT522Z1CQv0pwyyR9pZ6EWBznIH1/hkf1OBb9P8UhjssZ7kcWRr i7GVp+2xHgqMXcDYR7S+UtKhPg1m+ECg3vZN5ipTHNCLaxfYPEP3NzkYkMWwIdZj jr0Ek3Te9ynUqk8LWhjxBbaRgQxB5mQQfmI5WyOoQJmatqcVU45ibNKhjbQvSPoz D+PSkXQBqh3WGRVqsVLz4GPDEq8mV0iIFZByrz/0QMwXm6Z4f1x++aXzyHsWmWDW tMCJhY2UJ9FbZFvawoaulT4wayw0D6MgUJU37FXjAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUdpPPpKXD9X9yPfNvj+Iq8jJ3gf0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JkM2YyYTM5LTcyODItNGVjMy05MDcyLWI0YTQ4M2U3ZmYyYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/srAAwDQYJKoZIhvcNAQELBQADggEBACcopcDgIHCI0K3ZjF7XqVsI iXBvu62pRkmu69qA/2qQQb4ZkLOORakiv/+YXzunXbc6HgffjAljrRcxVDAyL1i2 k69GRKJVYYRmrrbQAOYpLMaMQQiUuxO7fAjajB9PMPlXaWeBMmQlOupSOJ2vDhhh TbtTQwTp0UUnCs/24E3bssI/NdXDref3CCo7XxOUg+fXvCwRvvhWBAucVkJiQpqw 0les115O9Rxg0v8JCS7ktw4pqLm9/6yjZvBRghHyYtomq7UHhEpHXWXiJci7Zu4T PPRMwCNxo7VTGt/f9VzGoS3kd29NOlDkBtqMhTGKcb7F09eueaqcPa6KdOi1nMw= -----END CERTIFICATE-----Generated at Thu Nov 5 12:21:14 2026 by rpki-client