$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d21a5173-5304-44ab-8bb5-24ee23f27a70.roa File: d21a5173-5304-44ab-8bb5-24ee23f27a70.roa (raw, json) Hash identifier: 9te3+CSEanhlfLlTr6U01PCMlfzBRQTpS2nhkmuk2Fo= Subject key identifier: F3:E2:56:E7:4B:25:31:6B:C0:3B:38:2B:A5:56:9A:2E:9D:A3:AC:78 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 42CDBDC5C6B7C14EDB6903CFAED87F328A5EBE46 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d21a5173-5304-44ab-8bb5-24ee23f27a70.roa Signing time: Thu 22 Oct 2026 01:20:41 +0000 ROA not before: Thu 22 Oct 2026 01:20:41 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1ff6:81fe::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:cd:bd:c5:c6:b7:c1:4e:db:69:03:cf:ae:d8:7f:32:8a:5e:be:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 22 01:20:41 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=cad4ed77b214f24528c87596b4497cd15edef14b13804e92f8c4d8995704b68c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fb:7f:41:81:9b:60:5f:6d:d6:62:db:ba:65: 17:62:a7:04:4c:26:04:5a:8b:9d:11:b9:29:e5:33: 87:56:96:9e:38:33:c9:21:58:76:da:e3:b5:2f:9c: 67:14:ff:0b:0d:07:ee:4a:1b:48:f3:b6:79:b8:82: 3d:df:c8:c0:43:78:3f:c0:94:92:78:c2:10:ca:1b: a3:a1:d0:a8:fa:cf:83:bb:2e:ac:9d:60:eb:75:77: 19:8c:16:bc:9d:a4:d2:82:da:71:23:84:17:8a:b0: 1a:19:80:05:a1:62:2f:d1:03:94:83:38:48:af:0f: aa:16:5e:50:b8:ab:7a:2b:d4:35:5c:86:91:10:d4: cd:52:ab:ee:03:9a:c2:8b:af:ad:6b:eb:80:18:bb: c3:64:ad:bc:45:79:49:a8:89:e9:19:4c:a6:8b:2f: 2f:00:3d:cc:94:33:6f:38:dc:69:2d:0d:5e:b5:e4: 82:51:11:fd:9e:c2:4f:b2:bf:85:f2:f7:27:1a:fb: 87:d1:c9:b9:8f:b6:92:dd:33:82:5c:75:cf:c0:7d: ac:6e:44:1d:15:84:c2:a2:27:49:a6:78:cb:e9:6e: 98:da:2e:23:d0:66:66:08:08:6e:fe:8a:04:8f:b0: 7e:1e:4f:5b:a8:0d:4a:4a:3d:06:22:e1:5b:3d:30: 87:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E2:56:E7:4B:25:31:6B:C0:3B:38:2B:A5:56:9A:2E:9D:A3:AC:78 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d21a5173-5304-44ab-8bb5-24ee23f27a70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff6:81fe::/48 Signature Algorithm: sha256WithRSAEncryption b0:e4:8e:50:5b:71:e1:99:31:c9:42:42:a6:e2:1e:ae:f9:5c: 9a:45:c5:79:d8:e9:2d:e2:38:ac:84:df:73:52:6e:e3:4a:5c: 34:0a:aa:3b:63:5c:7d:d9:5d:3b:cc:c2:14:57:11:a7:21:7a: ce:2c:e0:7c:47:73:b5:91:13:f2:66:e8:f3:3b:d3:48:3d:03: d7:94:de:ef:ef:1f:19:a2:52:d1:95:b2:e7:59:41:f7:24:ce: e0:ff:06:7d:b3:f9:26:33:94:3f:9e:d1:d0:bc:3a:2b:d0:dd: 39:a6:08:24:97:54:ae:63:f3:42:e7:f0:2c:f7:9a:a6:6c:09: 1f:29:77:a6:4b:f2:8d:67:57:29:43:22:35:03:33:08:67:8b: e9:34:f4:84:54:8d:e2:e5:8f:ae:0a:63:d0:2c:ac:3d:ce:cc: 6e:1e:cb:7e:be:e7:0e:a4:52:a9:2b:24:49:33:26:d4:ba:f2: 51:1d:a9:14:b9:11:cd:aa:35:27:01:dc:7c:32:78:f3:2d:1a: d0:39:b6:80:66:ad:fe:0a:0b:01:c1:d9:c4:2f:a5:59:21:ef: bc:74:88:92:4f:68:8f:22:10:e5:c0:f3:51:2d:8d:ca:38:48: bd:27:a8:81:20:e5:17:c0:27:b0:fd:d9:b8:f1:b6:23:36:c4: 42:ab:11:e6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQs29xca3wU7baQPPrth/MopevkYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIyMDEyMDQxWhcNMjcwMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjYWQ0ZWQ3N2IyMTRmMjQ1MjhjODc1OTZiNDQ5N2NkMTVl ZGVmMTRiMTM4MDRlOTJmOGM0ZDg5OTU3MDRiNjhjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCj+39BgZtgX23WYtu6ZRdipwRMJgRai50RuSnlM4dWlp44 M8khWHba47UvnGcU/wsNB+5KG0jztnm4gj3fyMBDeD/AlJJ4whDKG6Oh0Kj6z4O7 LqydYOt1dxmMFrydpNKC2nEjhBeKsBoZgAWhYi/RA5SDOEivD6oWXlC4q3or1DVc hpEQ1M1Sq+4DmsKLr61r64AYu8NkrbxFeUmoiekZTKaLLy8APcyUM2843GktDV61 5IJREf2ewk+yv4Xy9yca+4fRybmPtpLdM4Jcdc/AfaxuRB0VhMKiJ0mmeMvpbpja LiPQZmYICG7+igSPsH4eT1uoDUpKPQYi4Vs9MIcpAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU8+JW50slMWvAOzgrpVaaLp2jrHgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QyMWE1MTczLTUzMDQtNDRhYi04YmI1LTI0ZWUyM2YyN2E3MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/2gf4wDQYJKoZIhvcNAQELBQADggEBALDkjlBbceGZMclCQqbiHq75 XJpFxXnY6S3iOKyE33NSbuNKXDQKqjtjXH3ZXTvMwhRXEaches4s4HxHc7WRE/Jm 6PM700g9A9eU3u/vHxmiUtGVsudZQfckzuD/Bn2z+SYzlD+e0dC8OivQ3TmmCCSX VK5j80Ln8Cz3mqZsCR8pd6ZL8o1nVylDIjUDMwhni+k09IRUjeLlj64KY9AsrD3O zG4ey36+5w6kUqkrJEkzJtS68lEdqRS5Ec2qNScB3HwyePMtGtA5toBmrf4KCwHB 2cQvpVkh77x0iJJPaI8iEOXA81Etjco4SL0nqIEg5RfAJ7D92bjxtiM2xEKrEeY= -----END CERTIFICATE-----Generated at Thu Nov 5 15:00:27 2026 by rpki-client