$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9ac2748-adb8-4a7b-8b7d-8b5f941f0f32.roa File: d9ac2748-adb8-4a7b-8b7d-8b5f941f0f32.roa (raw, json) Hash identifier: 0mC6jy6TAPoLCUe38C8EvhHyd5fpQPkTPdfzl+7GgzQ= Subject key identifier: 75:AC:52:FD:8A:74:7B:58:ED:7B:A7:E3:C5:D9:C3:0F:F5:1B:A5:BE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3C09D94F91DC969322E599C4999243E2437D37F5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9ac2748-adb8-4a7b-8b7d-8b5f941f0f32.roa Signing time: Fri 23 Oct 2026 02:11:15 +0000 ROA not before: Fri 23 Oct 2026 02:11:15 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f18:2000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:09:d9:4f:91:dc:96:93:22:e5:99:c4:99:92:43:e2:43:7d:37:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 23 02:11:15 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=046b5dcd7023fe75c5751f706aa3fbb74d63f3281ce840df0cfc08247d8a4b4a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:dc:e5:0a:c3:93:52:38:d5:bb:a7:b4:6c:a4: 85:f9:7b:9f:be:30:ba:20:7e:4c:83:63:15:f0:ff: 97:fd:9d:04:2c:02:aa:ab:c5:db:9c:f8:cc:be:4c: 43:cf:f6:a9:f1:26:85:f0:c6:ef:f1:80:8c:7f:73: cb:96:ad:03:81:5a:c0:95:c0:8b:eb:5a:cf:dc:03: 9a:df:17:f0:fe:8c:f5:f3:1f:02:d5:33:42:a1:57: 15:b9:d7:e3:f8:68:13:1f:2d:25:fc:f9:97:2e:1f: 3f:90:e8:cb:26:61:d2:99:e5:37:f4:f0:a7:76:d5: 9b:77:b3:96:20:12:0b:9f:b1:61:f2:ea:2d:52:25: db:76:fa:ee:66:e4:55:8e:24:f7:69:16:84:0d:df: dc:c5:e9:be:9f:93:83:fe:d4:31:4a:a9:6d:f1:70: 7a:87:73:c7:95:19:9b:f1:81:c7:b3:4c:59:7c:74: eb:45:75:fe:49:1a:83:0a:dd:fb:43:28:89:f8:b1: 85:e6:6d:99:ed:65:25:2d:a0:6a:de:ca:3e:fb:76: bf:25:04:cd:3b:cc:5a:ec:9d:a9:d3:ab:9a:67:13: 84:b5:6f:24:ff:cc:36:63:be:b5:4f:c8:cb:2f:4b: 44:5e:28:12:e0:c1:1e:f7:e0:57:31:07:5e:cc:2c: 14:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:AC:52:FD:8A:74:7B:58:ED:7B:A7:E3:C5:D9:C3:0F:F5:1B:A5:BE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9ac2748-adb8-4a7b-8b7d-8b5f941f0f32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f18:2000::/35 Signature Algorithm: sha256WithRSAEncryption 0c:08:d3:2b:e4:1a:d0:91:33:d2:3a:33:a3:f0:e2:31:f3:21: fa:a1:ab:aa:f3:98:14:1d:2a:ad:86:e8:3e:9e:5e:14:24:f7: 55:f8:63:4b:8b:d4:cc:30:8c:5f:05:d7:0a:81:16:eb:5d:30: 4e:b1:56:2b:b4:12:6d:fc:46:ce:a1:1b:e8:37:e1:96:6d:ca: 8b:f0:67:78:94:99:fd:86:1a:d7:1b:91:4a:97:7b:80:65:85: 09:3c:54:b6:84:99:5a:6c:5b:32:f1:9e:e0:b7:d1:ca:e4:44: 6d:1b:3c:93:14:25:33:15:b8:bd:89:93:4d:6f:ec:eb:c8:3d: 72:ee:aa:ea:5a:37:e7:1d:a3:d3:c5:ba:48:83:f2:16:05:4c: dc:a7:bb:f4:83:f2:90:75:db:5c:36:7b:3d:a5:4f:7d:82:4f: 78:0f:d4:5c:26:25:14:d0:25:0d:3c:db:6e:75:a7:1e:3e:fb: 1b:71:28:28:2a:87:58:57:7d:f6:ed:81:2e:ec:3b:49:91:54: a2:09:1f:d8:01:8c:ba:52:e7:e3:90:d9:47:12:db:ed:dd:ca: c1:6d:91:ce:62:49:57:0a:b0:90:26:cd:95:b7:66:90:0f:d2: 6d:84:94:49:5f:10:61:af:60:1f:33:39:86:a7:98:d6:b2:bb: 10:3c:9e:8e -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUPAnZT5HclpMi5ZnEmZJD4kN9N/UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDIxMTE1WhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNDZiNWRjZDcwMjNmZTc1YzU3NTFmNzA2YWEzZmJiNzRk NjNmMzI4MWNlODQwZGYwY2ZjMDgyNDdkOGE0YjRhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDG3OUKw5NSONW7p7RspIX5e5++MLogfkyDYxXw/5f9nQQs Aqqrxduc+My+TEPP9qnxJoXwxu/xgIx/c8uWrQOBWsCVwIvrWs/cA5rfF/D+jPXz HwLVM0KhVxW51+P4aBMfLSX8+ZcuHz+Q6MsmYdKZ5Tf08Kd21Zt3s5YgEgufsWHy 6i1SJdt2+u5m5FWOJPdpFoQN39zF6b6fk4P+1DFKqW3xcHqHc8eVGZvxgcezTFl8 dOtFdf5JGoMK3ftDKIn4sYXmbZntZSUtoGreyj77dr8lBM07zFrsnanTq5pnE4S1 byT/zDZjvrVPyMsvS0ReKBLgwR734FcxB17MLBSfAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUdaxS/Yp0e1jte6fjxdnDD/Ubpb4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q5YWMyNzQ4LWFkYjgtNGE3Yi04YjdkLThiNWY5NDFmMGYzMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgUmAB8YIDANBgkqhkiG9w0BAQsFAAOCAQEADAjTK+Qa0JEz0jozo/DiMfMh +qGrqvOYFB0qrYboPp5eFCT3VfhjS4vUzDCMXwXXCoEW610wTrFWK7QSbfxGzqEb 6Dfhlm3Ki/BneJSZ/YYa1xuRSpd7gGWFCTxUtoSZWmxbMvGe4LfRyuREbRs8kxQl MxW4vYmTTW/s68g9cu6q6lo35x2j08W6SIPyFgVM3Ke79IPykHXbXDZ7PaVPfYJP eA/UXCYlFNAlDTzbbnWnHj77G3EoKCqHWFd99u2BLuw7SZFUogkf2AGMulLn45DZ RxLb7d3KwW2RzmJJVwqwkCbNlbdmkA/SbYSUSV8QYa9gHzM5hqeY1rK7EDyejg== -----END CERTIFICATE-----Generated at Thu Nov 5 13:46:42 2026 by rpki-client