$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28202c82-9b27-4586-a52d-f8a456705b37.roa File: 28202c82-9b27-4586-a52d-f8a456705b37.roa (raw, json) Hash identifier: b5Gzt40DkXcqxy/t+C71R2uq6yihKsHSleeug2OLdLA= Subject key identifier: 56:B6:45:85:C0:7B:82:2A:6B:58:37:31:BB:48:18:41:62:7D:43:37 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 40339A328A9886A03DDE89C0E73800F125B55EF4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28202c82-9b27-4586-a52d-f8a456705b37.roa Signing time: Sat 07 Nov 2026 00:30:46 +0000 ROA not before: Sat 07 Nov 2026 00:30:46 +0000 ROA not after: Fri 05 Feb 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fe9:1000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:33:9a:32:8a:98:86:a0:3d:de:89:c0:e7:38:00:f1:25:b5:5e:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Nov 7 00:30:46 2026 GMT Not After : Feb 5 23:59:59 2027 GMT Subject: serialNumber=a5b4386377d5028ab534c17038147eef49e1a70ab94fa54b71d5dac6e9711990, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d3:84:23:b6:27:8b:ce:8e:f0:e8:67:d6:48: 44:bf:9e:ed:2d:ce:7b:43:a2:65:42:18:17:63:e8: 53:f4:1a:0f:3b:08:d9:c8:86:c9:58:9a:72:95:38: 57:1b:ca:b0:c5:03:07:55:82:65:5e:5d:66:0b:12: 56:52:eb:28:7e:44:78:f4:f0:12:df:f6:f6:95:6b: 61:2e:b7:b3:17:b3:44:86:4d:20:dc:36:55:2f:a5: 68:2f:c2:15:48:01:41:72:35:72:7f:f9:a6:81:46: e1:61:7f:91:4b:fb:a9:da:24:3e:c3:15:fb:da:61: 08:4e:0a:50:4b:76:35:e3:26:bf:29:8d:a5:77:b5: 68:7d:5b:42:77:b1:a0:9e:26:72:2e:3f:e7:91:57: 47:cf:1e:47:c4:9f:79:40:29:19:04:58:65:db:56: f4:69:09:eb:6a:6d:86:98:97:2f:08:5f:d0:9c:99: 83:1e:b4:f4:c9:3d:2d:22:dd:73:9a:c0:12:f1:d0: db:9e:cd:30:a5:32:22:af:08:ba:27:c6:3a:06:ea: 41:ed:b0:f2:2d:5a:e2:ad:df:e4:30:f0:86:ef:4c: 23:a4:61:f3:a8:cb:3b:49:87:9b:27:4c:56:71:e5: f7:f9:84:50:bf:1e:59:3e:b2:50:9d:c8:4e:8b:f9: 58:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:B6:45:85:C0:7B:82:2A:6B:58:37:31:BB:48:18:41:62:7D:43:37 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28202c82-9b27-4586-a52d-f8a456705b37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fe9:1000::/40 Signature Algorithm: sha256WithRSAEncryption 34:f6:5e:f2:44:47:84:b6:5e:d6:5e:ac:c5:ce:f7:93:43:ae: b2:37:ca:64:b9:2a:05:81:d4:ec:40:dc:6f:ab:30:7f:c6:01: 5f:24:41:29:bf:06:09:11:c0:45:6f:eb:e6:c0:b8:a7:e4:e6: 89:c9:c7:3a:6f:5f:74:f0:22:9e:e4:75:51:0d:95:89:52:6e: 0b:3a:f1:b4:e4:72:5a:f5:0f:1d:38:b7:17:82:be:8e:57:16: 5f:34:8c:b8:da:3d:68:c2:7a:1a:22:dc:5b:80:ab:06:e3:7b: 6e:cb:65:56:f3:f6:e7:c1:ec:7e:65:c1:72:73:7c:c3:b5:7a: 6f:32:2a:84:12:7d:bd:a0:65:f7:6a:d8:df:09:8a:7a:61:e7: c7:00:1c:36:b7:b6:9c:f4:3d:47:c4:4c:07:e4:37:18:a0:3a: e3:f1:7c:0b:a0:f9:2d:ac:1a:a0:18:19:5b:f9:da:13:4a:8f: b8:6d:7e:3d:7e:41:b9:6e:c3:0c:b6:d4:99:bd:3c:3a:85:6d: 95:76:f2:c7:47:3b:ae:00:50:69:71:e7:23:27:f5:d8:b0:39: be:ac:4a:aa:14:e5:34:d8:37:cb:8a:d2:04:ee:1f:bd:fb:f7: 80:2c:a4:ba:56:b4:08:5f:47:c8:58:33:73:6c:61:7e:d1:dd: 8a:2d:9a:0e -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUQDOaMoqYhqA93onA5zgA8SW1XvQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMTA3MDAzMDQ2WhcNMjcwMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNWI0Mzg2Mzc3ZDUwMjhhYjUzNGMxNzAzODE0N2VlZjQ5 ZTFhNzBhYjk0ZmE1NGI3MWQ1ZGFjNmU5NzExOTkwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCh04QjtieLzo7w6GfWSES/nu0tzntDomVCGBdj6FP0Gg87 CNnIhslYmnKVOFcbyrDFAwdVgmVeXWYLElZS6yh+RHj08BLf9vaVa2Eut7MXs0SG TSDcNlUvpWgvwhVIAUFyNXJ/+aaBRuFhf5FL+6naJD7DFfvaYQhOClBLdjXjJr8p jaV3tWh9W0J3saCeJnIuP+eRV0fPHkfEn3lAKRkEWGXbVvRpCetqbYaYly8IX9Cc mYMetPTJPS0i3XOawBLx0NuezTClMiKvCLonxjoG6kHtsPItWuKt3+Qw8IbvTCOk YfOoyztJh5snTFZx5ff5hFC/Hlk+slCdyE6L+Vg9AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUVrZFhcB7giprWDcxu0gYQWJ9QzcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI4MjAyYzgyLTliMjctNDU4Ni1hNTJkLWY4YTQ1NjcwNWIzNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/pEDANBgkqhkiG9w0BAQsFAAOCAQEANPZe8kRHhLZe1l6sxc73k0Ou sjfKZLkqBYHU7EDcb6swf8YBXyRBKb8GCRHARW/r5sC4p+TmicnHOm9fdPAinuR1 UQ2ViVJuCzrxtORyWvUPHTi3F4K+jlcWXzSMuNo9aMJ6GiLcW4CrBuN7bstlVvP2 58HsfmXBcnN8w7V6bzIqhBJ9vaBl92rY3wmKemHnxwAcNre2nPQ9R8RMB+Q3GKA6 4/F8C6D5LawaoBgZW/naE0qPuG1+PX5BuW7DDLbUmb08OoVtlXbyx0c7rgBQaXHn Iyf12LA5vqxKqhTlNNg3y4rSBO4fvfv3gCykula0CF9HyFgzc2xhftHdii2aDg== -----END CERTIFICATE-----Generated at Sun Nov 15 21:15:20 2026 by rpki-client