$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c0ba95f7-f662-491c-8d5f-68532e494cdd.roa File: c0ba95f7-f662-491c-8d5f-68532e494cdd.roa (raw, json) Hash identifier: 6Oq8whXmRHM4P2nZ12VIMWsovHWCY9olKnySPD5V2JI= Subject key identifier: 68:2C:4B:CD:C7:8E:AF:58:26:13:C6:2E:F2:02:45:17:91:E5:35:12 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 156CF9954C507283D057EFA52CD07762F80CEA71 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c0ba95f7-f662-491c-8d5f-68532e494cdd.roa Signing time: Fri 23 Oct 2026 01:11:31 +0000 ROA not before: Fri 23 Oct 2026 01:11:31 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f17:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:6c:f9:95:4c:50:72:83:d0:57:ef:a5:2c:d0:77:62:f8:0c:ea:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 23 01:11:31 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=ec52f165b9948dbe1a0713e2a9d67420db340b54aa621b57d73f6f62106086d1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b9:82:ff:fa:f2:c2:e0:15:ea:8f:4a:b1:66: a8:db:94:c4:99:a0:74:be:bd:64:a3:94:b0:df:a9: fa:c6:42:be:20:95:59:4b:bb:bc:01:60:b3:5b:24: e5:5d:7f:f0:03:6f:a1:5e:49:f5:a7:68:35:09:63: b0:3b:8f:d5:28:95:ae:3c:d7:78:ee:6a:9e:96:60: a6:fd:48:71:31:15:2d:8f:95:50:12:79:96:2c:8b: 15:62:29:76:73:b1:3a:bb:dd:bb:62:fa:7f:aa:1e: 3e:bb:8f:af:94:e0:c0:d0:48:97:05:d9:ba:1e:47: 39:56:4f:58:e1:db:74:49:04:6e:45:9b:bf:24:59: 34:7f:10:32:4a:82:61:bd:96:9f:26:ff:cb:e0:f8: 2c:ac:4c:60:01:00:88:d9:5a:f2:4d:38:23:af:c8: ce:f2:b9:da:57:0c:88:4d:6c:37:06:92:2a:54:16: a8:8b:94:6a:40:a7:70:71:48:98:bb:81:a2:a1:70: 6c:49:f0:33:d9:7c:38:f8:0c:2f:c5:a2:cf:99:2c: 5b:69:db:7d:d0:67:d9:2a:a5:43:e6:6e:ed:a4:1d: b5:ba:a0:3b:ea:b7:24:18:1b:02:b4:15:f1:49:f6: 57:44:2c:d4:e1:73:35:f6:43:60:79:6c:02:e7:b8: a3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:2C:4B:CD:C7:8E:AF:58:26:13:C6:2E:F2:02:45:17:91:E5:35:12 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c0ba95f7-f662-491c-8d5f-68532e494cdd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f17:4000::/36 Signature Algorithm: sha256WithRSAEncryption d2:03:5e:51:b7:6b:5a:3f:14:33:ce:99:3e:6c:b0:f0:0f:6c: d6:d3:08:48:26:1f:b2:03:86:69:19:bd:7b:44:a6:76:c8:c1: 4a:33:83:f4:12:e6:1c:6a:df:5c:b1:60:56:67:85:23:3b:03: 3d:e8:d3:c9:c0:8e:89:d8:cc:9e:53:6e:93:4f:29:0b:86:15: 54:2e:7a:9d:1a:cc:61:92:72:02:77:16:e1:76:15:5d:bb:6c: a1:bc:30:a2:3c:c2:c1:51:7e:f7:c2:2d:d5:fe:2f:96:1a:86: aa:bb:87:d8:3f:34:3d:aa:34:74:1b:0d:2d:28:1c:1a:fb:d5: bf:8f:86:1b:a2:87:c1:44:59:21:d2:d5:16:fb:fe:96:68:05: 6f:62:4d:7c:f9:be:a4:b8:ea:25:59:fa:b4:f5:45:a3:e9:85: a1:5e:3c:6b:d7:3b:39:77:be:0b:2c:3d:57:2f:a3:6d:47:d3: fd:61:61:c3:67:1a:d1:3c:04:40:f9:15:55:12:29:46:14:d6: c1:4c:b8:37:00:e9:59:46:2b:38:77:16:9f:02:c7:e6:ed:dc: c4:92:5a:b6:31:fd:07:81:34:dd:22:15:29:e5:ef:89:3c:a0: d7:55:7c:f1:c5:b1:03:20:98:3d:ad:f7:7f:52:b5:56:0e:7f: 17:56:ed:11 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUFWz5lUxQcoPQV++lLNB3YvgM6nEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDExMTMxWhcNMjcwMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BlYzUyZjE2NWI5OTQ4ZGJlMWEwNzEzZTJhOWQ2NzQyMGRi MzQwYjU0YWE2MjFiNTdkNzNmNmY2MjEwNjA4NmQxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/uYL/+vLC4BXqj0qxZqjblMSZoHS+vWSjlLDfqfrGQr4g lVlLu7wBYLNbJOVdf/ADb6FeSfWnaDUJY7A7j9Uola4813juap6WYKb9SHExFS2P lVASeZYsixViKXZzsTq73bti+n+qHj67j6+U4MDQSJcF2boeRzlWT1jh23RJBG5F m78kWTR/EDJKgmG9lp8m/8vg+CysTGABAIjZWvJNOCOvyM7yudpXDIhNbDcGkipU FqiLlGpAp3BxSJi7gaKhcGxJ8DPZfDj4DC/Fos+ZLFtp233QZ9kqpUPmbu2kHbW6 oDvqtyQYGwK0FfFJ9ldELNThczX2Q2B5bALnuKOpAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUaCxLzceOr1gmE8Yu8gJFF5HlNRIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MwYmE5NWY3LWY2NjItNDkxYy04ZDVmLTY4NTMyZTQ5NGNkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8XQDANBgkqhkiG9w0BAQsFAAOCAQEA0gNeUbdrWj8UM86ZPmyw8A9s 1tMISCYfsgOGaRm9e0SmdsjBSjOD9BLmHGrfXLFgVmeFIzsDPejTycCOidjMnlNu k08pC4YVVC56nRrMYZJyAncW4XYVXbtsobwwojzCwVF+98It1f4vlhqGqruH2D80 Pao0dBsNLSgcGvvVv4+GG6KHwURZIdLVFvv+lmgFb2JNfPm+pLjqJVn6tPVFo+mF oV48a9c7OXe+Cyw9Vy+jbUfT/WFhw2ca0TwEQPkVVRIpRhTWwUy4NwDpWUYrOHcW nwLH5u3cxJJatjH9B4E03SIVKeXviTyg11V88cWxAyCYPa33f1K1Vg5/F1btEQ== -----END CERTIFICATE-----Generated at Sun Nov 15 16:03:09 2026 by rpki-client