$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb96d250-5246-4bf9-ab64-c99916885173.roa File: cb96d250-5246-4bf9-ab64-c99916885173.roa (raw, json) Hash identifier: NhPw+9g8wmgHOxoNCofbBoPFKD0zH0n/7u5BAwlYSjM= Subject key identifier: 67:60:31:A2:3A:90:F0:50:34:0A:C2:DB:90:A9:67:99:3A:05:43:53 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 63F247FAEBC0E6667752C3E50413DB603D117EF5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb96d250-5246-4bf9-ab64-c99916885173.roa Signing time: Fri 09 Oct 2026 00:40:31 +0000 ROA not before: Fri 09 Oct 2026 00:40:31 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fa0:3400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:f2:47:fa:eb:c0:e6:66:77:52:c3:e5:04:13:db:60:3d:11:7e:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 9 00:40:31 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=2802b98289ff0556bd78d14dee6ea0637093a5d2840674b8e3197640528f6c2f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cb:2a:a6:13:cb:7e:1d:49:8d:a9:81:61:3a: f5:d8:d0:9c:b9:01:bb:c5:c2:59:52:e6:09:93:ca: cd:cf:a7:bc:d7:0a:6a:c1:a9:e2:c8:c0:97:90:f8: 93:6a:40:44:98:2e:55:6f:00:a6:4a:ff:a9:86:53: 42:13:f3:9a:b5:73:5d:31:c6:8d:bc:b7:29:96:3d: 32:48:d7:87:93:04:47:c4:cb:ad:af:9e:fb:24:68: a7:ba:bd:97:c6:a7:36:04:77:13:07:4a:25:d4:c0: 0d:47:34:36:72:2e:3b:5b:fa:7e:fb:9d:e0:63:e6: fc:b8:58:64:24:5c:d2:80:87:b6:9e:39:72:51:ec: 66:20:b3:89:76:01:a4:aa:8d:a9:73:07:ba:ff:27: 1a:34:78:d5:75:51:72:7c:c8:57:f6:60:cb:aa:9c: 7a:3a:2e:a3:6a:42:fc:b6:33:12:2a:15:6d:58:9c: 88:7d:97:94:99:c4:5d:58:f5:96:b5:02:40:85:32: d1:4d:9b:92:66:7f:de:2e:72:7d:b5:3b:46:ff:1b: bf:4b:09:f3:c8:d6:79:04:f9:d3:3b:89:ce:8d:83: 5f:28:bc:17:94:90:3c:17:62:84:61:e3:4d:53:53: 34:ad:9a:fe:2e:b9:8c:6e:c9:0a:c6:0e:54:8a:40: bc:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:60:31:A2:3A:90:F0:50:34:0A:C2:DB:90:A9:67:99:3A:05:43:53 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb96d250-5246-4bf9-ab64-c99916885173.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fa0:3400::/40 Signature Algorithm: sha256WithRSAEncryption 8c:ab:27:3a:d8:0d:e6:45:20:ab:97:4e:d4:de:4e:b2:49:5a: ec:f7:5d:bf:a4:cf:cf:2c:ee:0b:83:07:d6:7f:8f:83:b4:9f: 6c:51:c4:a7:72:22:94:d4:b6:81:a7:6e:f7:7a:92:09:59:4e: 01:f2:53:b5:66:38:94:15:f5:ee:a4:f9:1f:f4:30:7a:c8:a1: 5e:76:8c:ac:9b:5f:b2:b2:de:2d:27:fe:45:97:8f:ec:79:72: f2:42:11:ae:bc:c6:a8:5c:a0:77:b2:03:70:ed:65:7c:69:15: d4:c1:3a:8b:65:4b:88:f2:a0:86:57:4b:43:85:98:b6:4b:e4: 9e:17:8e:c1:25:35:92:ca:42:d0:0a:fa:53:d2:90:13:f8:82: 09:94:df:b9:15:20:dd:04:e8:13:69:17:bf:ae:5f:c7:77:fb: b5:ea:3b:3d:fc:8c:d1:33:65:54:65:fc:2a:1c:3f:b8:29:e7: f3:08:8c:33:3d:9f:17:23:d2:fd:15:0c:95:e3:47:34:d5:95: 52:5a:9f:33:78:98:63:ca:8b:d9:88:f1:62:bb:fa:65:71:7b: 23:cb:2f:51:17:a8:d2:2f:4b:73:e8:69:eb:52:6b:6b:f9:32: a7:91:c9:f6:aa:97:c9:2a:32:7f:95:a8:0d:12:5d:41:06:9f: 5a:d8:3b:d5 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUY/JH+uvA5mZ3UsPlBBPbYD0RfvUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA5MDA0MDMxWhcNMjcwMTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyODAyYjk4Mjg5ZmYwNTU2YmQ3OGQxNGRlZTZlYTA2Mzcw OTNhNWQyODQwNjc0YjhlMzE5NzY0MDUyOGY2YzJmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuyyqmE8t+HUmNqYFhOvXY0Jy5AbvFwllS5gmTys3Pp7zX CmrBqeLIwJeQ+JNqQESYLlVvAKZK/6mGU0IT85q1c10xxo28tymWPTJI14eTBEfE y62vnvskaKe6vZfGpzYEdxMHSiXUwA1HNDZyLjtb+n77neBj5vy4WGQkXNKAh7ae OXJR7GYgs4l2AaSqjalzB7r/Jxo0eNV1UXJ8yFf2YMuqnHo6LqNqQvy2MxIqFW1Y nIh9l5SZxF1Y9Za1AkCFMtFNm5Jmf94ucn21O0b/G79LCfPI1nkE+dM7ic6Ng18o vBeUkDwXYoRh401TUzStmv4uuYxuyQrGDlSKQLw3AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUZ2AxojqQ8FA0CsLbkKlnmToFQ1MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NiOTZkMjUwLTUyNDYtNGJmOS1hYjY0LWM5OTkxNjg4NTE3My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+gNDANBgkqhkiG9w0BAQsFAAOCAQEAjKsnOtgN5kUgq5dO1N5Oskla 7Pddv6TPzyzuC4MH1n+Pg7SfbFHEp3IilNS2gadu93qSCVlOAfJTtWY4lBX17qT5 H/QwesihXnaMrJtfsrLeLSf+RZeP7Hly8kIRrrzGqFygd7IDcO1lfGkV1ME6i2VL iPKghldLQ4WYtkvknheOwSU1kspC0Ar6U9KQE/iCCZTfuRUg3QToE2kXv65fx3f7 teo7PfyM0TNlVGX8Khw/uCnn8wiMMz2fFyPS/RUMleNHNNWVUlqfM3iYY8qL2Yjx Yrv6ZXF7I8svUReo0i9Lc+hp61Jra/kyp5HJ9qqXySoyf5WoDRJdQQafWtg71Q== -----END CERTIFICATE-----Generated at Sun Nov 15 14:36:27 2026 by rpki-client