$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/022e9895-00ba-4757-9163-fc620b40556d.roa File: 022e9895-00ba-4757-9163-fc620b40556d.roa (raw, json) Hash identifier: om+4ScbqTPT1RqUpm56fm1xqZ7S+p+xeRoZHRswMIoM= Subject key identifier: EE:8B:D2:0F:89:36:4B:AE:5C:99:30:00:16:56:1A:E0:04:0B:5D:78 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 653266F2D15CFE606DABBA3A5B7477D21C78FF36 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/022e9895-00ba-4757-9163-fc620b40556d.roa Signing time: Tue 04 Aug 2026 00:41:13 +0000 ROA not before: Tue 04 Aug 2026 00:41:13 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f36:3400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:32:66:f2:d1:5c:fe:60:6d:ab:ba:3a:5b:74:77:d2:1c:78:ff:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 00:41:13 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=aaa4039aa881d259e174c346bee9c85b85a6d46eaa9f408c7c2dcdb987a8a647, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:eb:8d:5f:72:26:51:dd:84:09:d2:bd:1c:43: 48:fd:42:28:6c:3e:52:41:e1:f2:1a:f1:1c:4c:9d: b7:e8:36:b7:c4:58:1a:f6:d1:4c:ba:f2:15:46:ba: 3e:cb:30:40:b9:0f:10:6a:10:02:2d:c1:7e:c3:20: 3e:c3:54:27:2e:07:4f:7d:97:c8:f0:39:7d:9e:04: 7c:d5:ba:7c:11:c8:72:4d:f3:94:54:f3:2a:ee:cd: 55:2f:43:b9:71:15:d2:a0:76:79:f7:08:8d:05:ac: 66:b3:08:c8:ea:2b:b7:95:90:b2:f3:d8:f2:da:31: 1a:e1:b8:bb:1e:bb:33:b1:e1:21:a5:7f:6c:2e:e2: 58:33:d1:86:05:60:86:74:ef:67:b1:d5:a6:7a:5e: 87:ea:3c:53:8e:13:e2:5a:98:dc:05:d1:b5:bd:14: 41:c6:9c:47:12:30:d5:13:ee:9d:cb:a1:ab:74:80: 67:70:e1:46:06:96:a2:20:ea:08:27:49:4d:e0:97: f0:81:6e:89:e3:4e:21:f8:ef:6d:aa:bd:d6:d0:f4: 98:74:90:3d:aa:6f:28:63:68:86:fa:0c:ba:12:e1: 5c:cb:ff:cd:4e:ac:93:68:15:c8:93:3c:1a:88:8b: 8a:c5:d3:0a:b0:4b:87:11:19:cd:59:cf:55:91:ca: b0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:8B:D2:0F:89:36:4B:AE:5C:99:30:00:16:56:1A:E0:04:0B:5D:78 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/022e9895-00ba-4757-9163-fc620b40556d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f36:3400::/40 Signature Algorithm: sha256WithRSAEncryption d6:25:43:13:4b:58:81:c4:c9:ec:06:83:7b:b8:02:e5:de:e1: e9:d3:81:f4:5a:0f:a3:63:a9:ce:77:29:c8:d1:30:6f:13:99: b2:4c:2e:75:a0:b1:a6:d1:81:94:fe:d9:87:53:22:db:a5:4d: 73:d2:6f:52:a7:60:d9:ce:db:f7:dc:d4:a8:a5:ca:11:01:d4: a9:c7:63:a6:b7:09:91:f3:e1:cb:f3:0e:35:c0:13:6c:83:66: d4:ee:29:96:42:e4:b1:b2:c0:29:05:ae:75:58:a6:e1:f3:07: fe:1f:fd:55:87:78:aa:3c:d0:bd:ae:32:ce:55:b7:54:b2:5d: ec:97:ae:31:90:68:71:3d:fc:10:72:b2:77:26:1a:9b:af:85: b4:a4:f1:6f:de:6e:e8:0c:99:5e:db:9d:f7:e7:bf:bb:38:c6: 77:9c:d7:f4:97:b6:b9:ae:a1:40:3b:8f:6b:80:5f:7e:d6:67: 83:87:bf:87:b8:66:89:54:44:3a:3b:56:f3:0e:d0:86:37:94: d9:4a:5a:f3:26:2a:fd:c6:b1:6a:a7:ea:d5:ba:3b:e4:37:40: 0a:53:dc:a6:0a:09:04:fb:3a:01:6d:a4:ab:b8:ea:09:4b:c8: 62:3f:5e:0c:22:6c:34:14:17:0e:5a:d5:7e:df:74:4e:f1:27: aa:0d:2d:ca -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUZTJm8tFc/mBtq7o6W3R30hx4/zYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA0MDA0MTEzWhcNMjYxMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhYWE0MDM5YWE4ODFkMjU5ZTE3NGMzNDZiZWU5Yzg1Yjg1 YTZkNDZlYWE5ZjQwOGM3YzJkY2RiOTg3YThhNjQ3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCm641fciZR3YQJ0r0cQ0j9QihsPlJB4fIa8RxMnbfoNrfE WBr20Uy68hVGuj7LMEC5DxBqEAItwX7DID7DVCcuB099l8jwOX2eBHzVunwRyHJN 85RU8yruzVUvQ7lxFdKgdnn3CI0FrGazCMjqK7eVkLLz2PLaMRrhuLseuzOx4SGl f2wu4lgz0YYFYIZ072ex1aZ6XofqPFOOE+JamNwF0bW9FEHGnEcSMNUT7p3Loat0 gGdw4UYGlqIg6ggnSU3gl/CBbonjTiH4722qvdbQ9Jh0kD2qbyhjaIb6DLoS4VzL /81OrJNoFciTPBqIi4rF0wqwS4cRGc1Zz1WRyrDZAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU7ovSD4k2S65cmTAAFlYa4AQLXXgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAyMmU5ODk1LTAwYmEtNDc1Ny05MTYzLWZjNjIwYjQwNTU2ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB82NDANBgkqhkiG9w0BAQsFAAOCAQEA1iVDE0tYgcTJ7AaDe7gC5d7h 6dOB9FoPo2OpzncpyNEwbxOZskwudaCxptGBlP7Zh1Mi26VNc9JvUqdg2c7b99zU qKXKEQHUqcdjprcJkfPhy/MONcATbINm1O4plkLksbLAKQWudVim4fMH/h/9VYd4 qjzQva4yzlW3VLJd7JeuMZBocT38EHKydyYam6+FtKTxb95u6AyZXtud9+e/uzjG d5zX9Je2ua6hQDuPa4BfftZng4e/h7hmiVREOjtW8w7QhjeU2Upa8yYq/caxaqfq 1bo75DdAClPcpgoJBPs6AW2kq7jqCUvIYj9eDCJsNBQXDlrVft90TvEnqg0tyg== -----END CERTIFICATE-----Generated at Thu Sep 17 16:24:58 2026 by rpki-client