$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02604c31-9a8b-4693-867a-d8c460ff9585.roa File: 02604c31-9a8b-4693-867a-d8c460ff9585.roa (raw, json) Hash identifier: Xua9//wYYV4DPccCdUiASL09480ODWJdTIXP+DaymSI= Subject key identifier: 22:5B:A1:37:CF:97:E1:C9:40:4D:68:3E:7D:E2:6A:F2:72:AC:7C:5A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 62066258A2F180D9B84130B67212FD2708CCD9DA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02604c31-9a8b-4693-867a-d8c460ff9585.roa Signing time: Wed 09 Sep 2026 16:03:44 +0000 ROA not before: Wed 09 Sep 2026 16:03:44 +0000 ROA not after: Tue 08 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f62:a400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:06:62:58:a2:f1:80:d9:b8:41:30:b6:72:12:fd:27:08:cc:d9:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 9 16:03:44 2026 GMT Not After : Dec 8 23:59:59 2026 GMT Subject: serialNumber=89cc15d095d73c3f0125da7caed5c6f8fce4c46474476ea6673542988dedad64, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ba:9f:4a:2c:a1:7d:ce:db:1b:18:c7:5f:67: 89:bf:d7:72:44:66:9f:13:6b:da:89:28:39:0c:d4: 91:3d:45:b3:48:f6:1e:c9:8d:88:c2:05:02:4b:1e: b6:63:64:bf:97:c0:04:82:6d:e3:91:a3:9f:14:9a: 3f:0d:33:53:2c:b7:73:4e:c7:64:6d:a2:d3:17:bd: 82:3a:10:2d:d9:f9:31:b4:fd:df:22:4b:5c:68:f0: f4:7b:7f:04:64:14:a7:c5:29:2e:6f:9e:37:16:83: 67:1f:34:2d:a6:ac:94:64:18:a4:a6:39:f8:38:f2: b2:55:3d:1c:39:bb:0a:58:30:1d:74:bd:76:95:54: 3d:20:96:c7:5c:f2:50:bf:fc:9d:38:b7:0a:60:ec: 21:77:c4:d1:cf:26:e8:11:47:8c:95:28:a0:97:12: 56:01:ff:6d:55:7a:03:e1:97:b3:47:6d:7a:aa:2a: 43:85:39:2c:56:64:50:d0:f5:63:f8:f4:08:4a:75: e0:93:c0:70:2b:3e:ff:4e:f6:07:31:8d:88:f0:a3: a0:51:c9:6f:11:4a:26:32:f8:25:2d:b4:63:0f:74: 36:0e:50:81:48:9f:3c:f7:1d:c6:ba:3c:cb:de:fd: 2b:8a:ef:e5:bd:73:3d:72:11:db:0a:58:b7:f8:d3: d4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:5B:A1:37:CF:97:E1:C9:40:4D:68:3E:7D:E2:6A:F2:72:AC:7C:5A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02604c31-9a8b-4693-867a-d8c460ff9585.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f62:a400::/40 Signature Algorithm: sha256WithRSAEncryption 8f:e5:e9:56:77:0b:0f:15:6e:61:b5:39:57:14:8f:77:6a:b5: 8f:11:82:32:ee:37:f3:9d:88:04:c3:72:cc:ea:b7:ae:60:2a: c0:ca:dd:e7:35:2e:13:b6:15:b2:4e:3a:ae:dd:97:a5:2c:d4: b6:7f:89:bb:c5:1c:0d:b7:95:b1:d9:7a:02:c5:3e:e3:16:98: 80:80:5f:e3:8d:7d:17:a0:00:59:92:2a:f8:31:90:0e:ef:a7: e0:e1:c5:a9:bf:cc:3b:c3:fd:6b:91:89:73:67:f5:0e:10:2c: 50:4d:13:37:8b:91:3b:95:77:45:4b:5c:ee:55:6e:5c:c0:fb: f0:87:5d:be:b0:6d:d5:ad:0d:d8:71:1b:8b:22:41:98:4d:e5: 14:f4:71:7c:43:e9:e5:f1:6d:8e:82:0e:44:c5:e3:e4:33:fe: c8:5d:1c:a9:3b:30:1e:3b:32:09:06:d0:3b:d9:ae:cb:a2:c1: 95:d3:8d:2a:51:75:df:d2:c8:46:02:a2:da:3f:17:86:bf:92: ae:66:6d:16:23:6e:73:2f:7a:fc:6c:d5:21:ee:7d:d8:2b:1c: 88:b0:14:1e:97:e0:3b:75:32:c2:33:64:07:62:37:ec:f3:c6: f1:3a:7c:3c:bc:af:e3:46:0e:db:16:30:96:84:6d:f9:3b:af: e0:02:ab:17 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUYgZiWKLxgNm4QTC2chL9JwjM2dowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwOTA5MTYwMzQ0WhcNMjYxMjA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A4OWNjMTVkMDk1ZDczYzNmMDEyNWRhN2NhZWQ1YzZmOGZj ZTRjNDY0NzQ0NzZlYTY2NzM1NDI5ODhkZWRhZDY0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHup9KLKF9ztsbGMdfZ4m/13JEZp8Ta9qJKDkM1JE9RbNI 9h7JjYjCBQJLHrZjZL+XwASCbeORo58Umj8NM1Mst3NOx2RtotMXvYI6EC3Z+TG0 /d8iS1xo8PR7fwRkFKfFKS5vnjcWg2cfNC2mrJRkGKSmOfg48rJVPRw5uwpYMB10 vXaVVD0glsdc8lC//J04twpg7CF3xNHPJugRR4yVKKCXElYB/21VegPhl7NHbXqq KkOFOSxWZFDQ9WP49AhKdeCTwHArPv9O9gcxjYjwo6BRyW8RSiYy+CUttGMPdDYO UIFInzz3Hca6PMve/SuK7+W9cz1yEdsKWLf409T3AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUIluhN8+X4clATWg+feJq8nKsfFowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAyNjA0YzMxLTlhOGItNDY5My04NjdhLWQ4YzQ2MGZmOTU4NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9ipDANBgkqhkiG9w0BAQsFAAOCAQEAj+XpVncLDxVuYbU5VxSPd2q1 jxGCMu43852IBMNyzOq3rmAqwMrd5zUuE7YVsk46rt2XpSzUtn+Ju8UcDbeVsdl6 AsU+4xaYgIBf4419F6AAWZIq+DGQDu+n4OHFqb/MO8P9a5GJc2f1DhAsUE0TN4uR O5V3RUtc7lVuXMD78IddvrBt1a0N2HEbiyJBmE3lFPRxfEPp5fFtjoIORMXj5DP+ yF0cqTswHjsyCQbQO9muy6LBldONKlF139LIRgKi2j8Xhr+SrmZtFiNucy96/GzV Ie592CsciLAUHpfgO3UywjNkB2I37PPG8Tp8PLyv40YO2xYwloRt+Tuv4AKrFw== -----END CERTIFICATE-----Generated at Tue Sep 15 12:09:52 2026 by rpki-client