$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0272b754-4b95-4b6a-aad8-06f4b71c003d.roa File: 0272b754-4b95-4b6a-aad8-06f4b71c003d.roa (raw, json) Hash identifier: ULsrR1FXmZQjB9uK9pCpb99im4a/C+I8jIpAf9FsMQU= Subject key identifier: 0F:96:1F:56:F2:8C:2A:13:C2:BA:35:ED:97:46:97:CD:D8:45:80:F1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6A07DC98542BDC16343B5D85F6CEA75FDACB812D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0272b754-4b95-4b6a-aad8-06f4b71c003d.roa Signing time: Wed 09 Sep 2026 16:10:05 +0000 ROA not before: Wed 09 Sep 2026 16:10:05 +0000 ROA not after: Tue 08 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:c200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:07:dc:98:54:2b:dc:16:34:3b:5d:85:f6:ce:a7:5f:da:cb:81:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 9 16:10:05 2026 GMT Not After : Dec 8 23:59:59 2026 GMT Subject: serialNumber=6ee5d496e100a5d9954e720b5b849029083223a77d6819b0fd6cc6726c0899a0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3c:7c:f0:a0:1b:c6:37:aa:42:d9:91:24:73: 32:83:80:c6:a8:eb:20:ee:a1:08:bd:da:57:3e:64: ad:92:d9:15:31:2d:0c:58:35:44:d5:ef:f1:0f:21: 11:7d:b4:3b:ac:f9:70:2e:3c:04:20:9f:90:11:86: 4a:a5:df:4f:cc:97:10:75:33:75:c8:ac:03:15:d9: 09:f7:4d:4c:9e:23:0e:85:90:57:a9:00:74:f4:1b: 1d:a0:a9:40:a1:74:58:f7:b6:d1:67:50:90:9b:a3: 96:5e:b7:2a:50:77:74:3c:11:98:85:36:75:eb:15: 5e:4e:52:e6:44:35:7a:a6:72:86:b9:f4:47:a9:77: 7e:26:41:d3:6e:2e:a8:a4:f9:54:8a:23:9c:08:d8: 13:79:de:a5:43:b8:28:3e:cf:b3:cc:97:1d:5f:36: 16:00:2d:d0:fc:8f:81:63:1e:77:02:d2:61:38:bf: 85:4b:42:74:3b:3b:8b:10:fa:6c:79:60:a4:e9:31: 98:54:fb:72:9c:d0:e2:dd:e6:b8:d4:12:a4:74:b7: d2:72:7a:d4:28:af:e8:a8:b7:c1:00:ff:6e:6a:49: d4:ce:0f:5e:d8:fd:69:d7:b0:0f:1a:01:91:6c:fb: ed:b8:e1:61:02:29:82:2c:94:2e:69:67:f8:2d:ca: a4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:96:1F:56:F2:8C:2A:13:C2:BA:35:ED:97:46:97:CD:D8:45:80:F1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0272b754-4b95-4b6a-aad8-06f4b71c003d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:c200::/40 Signature Algorithm: sha256WithRSAEncryption 21:a5:55:51:be:35:a1:94:9d:7d:2f:53:1b:20:7a:89:0a:4b: 3b:da:d5:7c:35:0f:8e:84:89:96:bf:ef:2a:a9:52:00:05:cf: c0:6a:49:2d:44:ac:1e:33:bf:51:88:6f:cc:76:8b:49:27:fb: 85:c4:56:e0:ed:fa:9f:4c:37:7a:34:88:41:20:bc:5e:cb:36: 73:b8:4e:20:40:c0:69:f7:43:46:75:25:13:9d:70:d8:2e:44: 9b:64:98:09:c6:e6:b1:eb:02:7c:95:ac:b8:ff:02:23:c4:3f: a1:11:5a:2b:52:70:e8:f6:24:c3:86:69:a4:ac:b4:63:56:10: da:af:19:c1:3d:c2:8f:08:79:a0:b6:18:c4:cf:bf:3e:80:63: 82:3a:eb:ad:d5:ec:22:cd:ac:4b:14:cb:67:9f:35:7e:52:74: 6b:81:de:fa:08:a0:b4:c2:48:7f:ae:9b:3d:67:f9:44:3f:cc: 75:6a:75:ec:97:2b:24:93:ee:ce:fd:3b:d9:43:97:a1:a8:07: f8:09:d7:7b:a0:f4:77:4f:2d:8a:7c:94:fb:d8:08:30:c6:0e: 04:27:8b:72:5a:72:4a:dc:b6:91:58:6c:3b:3b:aa:96:53:cf: c4:60:e9:70:30:28:a6:0f:9b:47:f2:1f:88:49:f8:9b:02:6d: 03:f7:5e:36 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUagfcmFQr3BY0O12F9s6nX9rLgS0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwOTA5MTYxMDA1WhcNMjYxMjA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZWU1ZDQ5NmUxMDBhNWQ5OTU0ZTcyMGI1Yjg0OTAyOTA4 MzIyM2E3N2Q2ODE5YjBmZDZjYzY3MjZjMDg5OWEwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzPHzwoBvGN6pC2ZEkczKDgMao6yDuoQi92lc+ZK2S2RUx LQxYNUTV7/EPIRF9tDus+XAuPAQgn5ARhkql30/MlxB1M3XIrAMV2Qn3TUyeIw6F kFepAHT0Gx2gqUChdFj3ttFnUJCbo5ZetypQd3Q8EZiFNnXrFV5OUuZENXqmcoa5 9Eepd34mQdNuLqik+VSKI5wI2BN53qVDuCg+z7PMlx1fNhYALdD8j4FjHncC0mE4 v4VLQnQ7O4sQ+mx5YKTpMZhU+3Kc0OLd5rjUEqR0t9JyetQor+iot8EA/25qSdTO D17Y/WnXsA8aAZFs++244WECKYIslC5pZ/gtyqQ3AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUD5YfVvKMKhPCujXtl0aXzdhFgPEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAyNzJiNzU0LTRiOTUtNGI2YS1hYWQ4LTA2ZjRiNzFjMDAzZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB//wjANBgkqhkiG9w0BAQsFAAOCAQEAIaVVUb41oZSdfS9TGyB6iQpL O9rVfDUPjoSJlr/vKqlSAAXPwGpJLUSsHjO/UYhvzHaLSSf7hcRW4O36n0w3ejSI QSC8Xss2c7hOIEDAafdDRnUlE51w2C5Em2SYCcbmsesCfJWsuP8CI8Q/oRFaK1Jw 6PYkw4ZppKy0Y1YQ2q8ZwT3Cjwh5oLYYxM+/PoBjgjrrrdXsIs2sSxTLZ581flJ0 a4He+gigtMJIf66bPWf5RD/MdWp17JcrJJPuzv072UOXoagH+AnXe6D0d08tinyU +9gIMMYOBCeLclpySty2kVhsOzuqllPPxGDpcDAopg+bR/IfiEn4mwJtA/deNg== -----END CERTIFICATE-----Generated at Tue Sep 15 12:43:43 2026 by rpki-client