$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/07eec5bd-3698-4e71-b00d-581bd4888244.roa File: 07eec5bd-3698-4e71-b00d-581bd4888244.roa (raw, json) Hash identifier: 6gT6VOFCXnjsiuh2r66ppbNngqs3EYYOgRIlz8St5EE= Subject key identifier: E1:FE:BD:4E:59:B7:66:2E:D3:88:16:4D:E3:D7:78:1D:FE:96:71:40 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 30AE2BDE789FA387A025F7A8B6F63A99FD811439 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/07eec5bd-3698-4e71-b00d-581bd4888244.roa Signing time: Tue 25 Aug 2026 00:00:11 +0000 ROA not before: Tue 25 Aug 2026 00:00:11 +0000 ROA not after: Mon 23 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fe9:6050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:ae:2b:de:78:9f:a3:87:a0:25:f7:a8:b6:f6:3a:99:fd:81:14:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 25 00:00:11 2026 GMT Not After : Nov 23 23:59:59 2026 GMT Subject: serialNumber=9d3ee97b5c262ed00563e6dbcf67c85e0f87fa6ea3e5eb2bfa486ce045541a2b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4b:28:31:be:f3:53:44:51:3e:c9:db:a8:b4: 29:27:b0:3c:1b:76:a9:ac:98:5d:d9:d6:a4:c7:ec: 2c:64:6b:87:86:7f:c4:63:ea:5b:9b:2d:3f:62:3a: 6d:47:c1:03:c4:69:55:af:87:99:69:5b:32:e6:c8: f6:69:4c:c9:e6:88:d6:42:ab:76:ad:1e:7b:de:c7: 02:60:08:2a:2b:9c:41:10:5b:88:6c:60:f4:4c:3f: 22:e1:13:ce:4a:b7:18:ba:25:ad:a1:e5:4c:1c:b2: f5:11:ce:d0:bf:9e:cd:d7:7f:5d:75:16:eb:19:6a: bc:df:38:b8:14:86:b2:8b:49:c5:cc:3b:29:9d:a3: 8f:36:85:d5:25:2d:1b:d7:96:39:14:79:94:75:10: a5:cc:f7:3e:de:aa:64:0e:ff:37:71:09:44:d8:a0: 46:22:eb:50:ff:17:f6:3f:7b:78:06:40:01:72:68: 30:e7:e0:ec:e2:1b:ad:e3:c0:8f:38:e8:73:ef:da: 3e:64:c5:53:13:45:6e:e0:66:79:8e:02:97:40:3d: 49:80:20:01:30:6b:31:8c:57:b7:2f:56:17:9d:48: b6:0b:b3:73:8a:55:7f:a5:a2:be:62:99:f0:3e:39: a1:e9:05:72:b9:0a:61:f3:c3:1b:5a:83:8f:9d:38: 02:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:FE:BD:4E:59:B7:66:2E:D3:88:16:4D:E3:D7:78:1D:FE:96:71:40 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/07eec5bd-3698-4e71-b00d-581bd4888244.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fe9:6050::/48 Signature Algorithm: sha256WithRSAEncryption 96:79:a9:35:5d:b1:41:6b:3d:a9:02:10:5a:7e:18:dc:18:72: 60:c2:aa:af:79:bd:2c:09:d3:03:ff:2e:18:b7:1e:a7:ce:d3: c7:9f:7c:51:66:e2:15:a9:4c:b0:9d:d7:80:f4:d3:db:3a:6c: 3e:86:b1:54:cd:41:e6:ec:4a:f2:5a:e1:da:d6:cf:9a:64:c0: fe:13:18:91:02:ae:5d:a1:e4:48:3d:9a:ee:07:89:84:db:13: 92:f3:b3:66:5d:8f:f9:d4:71:e6:e7:11:57:a0:de:5c:24:86: 1a:87:45:79:22:c7:1a:0a:8c:c2:7e:62:91:74:34:c9:b8:fc: 00:30:5f:02:fb:11:d1:89:b8:11:0e:a0:91:b0:a8:0c:9f:f7: 50:c8:06:dd:d2:ac:76:9f:62:de:15:73:63:c4:74:e0:0d:fa: 36:d9:1f:85:6c:a7:cd:e1:0e:60:3d:50:94:69:13:df:bb:66: 98:24:85:ef:49:0c:06:8d:eb:5e:92:77:d4:54:1b:bf:b3:be: b4:4c:ce:ac:1d:c2:98:fb:c6:91:4f:c8:46:8a:be:e8:22:4c: 53:fd:0e:bd:68:22:73:d7:94:99:1d:89:1e:17:42:e5:4a:07: 8f:05:9c:2f:f2:fc:65:33:6a:86:59:52:cd:11:67:70:40:57: 75:2b:0b:05 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMK4r3nifo4egJfeotvY6mf2BFDkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODI1MDAwMDExWhcNMjYxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZDNlZTk3YjVjMjYyZWQwMDU2M2U2ZGJjZjY3Yzg1ZTBm ODdmYTZlYTNlNWViMmJmYTQ4NmNlMDQ1NTQxYTJiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCySygxvvNTRFE+yduotCknsDwbdqmsmF3Z1qTH7Cxka4eG f8Rj6lubLT9iOm1HwQPEaVWvh5lpWzLmyPZpTMnmiNZCq3atHnvexwJgCCornEEQ W4hsYPRMPyLhE85Ktxi6Ja2h5UwcsvURztC/ns3Xf111FusZarzfOLgUhrKLScXM Oymdo482hdUlLRvXljkUeZR1EKXM9z7eqmQO/zdxCUTYoEYi61D/F/Y/e3gGQAFy aDDn4OziG63jwI846HPv2j5kxVMTRW7gZnmOApdAPUmAIAEwazGMV7cvVhedSLYL s3OKVX+lor5imfA+OaHpBXK5CmHzwxtag4+dOAIfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU4f69Tlm3Zi7TiBZN49d4Hf6WcUAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA3ZWVjNWJkLTM2OTgtNGU3MS1iMDBkLTU4MWJkNDg4ODI0NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/pYFAwDQYJKoZIhvcNAQELBQADggEBAJZ5qTVdsUFrPakCEFp+GNwY cmDCqq95vSwJ0wP/Lhi3HqfO08effFFm4hWpTLCd14D009s6bD6GsVTNQebsSvJa 4drWz5pkwP4TGJECrl2h5Eg9mu4HiYTbE5Lzs2Zdj/nUcebnEVeg3lwkhhqHRXki xxoKjMJ+YpF0NMm4/AAwXwL7EdGJuBEOoJGwqAyf91DIBt3SrHafYt4Vc2PEdOAN +jbZH4Vsp83hDmA9UJRpE9+7Zpgkhe9JDAaN616Sd9RUG7+zvrRMzqwdwpj7xpFP yEaKvugiTFP9Dr1oInPXlJkdiR4XQuVKB48FnC/y/GUzaoZZUs0RZ3BAV3UrCwU= -----END CERTIFICATE-----Generated at Thu Sep 17 18:22:18 2026 by rpki-client