$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09200eb5-786c-452c-91b5-6e7b43daf2f1.roa File: 09200eb5-786c-452c-91b5-6e7b43daf2f1.roa (raw, json) Hash identifier: LoLEDWD32bTieRdJpnfg07p7bPq2yK0rG5jisDZR5Xs= Subject key identifier: 09:B6:53:A2:68:51:50:10:2C:1D:DB:6A:05:90:CE:03:BE:D9:66:CA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3035E67AEC866A42606F3F9B42625CB0AAC8CFAF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09200eb5-786c-452c-91b5-6e7b43daf2f1.roa Signing time: Tue 06 Oct 2026 00:20:35 +0000 ROA not before: Tue 06 Oct 2026 00:20:35 +0000 ROA not after: Mon 04 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f2e::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:35:e6:7a:ec:86:6a:42:60:6f:3f:9b:42:62:5c:b0:aa:c8:cf:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 6 00:20:35 2026 GMT Not After : Jan 4 23:59:59 2027 GMT Subject: serialNumber=a1e64de5c591cfae4921ee3fe44e242114566ad5155086b2d46ca92e430b4c7d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b4:0c:9c:1d:09:9f:70:e4:8a:b9:9a:67:96: ba:c7:74:03:10:86:7f:03:ee:da:f3:10:2b:48:1d: e5:f8:b1:98:d3:01:2a:b0:eb:fc:5d:c5:e2:8f:9a: c1:fd:aa:78:26:72:f9:ac:bb:32:46:f2:1e:e5:83: ca:13:d9:5d:2d:4b:4a:8c:16:0f:67:0d:2a:3d:51: 03:bc:7a:59:dc:b6:a5:f1:ec:a5:9f:e8:13:67:80: 5c:5a:80:f0:72:03:14:45:0a:e9:e8:43:04:6a:7a: aa:86:e1:e7:2b:c0:e5:94:be:91:7d:cc:96:03:bc: ce:11:10:56:bc:89:e2:de:16:19:87:33:37:05:34: 75:d8:ec:92:c8:a9:b1:7f:6f:64:cc:55:4d:99:e8: 39:b2:d7:30:7d:d8:d0:ac:96:3c:50:1c:0d:3c:ac: 44:f3:74:8d:24:ff:df:7f:86:45:5e:91:23:c2:02: 3d:de:2e:e0:b9:1d:36:e3:68:e3:ec:8b:5e:d0:d4: 32:4f:f3:61:2e:eb:ad:d2:b7:51:d0:98:46:e4:a6: b4:4d:36:01:a5:0a:e4:00:48:3f:1e:79:e7:75:2b: 4d:61:4b:07:08:15:db:76:94:ab:10:62:75:1f:57: 09:72:2b:51:b2:c7:67:46:3f:08:c9:19:4d:05:ab: c3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B6:53:A2:68:51:50:10:2C:1D:DB:6A:05:90:CE:03:BE:D9:66:CA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09200eb5-786c-452c-91b5-6e7b43daf2f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f2e::/36 Signature Algorithm: sha256WithRSAEncryption ce:2c:15:ae:9d:f8:04:88:7d:bf:54:bd:35:ab:15:c2:93:f2: 99:ac:90:2c:3e:14:9d:fe:5e:58:3a:39:e6:f4:25:fa:92:7f: c5:d6:48:0e:07:86:8c:16:76:5c:b3:2a:6d:37:b6:60:aa:6a: 37:17:da:8c:d8:d9:ce:74:5a:05:5f:5e:2b:bd:3f:0d:3e:d8: cc:fb:10:a3:e1:3f:a0:50:8b:92:1d:6e:a9:3d:00:59:26:cd: b9:bc:52:df:f0:32:bb:b7:6b:db:e5:91:5d:bc:50:dd:16:52: 7d:ea:1b:8b:c0:f4:74:c1:c9:d2:38:59:15:d6:c3:80:12:bf: 4c:34:b5:15:45:7e:f1:9d:80:28:58:8d:56:8f:1e:e0:7c:21: 69:8f:5c:e1:2c:22:a8:37:fb:42:e8:e6:bc:b9:a5:21:ac:bd: 1b:4d:b0:2b:30:b8:03:df:1b:e1:04:3a:4c:4c:e6:95:c3:82: 75:47:23:e4:0e:8d:0d:a7:25:2a:b8:6d:3e:b0:7f:95:e5:4d: 38:41:6b:81:35:e1:4d:2b:a3:cc:d7:b9:53:e4:6d:dc:9a:0e: f1:ba:5f:56:89:8f:ef:4c:66:4c:ad:07:41:8f:9a:c7:10:a7: b4:27:a3:ef:32:b8:64:8b:dc:34:43:db:7a:f4:92:3c:b7:69: 22:7b:b0:76 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUMDXmeuyGakJgbz+bQmJcsKrIz68wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA2MDAyMDM1WhcNMjcwMTA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMWU2NGRlNWM1OTFjZmFlNDkyMWVlM2ZlNDRlMjQyMTE0 NTY2YWQ1MTU1MDg2YjJkNDZjYTkyZTQzMGI0YzdkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVtAycHQmfcOSKuZpnlrrHdAMQhn8D7trzECtIHeX4sZjT ASqw6/xdxeKPmsH9qngmcvmsuzJG8h7lg8oT2V0tS0qMFg9nDSo9UQO8elnctqXx 7KWf6BNngFxagPByAxRFCunoQwRqeqqG4ecrwOWUvpF9zJYDvM4REFa8ieLeFhmH MzcFNHXY7JLIqbF/b2TMVU2Z6Dmy1zB92NCsljxQHA08rETzdI0k/99/hkVekSPC Aj3eLuC5HTbjaOPsi17Q1DJP82Eu663St1HQmEbkprRNNgGlCuQASD8eeed1K01h SwcIFdt2lKsQYnUfVwlyK1Gyx2dGPwjJGU0Fq8NNAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUCbZTomhRUBAsHdtqBZDOA77ZZsowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA5MjAwZWI1LTc4NmMtNDUyYy05MWI1LTZlN2I0M2RhZjJmMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8uADANBgkqhkiG9w0BAQsFAAOCAQEAziwVrp34BIh9v1S9NasVwpPy mayQLD4Unf5eWDo55vQl+pJ/xdZIDgeGjBZ2XLMqbTe2YKpqNxfajNjZznRaBV9e K70/DT7YzPsQo+E/oFCLkh1uqT0AWSbNubxS3/Ayu7dr2+WRXbxQ3RZSfeobi8D0 dMHJ0jhZFdbDgBK/TDS1FUV+8Z2AKFiNVo8e4HwhaY9c4SwiqDf7QujmvLmlIay9 G02wKzC4A98b4QQ6TEzmlcOCdUcj5A6NDaclKrhtPrB/leVNOEFrgTXhTSujzNe5 U+Rt3JoO8bpfVomP70xmTK0HQY+axxCntCej7zK4ZIvcNEPbevSSPLdpInuwdg== -----END CERTIFICATE-----Generated at Sat Oct 31 08:15:40 2026 by rpki-client