$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0d3123b2-8eb8-425a-868e-182e88b7b8c2.roa File: 0d3123b2-8eb8-425a-868e-182e88b7b8c2.roa (raw, json) Hash identifier: KdASzXs5xVHF/ly7pWvPcvRINkJF2q8RHy81GvNE2Ew= Subject key identifier: 7C:9E:FA:51:43:B3:18:30:3D:F8:1A:8F:C6:23:83:B9:50:1A:EC:D5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 25289C313F8D6DC2A7ABE52465816465C9053AD4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0d3123b2-8eb8-425a-868e-182e88b7b8c2.roa Signing time: Wed 09 Sep 2026 16:03:39 +0000 ROA not before: Wed 09 Sep 2026 16:03:39 +0000 ROA not after: Tue 08 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f33:c200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:28:9c:31:3f:8d:6d:c2:a7:ab:e5:24:65:81:64:65:c9:05:3a:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 9 16:03:39 2026 GMT Not After : Dec 8 23:59:59 2026 GMT Subject: serialNumber=72e5ff107cc167085fdc5bad4b77a0a118bad3eb9c8291696874c3528f83c25e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:7e:b9:3f:90:f8:9b:15:3e:fd:f1:07:04:f9: 75:fc:29:fd:ab:93:66:89:23:ba:4f:39:60:17:55: 03:e5:56:7c:0e:11:84:4c:0b:85:2b:94:9d:b3:ba: f4:19:3f:0d:2a:52:b1:bc:ee:52:05:1a:d0:5c:fe: 2c:32:a8:3f:cd:ab:57:be:5f:7b:e9:79:ca:b5:66: 67:7a:b4:34:86:27:72:29:2e:72:93:cf:53:83:9d: 5d:86:99:f5:d3:da:83:9c:27:f5:d1:33:c3:84:64: 3d:1b:08:ee:c1:e4:f6:4e:3d:e5:1c:5f:7d:c9:de: c1:29:fb:a6:47:a1:ca:3e:f5:95:a8:f4:d5:fc:e0: e2:12:98:90:45:bb:a0:56:b2:33:bf:8b:65:5d:e5: fd:69:8f:df:4a:db:aa:55:1c:c3:47:4d:55:99:14: 5d:a9:51:8f:76:08:67:73:47:1b:45:b5:36:31:21: ab:87:f7:88:37:87:f4:7e:5c:42:61:fe:2e:ca:11: af:b9:15:91:47:d6:99:93:19:45:6a:de:70:dd:ce: 15:3b:27:a7:7d:5a:80:22:67:c2:a3:ae:db:49:50: 56:94:12:56:07:b9:d4:cc:18:b2:11:79:b7:0c:b9: 29:1d:a4:02:11:5a:dc:d2:50:98:6e:d1:ef:a2:ae: 7d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:9E:FA:51:43:B3:18:30:3D:F8:1A:8F:C6:23:83:B9:50:1A:EC:D5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0d3123b2-8eb8-425a-868e-182e88b7b8c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f33:c200::/40 Signature Algorithm: sha256WithRSAEncryption 6c:09:6f:95:35:0f:c1:09:00:5b:b9:e2:c5:e2:c9:76:91:1a: dd:30:ac:3b:f9:28:a9:37:9a:2e:82:d3:49:e2:16:fa:6e:b0: bf:0b:6e:23:4e:db:85:0e:48:1f:12:81:0d:95:e1:3c:b0:62: 2e:0c:5a:b1:ff:cd:79:17:fa:b5:94:62:0d:5e:b9:d9:12:98: 17:7d:8b:25:eb:bd:e0:77:54:d3:0c:da:5b:05:e4:38:bc:a3: e7:a3:c8:43:20:13:52:b0:55:13:57:c4:37:c7:c4:19:4f:d5: 8a:b5:6a:48:a7:f8:16:e9:57:02:47:be:c7:a9:61:19:9d:04: 47:0b:72:d2:fb:7b:6d:44:5d:ae:0f:92:6d:ea:e4:5b:69:6b: 48:e5:12:c3:a2:63:71:3f:d6:a3:67:59:1c:3d:a7:95:5b:8f: 58:60:f5:ab:98:23:40:92:25:44:72:da:87:76:ed:d8:b7:43: b5:59:b2:f6:e1:48:c5:94:24:9d:63:45:89:9e:3f:b4:86:bb: 14:48:30:9e:2b:b9:82:22:7b:bf:49:3c:87:bd:9f:4a:b7:8d: 52:26:40:3a:13:e6:17:35:14:8d:f7:80:fe:dc:53:9e:35:e5: ae:eb:f1:78:bd:fd:b0:8b:1f:9b:29:c2:8a:91:2d:15:07:d7: fc:a3:60:bb -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUJSicMT+NbcKnq+UkZYFkZckFOtQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwOTA5MTYwMzM5WhcNMjYxMjA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MmU1ZmYxMDdjYzE2NzA4NWZkYzViYWQ0Yjc3YTBhMTE4 YmFkM2ViOWM4MjkxNjk2ODc0YzM1MjhmODNjMjVlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDwfrk/kPibFT798QcE+XX8Kf2rk2aJI7pPOWAXVQPlVnwO EYRMC4UrlJ2zuvQZPw0qUrG87lIFGtBc/iwyqD/Nq1e+X3vpecq1Zmd6tDSGJ3Ip LnKTz1ODnV2GmfXT2oOcJ/XRM8OEZD0bCO7B5PZOPeUcX33J3sEp+6ZHoco+9ZWo 9NX84OISmJBFu6BWsjO/i2Vd5f1pj99K26pVHMNHTVWZFF2pUY92CGdzRxtFtTYx IauH94g3h/R+XEJh/i7KEa+5FZFH1pmTGUVq3nDdzhU7J6d9WoAiZ8KjrttJUFaU ElYHudTMGLIRebcMuSkdpAIRWtzSUJhu0e+irn0jAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUfJ76UUOzGDA9+BqPxiODuVAa7NUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBkMzEyM2IyLThlYjgtNDI1YS04NjhlLTE4MmU4OGI3YjhjMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB8zwjANBgkqhkiG9w0BAQsFAAOCAQEAbAlvlTUPwQkAW7nixeLJdpEa 3TCsO/koqTeaLoLTSeIW+m6wvwtuI07bhQ5IHxKBDZXhPLBiLgxasf/NeRf6tZRi DV652RKYF32LJeu94HdU0wzaWwXkOLyj56PIQyATUrBVE1fEN8fEGU/VirVqSKf4 FulXAke+x6lhGZ0ERwty0vt7bURdrg+SberkW2lrSOUSw6JjcT/Wo2dZHD2nlVuP WGD1q5gjQJIlRHLah3bt2LdDtVmy9uFIxZQknWNFiZ4/tIa7FEgwniu5giJ7v0k8 h72fSreNUiZAOhPmFzUUjfeA/txTnjXlruvxeL39sIsfmynCipEtFQfX/KNguw== -----END CERTIFICATE-----Generated at Tue Sep 15 12:43:18 2026 by rpki-client