$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17e23e42-9c2e-48eb-9f38-90ec20b61c43.roa File: 17e23e42-9c2e-48eb-9f38-90ec20b61c43.roa (raw, json) Hash identifier: NDw0om9UOlwEnVSglC1W4KFPw/jIM7jR2yGFHmP5mzk= Subject key identifier: 84:D6:25:BD:98:C9:55:09:47:CF:1D:42:B1:38:95:88:A0:5F:B9:99 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5A3D563084688CC3613A1C2A20BC0B07EE438E4B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17e23e42-9c2e-48eb-9f38-90ec20b61c43.roa Signing time: Mon 10 Aug 2026 00:41:24 +0000 ROA not before: Mon 10 Aug 2026 00:41:24 +0000 ROA not after: Sun 08 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff6:800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:3d:56:30:84:68:8c:c3:61:3a:1c:2a:20:bc:0b:07:ee:43:8e:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 10 00:41:24 2026 GMT Not After : Nov 8 23:59:59 2026 GMT Subject: serialNumber=99debc76fb0d298bf6e3630ad8b0643fb232348d3b3c6bae6fee5c5e7699f7b5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4e:97:b9:6b:40:8e:d7:d0:da:95:d5:6c:e2: 50:1b:fc:ee:4c:89:7d:c2:15:3f:28:49:5c:71:6a: 67:43:2e:1a:d9:af:fa:7e:e6:2f:dd:83:fc:b3:7c: 19:ee:f4:9a:12:fa:37:d7:f1:83:a8:91:eb:ee:4a: a7:72:12:3b:16:ce:45:37:84:ce:bc:ef:ec:86:aa: 07:a6:94:38:b2:7c:41:a0:16:f8:f4:97:a9:2f:93: 8b:67:c4:23:65:8a:4a:97:9f:fb:56:ce:9e:00:0c: 08:1d:ae:fd:7a:d6:c4:64:08:f1:91:3e:26:91:59: 79:8d:50:25:b8:db:a5:59:ea:13:21:a9:22:1c:36: 41:d0:0b:30:05:8b:10:d2:fb:81:c3:9d:74:07:d2: 58:b3:fb:1f:04:b4:7f:a2:05:48:c9:74:a7:dc:d6: 15:e6:0c:f5:7d:84:b5:31:7b:5f:27:f1:fb:50:88: 03:9e:d0:38:19:eb:a2:96:07:1f:15:fe:81:13:95: db:49:b6:2f:af:5c:41:66:d7:c5:60:66:0e:90:19: 39:fc:c9:04:6d:d9:d5:e4:0d:75:39:6e:12:37:63: 6e:bc:b5:a9:41:73:72:9f:31:83:2a:3d:01:33:30: 82:df:8b:05:17:14:b5:d5:46:4b:cd:45:76:2a:31: 69:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D6:25:BD:98:C9:55:09:47:CF:1D:42:B1:38:95:88:A0:5F:B9:99 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17e23e42-9c2e-48eb-9f38-90ec20b61c43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff6:800::/40 Signature Algorithm: sha256WithRSAEncryption 57:42:93:47:df:68:fe:8e:eb:cd:94:22:da:08:39:ad:67:61: 53:c6:bc:5a:ba:6d:35:d1:9a:19:e7:b2:f3:26:6e:ed:ef:d7: fe:52:0e:39:01:23:ad:ff:e3:0a:bd:80:71:40:1e:6e:b8:48: 7c:2f:65:27:84:73:1e:49:2d:b1:7a:8a:60:36:63:82:56:95: 20:a4:d6:29:d3:91:40:c3:6e:5b:39:3f:9b:f3:cd:de:21:9e: e1:02:11:e7:81:78:41:20:b4:f9:b4:27:4b:64:b7:8d:17:37: 09:b7:29:cb:55:ef:3b:b8:27:2c:4d:b6:ae:c1:a1:c1:24:2e: 51:18:ef:e6:80:93:ec:62:7e:d9:63:cc:8a:8a:b5:cb:76:2b: 41:f8:8e:4b:84:97:12:b9:b2:11:64:c0:bb:c4:1c:86:71:09: 2b:d6:1b:b0:38:f8:fd:b3:14:22:fa:3b:63:e1:f3:5c:ce:37: d6:9a:be:af:e7:12:7d:27:82:b9:24:5c:42:b6:de:96:03:63: 59:f8:4c:20:ef:7e:5e:03:20:4a:bf:05:fb:7c:c9:f1:a8:57: ab:39:5b:49:57:6b:17:b3:4a:eb:a2:9a:c5:03:ae:4c:a9:9f: ed:03:6a:a7:d5:de:f1:79:f8:c9:f7:aa:ad:f5:63:2b:a3:19: 91:fc:38:3e -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUWj1WMIRojMNhOhwqILwLB+5DjkswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODEwMDA0MTI0WhcNMjYxMTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A5OWRlYmM3NmZiMGQyOThiZjZlMzYzMGFkOGIwNjQzZmIy MzIzNDhkM2IzYzZiYWU2ZmVlNWM1ZTc2OTlmN2I1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCSTpe5a0CO19DaldVs4lAb/O5MiX3CFT8oSVxxamdDLhrZ r/p+5i/dg/yzfBnu9JoS+jfX8YOokevuSqdyEjsWzkU3hM687+yGqgemlDiyfEGg Fvj0l6kvk4tnxCNlikqXn/tWzp4ADAgdrv161sRkCPGRPiaRWXmNUCW426VZ6hMh qSIcNkHQCzAFixDS+4HDnXQH0liz+x8EtH+iBUjJdKfc1hXmDPV9hLUxe18n8ftQ iAOe0DgZ66KWBx8V/oETldtJti+vXEFm18VgZg6QGTn8yQRt2dXkDXU5bhI3Y268 talBc3KfMYMqPQEzMILfiwUXFLXVRkvNRXYqMWk7AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUhNYlvZjJVQlHzx1CsTiViKBfuZkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE3ZTIzZTQyLTljMmUtNDhlYi05ZjM4LTkwZWMyMGI2MWM0My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/2CDANBgkqhkiG9w0BAQsFAAOCAQEAV0KTR99o/o7rzZQi2gg5rWdh U8a8WrptNdGaGeey8yZu7e/X/lIOOQEjrf/jCr2AcUAebrhIfC9lJ4RzHkktsXqK YDZjglaVIKTWKdORQMNuWzk/m/PN3iGe4QIR54F4QSC0+bQnS2S3jRc3Cbcpy1Xv O7gnLE22rsGhwSQuURjv5oCT7GJ+2WPMioq1y3YrQfiOS4SXErmyEWTAu8QchnEJ K9YbsDj4/bMUIvo7Y+HzXM431pq+r+cSfSeCuSRcQrbelgNjWfhMIO9+XgMgSr8F +3zJ8ahXqzlbSVdrF7NK66KaxQOuTKmf7QNqp9Xe8Xn4yfeqrfVjK6MZkfw4Pg== -----END CERTIFICATE-----Generated at Thu Sep 17 16:54:53 2026 by rpki-client