$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d3adcd3-48e2-41a7-b85d-96591e458160.roa File: 1d3adcd3-48e2-41a7-b85d-96591e458160.roa (raw, json) Hash identifier: dMXVtzGobLaGP7li6KqvWXYN1yFf3e/hW3kjqkHf6V0= Subject key identifier: E6:D2:74:6F:11:A3:B3:C1:4A:5B:90:98:09:3C:8C:71:D2:9A:82:8F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6F2419E178F331792E470489340020550EB05617 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d3adcd3-48e2-41a7-b85d-96591e458160.roa Signing time: Wed 09 Sep 2026 16:10:04 +0000 ROA not before: Wed 09 Sep 2026 16:10:04 +0000 ROA not after: Tue 08 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff3:e200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:24:19:e1:78:f3:31:79:2e:47:04:89:34:00:20:55:0e:b0:56:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 9 16:10:04 2026 GMT Not After : Dec 8 23:59:59 2026 GMT Subject: serialNumber=fba3cbb5655453d67f2333ab03e08ce999f17970c44cac8b43dc09e92f1c680b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d6:9f:0f:bf:56:ad:4d:9d:d3:0e:78:78:f8: 27:1b:a4:82:2c:65:4b:8d:a9:4a:41:af:91:83:6a: f9:9c:05:fb:b3:c4:5c:76:ca:db:32:d4:21:81:5c: d7:03:98:90:ac:d1:a0:94:e3:53:8f:b8:15:a9:5f: c6:91:6a:2f:32:6b:a4:6c:94:c5:58:c8:db:6e:d2: 3d:d2:2f:91:62:9e:39:e2:16:62:d7:f8:ea:53:42: 06:99:70:62:9b:0a:e6:3c:c2:4c:25:de:ae:09:60: 17:df:18:61:9c:d6:f1:90:e8:f1:a1:60:38:25:52: 2c:33:59:be:b3:74:62:cd:4e:12:d6:18:b2:d3:aa: c9:07:90:e0:e7:a2:e7:91:a9:78:2f:3d:2c:19:c7: 1a:57:3f:39:33:ce:a2:64:28:ac:34:74:b5:a4:09: cd:06:05:5a:f1:2a:7b:39:a3:c0:6c:79:8f:b9:c2: fb:50:fc:57:20:94:c3:30:4d:97:e0:c2:9f:13:37: 8e:c8:7f:05:5d:cf:26:ad:56:48:67:ee:ff:de:85: c3:15:b2:ec:f3:f1:a0:52:cc:d6:36:e1:08:82:f9: 79:53:09:7f:51:fd:be:6c:04:4b:3a:63:07:9b:8d: cb:f6:7d:15:2e:68:04:72:b6:10:bb:a4:16:f7:30: 60:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:D2:74:6F:11:A3:B3:C1:4A:5B:90:98:09:3C:8C:71:D2:9A:82:8F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d3adcd3-48e2-41a7-b85d-96591e458160.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff3:e200::/40 Signature Algorithm: sha256WithRSAEncryption 5a:41:0c:22:9c:21:2a:2a:32:1e:d2:da:bb:cd:a4:0f:ec:61: 23:c2:6b:b1:b5:2a:9d:49:d3:11:55:3e:01:43:fd:e8:bb:05: 12:63:5e:d2:b9:b1:a5:b3:dd:2d:dc:b3:eb:a1:29:2a:d4:c4: c0:bf:7d:a3:ed:51:dc:41:95:61:ad:02:b3:00:3f:fa:55:66: 15:1e:86:50:dd:2f:5f:3a:35:cd:44:78:47:bf:fa:09:d7:d4: 2a:eb:5a:05:6d:29:69:cc:ee:42:47:49:bc:e5:c8:fe:fa:71: 28:e1:8b:8f:93:7f:08:da:bf:76:e4:a6:43:1c:eb:ca:04:d4: 18:bf:30:b7:94:f7:9e:3e:9b:5f:18:5d:46:7f:1a:94:3e:26: 12:84:cd:1e:cf:ac:6c:61:b8:da:44:cf:47:31:f4:fe:3d:ed: 73:45:dd:f3:88:de:2e:40:c4:ab:66:79:f3:e7:bc:5e:ae:da: bc:be:40:e4:0c:c9:76:3c:1a:ee:e2:f5:7e:1b:f3:5d:11:e1: b5:50:3f:fd:37:e1:57:52:d3:b4:be:e8:38:13:76:d3:3b:54: 1c:56:43:a2:92:4d:80:17:d2:fd:94:fd:5b:62:ae:0e:d6:6a: 8b:04:fd:b2:8f:4d:bd:3b:6e:3b:8b:be:fe:fd:56:76:1d:c2: 87:d6:c0:4a -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUbyQZ4XjzMXkuRwSJNAAgVQ6wVhcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwOTA5MTYxMDA0WhcNMjYxMjA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYmEzY2JiNTY1NTQ1M2Q2N2YyMzMzYWIwM2UwOGNlOTk5 ZjE3OTcwYzQ0Y2FjOGI0M2RjMDllOTJmMWM2ODBiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZ1p8Pv1atTZ3TDnh4+CcbpIIsZUuNqUpBr5GDavmcBfuz xFx2ytsy1CGBXNcDmJCs0aCU41OPuBWpX8aRai8ya6RslMVYyNtu0j3SL5Finjni FmLX+OpTQgaZcGKbCuY8wkwl3q4JYBffGGGc1vGQ6PGhYDglUiwzWb6zdGLNThLW GLLTqskHkODnoueRqXgvPSwZxxpXPzkzzqJkKKw0dLWkCc0GBVrxKns5o8BseY+5 wvtQ/FcglMMwTZfgwp8TN47IfwVdzyatVkhn7v/ehcMVsuzz8aBSzNY24QiC+XlT CX9R/b5sBEs6Ywebjcv2fRUuaARythC7pBb3MGDfAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU5tJ0bxGjs8FKW5CYCTyMcdKago8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFkM2FkY2QzLTQ4ZTItNDFhNy1iODVkLTk2NTkxZTQ1ODE2MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/z4jANBgkqhkiG9w0BAQsFAAOCAQEAWkEMIpwhKioyHtLau82kD+xh I8JrsbUqnUnTEVU+AUP96LsFEmNe0rmxpbPdLdyz66EpKtTEwL99o+1R3EGVYa0C swA/+lVmFR6GUN0vXzo1zUR4R7/6CdfUKutaBW0paczuQkdJvOXI/vpxKOGLj5N/ CNq/duSmQxzrygTUGL8wt5T3nj6bXxhdRn8alD4mEoTNHs+sbGG42kTPRzH0/j3t c0Xd84jeLkDEq2Z58+e8Xq7avL5A5AzJdjwa7uL1fhvzXRHhtVA//TfhV1LTtL7o OBN20ztUHFZDopJNgBfS/ZT9W2KuDtZqiwT9so9NvTtuO4u+/v1Wdh3Ch9bASg== -----END CERTIFICATE-----Generated at Tue Sep 15 12:09:34 2026 by rpki-client