$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/21e60934-8432-40eb-b5c4-edf3b30672b2.roa File: 21e60934-8432-40eb-b5c4-edf3b30672b2.roa (raw, json) Hash identifier: ILH5PbQYlxve9xTNVJgeRVqe662KjvItL7v301I++D4= Subject key identifier: 48:42:CE:94:46:93:D2:CE:B5:6B:60:FD:9D:26:64:7B:14:DF:3E:21 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5921932ECEF73179FA8B4A710A92482199BDBA41 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/21e60934-8432-40eb-b5c4-edf3b30672b2.roa Signing time: Thu 10 Sep 2026 00:10:12 +0000 ROA not before: Thu 10 Sep 2026 00:10:12 +0000 ROA not after: Wed 09 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1feb:6040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:21:93:2e:ce:f7:31:79:fa:8b:4a:71:0a:92:48:21:99:bd:ba:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 10 00:10:12 2026 GMT Not After : Dec 9 23:59:59 2026 GMT Subject: serialNumber=3f191fe9793cd9bacba6c3476fd12d04e7969b47a557043ee8de29b6684fc410, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2b:76:7b:b5:09:d7:c2:63:0e:f5:fc:31:a5: 83:f1:24:01:3b:b5:3f:07:fd:1b:5a:05:12:02:9f: 5a:d1:54:3f:02:a5:1d:21:81:85:13:a9:57:c7:da: a8:d8:9d:66:ee:ac:0e:da:94:6c:d6:6c:c4:c1:6f: bf:10:3c:6b:95:60:7a:ba:2d:1b:fe:43:98:d7:80: 6d:44:2e:7e:31:50:1d:ae:68:f2:25:2e:66:b6:33: 24:af:5e:ff:4a:4c:79:a6:a4:2b:3f:a3:b6:81:56: c4:37:fb:6f:bb:1e:ae:d3:a8:ee:00:7e:f7:0b:d8: cf:aa:08:35:2e:99:e7:37:ff:30:03:d8:44:69:fd: 6b:1c:82:38:55:ed:b6:16:dc:1a:76:90:7b:f3:e3: 5c:27:1d:34:54:96:a3:37:b5:71:95:b7:0f:eb:c9: d5:31:6e:be:8f:00:9b:59:68:a3:69:9d:82:c2:38: 2d:26:35:c4:4e:70:f0:22:7a:91:ae:16:55:3b:b8: 4a:be:c9:91:c0:e4:b7:13:80:38:c2:08:2a:78:a0: 08:aa:e3:e5:3a:4f:95:c3:37:7e:08:df:92:7f:1f: 5c:bc:5e:90:ac:a2:bd:4b:6c:4b:8c:7e:54:b4:ed: c6:54:a2:23:14:37:c0:9c:6e:0a:80:ba:69:2c:2f: 47:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:42:CE:94:46:93:D2:CE:B5:6B:60:FD:9D:26:64:7B:14:DF:3E:21 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/21e60934-8432-40eb-b5c4-edf3b30672b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1feb:6040::/48 Signature Algorithm: sha256WithRSAEncryption 43:06:c5:26:39:97:59:e4:5d:e0:ab:bc:8e:46:4d:2c:d0:83: ce:e2:71:9f:ad:1d:77:63:4d:01:2d:fd:82:9e:0b:cd:e6:a7: 1a:74:a1:83:33:b2:9c:0e:fb:cd:2b:49:b6:7d:bf:da:a3:49: ab:65:b9:13:50:c4:12:eb:c9:ef:d0:aa:d1:6f:c9:25:b1:64: 8a:51:79:68:24:33:94:67:5c:e9:a0:69:6d:e7:e7:ef:46:f9: f9:72:36:dc:c7:52:a0:4c:63:6a:84:80:bc:76:c9:3a:c1:45: 87:b6:e6:cf:a7:fc:83:78:61:70:e0:51:11:2d:e6:37:5e:18: 46:93:15:9d:2f:5e:ff:9d:15:34:65:a5:e5:fd:f0:5b:fc:44: 39:a5:56:c9:6c:34:b7:b2:4e:a7:c2:92:41:bc:38:7d:1e:6b: 1c:d2:3f:c2:ae:5a:3b:5f:e8:2c:ea:b3:ba:9d:36:ec:58:04: af:1b:9b:75:fd:42:2e:7a:96:26:4e:3c:1e:9f:b6:4e:50:1a: 58:f2:82:13:32:4e:74:73:84:4f:65:89:34:8b:ec:95:a7:bb: c1:52:a0:b4:c5:d5:48:82:31:3b:6d:97:aa:59:45:b9:dc:b5: 99:e0:82:42:91:dd:1d:27:91:a8:55:0a:fb:3e:2a:9f:29:12: 1a:4f:b5:42 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWSGTLs73MXn6i0pxCpJIIZm9ukEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwOTEwMDAxMDEyWhcNMjYxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AzZjE5MWZlOTc5M2NkOWJhY2JhNmMzNDc2ZmQxMmQwNGU3 OTY5YjQ3YTU1NzA0M2VlOGRlMjliNjY4NGZjNDEwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpK3Z7tQnXwmMO9fwxpYPxJAE7tT8H/RtaBRICn1rRVD8C pR0hgYUTqVfH2qjYnWburA7alGzWbMTBb78QPGuVYHq6LRv+Q5jXgG1ELn4xUB2u aPIlLma2MySvXv9KTHmmpCs/o7aBVsQ3+2+7Hq7TqO4AfvcL2M+qCDUumec3/zAD 2ERp/WscgjhV7bYW3Bp2kHvz41wnHTRUlqM3tXGVtw/rydUxbr6PAJtZaKNpnYLC OC0mNcROcPAiepGuFlU7uEq+yZHA5LcTgDjCCCp4oAiq4+U6T5XDN34I35J/H1y8 XpCsor1LbEuMflS07cZUoiMUN8CcbgqAumksL0fvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUSELOlEaT0s61a2D9nSZkexTfPiEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIxZTYwOTM0LTg0MzItNDBlYi1iNWM0LWVkZjNiMzA2NzJiMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/rYEAwDQYJKoZIhvcNAQELBQADggEBAEMGxSY5l1nkXeCrvI5GTSzQ g87icZ+tHXdjTQEt/YKeC83mpxp0oYMzspwO+80rSbZ9v9qjSatluRNQxBLrye/Q qtFvySWxZIpReWgkM5RnXOmgaW3n5+9G+flyNtzHUqBMY2qEgLx2yTrBRYe25s+n /IN4YXDgUREt5jdeGEaTFZ0vXv+dFTRlpeX98Fv8RDmlVslsNLeyTqfCkkG8OH0e axzSP8KuWjtf6Czqs7qdNuxYBK8bm3X9Qi56liZOPB6ftk5QGljyghMyTnRzhE9l iTSL7JWnu8FSoLTF1UiCMTttl6pZRbnctZnggkKR3R0nkahVCvs+Kp8pEhpPtUI= -----END CERTIFICATE-----Generated at Thu Sep 17 16:52:29 2026 by rpki-client