$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/23fb97f9-ab86-4562-9998-3d3cfa1f2f7b.roa File: 23fb97f9-ab86-4562-9998-3d3cfa1f2f7b.roa (raw, json) Hash identifier: SdulgiAELigKl2tcUIWR9dlg+EYarmivRIDUy4Oqozg= Subject key identifier: 3E:18:50:DA:4C:CE:39:09:23:B0:6D:1E:64:09:DA:39:81:70:AF:E4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2220752F53A6A0462C3A0EDA5816AD177B3BC9C4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/23fb97f9-ab86-4562-9998-3d3cfa1f2f7b.roa Signing time: Wed 19 Aug 2026 00:40:51 +0000 ROA not before: Wed 19 Aug 2026 00:40:51 +0000 ROA not after: Tue 17 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fba:80c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:20:75:2f:53:a6:a0:46:2c:3a:0e:da:58:16:ad:17:7b:3b:c9:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 19 00:40:51 2026 GMT Not After : Nov 17 23:59:59 2026 GMT Subject: serialNumber=f1a0fe689a83bc6ee1bddd57c3c88061f4cc99693878afc6276b83564296c7ac, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0d:f8:75:70:5c:2d:4d:bc:05:78:a8:28:47: 99:2c:36:55:56:d5:c5:da:9a:73:28:36:f6:37:6b: fa:91:2f:6b:dc:b1:c3:41:88:6f:21:f3:cc:b3:2f: 66:78:58:c4:2e:91:30:a2:85:5e:1f:de:de:d8:4b: 47:97:97:a8:ee:c2:9b:a6:ca:50:00:00:8f:87:b7: 4d:41:7a:e7:7f:66:c0:f8:45:62:89:b4:38:ca:5a: 00:ab:bf:04:7a:e4:54:04:7e:1f:cf:83:9e:7c:7f: 3f:a5:6d:79:54:99:9c:31:4c:58:b4:1b:34:15:d7: da:a6:01:00:ff:d1:02:d2:88:50:59:9a:97:d9:b6: 48:bb:35:41:c9:a8:d6:9d:c2:a8:73:06:81:d8:f7: d6:0b:19:13:36:8f:39:ba:dd:09:56:10:ff:c7:37: e7:b8:5d:a7:9b:07:50:e1:05:90:6d:96:1d:9d:1a: b6:fd:43:eb:e6:2a:c7:3e:ea:46:f3:b1:ee:d6:bd: d6:d1:a3:c9:9b:97:41:1e:55:16:a5:5b:7e:db:35: 4d:be:0b:f0:c5:96:b1:10:48:1e:97:0c:28:32:56: cf:ef:43:b4:ec:f2:43:f0:b9:13:9e:f7:45:c0:ed: 05:e9:69:d8:93:84:54:04:b1:06:64:b4:6f:b8:72: 48:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:18:50:DA:4C:CE:39:09:23:B0:6D:1E:64:09:DA:39:81:70:AF:E4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/23fb97f9-ab86-4562-9998-3d3cfa1f2f7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fba:80c0::/48 Signature Algorithm: sha256WithRSAEncryption c3:ef:f1:05:92:c8:07:f9:9b:b7:3b:3a:88:8a:39:9e:69:2c: 39:90:98:18:0f:41:88:f5:df:82:46:57:15:17:fb:8e:af:d8: 82:d7:15:5e:fa:4c:71:62:e8:e0:ab:a5:1f:3f:8e:55:46:44: 4b:5c:7c:a4:7f:a0:11:fb:43:57:9f:4d:a8:4d:4c:33:28:ca: ac:fc:4b:d5:0a:7e:61:93:4a:94:e2:fd:e8:38:56:5d:4b:ca: 3c:b9:ee:38:6c:30:82:e9:94:ef:03:71:1d:53:96:5e:58:4f: 61:6d:6b:e6:ff:c3:66:45:b1:51:80:0f:49:d2:09:26:19:5e: 95:3d:bb:4e:40:37:c1:c5:36:c8:d0:47:69:56:dd:9c:b5:39: 78:ff:09:80:49:39:26:1e:df:34:91:c0:50:78:f4:a5:88:d5: b8:be:27:57:2b:56:0b:b2:aa:01:bd:1e:a4:fa:ae:18:58:54: 0f:e7:f9:9d:3d:b4:27:8f:be:ff:64:2a:fe:9e:2b:34:32:ec: 18:41:25:d5:8f:76:dc:da:b2:27:b8:57:e5:40:b6:64:36:26: 81:6e:da:20:41:8b:cc:06:4a:86:79:08:cd:70:24:b1:ed:b6: f3:c9:0e:b1:8e:59:10:eb:00:b3:26:f0:84:13:75:81:09:77: 2f:a6:a0:50 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUIiB1L1OmoEYsOg7aWBatF3s7ycQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODE5MDA0MDUxWhcNMjYxMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMWEwZmU2ODlhODNiYzZlZTFiZGRkNTdjM2M4ODA2MWY0 Y2M5OTY5Mzg3OGFmYzYyNzZiODM1NjQyOTZjN2FjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPDfh1cFwtTbwFeKgoR5ksNlVW1cXamnMoNvY3a/qRL2vc scNBiG8h88yzL2Z4WMQukTCihV4f3t7YS0eXl6juwpumylAAAI+Ht01Beud/ZsD4 RWKJtDjKWgCrvwR65FQEfh/Pg558fz+lbXlUmZwxTFi0GzQV19qmAQD/0QLSiFBZ mpfZtki7NUHJqNadwqhzBoHY99YLGRM2jzm63QlWEP/HN+e4XaebB1DhBZBtlh2d Grb9Q+vmKsc+6kbzse7WvdbRo8mbl0EeVRalW37bNU2+C/DFlrEQSB6XDCgyVs/v Q7Ts8kPwuROe90XA7QXpadiThFQEsQZktG+4ckiDAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUPhhQ2kzOOQkjsG0eZAnaOYFwr+QwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIzZmI5N2Y5LWFiODYtNDU2Mi05OTk4LTNkM2NmYTFmMmY3Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB+6gMAwDQYJKoZIhvcNAQELBQADggEBAMPv8QWSyAf5m7c7OoiKOZ5p LDmQmBgPQYj134JGVxUX+46v2ILXFV76THFi6OCrpR8/jlVGREtcfKR/oBH7Q1ef TahNTDMoyqz8S9UKfmGTSpTi/eg4Vl1Lyjy57jhsMILplO8DcR1Tll5YT2Fta+b/ w2ZFsVGAD0nSCSYZXpU9u05AN8HFNsjQR2lW3Zy1OXj/CYBJOSYe3zSRwFB49KWI 1bi+J1crVguyqgG9HqT6rhhYVA/n+Z09tCePvv9kKv6eKzQy7BhBJdWPdtzasie4 V+VAtmQ2JoFu2iBBi8wGSoZ5CM1wJLHttvPJDrGOWRDrALMm8IQTdYEJdy+moFA= -----END CERTIFICATE-----Generated at Thu Aug 20 22:54:20 2026 by rpki-client