$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a2bd7e4-4ad1-4898-b575-d8e1349e6ec1.roa File: 2a2bd7e4-4ad1-4898-b575-d8e1349e6ec1.roa (raw, json) Hash identifier: 4/xBGGHsG8JQmHse8klp9CEOg2gzZQJNdze3lVWk1eU= Subject key identifier: CB:BE:78:EF:F4:49:31:72:D4:D1:68:10:6A:C2:49:28:EA:37:65:A2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 60DA4004B6A72AF2D1A97AA159114279865B65F8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a2bd7e4-4ad1-4898-b575-d8e1349e6ec1.roa Signing time: Wed 09 Sep 2026 16:05:21 +0000 ROA not before: Wed 09 Sep 2026 16:05:21 +0000 ROA not after: Tue 08 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fe7:c200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:da:40:04:b6:a7:2a:f2:d1:a9:7a:a1:59:11:42:79:86:5b:65:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 9 16:05:21 2026 GMT Not After : Dec 8 23:59:59 2026 GMT Subject: serialNumber=d117fa8dcbc3321e4f19460029b1eb2acc07cdef98d4a141d67f25498e240bad, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:dd:2f:73:14:c5:2a:79:f6:e3:9f:da:04:c1: e2:04:f0:80:01:f3:e2:c3:2a:7d:38:bd:2b:53:38: 2e:4b:6f:4b:17:cb:9c:9c:29:a7:c2:45:a1:7a:09: 34:d8:d5:06:d7:e1:bf:48:72:bf:13:45:a6:26:ab: 6f:17:6c:4b:3d:cc:bd:51:16:ba:7a:5d:00:98:29: 06:24:10:df:c0:15:ac:e1:7c:aa:e7:f1:af:29:cb: 45:cf:b5:73:36:a6:00:c1:eb:94:15:2c:c9:71:4d: 93:4d:89:17:77:68:1c:83:43:d8:11:93:6e:4d:91: 9b:7a:37:ae:6c:8e:63:b3:89:77:7e:00:c4:75:39: fb:88:26:8f:7c:56:7e:f7:3a:24:a4:58:96:95:94: 77:75:4c:bc:3d:ec:9e:28:ec:a5:e5:02:06:07:06: 5b:d2:e9:60:e1:66:66:4f:f2:52:ca:fd:3c:32:51: f9:65:22:fa:1b:a6:25:39:2c:d0:3c:3a:56:c1:e9: 3b:91:22:42:d4:b6:c0:aa:64:b5:02:1e:65:32:a0: 1e:fb:c3:41:fb:df:00:63:0a:7b:77:3e:7b:8a:eb: 1c:80:77:8c:c2:f3:82:40:e7:b7:c1:ed:6c:ba:d0: 20:5a:0c:8e:df:46:3f:d4:53:0e:21:bb:dc:0d:58: 55:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:BE:78:EF:F4:49:31:72:D4:D1:68:10:6A:C2:49:28:EA:37:65:A2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a2bd7e4-4ad1-4898-b575-d8e1349e6ec1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fe7:c200::/40 Signature Algorithm: sha256WithRSAEncryption bb:65:a6:10:48:bc:49:dc:18:9a:9e:c2:ad:b7:bc:33:33:9b: cc:aa:b0:c5:02:b3:1d:da:7b:e9:02:9b:07:98:46:30:24:26: b8:a5:88:c2:8b:9d:fc:0b:b1:9f:fc:b8:ee:26:dc:ac:34:ea: 02:bd:eb:32:2c:d0:6b:2d:5a:e7:6b:4e:9e:6e:c3:57:e1:65: 6e:5c:6a:22:1a:e6:c2:08:53:b3:c3:ac:53:6f:bd:ee:8b:68: 49:93:a3:e7:07:7d:42:4f:fd:b2:57:dd:d0:c0:04:68:59:2f: 5f:64:0b:59:3e:28:6b:54:2c:d2:0a:32:0d:87:df:53:97:5b: a4:31:45:31:73:81:74:eb:64:bb:ad:df:61:04:4f:ce:59:7f: 71:2f:02:96:1d:ee:da:ce:d8:9d:e7:ab:98:63:e9:c0:a0:c1: af:61:0d:64:81:53:ae:bc:e9:e2:78:e1:a7:4d:23:21:6d:07: c2:c2:6e:78:8a:55:c7:a1:2e:e1:49:0d:4d:80:f0:f0:ab:ae: 92:52:a0:92:13:ef:1c:88:4a:bb:c1:e8:54:7e:92:70:89:eb: 42:e4:16:7d:18:e0:5f:43:ec:5c:a4:73:d4:9a:fd:b1:fe:f9: 7e:b8:d1:e7:10:d2:c5:4c:d9:54:e9:dd:67:d7:2b:4d:a1:d3: 40:3d:48:e8 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUYNpABLanKvLRqXqhWRFCeYZbZfgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwOTA5MTYwNTIxWhcNMjYxMjA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMTE3ZmE4ZGNiYzMzMjFlNGYxOTQ2MDAyOWIxZWIyYWNj MDdjZGVmOThkNGExNDFkNjdmMjU0OThlMjQwYmFkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDe3S9zFMUqefbjn9oEweIE8IAB8+LDKn04vStTOC5Lb0sX y5ycKafCRaF6CTTY1QbX4b9Icr8TRaYmq28XbEs9zL1RFrp6XQCYKQYkEN/AFazh fKrn8a8py0XPtXM2pgDB65QVLMlxTZNNiRd3aByDQ9gRk25NkZt6N65sjmOziXd+ AMR1OfuIJo98Vn73OiSkWJaVlHd1TLw97J4o7KXlAgYHBlvS6WDhZmZP8lLK/Twy UfllIvobpiU5LNA8OlbB6TuRIkLUtsCqZLUCHmUyoB77w0H73wBjCnt3PnuK6xyA d4zC84JA57fB7Wy60CBaDI7fRj/UUw4hu9wNWFUTAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUy7547/RJMXLU0WgQasJJKOo3ZaIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJhMmJkN2U0LTRhZDEtNDg5OC1iNTc1LWQ4ZTEzNDllNmVjMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/nwjANBgkqhkiG9w0BAQsFAAOCAQEAu2WmEEi8SdwYmp7Crbe8MzOb zKqwxQKzHdp76QKbB5hGMCQmuKWIwoud/Auxn/y47ibcrDTqAr3rMizQay1a52tO nm7DV+FlblxqIhrmwghTs8OsU2+97otoSZOj5wd9Qk/9slfd0MAEaFkvX2QLWT4o a1Qs0goyDYffU5dbpDFFMXOBdOtku63fYQRPzll/cS8Clh3u2s7YneermGPpwKDB r2ENZIFTrrzp4njhp00jIW0HwsJueIpVx6Eu4UkNTYDw8KuuklKgkhPvHIhKu8Ho VH6ScInrQuQWfRjgX0PsXKRz1Jr9sf75frjR5xDSxUzZVOndZ9crTaHTQD1I6A== -----END CERTIFICATE-----Generated at Tue Sep 15 13:15:55 2026 by rpki-client