$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b30c07c-7521-4792-9740-93f2aff19155.roa File: 2b30c07c-7521-4792-9740-93f2aff19155.roa (raw, json) Hash identifier: lCUm/JD/31wdYGHK9IOfjVq4z/gF9klxaJ2VUHIAb9s= Subject key identifier: B6:29:DE:1C:F8:A9:F1:81:66:2D:E2:64:F4:C3:F6:BA:5E:B9:29:59 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 18F34732E70A353912D194D4A95FD11BDFA2A886 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b30c07c-7521-4792-9740-93f2aff19155.roa Signing time: Thu 10 Sep 2026 00:20:42 +0000 ROA not before: Thu 10 Sep 2026 00:20:42 +0000 ROA not after: Wed 09 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1feb:c040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:f3:47:32:e7:0a:35:39:12:d1:94:d4:a9:5f:d1:1b:df:a2:a8:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 10 00:20:42 2026 GMT Not After : Dec 9 23:59:59 2026 GMT Subject: serialNumber=59c4419c578d48a341bbc80c24fd93bacf6631458bb566431240ed1e6567cb84, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e3:0a:97:cd:50:65:ce:c3:ed:c2:32:60:89: 88:26:70:bc:1e:c9:25:4f:53:ff:cb:67:6c:66:44: 80:f2:17:48:65:05:70:af:b4:67:bb:2c:e3:3f:e7: b5:f5:61:f5:38:f1:c7:f5:17:fb:1a:76:46:b9:e6: 57:ad:8e:08:9a:60:bf:cd:e4:5c:e9:0d:20:01:87: 5d:09:fb:10:ca:b0:d6:e0:b7:62:4a:f0:ce:15:2f: bb:f6:56:52:f0:94:fa:69:2f:76:52:b5:0c:36:3f: d8:1e:f1:bb:9b:5e:0b:e6:5b:84:7f:a2:e4:d0:16: 38:1f:e3:3b:47:39:04:79:10:23:de:93:7c:d7:51: 0a:c1:86:44:1a:5f:16:66:ff:c7:64:7c:47:70:79: bf:c2:4b:9f:9c:5f:ef:f9:47:94:a1:a8:2e:96:85: 8c:31:2f:70:d6:24:9a:c9:99:ff:57:ea:ca:2b:e3: e6:dd:b5:5b:43:96:63:75:82:46:ee:3c:16:36:68: 0e:29:fc:f8:34:4d:6f:28:c7:ec:fe:9d:8b:31:1f: de:f8:30:3a:04:bd:fa:00:9f:d4:82:c6:7d:43:c6: bd:47:f4:0b:84:d1:f8:fa:a1:3b:e4:e2:6d:b6:66: db:8c:31:b2:31:f3:e3:39:37:12:11:61:d0:5f:cd: 80:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:29:DE:1C:F8:A9:F1:81:66:2D:E2:64:F4:C3:F6:BA:5E:B9:29:59 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b30c07c-7521-4792-9740-93f2aff19155.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1feb:c040::/48 Signature Algorithm: sha256WithRSAEncryption 98:70:bc:f7:1f:9a:c5:80:b9:14:cb:be:48:7a:4e:c1:39:40: 02:2a:e3:16:3c:9b:87:92:a0:7c:ed:d4:4a:6d:3c:4d:1c:ab: 0b:22:0a:bb:0a:40:d4:ff:18:ce:0a:2e:5f:23:fc:c0:dc:05: ac:54:c3:e0:20:e2:df:75:93:05:f8:50:aa:76:37:c7:f7:2b: d2:4b:5c:8f:db:82:a2:e1:86:51:68:98:8c:b4:6a:af:22:e8: fc:a6:05:f2:f5:b2:28:6d:c0:bb:0b:c2:1c:9e:8d:16:e3:fb: 58:a1:1e:0b:00:0c:41:bb:40:9c:d0:16:fe:72:0d:0f:ca:c7: 5a:bc:ad:69:7b:52:aa:1f:a5:41:a2:58:8b:50:f5:c7:c0:26: d7:8e:ab:c7:cb:30:d8:dc:72:62:48:79:8a:a9:99:6b:dd:02: 52:99:86:a4:40:66:d1:09:b8:f3:3a:8d:b3:96:ad:21:bb:cc: e8:97:72:ca:cf:81:eb:a7:88:07:91:71:de:41:61:f2:93:50: ed:f0:bc:94:cf:07:5c:4b:44:27:43:27:d4:8d:fd:bf:bc:f4: cc:0f:0a:67:5a:60:c7:dc:11:da:b3:46:bc:ad:c5:c9:5f:b8: d7:67:a6:10:e4:21:56:a3:a7:84:a9:6f:09:46:ba:dc:6b:ce: 74:77:4b:f1 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUGPNHMucKNTkS0ZTUqV/RG9+iqIYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwOTEwMDAyMDQyWhcNMjYxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A1OWM0NDE5YzU3OGQ0OGEzNDFiYmM4MGMyNGZkOTNiYWNm NjYzMTQ1OGJiNTY2NDMxMjQwZWQxZTY1NjdjYjg0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCz4wqXzVBlzsPtwjJgiYgmcLweySVPU//LZ2xmRIDyF0hl BXCvtGe7LOM/57X1YfU48cf1F/sadka55letjgiaYL/N5FzpDSABh10J+xDKsNbg t2JK8M4VL7v2VlLwlPppL3ZStQw2P9ge8bubXgvmW4R/ouTQFjgf4ztHOQR5ECPe k3zXUQrBhkQaXxZm/8dkfEdweb/CS5+cX+/5R5ShqC6WhYwxL3DWJJrJmf9X6sor 4+bdtVtDlmN1gkbuPBY2aA4p/Pg0TW8ox+z+nYsxH974MDoEvfoAn9SCxn1Dxr1H 9AuE0fj6oTvk4m22ZtuMMbIx8+M5NxIRYdBfzYCBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUtineHPip8YFmLeJk9MP2ul65KVkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJiMzBjMDdjLTc1MjEtNDc5Mi05NzQwLTkzZjJhZmYxOTE1NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/rwEAwDQYJKoZIhvcNAQELBQADggEBAJhwvPcfmsWAuRTLvkh6TsE5 QAIq4xY8m4eSoHzt1EptPE0cqwsiCrsKQNT/GM4KLl8j/MDcBaxUw+Ag4t91kwX4 UKp2N8f3K9JLXI/bgqLhhlFomIy0aq8i6PymBfL1sihtwLsLwhyejRbj+1ihHgsA DEG7QJzQFv5yDQ/Kx1q8rWl7UqofpUGiWItQ9cfAJteOq8fLMNjccmJIeYqpmWvd AlKZhqRAZtEJuPM6jbOWrSG7zOiXcsrPgeuniAeRcd5BYfKTUO3wvJTPB1xLRCdD J9SN/b+89MwPCmdaYMfcEdqzRrytxclfuNdnphDkIVajp4SpbwlGutxrznR3S/E= -----END CERTIFICATE-----Generated at Thu Sep 17 16:14:57 2026 by rpki-client