$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/304fc45f-ab19-4853-8468-bf5df93105fb.roa File: 304fc45f-ab19-4853-8468-bf5df93105fb.roa (raw, json) Hash identifier: azcrKFlTYchSs6hAPMTz8QZlxKvF5bF9LSrUnROCgB4= Subject key identifier: F9:A2:A5:4A:46:2D:5D:8B:ED:62:11:08:D1:C9:84:D6:09:09:39:1A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0936F5AAA87000DBA4E493A9CEED22776ABCA278 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/304fc45f-ab19-4853-8468-bf5df93105fb.roa Signing time: Mon 10 Aug 2026 00:20:49 +0000 ROA not before: Mon 10 Aug 2026 00:20:49 +0000 ROA not after: Sun 08 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fe8:10c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:36:f5:aa:a8:70:00:db:a4:e4:93:a9:ce:ed:22:77:6a:bc:a2:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 10 00:20:49 2026 GMT Not After : Nov 8 23:59:59 2026 GMT Subject: serialNumber=9ed3b73919fda4c38fe23d33acba29c429ed538fb50258f5d9ae2423ee05a1ac, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:11:25:da:0a:a9:5e:98:76:32:35:93:2d:63: 25:7a:6e:1d:a8:f9:c6:d9:4a:88:bc:30:cc:b5:8b: a4:08:88:fd:67:f9:a0:ea:d2:34:e8:66:e4:8b:fc: 89:80:05:aa:78:83:1b:30:7f:27:10:5b:eb:f4:cc: 53:3e:8e:6c:ce:8f:fc:c8:53:34:37:dc:fa:34:ac: a8:27:ff:f0:f1:06:a4:83:7e:c7:3f:6a:28:43:c3: ae:50:2b:73:04:9a:e2:8b:b4:e7:8d:16:7c:7d:33: 01:1b:40:ae:93:f7:1a:28:76:7f:1c:9f:b7:56:0f: 20:5b:dc:a7:35:93:7e:b7:d5:33:fb:51:99:ae:04: 7f:46:ac:c1:5e:29:d7:3f:fe:ea:bd:c5:2c:64:be: 62:49:73:5f:42:cc:57:e9:a1:15:01:80:6d:f2:d0: 94:38:89:50:96:2d:d3:df:8d:f3:15:bf:6f:32:a6: 0f:9d:8b:c6:5b:72:24:a8:60:e1:54:b6:0a:c5:10: 38:7a:9a:41:c8:81:e4:69:4f:64:8f:e3:af:bd:81: 36:04:83:34:2e:ae:48:a7:40:41:28:5e:63:a7:43: 30:b0:96:88:d7:d7:75:1b:eb:21:8e:9b:25:8e:6b: 6c:0e:a9:0f:18:97:b8:3b:3e:ed:e4:82:21:78:24: 51:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A2:A5:4A:46:2D:5D:8B:ED:62:11:08:D1:C9:84:D6:09:09:39:1A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/304fc45f-ab19-4853-8468-bf5df93105fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fe8:10c0::/48 Signature Algorithm: sha256WithRSAEncryption 00:3f:6c:94:a5:72:1b:1d:59:72:40:df:27:6d:ef:a8:0c:0e: 54:84:5f:c4:16:6d:ad:36:70:af:b1:69:64:39:27:36:5a:a9: 10:fa:f4:54:99:1f:46:ee:40:89:b0:ca:8f:4c:bb:01:a1:98: 09:34:79:f9:9b:1e:e2:55:dc:f9:14:99:f5:c0:3d:a0:c7:26: e8:e8:4e:5c:2d:8f:9c:da:fc:d6:12:63:e4:a6:0d:28:24:5e: bf:0d:11:3a:21:32:52:b7:e5:d5:d7:8b:6e:a2:86:9b:ec:1d: 84:88:fa:b2:a9:2c:b9:ad:5d:1f:3e:af:71:db:c7:6b:79:f2: 5d:cd:25:87:2f:77:cb:2e:a6:de:69:73:a4:ea:b6:5a:07:cd: a2:36:bc:9d:bb:a4:2f:b5:a0:f8:6e:3b:4e:d2:20:c5:04:3d: 38:0f:22:70:42:11:5e:21:4e:ca:f9:8a:a0:01:17:64:f8:bd: ea:c1:a9:f7:fe:1b:3d:74:25:7b:70:48:68:44:8d:0f:9f:e9: 19:53:7f:9f:87:84:e5:6f:18:d7:36:ec:c3:42:47:70:2a:a7: 9d:9f:90:77:68:00:e3:9d:b9:c3:4b:bb:fb:09:f1:5d:9a:7e: 71:b0:50:db:eb:7c:d0:3b:b3:33:eb:e2:40:ad:67:5c:5e:95: 55:a5:3f:45 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCTb1qqhwANuk5JOpzu0id2q8ongwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODEwMDAyMDQ5WhcNMjYxMTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZWQzYjczOTE5ZmRhNGMzOGZlMjNkMzNhY2JhMjljNDI5 ZWQ1MzhmYjUwMjU4ZjVkOWFlMjQyM2VlMDVhMWFjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmESXaCqlemHYyNZMtYyV6bh2o+cbZSoi8MMy1i6QIiP1n +aDq0jToZuSL/ImABap4gxswfycQW+v0zFM+jmzOj/zIUzQ33Po0rKgn//DxBqSD fsc/aihDw65QK3MEmuKLtOeNFnx9MwEbQK6T9xoodn8cn7dWDyBb3Kc1k3631TP7 UZmuBH9GrMFeKdc//uq9xSxkvmJJc19CzFfpoRUBgG3y0JQ4iVCWLdPfjfMVv28y pg+di8ZbciSoYOFUtgrFEDh6mkHIgeRpT2SP46+9gTYEgzQurkinQEEoXmOnQzCw lojX13Ub6yGOmyWOa2wOqQ8Yl7g7Pu3kgiF4JFFFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU+aKlSkYtXYvtYhEI0cmE1gkJORowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMwNGZjNDVmLWFiMTktNDg1My04NDY4LWJmNWRmOTMxMDVmYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/oEMAwDQYJKoZIhvcNAQELBQADggEBAAA/bJSlchsdWXJA3ydt76gM DlSEX8QWba02cK+xaWQ5JzZaqRD69FSZH0buQImwyo9MuwGhmAk0efmbHuJV3PkU mfXAPaDHJujoTlwtj5za/NYSY+SmDSgkXr8NETohMlK35dXXi26ihpvsHYSI+rKp LLmtXR8+r3Hbx2t58l3NJYcvd8supt5pc6TqtloHzaI2vJ27pC+1oPhuO07SIMUE PTgPInBCEV4hTsr5iqABF2T4verBqff+Gz10JXtwSGhEjQ+f6RlTf5+HhOVvGNc2 7MNCR3Aqp52fkHdoAOOducNLu/sJ8V2afnGwUNvrfNA7szPr4kCtZ1xelVWlP0U= -----END CERTIFICATE-----Generated at Thu Sep 17 17:06:25 2026 by rpki-client