$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33c623db-5e3e-4629-a75c-af4f2bf281cd.roa File: 33c623db-5e3e-4629-a75c-af4f2bf281cd.roa (raw, json) Hash identifier: +GRTDu6VBSoodLdNzzb6ORv7Y3e6Na8D0IyMHKCX2Qc= Subject key identifier: 84:2D:A6:CA:F4:45:EB:11:B6:3F:83:D3:6C:E8:E1:60:6D:87:B1:54 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 52DB8458E4269B0EEBBAF5AD5E195253280DB283 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33c623db-5e3e-4629-a75c-af4f2bf281cd.roa Signing time: Wed 09 Sep 2026 16:03:47 +0000 ROA not before: Wed 09 Sep 2026 16:03:47 +0000 ROA not after: Tue 08 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f69:c200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:db:84:58:e4:26:9b:0e:eb:ba:f5:ad:5e:19:52:53:28:0d:b2:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 9 16:03:47 2026 GMT Not After : Dec 8 23:59:59 2026 GMT Subject: serialNumber=7f604c0a8ca879b5da4127de51a8bade87854fc50094ef327f95715ad8ee5dda, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2f:b1:04:ef:4c:a6:0a:5c:bd:e7:34:9a:d3: 33:6d:b5:e2:5f:a7:76:a1:f6:62:f0:c5:38:9b:69: 1e:e4:87:84:37:23:6f:85:13:96:9c:a7:50:49:cd: 72:0a:d2:60:82:f9:06:e1:19:f8:26:da:d8:31:e7: 90:d5:9e:f0:c5:95:6b:20:5e:26:03:4b:cd:5f:9f: 77:79:5e:96:39:90:cf:b4:3f:40:a5:44:09:f2:f8: a6:f6:4e:dc:d9:0b:90:45:42:f6:dd:67:21:98:bf: e9:d5:c4:b8:8f:f7:b8:e8:42:1b:f6:12:8d:8f:04: f4:3f:7e:ef:14:62:71:9b:0a:91:7e:16:54:2d:c1: 83:04:6f:e7:a3:90:9c:bc:65:ca:a0:a4:6a:08:2d: 66:f5:86:85:e2:5a:a2:b1:9c:bf:8a:1e:df:7e:17: 6b:47:30:dd:58:ac:6a:be:13:0f:a7:df:d9:8b:0f: c8:1d:32:14:79:12:6a:82:db:58:a7:d4:a1:8b:6b: 83:95:17:0a:41:41:85:07:99:f7:f0:42:e3:17:56: e7:a4:5c:ba:d7:62:c1:8c:42:3e:8c:55:63:57:ff: 1b:6a:f7:7d:2b:36:f9:bd:76:01:7f:d5:bb:90:74: 32:1a:a7:24:74:3f:30:ec:9f:7d:73:f1:98:87:cc: 95:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:2D:A6:CA:F4:45:EB:11:B6:3F:83:D3:6C:E8:E1:60:6D:87:B1:54 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33c623db-5e3e-4629-a75c-af4f2bf281cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f69:c200::/40 Signature Algorithm: sha256WithRSAEncryption 54:ff:bb:d9:3a:c2:00:5d:42:11:89:6a:9d:eb:b2:d0:23:06: 05:81:ba:0d:e5:2c:32:d4:50:9a:58:64:d1:5b:2b:ab:68:68: af:be:d2:38:84:83:fd:97:84:44:65:e2:d8:53:d0:d4:e5:78: aa:da:f9:27:6a:74:5d:15:6f:29:f2:d2:79:f3:63:5f:84:f8: d8:3e:ad:79:9e:5a:b7:7d:a8:5c:26:de:d7:bc:9c:9b:b7:1e: 5d:b8:12:3c:0f:4c:4a:d1:36:20:40:8e:c3:6f:00:cb:34:cd: ea:dc:06:8a:90:56:1c:27:e3:48:fe:c5:c2:16:fd:ff:db:28: 9d:72:23:ea:03:fc:e8:b7:0e:2e:96:29:73:7c:ee:f9:e6:22: 06:1f:e6:03:07:49:a9:d2:a7:19:f7:ac:a2:28:50:4a:3a:1a: f3:6a:69:0a:f7:44:2c:67:85:c0:b7:4c:aa:d0:45:cc:e2:67: df:32:26:a1:79:71:b0:98:0f:f0:1f:cf:74:73:3e:84:18:c9: cd:2f:9d:34:a5:4a:95:4c:51:e6:79:35:0d:64:59:35:9b:24: 22:19:f4:00:96:8b:2e:cf:73:0a:79:15:52:77:1e:20:52:97: 1b:64:8e:91:5b:95:5d:10:e3:0d:2a:19:af:ac:3c:3b:3d:2a: f2:4b:b7:20 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUUtuEWOQmmw7ruvWtXhlSUygNsoMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwOTA5MTYwMzQ3WhcNMjYxMjA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZjYwNGMwYThjYTg3OWI1ZGE0MTI3ZGU1MWE4YmFkZTg3 ODU0ZmM1MDA5NGVmMzI3Zjk1NzE1YWQ4ZWU1ZGRhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDgL7EE70ymCly95zSa0zNtteJfp3ah9mLwxTibaR7kh4Q3 I2+FE5acp1BJzXIK0mCC+QbhGfgm2tgx55DVnvDFlWsgXiYDS81fn3d5XpY5kM+0 P0ClRAny+Kb2TtzZC5BFQvbdZyGYv+nVxLiP97joQhv2Eo2PBPQ/fu8UYnGbCpF+ FlQtwYMEb+ejkJy8ZcqgpGoILWb1hoXiWqKxnL+KHt9+F2tHMN1YrGq+Ew+n39mL D8gdMhR5EmqC21in1KGLa4OVFwpBQYUHmffwQuMXVuekXLrXYsGMQj6MVWNX/xtq 930rNvm9dgF/1buQdDIapyR0PzDsn31z8ZiHzJWJAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUhC2myvRF6xG2P4PTbOjhYG2HsVQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMzYzYyM2RiLTVlM2UtNDYyOS1hNzVjLWFmNGYyYmYyODFjZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9pwjANBgkqhkiG9w0BAQsFAAOCAQEAVP+72TrCAF1CEYlqneuy0CMG BYG6DeUsMtRQmlhk0Vsrq2hor77SOISD/ZeERGXi2FPQ1OV4qtr5J2p0XRVvKfLS efNjX4T42D6teZ5at32oXCbe17ycm7ceXbgSPA9MStE2IECOw28AyzTN6twGipBW HCfjSP7Fwhb9/9sonXIj6gP86LcOLpYpc3zu+eYiBh/mAwdJqdKnGfesoihQSjoa 82ppCvdELGeFwLdMqtBFzOJn3zImoXlxsJgP8B/PdHM+hBjJzS+dNKVKlUxR5nk1 DWRZNZskIhn0AJaLLs9zCnkVUnceIFKXG2SOkVuVXRDjDSoZr6w8Oz0q8ku3IA== -----END CERTIFICATE-----Generated at Tue Sep 15 12:43:00 2026 by rpki-client