$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/354dc003-92f9-4ed3-a2c3-832a175bc852.roa File: 354dc003-92f9-4ed3-a2c3-832a175bc852.roa (raw, json) Hash identifier: 2O6C4cqESpBgf6t0LiAsdkX8rbKzHAXZFznHDC5lXfY= Subject key identifier: B9:52:21:26:C0:2E:05:7C:31:6B:C2:8A:B2:C6:C9:B1:A6:2C:D0:FA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3C1962405F129CDE8FA08CC6AAB84D3A84EB148F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/354dc003-92f9-4ed3-a2c3-832a175bc852.roa Signing time: Thu 10 Sep 2026 00:11:09 +0000 ROA not before: Thu 10 Sep 2026 00:11:09 +0000 ROA not after: Wed 09 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1feb:a400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:19:62:40:5f:12:9c:de:8f:a0:8c:c6:aa:b8:4d:3a:84:eb:14:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 10 00:11:09 2026 GMT Not After : Dec 9 23:59:59 2026 GMT Subject: serialNumber=f8e46d6cd91efd466d9d69780ffdd8ec07edd59085204302a5110020fcea4972, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:55:40:3a:bc:62:20:ac:90:fe:1f:5b:02:f8: ed:ee:a0:1a:89:c9:31:b5:7b:f0:d1:1f:bb:dd:2d: 89:af:ae:db:a5:da:58:eb:ea:a5:ae:a5:2e:43:7a: c7:82:62:bd:14:b3:e8:44:9a:25:4e:b1:a3:7f:27: b2:8c:ad:f6:b7:e8:fb:85:ed:ac:8b:c1:39:b1:aa: b7:6d:f4:11:f3:6f:8f:93:bf:07:98:ae:85:fe:ba: 7d:ea:54:b2:83:c0:1e:02:13:f2:55:9d:bb:36:80: 01:b9:d7:27:00:d1:21:be:7c:4f:84:92:7a:c7:a8: 61:b6:d3:1a:66:95:ae:57:70:4f:09:34:c3:c5:bc: d8:e3:ee:77:d9:57:7c:f8:e2:79:29:fd:36:ce:da: 80:b1:45:cf:18:a0:23:91:cf:ea:b0:d1:20:21:06: ee:84:d7:c1:ad:24:ff:9a:d9:bf:49:57:3a:9e:95: c6:ec:08:8a:b1:1d:e8:34:0c:6d:a1:7f:53:97:d3: 0d:5f:cb:9b:93:59:37:94:c9:9f:4f:31:02:3d:6b: b0:8c:e3:3f:91:49:b7:cb:d7:71:3b:d3:cd:8d:9c: 7b:dc:69:3f:25:9a:e3:8c:79:f0:f6:32:76:3d:5b: ee:21:58:3c:06:91:fe:fb:1e:22:78:42:08:e9:14: 57:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:52:21:26:C0:2E:05:7C:31:6B:C2:8A:B2:C6:C9:B1:A6:2C:D0:FA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/354dc003-92f9-4ed3-a2c3-832a175bc852.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1feb:a400::/40 Signature Algorithm: sha256WithRSAEncryption 26:11:3e:48:4c:55:b7:8c:8a:ee:93:a6:b8:32:c5:7c:cd:a7: 7b:38:96:66:42:cd:ba:4e:5d:27:c6:0f:2c:73:67:f8:15:fc: 20:6f:ba:17:89:55:18:25:c0:45:97:0b:87:fb:1f:d6:b3:4a: b2:6a:49:2b:4d:4a:72:d5:6f:84:25:a6:2a:c5:6c:bd:d6:2b: ec:81:8c:8b:b9:cf:b4:a5:27:9e:20:37:df:f5:42:11:5d:45: 8c:4a:fd:fb:b6:eb:c5:a9:35:ad:da:a9:08:a2:cd:d7:34:76: 8a:cb:0f:9b:c5:44:b8:fa:51:df:1f:8e:72:96:e1:c3:44:e3: 39:67:76:36:a0:25:58:3f:f8:58:08:45:2e:89:46:31:8b:74: c2:ee:89:7f:68:16:b8:2d:fa:40:9c:4c:b6:03:31:73:8d:65: e2:98:84:70:35:33:57:fe:f0:02:04:5c:6d:a7:df:75:e8:b2: 44:cf:3c:75:1b:3b:76:83:fb:59:e0:00:da:d3:82:2d:be:55: b5:3f:a7:6d:24:f6:3a:13:a3:90:64:a4:ae:8c:42:4c:71:d0: 9b:de:ab:0c:72:9c:3c:9e:63:10:27:3a:23:a2:6c:f2:38:eb: 10:44:73:ca:f1:c0:df:30:d8:7e:5f:19:c9:6c:99:5e:70:93: b2:fe:e9:9c -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUPBliQF8SnN6PoIzGqrhNOoTrFI8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwOTEwMDAxMTA5WhcNMjYxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmOGU0NmQ2Y2Q5MWVmZDQ2NmQ5ZDY5NzgwZmZkZDhlYzA3 ZWRkNTkwODUyMDQzMDJhNTExMDAyMGZjZWE0OTcyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxVUA6vGIgrJD+H1sC+O3uoBqJyTG1e/DRH7vdLYmvrtul 2ljr6qWupS5DeseCYr0Us+hEmiVOsaN/J7KMrfa36PuF7ayLwTmxqrdt9BHzb4+T vweYroX+un3qVLKDwB4CE/JVnbs2gAG51ycA0SG+fE+EknrHqGG20xpmla5XcE8J NMPFvNjj7nfZV3z44nkp/TbO2oCxRc8YoCORz+qw0SAhBu6E18GtJP+a2b9JVzqe lcbsCIqxHeg0DG2hf1OX0w1fy5uTWTeUyZ9PMQI9a7CM4z+RSbfL13E7082NnHvc aT8lmuOMefD2MnY9W+4hWDwGkf77HiJ4QgjpFFflAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUuVIhJsAuBXwxa8KKssbJsaYs0PowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM1NGRjMDAzLTkyZjktNGVkMy1hMmMzLTgzMmExNzViYzg1Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/rpDANBgkqhkiG9w0BAQsFAAOCAQEAJhE+SExVt4yK7pOmuDLFfM2n eziWZkLNuk5dJ8YPLHNn+BX8IG+6F4lVGCXARZcLh/sf1rNKsmpJK01KctVvhCWm KsVsvdYr7IGMi7nPtKUnniA33/VCEV1FjEr9+7brxak1rdqpCKLN1zR2issPm8VE uPpR3x+Ocpbhw0TjOWd2NqAlWD/4WAhFLolGMYt0wu6Jf2gWuC36QJxMtgMxc41l 4piEcDUzV/7wAgRcbaffdeiyRM88dRs7doP7WeAA2tOCLb5VtT+nbST2OhOjkGSk roxCTHHQm96rDHKcPJ5jECc6I6Js8jjrEERzyvHA3zDYfl8ZyWyZXnCTsv7pnA== -----END CERTIFICATE-----Generated at Thu Sep 17 17:09:47 2026 by rpki-client