$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3885190c-0e7d-4bef-85f4-9bad51bf98ab.roa File: 3885190c-0e7d-4bef-85f4-9bad51bf98ab.roa (raw, json) Hash identifier: 30UrHXSfaeOiFL9YcW1yIiJe1KbMFUvFaZXm3Q4h8T0= Subject key identifier: D3:13:2A:43:32:7D:91:AD:7D:96:99:51:B2:3F:32:E2:50:22:94:0D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5B0E40564D5C1CC075586C3ECF8D286E0C4F766E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3885190c-0e7d-4bef-85f4-9bad51bf98ab.roa Signing time: Fri 07 Aug 2026 00:40:39 +0000 ROA not before: Fri 07 Aug 2026 00:40:39 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f1a:c800::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:0e:40:56:4d:5c:1c:c0:75:58:6c:3e:cf:8d:28:6e:0c:4f:76:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 7 00:40:39 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=9799767e561da778e23e9655738a802d7d29e529fe07e24f028bf4bcf8f8a5f0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3c:9f:76:65:56:40:95:99:c6:1e:3a:bb:61: d0:be:1b:d0:9e:07:9c:89:d2:35:c8:28:1f:45:4d: 8c:9f:0a:f3:45:7e:4b:57:49:f2:bf:4d:13:be:05: 64:b9:53:66:84:24:ba:6b:d2:c5:7b:0d:d4:f1:47: 35:30:c2:84:ee:94:36:fe:82:cc:bc:09:fe:13:d5: 63:22:fe:d6:de:57:6d:9b:7e:55:5f:f7:27:17:bc: c5:6f:80:66:f2:71:ac:f3:04:94:df:1c:12:fc:86: cd:96:03:62:aa:be:ce:b0:b4:7c:e4:3f:35:82:84: d0:8a:79:2b:87:2b:99:8b:27:a3:14:c9:01:14:a0: 68:c9:f8:d6:80:b1:d0:b1:fe:8a:50:94:d4:76:32: c3:f7:71:a3:29:a9:c9:dd:9e:a2:52:2d:0f:af:96: 64:95:f2:3f:e6:54:0e:1e:8a:04:c1:c6:07:05:8c: df:be:33:07:d5:09:bf:09:6c:a2:7c:80:6a:cd:f7: e5:00:76:d9:41:15:54:d3:fa:84:8b:fa:11:ac:71: fb:d9:1c:17:1c:59:ed:ad:ff:2e:45:9c:52:ea:3e: 65:0b:41:d6:7a:f2:35:a9:ba:fc:f4:2e:f2:ce:8d: 8d:8f:04:67:e9:da:12:96:06:af:fa:b5:60:23:19: 53:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:13:2A:43:32:7D:91:AD:7D:96:99:51:B2:3F:32:E2:50:22:94:0D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3885190c-0e7d-4bef-85f4-9bad51bf98ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f1a:c800::/37 Signature Algorithm: sha256WithRSAEncryption bc:0e:bb:ff:b3:61:b4:80:7b:c2:1f:c6:42:bc:94:1e:24:86: 34:aa:0b:76:b5:fb:74:3d:5f:58:33:22:d0:70:61:72:63:ff: c3:76:29:3e:13:fa:4f:56:16:93:d2:c1:52:98:03:d0:e7:af: e1:54:66:8b:ba:4a:f5:41:9c:e8:64:8b:ec:0f:c9:4e:4c:21: 94:a6:32:8c:84:0d:ff:e2:e1:b2:a7:2a:e5:04:ed:89:d5:e9: f1:a2:10:8b:36:0f:f7:32:3c:ec:b8:01:ac:4e:ff:f5:99:3b: cc:a6:9e:c1:eb:5c:8f:4d:31:1d:6d:af:05:36:19:11:25:6c: ad:98:45:8a:4f:f2:a7:69:7d:ad:d2:ad:78:3b:de:26:db:65: 71:8e:00:ef:3d:00:0b:87:ca:3a:42:d6:b7:11:16:0f:76:c6: dd:96:75:e6:be:c3:a5:cb:ce:fe:64:c3:17:4d:cb:12:13:37: cc:6f:1f:62:ae:62:4f:f8:70:b3:26:26:f6:ea:1a:6b:1c:11: 3f:ba:17:fd:32:00:97:77:47:db:34:ed:09:ea:4d:bd:66:a5: d1:16:d0:ee:22:92:e2:36:df:18:fe:ca:84:69:3e:a2:ce:97: a0:c4:7c:73:a5:e8:29:0d:b8:97:51:33:d9:42:e3:c3:89:00: 17:97:7f:18 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUWw5AVk1cHMB1WGw+z40obgxPdm4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA3MDA0MDM5WhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5Nzk5NzY3ZTU2MWRhNzc4ZTIzZTk2NTU3MzhhODAyZDdk MjllNTI5ZmUwN2UyNGYwMjhiZjRiY2Y4ZjhhNWYwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHPJ92ZVZAlZnGHjq7YdC+G9CeB5yJ0jXIKB9FTYyfCvNF fktXSfK/TRO+BWS5U2aEJLpr0sV7DdTxRzUwwoTulDb+gsy8Cf4T1WMi/tbeV22b flVf9ycXvMVvgGbycazzBJTfHBL8hs2WA2Kqvs6wtHzkPzWChNCKeSuHK5mLJ6MU yQEUoGjJ+NaAsdCx/opQlNR2MsP3caMpqcndnqJSLQ+vlmSV8j/mVA4eigTBxgcF jN++MwfVCb8JbKJ8gGrN9+UAdtlBFVTT+oSL+hGscfvZHBccWe2t/y5FnFLqPmUL QdZ68jWpuvz0LvLOjY2PBGfp2hKWBq/6tWAjGVNJAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU0xMqQzJ9ka19lplRsj8y4lAilA0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM4ODUxOTBjLTBlN2QtNGJlZi04NWY0LTliYWQ1MWJmOThhYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8ayDANBgkqhkiG9w0BAQsFAAOCAQEAvA67/7NhtIB7wh/GQryUHiSG NKoLdrX7dD1fWDMi0HBhcmP/w3YpPhP6T1YWk9LBUpgD0Oev4VRmi7pK9UGc6GSL 7A/JTkwhlKYyjIQN/+Lhsqcq5QTtidXp8aIQizYP9zI87LgBrE7/9Zk7zKaewetc j00xHW2vBTYZESVsrZhFik/yp2l9rdKteDveJttlcY4A7z0AC4fKOkLWtxEWD3bG 3ZZ15r7DpcvO/mTDF03LEhM3zG8fYq5iT/hwsyYm9uoaaxwRP7oX/TIAl3dH2zTt CepNvWal0RbQ7iKS4jbfGP7KhGk+os6XoMR8c6XoKQ24l1Ez2ULjw4kAF5d/GA== -----END CERTIFICATE-----Generated at Thu Sep 17 17:56:56 2026 by rpki-client