$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38e49101-eb4d-4830-aa00-47d23d0dd27f.roa File: 38e49101-eb4d-4830-aa00-47d23d0dd27f.roa (raw, json) Hash identifier: MK1N1s9HyT2igmhpFaftM2aVuZni5kZAXubymfVFd2U= Subject key identifier: B1:9C:CC:38:95:11:2B:5A:43:39:04:C0:B4:96:C5:F0:72:B5:CB:F9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 31858F8F289A622A17DDF3C8EC933D3C2C20F025 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38e49101-eb4d-4830-aa00-47d23d0dd27f.roa Signing time: Mon 10 Aug 2026 00:41:19 +0000 ROA not before: Mon 10 Aug 2026 00:41:19 +0000 ROA not after: Sun 08 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fe8:c0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:85:8f:8f:28:9a:62:2a:17:dd:f3:c8:ec:93:3d:3c:2c:20:f0:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 10 00:41:19 2026 GMT Not After : Nov 8 23:59:59 2026 GMT Subject: serialNumber=e3138aedaf7819f2ec5ab5594b02e41b409a0e0fcb2d17de8eede942dcaa53d5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ce:e1:f3:cd:f3:6d:4c:2e:c7:14:ee:f9:7f: 05:80:e1:fa:34:ae:72:49:8f:b2:46:2e:38:ba:5e: 27:29:27:8e:8a:bc:32:0d:a2:03:a1:f2:67:fe:a6: 4b:6a:8b:bd:41:41:e8:f6:e6:19:76:ea:03:aa:a2: 71:e2:d6:da:c6:34:4f:8c:ee:6d:4f:b8:41:b6:d6: d1:7b:91:dd:d1:35:24:c6:16:2e:0c:09:ed:bf:e2: 73:cb:64:9b:cd:4a:d1:73:e8:1b:79:ae:2e:b9:05: 62:f8:78:b4:c9:15:99:32:f5:cc:77:8f:dd:4d:df: ae:01:6c:6c:8e:4c:21:61:ac:27:83:a3:ce:1c:1a: 8d:0c:28:69:b6:cd:99:ea:de:45:8b:69:7e:a3:c2: 93:9f:36:48:2b:42:a4:a7:be:c8:c1:d1:d0:1e:34: ad:ab:0f:b7:90:22:b3:53:83:38:aa:be:84:b5:c5: 7c:50:a7:50:2e:b5:26:25:b3:8f:ba:0d:55:8c:50: 12:d3:4c:c3:da:8f:3e:94:a9:7f:e4:de:b9:08:49: cc:1a:17:de:88:3e:d9:de:d2:47:44:23:68:94:e6: 3d:6b:fa:22:20:8c:a3:ff:b7:84:26:85:63:d3:1c: 4a:9e:67:35:8c:ed:14:d1:c7:81:e4:95:8c:84:3a: f6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:9C:CC:38:95:11:2B:5A:43:39:04:C0:B4:96:C5:F0:72:B5:CB:F9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38e49101-eb4d-4830-aa00-47d23d0dd27f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fe8:c0c0::/48 Signature Algorithm: sha256WithRSAEncryption cb:63:c9:14:16:dd:ca:3f:7a:6f:4e:e5:f3:2e:14:6e:90:44: d9:a5:06:6b:95:9e:98:bf:93:29:e9:74:33:d6:e3:67:45:e0: 4c:55:22:41:d6:82:12:92:22:9a:9e:03:57:27:7c:ee:db:c7: 0e:f8:0c:04:d6:8b:bd:43:f0:88:10:a6:a6:e2:46:4a:62:50: 40:1f:90:03:ab:22:2f:38:a4:bd:f7:52:80:7c:01:09:5f:90: 05:ac:47:7c:1a:63:de:0a:2c:79:d4:82:62:e6:41:4f:5b:a6: 94:4a:16:90:f0:58:df:ab:76:f6:f1:bb:48:f8:23:e5:53:c4: 5f:3f:7e:0d:ac:07:d1:15:af:28:86:65:f5:2b:16:b8:ba:de: f9:b0:e9:63:39:1d:ab:b3:ae:40:8a:41:33:1c:77:58:f2:89: c3:2c:07:1c:a3:f4:03:7f:dc:5f:2a:8a:be:49:0b:1b:fa:a6: 0d:98:5a:b6:c1:c9:59:bc:35:76:38:38:f7:e8:85:e3:4b:2e: c1:fc:c7:4e:ef:ec:13:ea:ac:80:ae:cc:b1:33:ad:89:3d:7f: 7f:f5:f2:44:90:5a:98:6f:ff:ed:37:8b:61:74:4e:96:f5:f9: 32:f3:ec:74:a7:b0:16:7c:32:38:7a:f8:b1:a2:2e:72:79:e1: 93:c9:f6:43 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMYWPjyiaYioX3fPI7JM9PCwg8CUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODEwMDA0MTE5WhcNMjYxMTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMzEzOGFlZGFmNzgxOWYyZWM1YWI1NTk0YjAyZTQxYjQw OWEwZTBmY2IyZDE3ZGU4ZWVkZTk0MmRjYWE1M2Q1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCszuHzzfNtTC7HFO75fwWA4fo0rnJJj7JGLji6XicpJ46K vDINogOh8mf+pktqi71BQej25hl26gOqonHi1trGNE+M7m1PuEG21tF7kd3RNSTG Fi4MCe2/4nPLZJvNStFz6Bt5ri65BWL4eLTJFZky9cx3j91N364BbGyOTCFhrCeD o84cGo0MKGm2zZnq3kWLaX6jwpOfNkgrQqSnvsjB0dAeNK2rD7eQIrNTgziqvoS1 xXxQp1AutSYls4+6DVWMUBLTTMPajz6UqX/k3rkIScwaF96IPtne0kdEI2iU5j1r +iIgjKP/t4QmhWPTHEqeZzWM7RTRx4HklYyEOvZ3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUsZzMOJURK1pDOQTAtJbF8HK1y/kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM4ZTQ5MTAxLWViNGQtNDgzMC1hYTAwLTQ3ZDIzZDBkZDI3Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/owMAwDQYJKoZIhvcNAQELBQADggEBAMtjyRQW3co/em9O5fMuFG6Q RNmlBmuVnpi/kynpdDPW42dF4ExVIkHWghKSIpqeA1cnfO7bxw74DATWi71D8IgQ pqbiRkpiUEAfkAOrIi84pL33UoB8AQlfkAWsR3waY94KLHnUgmLmQU9bppRKFpDw WN+rdvbxu0j4I+VTxF8/fg2sB9EVryiGZfUrFri63vmw6WM5HauzrkCKQTMcd1jy icMsBxyj9AN/3F8qir5JCxv6pg2YWrbByVm8NXY4OPfoheNLLsH8x07v7BPqrICu zLEzrYk9f3/18kSQWphv/+03i2F0Tpb1+TLz7HSnsBZ8Mjh6+LGiLnJ54ZPJ9kM= -----END CERTIFICATE-----Generated at Thu Sep 17 17:08:11 2026 by rpki-client