$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b299e3b-54e1-4a13-8059-13d111133b21.roa File: 3b299e3b-54e1-4a13-8059-13d111133b21.roa (raw, json) Hash identifier: JAFt1SLhFDTQCAm37jk1lfWyxB2FGdJsD8uf/+XR/aI= Subject key identifier: C8:0A:7B:3D:5B:9A:1D:95:AE:71:4E:8E:87:13:6E:B8:39:06:ED:62 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2139D7B987B3C4052481BC9EB4631C12333C9939 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b299e3b-54e1-4a13-8059-13d111133b21.roa Signing time: Wed 19 Aug 2026 00:50:30 +0000 ROA not before: Wed 19 Aug 2026 00:50:30 +0000 ROA not after: Tue 17 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fba:4000::/39 maxlen: 39 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:39:d7:b9:87:b3:c4:05:24:81:bc:9e:b4:63:1c:12:33:3c:99:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 19 00:50:30 2026 GMT Not After : Nov 17 23:59:59 2026 GMT Subject: serialNumber=731951fac4c64abe7f82b5c67ef4fb505575669bd1c6251c8297f5619978dc9e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:37:d9:fe:9a:a8:38:48:64:41:35:3a:71:9d: c6:24:18:f8:52:ba:69:23:8e:e2:95:32:4c:78:ba: 8a:79:f9:9a:2a:17:b2:4e:eb:7a:fe:f9:98:79:df: 39:e0:0e:1c:7f:39:33:c0:fc:df:f6:47:11:81:ee: a6:10:43:d7:d1:4d:b9:18:07:40:62:7f:08:ef:9b: 60:bf:21:81:65:b4:8d:52:03:d6:ee:f4:da:25:76: 74:56:23:02:f7:77:31:e0:9a:c3:d8:6f:52:e4:12: d9:49:8c:c8:23:30:0c:25:2a:c7:7c:9c:b3:59:41: 85:b6:29:4c:92:7b:63:3d:64:73:94:d5:11:73:db: 74:2c:33:1c:e2:e5:85:56:ee:eb:25:d1:03:36:47: 00:93:0f:69:5b:6b:00:7c:e5:04:a9:56:10:53:48: 01:ea:d1:10:74:a1:d9:15:be:ef:0a:ec:0d:1f:47: 48:4e:4b:48:6a:f1:48:ec:30:54:7c:3c:64:fb:1c: 7d:05:70:82:02:f2:0c:e7:d7:c0:fc:2d:7c:3e:53: 1a:15:a6:51:21:d1:35:68:c5:5c:ce:1f:7f:94:89: 03:c2:8e:0e:7f:28:80:85:aa:ca:78:b2:7f:e0:da: 6b:a8:65:66:4a:4b:d0:e2:d6:f6:09:53:81:57:d8: 53:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:0A:7B:3D:5B:9A:1D:95:AE:71:4E:8E:87:13:6E:B8:39:06:ED:62 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b299e3b-54e1-4a13-8059-13d111133b21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fba:4000::/39 Signature Algorithm: sha256WithRSAEncryption a6:7c:84:a8:6d:ba:db:d6:35:34:32:18:4e:4e:fb:67:4a:4b: 28:c1:c8:dd:20:da:9a:3e:ff:37:b6:6c:45:af:5e:24:a2:f6: 1a:13:7d:c2:97:9b:f4:d4:98:cf:83:f6:78:bb:f8:73:6f:36: 32:fb:48:30:ae:f7:f0:05:cc:d9:5c:0f:47:d3:88:89:4a:62: dd:a2:28:89:16:4c:e7:b0:77:a1:eb:0d:2e:36:83:b6:7e:e9: f3:93:8a:4e:f3:c9:a2:6e:7c:73:f3:9a:12:b0:7a:61:cc:f9: 84:81:d2:05:87:61:69:85:55:53:3b:d9:73:fa:b0:9d:4f:c5: d3:b3:8e:96:db:41:35:79:05:98:78:48:8c:8a:93:d0:90:20: 5b:ef:30:6c:30:18:6b:3b:4a:08:86:d4:2a:14:d4:64:49:7c: 7d:3b:61:4d:69:c0:f1:0d:8f:32:29:d3:f9:ea:46:f3:9f:b4: dc:2b:f6:c8:18:e8:26:2c:cc:9c:40:75:ed:34:af:27:9c:e3: d0:3c:b8:fa:8d:36:26:cb:56:21:2e:fe:7f:e8:ae:94:2a:08: eb:69:a8:3f:09:3c:c8:0f:94:97:1b:12:1e:60:eb:50:a2:b8: 03:59:1b:24:1c:4f:be:b6:e4:6f:45:7e:52:4a:13:4b:08:00: 44:35:38:10 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUITnXuYezxAUkgbyetGMcEjM8mTkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODE5MDA1MDMwWhcNMjYxMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MzE5NTFmYWM0YzY0YWJlN2Y4MmI1YzY3ZWY0ZmI1MDU1 NzU2NjliZDFjNjI1MWM4Mjk3ZjU2MTk5NzhkYzllMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFN9n+mqg4SGRBNTpxncYkGPhSumkjjuKVMkx4uop5+Zoq F7JO63r++Zh53zngDhx/OTPA/N/2RxGB7qYQQ9fRTbkYB0Bifwjvm2C/IYFltI1S A9bu9NoldnRWIwL3dzHgmsPYb1LkEtlJjMgjMAwlKsd8nLNZQYW2KUySe2M9ZHOU 1RFz23QsMxzi5YVW7usl0QM2RwCTD2lbawB85QSpVhBTSAHq0RB0odkVvu8K7A0f R0hOS0hq8UjsMFR8PGT7HH0FcIIC8gzn18D8LXw+UxoVplEh0TVoxVzOH3+UiQPC jg5/KICFqsp4sn/g2muoZWZKS9Di1vYJU4FX2FNVAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUyAp7PVuaHZWucU6OhxNuuDkG7WIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNiMjk5ZTNiLTU0ZTEtNGExMy04MDU5LTEzZDExMTEzM2IyMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB+6QDANBgkqhkiG9w0BAQsFAAOCAQEApnyEqG2629Y1NDIYTk77Z0pL KMHI3SDamj7/N7ZsRa9eJKL2GhN9wpeb9NSYz4P2eLv4c282MvtIMK738AXM2VwP R9OIiUpi3aIoiRZM57B3oesNLjaDtn7p85OKTvPJom58c/OaErB6Ycz5hIHSBYdh aYVVUzvZc/qwnU/F07OOlttBNXkFmHhIjIqT0JAgW+8wbDAYaztKCIbUKhTUZEl8 fTthTWnA8Q2PMinT+epG85+03Cv2yBjoJizMnEB17TSvJ5zj0Dy4+o02JstWIS7+ f+iulCoI62moPwk8yA+UlxsSHmDrUKK4A1kbJBxPvrbkb0V+UkoTSwgARDU4EA== -----END CERTIFICATE-----Generated at Thu Sep 17 17:15:09 2026 by rpki-client