$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3cbfc44b-8734-4b3f-a5c8-818e02dfca64.roa File: 3cbfc44b-8734-4b3f-a5c8-818e02dfca64.roa (raw, json) Hash identifier: qOS+BbVpzJbHz+2SASulHt4dtN/WG/S+lBDFVxzMEYg= Subject key identifier: 59:B6:CD:0C:C8:2A:16:65:EF:36:49:24:64:F5:6A:BB:5D:E4:CF:19 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2DF809669F7FE547B399058E5AE3A4B440994E8C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3cbfc44b-8734-4b3f-a5c8-818e02dfca64.roa Signing time: Mon 10 Aug 2026 00:30:17 +0000 ROA not before: Mon 10 Aug 2026 00:30:17 +0000 ROA not after: Sun 08 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fe0:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:f8:09:66:9f:7f:e5:47:b3:99:05:8e:5a:e3:a4:b4:40:99:4e:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 10 00:30:17 2026 GMT Not After : Nov 8 23:59:59 2026 GMT Subject: serialNumber=66c0ab82283c323d6cd4283744653359f567cd44d8d207827b70775b45e23cbf, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:cd:22:7a:fc:91:7d:e5:8b:01:34:28:6c:cd: f0:5b:0a:58:07:59:51:27:88:15:60:9f:06:23:e2: e9:29:61:38:ed:6e:9a:23:7a:8f:46:74:b8:8b:b9: 53:93:8b:37:c0:01:01:cf:ca:9d:c9:f3:72:9e:1b: 0f:79:4b:d7:13:c6:9b:c5:26:cc:20:98:90:0f:de: 7a:7d:74:7c:8f:ad:1d:32:9c:f0:78:79:04:03:5e: 61:d2:ab:f3:ce:0b:0a:0e:58:b5:41:09:f3:fe:a3: 5a:f7:76:4e:44:36:b6:a4:dc:7d:c7:ab:41:3e:4f: 8c:8b:de:76:04:7f:de:ec:a5:dc:52:67:53:52:64: 16:c7:c8:df:68:e4:9f:2a:c6:52:93:90:23:d4:a5: 55:ec:2b:eb:7c:e1:ed:34:ca:44:d0:4c:b1:f6:21: 5b:aa:d4:d8:e9:4b:5b:62:8b:11:05:1b:48:a4:ea: 24:00:fe:94:e6:a9:49:fe:c0:e1:f7:d0:ed:8f:e9: 3d:98:28:2a:ef:e3:aa:3d:83:35:fb:52:68:64:c2: 2d:27:c4:72:d6:61:06:c9:7c:fc:ec:e5:86:95:cc: 00:35:f9:18:ee:02:c7:95:6b:ac:e3:88:c4:4e:17: b9:7a:7b:94:88:aa:1b:1c:41:ff:ea:ac:a2:43:a8: 05:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B6:CD:0C:C8:2A:16:65:EF:36:49:24:64:F5:6A:BB:5D:E4:CF:19 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3cbfc44b-8734-4b3f-a5c8-818e02dfca64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fe0:e000::/40 Signature Algorithm: sha256WithRSAEncryption 75:22:ef:05:d5:3d:50:2b:cb:c3:a7:38:3e:06:b9:60:32:9c: 6f:8e:da:e2:0a:8e:b8:9b:bf:b2:d2:0a:d1:ee:81:44:f8:5c: 95:7d:69:29:ca:0f:2c:a8:26:87:8c:2f:ea:2a:af:41:e1:a1: b6:13:e1:ed:7d:2a:0b:fb:9f:94:44:b8:a5:83:ac:3b:0f:9e: 4c:4d:0e:e6:83:01:dd:8f:35:cc:f3:a4:bb:71:60:c9:c6:f4: 0e:d4:5a:e3:bf:1f:e6:d3:41:b4:28:68:6c:ea:76:fe:bd:90: d9:13:e9:fb:d1:e6:de:99:0d:b4:2c:e6:bd:7b:54:21:b1:c4: c8:75:8d:ca:18:e5:28:32:92:53:04:ce:63:f5:15:27:58:49: e6:8b:51:17:30:87:77:be:1f:98:77:5a:05:a3:87:b6:61:75: d8:e6:45:96:04:fa:09:c9:5b:1f:0e:2a:32:55:63:b6:aa:80: ce:e5:47:6d:fb:8f:59:84:eb:06:2e:28:2f:62:91:bb:f6:03: 3f:86:76:6f:ea:62:65:d6:c9:b4:cc:51:8d:75:af:f5:3b:5d: e7:35:ca:14:48:f7:8b:b1:27:13:86:03:23:c7:fc:f0:60:b2: 1e:d5:8d:c8:7a:c3:39:6f:3f:13:d6:9d:58:60:3d:24:c4:01: 89:cd:c8:4f -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIULfgJZp9/5UezmQWOWuOktECZTowwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODEwMDAzMDE3WhcNMjYxMTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NmMwYWI4MjI4M2MzMjNkNmNkNDI4Mzc0NDY1MzM1OWY1 NjdjZDQ0ZDhkMjA3ODI3YjcwNzc1YjQ1ZTIzY2JmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDrzSJ6/JF95YsBNChszfBbClgHWVEniBVgnwYj4ukpYTjt bpojeo9GdLiLuVOTizfAAQHPyp3J83KeGw95S9cTxpvFJswgmJAP3np9dHyPrR0y nPB4eQQDXmHSq/POCwoOWLVBCfP+o1r3dk5ENrak3H3Hq0E+T4yL3nYEf97spdxS Z1NSZBbHyN9o5J8qxlKTkCPUpVXsK+t84e00ykTQTLH2IVuq1NjpS1tiixEFG0ik 6iQA/pTmqUn+wOH30O2P6T2YKCrv46o9gzX7Umhkwi0nxHLWYQbJfPzs5YaVzAA1 +RjuAseVa6zjiMROF7l6e5SIqhscQf/qrKJDqAVzAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUWbbNDMgqFmXvNkkkZPVqu13kzxkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNjYmZjNDRiLTg3MzQtNGIzZi1hNWM4LTgxOGUwMmRmY2E2NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/g4DANBgkqhkiG9w0BAQsFAAOCAQEAdSLvBdU9UCvLw6c4Pga5YDKc b47a4gqOuJu/stIK0e6BRPhclX1pKcoPLKgmh4wv6iqvQeGhthPh7X0qC/uflES4 pYOsOw+eTE0O5oMB3Y81zPOku3Fgycb0DtRa478f5tNBtChobOp2/r2Q2RPp+9Hm 3pkNtCzmvXtUIbHEyHWNyhjlKDKSUwTOY/UVJ1hJ5otRFzCHd74fmHdaBaOHtmF1 2OZFlgT6CclbHw4qMlVjtqqAzuVHbfuPWYTrBi4oL2KRu/YDP4Z2b+piZdbJtMxR jXWv9Ttd5zXKFEj3i7EnE4YDI8f88GCyHtWNyHrDOW8/E9adWGA9JMQBic3ITw== -----END CERTIFICATE-----Generated at Thu Sep 17 15:33:43 2026 by rpki-client