$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f577962-8825-47e6-a6e8-b5b99de91a33.roa File: 3f577962-8825-47e6-a6e8-b5b99de91a33.roa (raw, json) Hash identifier: +/hJ04txSxEUcNsjL4ikbivOvXrJvTke4WVVdkjRcH0= Subject key identifier: 9B:F2:69:3C:21:C9:94:C4:D3:74:D8:D1:F2:AC:52:CD:68:3D:C9:40 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4314957A86017875F81BC445C3F82A5FE090B64E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f577962-8825-47e6-a6e8-b5b99de91a33.roa Signing time: Mon 10 Aug 2026 00:50:41 +0000 ROA not before: Mon 10 Aug 2026 00:50:41 +0000 ROA not after: Sun 08 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fe8:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:14:95:7a:86:01:78:75:f8:1b:c4:45:c3:f8:2a:5f:e0:90:b6:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 10 00:50:41 2026 GMT Not After : Nov 8 23:59:59 2026 GMT Subject: serialNumber=b93616cc19ccbb3e17f727652f5f3b75c3eb4e9d6e16e525aa06fb32f54d9fbe, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b2:b1:66:8e:9f:c7:09:02:4f:10:35:20:45: 83:01:35:04:56:99:02:0a:1f:1f:26:35:4d:46:fd: 53:47:6f:0c:cd:56:13:1c:55:6d:cc:8c:10:0c:0a: 19:7a:2f:b2:4b:7c:ba:a3:f3:3c:1f:ff:52:0a:50: 11:70:3d:3f:29:fe:04:f3:d2:e8:46:f2:14:20:d0: ff:c1:af:64:91:04:42:dc:61:a9:09:f8:48:74:91: 1c:bb:29:76:5e:f4:45:1b:23:7f:4d:eb:43:36:75: cc:44:3d:66:93:9c:0d:a7:f3:6c:68:eb:48:5a:b6: c3:d8:49:ac:30:48:ea:57:0a:76:2c:9f:55:c6:10: 65:b6:12:22:ef:a0:62:21:0e:76:6b:93:cf:0b:9b: db:9b:67:b2:22:51:d1:5a:70:81:03:b4:41:89:dd: ef:a0:83:f3:b7:b6:66:fa:c9:f9:62:d5:c8:3c:0f: b9:41:99:0e:ee:14:25:82:83:9d:78:2b:eb:7c:0b: 54:02:03:91:ed:42:90:e0:59:d6:65:b2:b9:08:00: 62:69:c1:f8:b2:7d:e3:a7:34:c5:72:3c:25:b5:ad: 0d:8b:ce:3a:83:09:35:1e:25:70:12:4f:63:d0:b5: f1:2e:3d:63:6d:62:4e:67:f6:48:f2:ad:49:a0:30: 37:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:F2:69:3C:21:C9:94:C4:D3:74:D8:D1:F2:AC:52:CD:68:3D:C9:40 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f577962-8825-47e6-a6e8-b5b99de91a33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fe8:2000::/40 Signature Algorithm: sha256WithRSAEncryption a3:67:4e:6a:c8:7e:6e:ad:59:69:60:d5:7c:d6:b0:ee:7c:b0: 8f:da:3d:74:c7:1a:c9:9d:c1:3b:d4:12:be:e7:18:a2:26:77: 77:a2:07:6a:c3:67:7a:90:9a:bd:1a:f2:48:6f:f2:1b:ef:16: 2f:9c:bb:36:eb:f7:ff:ea:53:4c:62:a2:92:9c:c6:9c:43:3e: 53:13:9e:9b:02:89:10:75:3e:dd:de:2b:6d:53:af:02:c3:ae: ac:af:ff:fc:ec:23:71:19:a7:ff:38:d9:ab:e6:d5:5c:8e:c3: 0a:e0:bf:84:76:5e:c3:59:76:47:27:de:7f:40:d3:73:89:a5: f8:62:93:82:ee:03:0a:48:17:b0:16:06:3e:a8:f5:7a:36:df: 7c:89:73:f9:c0:f9:fc:2b:b4:9e:bf:db:6e:10:60:8f:ee:f7: fa:42:a3:04:76:99:43:af:dd:ce:41:c1:ca:92:df:56:9a:4b: 63:b9:9e:35:38:46:9a:76:1a:d0:81:c0:c5:56:bf:1d:c8:0e: ec:cd:35:e5:c0:65:97:61:09:01:a2:ec:07:7b:ff:e0:96:e4: ef:50:f9:6e:8c:21:99:a9:e9:fd:48:35:16:40:b5:b5:ca:53: fd:cc:70:61:05:f0:1c:51:3d:eb:c7:40:0c:7e:5f:8e:17:7a: 4b:7b:8e:73 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUQxSVeoYBeHX4G8RFw/gqX+CQtk4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODEwMDA1MDQxWhcNMjYxMTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BiOTM2MTZjYzE5Y2NiYjNlMTdmNzI3NjUyZjVmM2I3NWMz ZWI0ZTlkNmUxNmU1MjVhYTA2ZmIzMmY1NGQ5ZmJlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCasrFmjp/HCQJPEDUgRYMBNQRWmQIKHx8mNU1G/VNHbwzN VhMcVW3MjBAMChl6L7JLfLqj8zwf/1IKUBFwPT8p/gTz0uhG8hQg0P/Br2SRBELc YakJ+Eh0kRy7KXZe9EUbI39N60M2dcxEPWaTnA2n82xo60hatsPYSawwSOpXCnYs n1XGEGW2EiLvoGIhDnZrk88Lm9ubZ7IiUdFacIEDtEGJ3e+gg/O3tmb6yfli1cg8 D7lBmQ7uFCWCg514K+t8C1QCA5HtQpDgWdZlsrkIAGJpwfiyfeOnNMVyPCW1rQ2L zjqDCTUeJXAST2PQtfEuPWNtYk5n9kjyrUmgMDdXAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUm/JpPCHJlMTTdNjR8qxSzWg9yUAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNmNTc3OTYyLTg4MjUtNDdlNi1hNmU4LWI1Yjk5ZGU5MWEzMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/oIDANBgkqhkiG9w0BAQsFAAOCAQEAo2dOash+bq1ZaWDVfNaw7nyw j9o9dMcayZ3BO9QSvucYoiZ3d6IHasNnepCavRrySG/yG+8WL5y7Nuv3/+pTTGKi kpzGnEM+UxOemwKJEHU+3d4rbVOvAsOurK///OwjcRmn/zjZq+bVXI7DCuC/hHZe w1l2Ryfef0DTc4ml+GKTgu4DCkgXsBYGPqj1ejbffIlz+cD5/Cu0nr/bbhBgj+73 +kKjBHaZQ6/dzkHBypLfVppLY7meNThGmnYa0IHAxVa/HcgO7M015cBll2EJAaLs B3v/4Jbk71D5bowhmanp/Ug1FkC1tcpT/cxwYQXwHFE968dADH5fjhd6S3uOcw== -----END CERTIFICATE-----Generated at Thu Sep 17 16:57:33 2026 by rpki-client