$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4524b38d-f17a-4e19-8424-90a8fb580d0f.roa File: 4524b38d-f17a-4e19-8424-90a8fb580d0f.roa (raw, json) Hash identifier: kR6uwVKBzP7SDVqSuBp27eYiGu8pvBz55hGHlH+Po2E= Subject key identifier: B1:E0:50:93:1E:4E:F5:4B:7F:EB:20:88:32:80:96:74:BC:B2:7D:16 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 039903FF3E1596398A562BCA38326F83F40A7F4C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4524b38d-f17a-4e19-8424-90a8fb580d0f.roa Signing time: Mon 10 Aug 2026 00:20:12 +0000 ROA not before: Mon 10 Aug 2026 00:20:12 +0000 ROA not after: Sun 08 Nov 2026 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1fe8:20c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:99:03:ff:3e:15:96:39:8a:56:2b:ca:38:32:6f:83:f4:0a:7f:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 10 00:20:12 2026 GMT Not After : Nov 8 23:59:59 2026 GMT Subject: serialNumber=0a83ddf2b531978b7292f4afd947e28b2e425ad53fccca23d260eb1f7800344b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:8c:68:66:c5:7c:05:86:57:c2:60:74:23:16: a2:f5:14:ba:94:67:b7:2f:37:e5:b0:23:3e:d2:f7: 5a:5c:e1:b7:e3:e0:45:27:42:ec:6f:27:6a:2a:66: 41:a3:4b:fb:fc:5e:d0:0b:ed:98:88:a3:ae:80:2f: 32:c2:0d:e2:80:95:5c:e1:7e:a4:a3:aa:6e:6f:aa: a6:4c:7c:38:d8:c4:0c:93:5c:6a:32:31:2f:14:c5: 7d:2b:56:d8:3b:42:c2:e6:7e:5b:0d:2c:63:56:34: 4a:cc:53:11:e6:c0:3f:92:b8:4d:a6:3a:86:61:c9: fe:80:e3:a8:b9:4a:7c:20:4a:dd:de:1c:9c:cc:4c: b2:26:1f:b5:85:b5:44:01:d9:af:7d:51:36:69:ad: 0c:11:51:e8:8f:59:33:4c:57:6d:89:0f:6e:54:c8: 4e:07:98:6f:9e:bd:0a:fd:90:77:57:54:78:31:12: f7:58:0f:40:72:6a:fc:de:52:3d:55:d4:a4:dd:5f: 07:1b:6d:16:ba:b5:a0:a5:80:f4:a2:4e:41:57:57: f0:d7:5f:50:a8:79:29:cd:6b:25:97:89:40:e1:3a: 90:1c:74:49:5c:7c:aa:ef:99:ba:9c:2a:f2:1c:79: 45:d8:41:f5:30:34:91:e6:f5:85:31:1d:3e:58:38: f6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E0:50:93:1E:4E:F5:4B:7F:EB:20:88:32:80:96:74:BC:B2:7D:16 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4524b38d-f17a-4e19-8424-90a8fb580d0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fe8:20c0::/48 Signature Algorithm: sha256WithRSAEncryption 4b:1f:b0:fe:31:db:73:63:1a:e4:d2:47:ce:1e:9c:64:d4:e2: 03:8a:79:07:18:00:9c:12:fe:31:e2:b9:cf:9f:44:84:d2:37: 80:ef:cd:87:48:05:6a:2a:19:67:cb:4e:97:8c:a3:cf:8b:e6: 4b:1c:d9:da:72:b3:4d:e7:8d:88:2f:08:ec:d6:6a:f5:70:4f: 9b:e0:31:2b:62:83:c3:cd:a7:c8:01:98:db:e3:b9:cc:24:3b: f4:c4:d8:58:4c:f7:9f:eb:b0:0f:a9:85:6f:ab:0e:05:8e:84: 54:fa:66:8c:4a:03:dc:33:26:f8:1e:bb:a6:fe:ad:1a:ec:37: 4a:64:ed:5d:dc:53:4f:f1:73:80:bd:78:9e:f3:6b:81:df:5c: 90:c4:a5:cf:ec:a2:f9:77:cf:20:8c:9a:ec:e8:f7:bd:9a:f2: b2:d5:ae:a2:b1:c5:d4:5d:65:94:d9:ed:dc:09:4a:ff:36:41: ec:80:b4:fd:0c:ef:be:8c:8b:a3:b6:69:13:d8:31:1b:41:ac: ca:8e:de:14:af:95:67:e9:31:ef:5f:cc:f5:06:f6:4d:78:c4: 1c:72:f2:bf:fc:fe:8f:8e:61:b5:66:51:f7:54:a7:4a:ba:fd: df:5b:2d:65:6e:d6:b8:7b:14:42:7d:3a:d2:41:2a:27:99:46: 43:d3:7b:d4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUA5kD/z4VljmKVivKODJvg/QKf0wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODEwMDAyMDEyWhcNMjYxMTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0AwYTgzZGRmMmI1MzE5NzhiNzI5MmY0YWZkOTQ3ZTI4YjJl NDI1YWQ1M2ZjY2NhMjNkMjYwZWIxZjc4MDAzNDRiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD8jGhmxXwFhlfCYHQjFqL1FLqUZ7cvN+WwIz7S91pc4bfj 4EUnQuxvJ2oqZkGjS/v8XtAL7ZiIo66ALzLCDeKAlVzhfqSjqm5vqqZMfDjYxAyT XGoyMS8UxX0rVtg7QsLmflsNLGNWNErMUxHmwD+SuE2mOoZhyf6A46i5SnwgSt3e HJzMTLImH7WFtUQB2a99UTZprQwRUeiPWTNMV22JD25UyE4HmG+evQr9kHdXVHgx EvdYD0ByavzeUj1V1KTdXwcbbRa6taClgPSiTkFXV/DXX1CoeSnNayWXiUDhOpAc dElcfKrvmbqcKvIceUXYQfUwNJHm9YUxHT5YOPYjAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUseBQkx5O9Ut/6yCIMoCWdLyyfRYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ1MjRiMzhkLWYxN2EtNGUxOS04NDI0LTkwYThmYjU4MGQwZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/oIMAwDQYJKoZIhvcNAQELBQADggEBAEsfsP4x23NjGuTSR84enGTU 4gOKeQcYAJwS/jHiuc+fRITSN4DvzYdIBWoqGWfLTpeMo8+L5ksc2dpys03njYgv COzWavVwT5vgMStig8PNp8gBmNvjucwkO/TE2FhM95/rsA+phW+rDgWOhFT6ZoxK A9wzJvgeu6b+rRrsN0pk7V3cU0/xc4C9eJ7za4HfXJDEpc/sovl3zyCMmuzo972a 8rLVrqKxxdRdZZTZ7dwJSv82QeyAtP0M776Mi6O2aRPYMRtBrMqO3hSvlWfpMe9f zPUG9k14xBxy8r/8/o+OYbVmUfdUp0q6/d9bLWVu1rh7FEJ9OtJBKieZRkPTe9Q= -----END CERTIFICATE-----Generated at Thu Sep 17 16:22:20 2026 by rpki-client