$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55dd29a8-e973-42c1-97d9-99f3299105aa.roa File: 55dd29a8-e973-42c1-97d9-99f3299105aa.roa (raw, json) Hash identifier: jD53bOeJC2awGypx2YJkX8/y43v196ErrIKZXHst/xk= Subject key identifier: 29:6C:C0:D3:41:37:FA:8C:FB:8C:BD:B1:15:C1:11:D0:FD:C2:55:A0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 26278FD178E09A5B4DA99E87A0B6CC9CB960BB27 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55dd29a8-e973-42c1-97d9-99f3299105aa.roa Signing time: Thu 10 Sep 2026 00:20:10 +0000 ROA not before: Thu 10 Sep 2026 00:20:10 +0000 ROA not after: Wed 09 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fec:dc00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:27:8f:d1:78:e0:9a:5b:4d:a9:9e:87:a0:b6:cc:9c:b9:60:bb:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 10 00:20:10 2026 GMT Not After : Dec 9 23:59:59 2026 GMT Subject: serialNumber=8e432c633b7784866de8148bd59e1981d1e17bf03015d520395f907bfb857449, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ca:ba:67:47:58:df:c3:60:c3:f5:37:a4:de: fd:57:e7:ea:ed:9d:15:15:05:ee:b4:3e:e2:0f:87: a4:1b:ac:25:dc:e8:ec:9d:e6:9d:35:c4:3d:52:4a: b3:9d:f4:e4:02:81:e4:4b:fc:d4:c4:bc:a0:14:8b: 95:da:db:70:6e:1f:f8:3a:0e:c0:d3:3a:f1:2b:87: 86:ad:f3:88:0c:b9:89:94:ce:d8:69:23:ea:7e:19: d6:c9:03:ed:96:16:44:dd:d3:30:8b:e2:61:8a:ad: 90:a9:f5:eb:f6:1f:c1:f0:fc:5d:a3:c3:df:96:14: 63:07:47:4d:63:2c:60:bf:b4:68:38:e8:98:88:f2: 0b:db:14:1c:e4:0d:a9:c4:11:2f:5e:00:3d:08:ee: 6f:c2:38:d1:69:43:e2:a1:b0:cb:7b:9e:6c:58:fb: cf:b8:0d:13:cd:a9:5c:fb:ee:71:35:19:2c:aa:ac: c2:f3:3e:a0:21:4b:13:b2:11:36:b8:63:56:c3:bf: 89:3a:9c:97:f4:82:10:53:8c:f2:41:eb:f6:c1:91: 56:9f:02:b0:e2:52:e9:76:b8:75:54:f8:1b:35:17: 5c:f8:5a:8b:c2:6f:0b:27:79:12:2c:cc:af:78:96: b9:65:38:23:d0:a8:79:30:f6:ad:a9:4d:3d:a5:3b: f0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:6C:C0:D3:41:37:FA:8C:FB:8C:BD:B1:15:C1:11:D0:FD:C2:55:A0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55dd29a8-e973-42c1-97d9-99f3299105aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fec:dc00::/48 Signature Algorithm: sha256WithRSAEncryption 0c:15:60:30:fd:50:62:0e:76:56:ee:a9:40:a6:73:1a:46:58: b0:7c:21:31:43:91:e9:e3:9e:dd:4a:19:ed:e3:8d:2d:31:ff: cf:3d:25:64:54:b6:4f:40:28:9c:c3:57:e3:08:f9:81:35:e5: 89:b3:e2:ab:06:f2:5b:a6:ab:58:fb:e8:b9:4d:90:0a:4a:85: ad:41:16:0e:ad:53:42:2f:51:2e:de:38:62:02:06:26:f4:b3: 36:14:e4:ce:36:70:87:92:0f:b5:cf:7b:a3:e9:fa:d3:24:8f: 58:6d:75:44:5d:ae:b3:ad:91:83:03:4a:b4:bd:71:fc:53:8f: b3:ae:35:c3:06:7a:a3:43:0d:26:10:6c:2b:51:ee:95:9f:e9: 05:35:51:4e:22:30:84:9f:31:df:0c:7e:ed:78:82:b5:65:97: 9c:59:ed:b4:62:f0:22:58:6a:33:1c:d8:84:5c:67:80:de:85: 5a:97:d3:86:2d:29:13:32:22:8f:81:e6:9f:e7:a2:55:bf:32: be:62:5c:62:a6:03:3d:2d:52:78:32:e5:01:f2:37:30:c8:55: 9f:ce:b0:37:de:10:14:df:25:cb:e4:dd:dd:82:45:29:9f:f9: 37:1b:83:96:6a:96:fb:bc:ba:03:b1:80:20:c1:4e:51:e7:55: cd:68:87:9b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJieP0XjgmltNqZ6HoLbMnLlguycwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwOTEwMDAyMDEwWhcNMjYxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZTQzMmM2MzNiNzc4NDg2NmRlODE0OGJkNTllMTk4MWQx ZTE3YmYwMzAxNWQ1MjAzOTVmOTA3YmZiODU3NDQ5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzyrpnR1jfw2DD9Tek3v1X5+rtnRUVBe60PuIPh6QbrCXc 6Oyd5p01xD1SSrOd9OQCgeRL/NTEvKAUi5Xa23BuH/g6DsDTOvErh4at84gMuYmU zthpI+p+GdbJA+2WFkTd0zCL4mGKrZCp9ev2H8Hw/F2jw9+WFGMHR01jLGC/tGg4 6JiI8gvbFBzkDanEES9eAD0I7m/CONFpQ+KhsMt7nmxY+8+4DRPNqVz77nE1GSyq rMLzPqAhSxOyETa4Y1bDv4k6nJf0ghBTjPJB6/bBkVafArDiUul2uHVU+Bs1F1z4 WovCbwsneRIszK94lrllOCPQqHkw9q2pTT2lO/DrAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUKWzA00E3+oz7jL2xFcER0P3CVaAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU1ZGQyOWE4LWU5NzMtNDJjMS05N2Q5LTk5ZjMyOTkxMDVhYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/s3AAwDQYJKoZIhvcNAQELBQADggEBAAwVYDD9UGIOdlbuqUCmcxpG WLB8ITFDkenjnt1KGe3jjS0x/889JWRUtk9AKJzDV+MI+YE15Ymz4qsG8lumq1j7 6LlNkApKha1BFg6tU0IvUS7eOGICBib0szYU5M42cIeSD7XPe6Pp+tMkj1htdURd rrOtkYMDSrS9cfxTj7OuNcMGeqNDDSYQbCtR7pWf6QU1UU4iMISfMd8Mfu14grVl l5xZ7bRi8CJYajMc2IRcZ4DehVqX04YtKRMyIo+B5p/nolW/Mr5iXGKmAz0tUngy 5QHyNzDIVZ/OsDfeEBTfJcvk3d2CRSmf+Tcbg5Zqlvu8ugOxgCDBTlHnVc1oh5s= -----END CERTIFICATE-----Generated at Tue Sep 15 11:38:24 2026 by rpki-client