$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c3eb8a6-89b4-4cc6-b7f2-31127da51ac8.roa File: 5c3eb8a6-89b4-4cc6-b7f2-31127da51ac8.roa (raw, json) Hash identifier: 0TtqQ2fZNP57CiPxOPCCKZdYDImqr4HiEYpjRQPfWYs= Subject key identifier: 12:B3:A9:7A:12:8D:B6:8F:1E:13:B9:45:EF:3D:AA:AC:11:4F:58:7C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4161D7D32B33CBB4457029B8F44C6D7F13CB5479 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c3eb8a6-89b4-4cc6-b7f2-31127da51ac8.roa Signing time: Fri 07 Aug 2026 00:40:36 +0000 ROA not before: Fri 07 Aug 2026 00:40:36 +0000 ROA not after: Thu 05 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fef:4000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:61:d7:d3:2b:33:cb:b4:45:70:29:b8:f4:4c:6d:7f:13:cb:54:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 7 00:40:36 2026 GMT Not After : Nov 5 23:59:59 2026 GMT Subject: serialNumber=101a01d60748d07e1cf53e2c2f5398fff8546663a4f28559d5a236b034533576, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:37:13:3c:3a:78:1d:c5:51:3b:f1:96:5f:7c: 4c:ad:e1:bd:22:e8:3d:57:88:04:99:85:f6:9f:f6: 23:e9:68:e2:5a:f1:fe:c5:f5:f4:6f:da:59:2b:d2: 80:1f:fa:4f:27:a9:cc:7d:26:61:ee:c0:f4:d6:5f: 9b:53:94:2e:7d:82:00:f1:cf:f8:7b:0e:b9:9c:3f: 8e:7a:40:53:f8:47:6e:b9:e8:fd:d1:2f:b4:ec:80: 5f:1e:19:f1:03:f3:64:9d:56:da:0f:ee:19:05:fa: 3d:ad:56:f7:83:6c:98:85:74:df:95:62:78:36:f6: 66:e1:56:4f:e8:d8:0b:ae:3d:b9:b3:f1:e4:77:a0: ea:01:5d:ba:90:b3:40:94:1a:bf:a7:99:31:ff:8d: 1b:ff:80:0a:c3:44:ba:d2:b4:dd:e4:d5:3f:58:95: 82:9f:6b:fe:fa:a9:ea:48:fb:16:fd:52:41:b2:28: 40:36:44:7e:87:03:2f:11:fd:20:e0:9f:40:f2:de: 14:4c:34:4f:53:44:ea:5e:51:12:42:ac:f5:a4:42: 7c:76:e3:b6:bf:14:78:bc:e1:4a:8c:04:ed:1a:ca: d6:ba:8b:5b:f2:bd:5e:ce:f9:c1:89:0c:4f:e7:43: 5e:56:ba:35:31:65:a6:21:5c:ad:56:0d:48:73:23: 39:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B3:A9:7A:12:8D:B6:8F:1E:13:B9:45:EF:3D:AA:AC:11:4F:58:7C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c3eb8a6-89b4-4cc6-b7f2-31127da51ac8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fef:4000::/39 Signature Algorithm: sha256WithRSAEncryption 8a:b3:6a:52:72:e2:ab:79:88:2c:7b:02:50:b1:de:25:3f:be: 68:0e:02:40:a0:06:4a:4e:66:cf:7c:95:a0:64:aa:ea:3c:7e: 74:f6:13:4d:fe:2e:48:e3:29:18:c9:66:c6:18:11:1d:cb:17: af:86:09:65:91:d7:c0:ef:f3:3a:77:5a:ce:56:87:92:9e:00: a2:9c:31:7c:e9:b6:f1:c1:23:0f:e6:15:51:5d:69:8e:1f:27: f4:5f:a8:6b:34:07:7d:c3:50:0f:3f:70:a3:ca:16:19:a1:f9: af:02:d5:96:96:9d:e1:77:ca:67:35:4f:92:53:0f:3d:6c:dc: 72:80:53:b8:63:d4:7f:03:4a:09:98:6d:28:7e:1b:1b:59:13: e2:b0:c9:23:71:47:35:8a:26:b6:79:6f:86:2e:9e:5c:72:4b: b3:75:33:cf:30:50:46:fe:3a:12:7b:2a:75:1b:a8:5d:3c:2e: 24:61:53:96:74:7e:92:c5:82:d5:bf:88:7b:44:70:4c:7e:f3: 26:a0:58:77:4e:d1:6e:02:38:21:76:96:8c:dd:b5:50:4b:0c: 14:76:0a:3a:33:09:a3:5d:9b:07:6b:95:e8:81:3b:d6:11:ef: c8:7f:29:c0:06:2e:d1:9f:2c:d6:5e:13:60:95:e3:00:51:c6: 9f:02:06:65 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUQWHX0yszy7RFcCm49ExtfxPLVHkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA3MDA0MDM2WhcNMjYxMTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMDFhMDFkNjA3NDhkMDdlMWNmNTNlMmMyZjUzOThmZmY4 NTQ2NjYzYTRmMjg1NTlkNWEyMzZiMDM0NTMzNTc2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChNxM8OngdxVE78ZZffEyt4b0i6D1XiASZhfaf9iPpaOJa 8f7F9fRv2lkr0oAf+k8nqcx9JmHuwPTWX5tTlC59ggDxz/h7DrmcP456QFP4R265 6P3RL7TsgF8eGfED82SdVtoP7hkF+j2tVveDbJiFdN+VYng29mbhVk/o2AuuPbmz 8eR3oOoBXbqQs0CUGr+nmTH/jRv/gArDRLrStN3k1T9YlYKfa/76qepI+xb9UkGy KEA2RH6HAy8R/SDgn0Dy3hRMNE9TROpeURJCrPWkQnx247a/FHi84UqMBO0ayta6 i1vyvV7O+cGJDE/nQ15WujUxZaYhXK1WDUhzIznBAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUErOpehKNto8eE7lF7z2qrBFPWHwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVjM2ViOGE2LTg5YjQtNGNjNi1iN2YyLTMxMTI3ZGE1MWFjOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB/vQDANBgkqhkiG9w0BAQsFAAOCAQEAirNqUnLiq3mILHsCULHeJT++ aA4CQKAGSk5mz3yVoGSq6jx+dPYTTf4uSOMpGMlmxhgRHcsXr4YJZZHXwO/zOnda zlaHkp4AopwxfOm28cEjD+YVUV1pjh8n9F+oazQHfcNQDz9wo8oWGaH5rwLVlpad 4XfKZzVPklMPPWzccoBTuGPUfwNKCZhtKH4bG1kT4rDJI3FHNYomtnlvhi6eXHJL s3UzzzBQRv46EnsqdRuoXTwuJGFTlnR+ksWC1b+Ie0RwTH7zJqBYd07RbgI4IXaW jN21UEsMFHYKOjMJo12bB2uV6IE71hHvyH8pwAYu0Z8s1l4TYJXjAFHGnwIGZQ== -----END CERTIFICATE-----Generated at Thu Sep 17 16:53:00 2026 by rpki-client