$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5fce06e6-832a-44c6-b8fd-5912f11e14d3.roa File: 5fce06e6-832a-44c6-b8fd-5912f11e14d3.roa (raw, json) Hash identifier: Lm0CL99VlqwDpkgja1dvD/Z5MA1AFjmN1yGY6IeqayU= Subject key identifier: C4:4C:D4:F1:07:94:0C:67:67:F3:02:A4:94:34:E6:86:39:E9:CE:3E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4B53F3BF1A65F5B7652767F204FAE0673D1652A7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5fce06e6-832a-44c6-b8fd-5912f11e14d3.roa Signing time: Wed 09 Sep 2026 16:10:06 +0000 ROA not before: Wed 09 Sep 2026 16:10:06 +0000 ROA not after: Tue 08 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f2c:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:53:f3:bf:1a:65:f5:b7:65:27:67:f2:04:fa:e0:67:3d:16:52:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 9 16:10:06 2026 GMT Not After : Dec 8 23:59:59 2026 GMT Subject: serialNumber=03d194ca7da6e4f4ed2514e26812397911db4ec43d36df64d734ab562d87d3e3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:54:e4:24:a4:aa:06:e9:03:26:8e:f4:7e:5f: 45:04:89:04:23:a4:33:77:7d:25:db:ae:8c:25:c6: 3a:56:cc:2e:37:10:bc:fa:e8:ae:28:a7:71:a1:75: 79:5c:47:e9:82:dc:11:95:32:0d:13:1e:0a:d0:d9: b2:25:58:ff:45:99:e1:ba:7d:d0:09:17:4c:8e:f9: bd:25:1b:bb:14:14:f2:69:63:25:16:c6:d7:37:43: 4d:ea:bb:ec:df:38:ba:d7:3a:2d:d0:e6:e1:83:a1: 3f:a3:cd:73:e9:ea:f7:cc:f1:06:5b:09:1d:8a:bc: ef:96:5a:9a:4d:3f:ca:16:0c:d1:de:15:f4:26:d1: 58:f0:69:eb:fe:87:b9:09:1b:5e:7d:1a:5f:f0:4b: f2:b1:a9:ac:5c:b3:28:1f:22:a0:2b:14:78:cf:2c: a8:31:74:1c:c0:02:83:9b:59:dd:34:ad:1b:3b:04: 74:ce:98:5a:6b:d5:79:e6:4e:4b:06:d1:f7:f2:7c: c6:d6:3e:95:41:ca:fc:c4:ae:f9:02:5e:03:d1:b3: f0:b1:4c:3d:7e:4b:8a:f4:69:ac:0f:c9:68:3b:c4: 71:67:ee:b3:e9:6f:02:a1:f1:5f:d3:6f:5b:fc:b8: 34:b0:34:19:06:fc:3a:bd:d5:84:ca:53:5c:e1:14: 9e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:4C:D4:F1:07:94:0C:67:67:F3:02:A4:94:34:E6:86:39:E9:CE:3E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5fce06e6-832a-44c6-b8fd-5912f11e14d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f2c:2000::/36 Signature Algorithm: sha256WithRSAEncryption 7d:38:54:bb:b3:1f:37:4a:e2:05:dd:69:35:8f:d1:5e:05:54: db:8f:85:5f:05:33:eb:e1:5a:e2:ed:c2:51:eb:db:d7:34:1c: 27:c3:50:8e:93:3d:08:7c:e2:c2:07:91:d6:69:7f:cd:8a:e0: 71:d1:c5:52:17:92:42:35:79:f6:39:36:e9:b8:06:b5:a3:80: 84:03:68:64:81:25:e4:0a:c3:24:67:85:cc:89:71:c5:a9:b8: 6f:20:26:e0:b9:aa:6a:88:b5:25:fe:47:26:3c:ed:bd:33:73: 67:68:82:94:9c:28:e3:12:f7:cb:fd:6b:42:4d:cc:b7:0b:8a: 93:0e:72:00:c5:06:2f:44:88:87:0b:80:1f:cd:75:2c:ca:a7: 1d:64:09:5b:d1:e7:b7:6c:a6:5a:7d:eb:f7:37:c4:73:93:c9: 18:a6:5a:ab:38:43:2e:dc:22:47:6c:fc:53:87:0b:48:9e:bb: 24:84:88:68:8b:b5:52:92:47:5f:79:c5:14:d6:b9:7c:c1:bd: e6:9d:0b:a9:bf:90:35:a1:da:e9:7c:32:a1:7c:70:ed:23:15: ca:46:f7:a3:ef:a1:95:5f:f1:ab:01:0b:fb:16:44:fb:32:11: b7:ec:89:aa:f4:9d:d1:cf:9f:69:c7:b1:7d:ac:50:7f:dc:b9: c7:c6:10:29 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUS1Pzvxpl9bdlJ2fyBPrgZz0WUqcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwOTA5MTYxMDA2WhcNMjYxMjA4MjM1OTU5 WjB6MUkwRwYDVQQFE0AwM2QxOTRjYTdkYTZlNGY0ZWQyNTE0ZTI2ODEyMzk3OTEx ZGI0ZWM0M2QzNmRmNjRkNzM0YWI1NjJkODdkM2UzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClVOQkpKoG6QMmjvR+X0UEiQQjpDN3fSXbrowlxjpWzC43 ELz66K4op3GhdXlcR+mC3BGVMg0THgrQ2bIlWP9FmeG6fdAJF0yO+b0lG7sUFPJp YyUWxtc3Q03qu+zfOLrXOi3Q5uGDoT+jzXPp6vfM8QZbCR2KvO+WWppNP8oWDNHe FfQm0Vjwaev+h7kJG159Gl/wS/KxqaxcsygfIqArFHjPLKgxdBzAAoObWd00rRs7 BHTOmFpr1XnmTksG0ffyfMbWPpVByvzErvkCXgPRs/CxTD1+S4r0aawPyWg7xHFn 7rPpbwKh8V/Tb1v8uDSwNBkG/Dq91YTKU1zhFJ65AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUxEzU8QeUDGdn8wKklDTmhjnpzj4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVmY2UwNmU2LTgzMmEtNDRjNi1iOGZkLTU5MTJmMTFlMTRkMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8sIDANBgkqhkiG9w0BAQsFAAOCAQEAfThUu7MfN0riBd1pNY/RXgVU 24+FXwUz6+Fa4u3CUevb1zQcJ8NQjpM9CHziwgeR1ml/zYrgcdHFUheSQjV59jk2 6bgGtaOAhANoZIEl5ArDJGeFzIlxxam4byAm4Lmqaoi1Jf5HJjztvTNzZ2iClJwo 4xL3y/1rQk3MtwuKkw5yAMUGL0SIhwuAH811LMqnHWQJW9Hnt2ymWn3r9zfEc5PJ GKZaqzhDLtwiR2z8U4cLSJ67JISIaIu1UpJHX3nFFNa5fMG95p0Lqb+QNaHa6Xwy oXxw7SMVykb3o++hlV/xqwEL+xZE+zIRt+yJqvSd0c+facexfaxQf9y5x8YQKQ== -----END CERTIFICATE-----Generated at Tue Sep 15 13:56:25 2026 by rpki-client