$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61c42399-dc36-4b89-880c-a8d3b151c7e9.roa File: 61c42399-dc36-4b89-880c-a8d3b151c7e9.roa (raw, json) Hash identifier: VVKgVdOUAIRE35MVFQrkxqdQcSkj0NO0JHT4SPLDc38= Subject key identifier: 0B:77:EE:81:B4:1D:4A:75:F1:FA:5A:81:A3:C1:64:63:A8:D9:43:53 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 452FAB489194D5D8047636DC943ED780EFE457AD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61c42399-dc36-4b89-880c-a8d3b151c7e9.roa Signing time: Mon 10 Aug 2026 00:20:54 +0000 ROA not before: Mon 10 Aug 2026 00:20:54 +0000 ROA not after: Sun 08 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f61:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:2f:ab:48:91:94:d5:d8:04:76:36:dc:94:3e:d7:80:ef:e4:57:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 10 00:20:54 2026 GMT Not After : Nov 8 23:59:59 2026 GMT Subject: serialNumber=356b2322f881297de6071eef11919236b319ab7f2ce6b4b728ccb551a069a8f7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:38:04:04:de:3e:24:f7:d7:64:fd:17:05:01: 23:fd:59:1f:1a:26:49:e3:c7:82:49:28:4e:7e:4b: f7:0f:99:03:fe:ff:07:d9:54:b1:07:52:80:e2:d9: 92:37:2a:f2:e2:17:a4:54:45:2e:11:cb:ba:6b:7b: 6a:a7:c3:fa:9a:e2:a4:13:1f:4b:c4:40:4b:ac:fa: 82:e9:f2:af:18:ff:d7:15:bb:b0:64:05:64:05:6d: f7:f5:f4:cd:aa:71:f6:53:ed:c1:a3:cf:cc:bc:a1: fc:ce:27:30:79:e1:0e:62:ab:4c:9b:d9:30:31:eb: 77:cb:45:90:9b:69:b5:00:f1:73:c6:e6:4b:9f:27: 15:56:0b:37:e0:2e:9f:fd:18:d9:45:e8:1d:66:1a: c7:14:a3:02:c5:a1:df:c3:30:81:ab:0d:cb:e4:76: 78:2d:4b:8e:61:79:6b:ba:b7:ab:db:24:06:2f:cd: bf:be:ba:a6:b0:13:a8:71:a9:af:18:b7:3f:6a:ff: 8b:68:63:d7:7e:6c:6b:88:6a:3f:fe:58:ad:1c:84: f3:b5:6a:3f:c9:79:71:67:c3:47:13:96:87:7f:e2: 35:3e:32:ae:08:90:32:b0:31:c2:b2:fc:20:1b:5a: 16:d2:8a:1b:2e:e2:01:0c:da:fe:72:1a:cd:9a:a1: cd:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:77:EE:81:B4:1D:4A:75:F1:FA:5A:81:A3:C1:64:63:A8:D9:43:53 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61c42399-dc36-4b89-880c-a8d3b151c7e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f61:2000::/40 Signature Algorithm: sha256WithRSAEncryption 81:8a:e3:00:55:fd:14:e6:4a:b8:34:50:78:dd:7d:bc:c7:8b: 67:5f:dd:69:10:92:e4:2e:c3:7c:47:0e:75:f4:19:36:b7:df: 23:43:fb:c3:86:37:f2:a4:c0:ad:26:b8:94:34:7d:03:30:59: d0:81:7e:4f:11:24:34:3a:dc:32:00:e7:73:30:e3:d2:b5:c3: 9b:e0:a5:fe:cd:b2:4f:b0:97:3c:2e:67:3d:2a:df:35:39:3b: ce:b3:89:69:c3:4d:f5:a6:2a:cd:70:8f:5f:95:1b:63:35:60: 1e:38:3e:9a:c0:3e:9c:27:82:d9:99:0e:9e:3e:e7:f8:a8:8f: 54:a1:f3:52:36:74:ea:24:28:1a:c1:d4:89:ed:e3:e3:30:17: 33:29:6f:e5:7d:14:31:58:22:43:50:83:4b:cc:e4:a8:48:9a: 66:42:5e:e3:9a:b2:61:83:8b:6d:cc:bb:f9:2e:99:9e:8a:2a: b7:90:11:37:e7:0c:e2:68:40:b0:91:55:23:d3:12:b7:db:65: 60:3a:8a:ce:f1:15:12:d6:a9:2e:4c:4a:9f:46:a8:40:b2:cc: c2:1b:60:10:dd:66:32:25:6d:9b:13:20:89:d5:50:9f:40:de: 02:0e:46:d2:88:cb:af:48:3e:be:09:1f:25:1f:e6:07:22:ce: a3:0a:3b:18 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIURS+rSJGU1dgEdjbclD7XgO/kV60wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODEwMDAyMDU0WhcNMjYxMTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNTZiMjMyMmY4ODEyOTdkZTYwNzFlZWYxMTkxOTIzNmIz MTlhYjdmMmNlNmI0YjcyOGNjYjU1MWEwNjlhOGY3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgOAQE3j4k99dk/RcFASP9WR8aJknjx4JJKE5+S/cPmQP+ /wfZVLEHUoDi2ZI3KvLiF6RURS4Ry7pre2qnw/qa4qQTH0vEQEus+oLp8q8Y/9cV u7BkBWQFbff19M2qcfZT7cGjz8y8ofzOJzB54Q5iq0yb2TAx63fLRZCbabUA8XPG 5kufJxVWCzfgLp/9GNlF6B1mGscUowLFod/DMIGrDcvkdngtS45heWu6t6vbJAYv zb++uqawE6hxqa8Ytz9q/4toY9d+bGuIaj/+WK0chPO1aj/JeXFnw0cTlod/4jU+ Mq4IkDKwMcKy/CAbWhbSihsu4gEM2v5yGs2aoc23AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUC3fugbQdSnXx+lqBo8FkY6jZQ1MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYxYzQyMzk5LWRjMzYtNGI4OS04ODBjLWE4ZDNiMTUxYzdlOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9hIDANBgkqhkiG9w0BAQsFAAOCAQEAgYrjAFX9FOZKuDRQeN19vMeL Z1/daRCS5C7DfEcOdfQZNrffI0P7w4Y38qTArSa4lDR9AzBZ0IF+TxEkNDrcMgDn czDj0rXDm+Cl/s2yT7CXPC5nPSrfNTk7zrOJacNN9aYqzXCPX5UbYzVgHjg+msA+ nCeC2ZkOnj7n+KiPVKHzUjZ06iQoGsHUie3j4zAXMylv5X0UMVgiQ1CDS8zkqEia ZkJe45qyYYOLbcy7+S6Znooqt5ARN+cM4mhAsJFVI9MSt9tlYDqKzvEVEtapLkxK n0aoQLLMwhtgEN1mMiVtmxMgidVQn0DeAg5G0ojLr0g+vgkfJR/mByLOowo7GA== -----END CERTIFICATE-----Generated at Thu Sep 17 17:02:12 2026 by rpki-client