$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/676a13f6-077e-461e-a2f9-b30826c4f66e.roa File: 676a13f6-077e-461e-a2f9-b30826c4f66e.roa (raw, json) Hash identifier: 3H3l61aeVl2n6oKxqm4IHc9BiW8/MvFrtpeAE0hEZYc= Subject key identifier: A8:50:48:CA:08:D0:51:6B:91:97:B9:CF:12:60:47:38:1B:25:68:A1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1EA15941C4A4233EF2A4502454E8FC7F1576FD96 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/676a13f6-077e-461e-a2f9-b30826c4f66e.roa Signing time: Tue 18 Aug 2026 18:05:00 +0000 ROA not before: Tue 18 Aug 2026 18:05:00 +0000 ROA not after: Mon 16 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f33:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:a1:59:41:c4:a4:23:3e:f2:a4:50:24:54:e8:fc:7f:15:76:fd:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 18 18:05:00 2026 GMT Not After : Nov 16 23:59:59 2026 GMT Subject: serialNumber=c6b3fbddb2db3c7e190a237d84170218a29d6b4612d2f31bb0e1b3e45038c33e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3d:9c:05:90:c5:35:b4:26:40:08:8a:96:cd: d0:7c:72:4c:2a:27:6d:16:33:11:e8:5c:93:58:a4: 05:dc:a1:93:b3:bd:fc:ca:e8:dc:81:dd:b7:b8:22: 1b:af:54:01:ff:e2:33:90:1f:74:82:e4:6d:69:6e: a5:ea:8e:d7:95:f1:2c:d1:c4:4d:61:ad:8e:b8:4c: 9c:25:81:f5:42:07:50:66:18:b3:2b:61:d7:64:cd: 80:cd:cf:92:ec:c5:a4:7f:b1:9b:af:90:b7:ad:9a: 5c:0c:98:8d:01:ea:57:37:34:31:61:e3:22:bf:31: a2:31:77:19:7a:e8:73:de:0f:f5:8a:9b:69:7b:f4: 44:d3:14:92:0e:30:49:61:5b:07:dc:98:01:1e:83: af:4a:1a:8a:e6:3d:63:57:71:e2:d4:2d:98:15:8e: 6e:62:cb:8b:39:52:ca:d1:2f:b4:c1:c8:08:14:f4: 24:72:9c:28:bd:d2:8e:52:63:fa:a9:6f:6f:78:c2: 77:08:94:15:ec:60:b7:29:92:19:d9:8e:7d:4e:4f: fb:82:8e:a8:ab:e0:dc:3c:8b:ac:7c:9a:33:d7:bc: 03:b7:5d:71:c1:bd:24:37:3b:ad:72:f3:fe:90:5f: c0:69:65:11:8a:65:ed:32:68:6e:43:28:4e:16:e6: f8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:50:48:CA:08:D0:51:6B:91:97:B9:CF:12:60:47:38:1B:25:68:A1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/676a13f6-077e-461e-a2f9-b30826c4f66e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f33:6000::/40 Signature Algorithm: sha256WithRSAEncryption 38:27:dc:fb:06:2f:fa:70:dc:ad:91:33:89:ea:40:19:7b:a2: 0c:85:8d:b7:fd:0c:ed:61:c1:f8:c4:9f:81:2c:23:2b:26:53: 1a:b2:1a:d8:ce:3f:88:f3:21:3c:a8:24:31:4c:2f:bd:59:5a: 0b:7c:ba:4f:93:1f:84:24:25:91:2e:d3:51:7f:64:ee:9d:fd: 88:f6:66:b6:b8:30:8c:61:39:2b:bd:f7:c5:95:c0:58:ae:af: 58:3c:ef:d7:9c:4d:2f:81:46:cc:96:65:86:0b:4f:3a:fb:dd: 4c:a3:cb:03:4b:e3:04:3a:41:52:8e:b6:2a:74:89:24:1c:1d: 81:7d:e5:c3:54:13:4b:b2:1f:a8:13:3b:5e:c0:5c:6a:e4:cd: 27:18:f9:25:cd:6c:7b:d7:de:75:91:5a:c0:5d:43:47:2c:f7: 7b:6f:26:4b:a2:e9:44:61:a3:cd:ac:0b:bd:21:c6:f2:21:cc: 4b:88:44:59:a4:8d:ac:74:e2:9f:1e:1c:d5:cb:96:39:76:b0: 79:3d:8d:d0:74:00:c7:37:85:d4:e9:7f:f8:d1:45:07:33:7a: b5:33:05:0c:90:a0:f7:94:f4:48:10:14:4d:5c:29:53:f6:5b: af:4f:e5:0d:42:38:33:0e:9e:e3:ea:3d:27:1e:9b:7b:a0:35: 64:55:f4:db -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUHqFZQcSkIz7ypFAkVOj8fxV2/ZYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODE4MTgwNTAwWhcNMjYxMTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNmIzZmJkZGIyZGIzYzdlMTkwYTIzN2Q4NDE3MDIxOGEy OWQ2YjQ2MTJkMmYzMWJiMGUxYjNlNDUwMzhjMzNlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZPZwFkMU1tCZACIqWzdB8ckwqJ20WMxHoXJNYpAXcoZOz vfzK6NyB3be4IhuvVAH/4jOQH3SC5G1pbqXqjteV8SzRxE1hrY64TJwlgfVCB1Bm GLMrYddkzYDNz5LsxaR/sZuvkLetmlwMmI0B6lc3NDFh4yK/MaIxdxl66HPeD/WK m2l79ETTFJIOMElhWwfcmAEeg69KGormPWNXceLULZgVjm5iy4s5UsrRL7TByAgU 9CRynCi90o5SY/qpb294wncIlBXsYLcpkhnZjn1OT/uCjqir4Nw8i6x8mjPXvAO3 XXHBvSQ3O61y8/6QX8BpZRGKZe0yaG5DKE4W5vhJAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUqFBIygjQUWuRl7nPEmBHOBslaKEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY3NmExM2Y2LTA3N2UtNDYxZS1hMmY5LWIzMDgyNmM0ZjY2ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB8zYDANBgkqhkiG9w0BAQsFAAOCAQEAOCfc+wYv+nDcrZEziepAGXui DIWNt/0M7WHB+MSfgSwjKyZTGrIa2M4/iPMhPKgkMUwvvVlaC3y6T5MfhCQlkS7T UX9k7p39iPZmtrgwjGE5K733xZXAWK6vWDzv15xNL4FGzJZlhgtPOvvdTKPLA0vj BDpBUo62KnSJJBwdgX3lw1QTS7IfqBM7XsBcauTNJxj5Jc1se9fedZFawF1DRyz3 e28mS6LpRGGjzawLvSHG8iHMS4hEWaSNrHTinx4c1cuWOXaweT2N0HQAxzeF1Ol/ +NFFBzN6tTMFDJCg95T0SBAUTVwpU/Zbr0/lDUI4Mw6e4+o9Jx6be6A1ZFX02w== -----END CERTIFICATE-----Generated at Tue Sep 15 13:53:45 2026 by rpki-client