$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6860a6bf-0682-4dbd-b2e2-6740e4a2322b.roa File: 6860a6bf-0682-4dbd-b2e2-6740e4a2322b.roa (raw, json) Hash identifier: YxeGUIrggm1UZaTUckVa9yburZDwwLnaBsT23YbP7eM= Subject key identifier: 52:77:53:63:03:67:1E:84:3C:D2:C4:9B:8A:FF:77:C4:5D:F8:68:A2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 52FD155C2223BE61F0C70C9692702F1A7E294A2F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6860a6bf-0682-4dbd-b2e2-6740e4a2322b.roa Signing time: Wed 19 Aug 2026 00:31:33 +0000 ROA not before: Wed 19 Aug 2026 00:31:33 +0000 ROA not after: Tue 17 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fba:8050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:fd:15:5c:22:23:be:61:f0:c7:0c:96:92:70:2f:1a:7e:29:4a:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 19 00:31:33 2026 GMT Not After : Nov 17 23:59:59 2026 GMT Subject: serialNumber=3fd62c71eb4e43680fb4d66b3d7a00c016b9d456a2aef683ea522637b57a5939, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f6:c0:dc:38:09:32:fd:9c:4f:14:5c:ee:a6: 0d:01:04:68:04:e6:f2:93:22:17:f0:dc:d7:6b:0e: 29:31:ce:e6:a4:fe:d8:db:cd:43:ad:1c:7c:64:dc: e3:23:0c:b4:83:42:db:c2:7c:4c:0d:64:da:07:49: 26:55:25:5e:ea:88:55:15:b1:05:dc:15:21:5a:54: 1b:09:da:6d:fe:91:cb:2b:9b:88:31:b4:54:0c:01: 73:2d:89:66:1a:13:d0:f0:f5:e9:88:9f:02:4c:b3: 91:68:e0:f3:77:dd:7e:e7:30:1a:da:0b:70:44:9b: ba:40:11:a4:e6:1b:cd:c3:62:d8:a0:74:8b:33:2e: 71:7e:24:9f:20:36:f5:8d:ac:0d:f6:16:f3:da:02: be:8e:b2:6c:44:fb:19:e4:c9:7f:31:89:8e:3f:6d: 37:4d:76:36:16:4f:c0:66:77:d1:a2:0a:c2:a8:51: ea:f8:8c:9b:01:6a:98:08:da:da:ee:33:ec:ca:8c: e1:dd:fb:a2:e9:1d:48:d8:23:cf:7c:97:e6:7f:ad: b0:a3:46:d4:26:1d:1a:c4:95:a3:83:c4:b9:de:61: 4b:fa:71:3b:5b:bd:54:ff:66:87:2f:89:29:cc:42: 93:03:13:0e:72:81:fa:35:e5:40:f5:2d:26:76:39: de:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:77:53:63:03:67:1E:84:3C:D2:C4:9B:8A:FF:77:C4:5D:F8:68:A2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6860a6bf-0682-4dbd-b2e2-6740e4a2322b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fba:8050::/48 Signature Algorithm: sha256WithRSAEncryption 6d:5a:fc:7d:18:ab:4c:69:a7:20:8b:6e:3d:9e:54:88:e4:a3: 74:05:f5:37:71:21:25:70:e1:22:2c:0b:9d:4a:07:e9:3b:e0: a3:b2:19:db:f2:0c:22:19:f0:82:ed:10:15:fb:87:94:4d:dc: 1f:a5:07:1b:c6:31:62:f2:16:82:40:fb:37:2f:6d:a2:6d:ef: 9d:66:0e:68:b9:33:d4:d2:11:0e:9f:e7:59:7f:a7:ae:0b:fb: 62:8b:35:1d:b6:48:a5:4e:71:0f:23:e3:13:1a:12:db:94:4c: f5:5d:4b:a2:9c:93:64:24:0e:dc:0b:1e:3e:77:53:8c:82:72: 68:cb:ad:2e:ed:95:61:58:8c:b5:d7:94:33:18:a1:4e:22:2d: e5:80:e9:cd:5e:8a:04:1b:4d:09:eb:ea:e3:d8:6a:24:82:4a: 92:07:19:97:13:17:60:e6:98:b4:ad:2f:32:2d:be:ad:ac:9f: 24:14:3e:1c:a9:b4:f8:d5:2d:56:73:de:db:d9:e0:b3:c5:ce: a7:1e:45:be:31:7d:98:3f:85:08:bf:93:19:e2:e8:e1:a2:a4: 01:b0:8a:e6:60:12:17:a0:d0:a8:f8:09:14:ee:8a:f4:ef:5a: 1d:38:6f:e6:6b:ae:22:21:62:31:ac:53:c5:d6:24:4b:de:1f: db:4e:0a:bd -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUv0VXCIjvmHwxwyWknAvGn4pSi8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODE5MDAzMTMzWhcNMjYxMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzZmQ2MmM3MWViNGU0MzY4MGZiNGQ2NmIzZDdhMDBjMDE2 YjlkNDU2YTJhZWY2ODNlYTUyMjYzN2I1N2E1OTM5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCU9sDcOAky/ZxPFFzupg0BBGgE5vKTIhfw3NdrDikxzuak /tjbzUOtHHxk3OMjDLSDQtvCfEwNZNoHSSZVJV7qiFUVsQXcFSFaVBsJ2m3+kcsr m4gxtFQMAXMtiWYaE9Dw9emInwJMs5Fo4PN33X7nMBraC3BEm7pAEaTmG83DYtig dIszLnF+JJ8gNvWNrA32FvPaAr6OsmxE+xnkyX8xiY4/bTdNdjYWT8Bmd9GiCsKo Uer4jJsBapgI2truM+zKjOHd+6LpHUjYI898l+Z/rbCjRtQmHRrElaODxLneYUv6 cTtbvVT/ZocviSnMQpMDEw5ygfo15UD1LSZ2Od5VAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUUndTYwNnHoQ80sSbiv93xF34aKIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY4NjBhNmJmLTA2ODItNGRiZC1iMmUyLTY3NDBlNGEyMzIyYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB+6gFAwDQYJKoZIhvcNAQELBQADggEBAG1a/H0Yq0xppyCLbj2eVIjk o3QF9TdxISVw4SIsC51KB+k74KOyGdvyDCIZ8ILtEBX7h5RN3B+lBxvGMWLyFoJA +zcvbaJt751mDmi5M9TSEQ6f51l/p64L+2KLNR22SKVOcQ8j4xMaEtuUTPVdS6Kc k2QkDtwLHj53U4yCcmjLrS7tlWFYjLXXlDMYoU4iLeWA6c1eigQbTQnr6uPYaiSC SpIHGZcTF2DmmLStLzItvq2snyQUPhyptPjVLVZz3tvZ4LPFzqceRb4xfZg/hQi/ kxni6OGipAGwiuZgEheg0Kj4CRTuivTvWh04b+ZrriIhYjGsU8XWJEveH9tOCr0= -----END CERTIFICATE-----Generated at Thu Sep 17 16:14:50 2026 by rpki-client