$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/782623ec-d256-4ded-93c7-2ba1b2f03b63.roa File: 782623ec-d256-4ded-93c7-2ba1b2f03b63.roa (raw, json) Hash identifier: dpNRpAE03c2dkK+ADpoMjpcZejr6bSzpkBrvr91YCC4= Subject key identifier: 54:2C:E3:33:60:6B:25:F3:44:C4:10:B7:94:57:4B:E2:45:6E:6E:DB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6B24945CD7DF13607E284EEC20CF40C00BD4E78C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/782623ec-d256-4ded-93c7-2ba1b2f03b63.roa Signing time: Tue 04 Aug 2026 00:10:40 +0000 ROA not before: Tue 04 Aug 2026 00:10:40 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f1e:800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:24:94:5c:d7:df:13:60:7e:28:4e:ec:20:cf:40:c0:0b:d4:e7:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 00:10:40 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=72dcb00bfcf56a0e4aa2456e2645b7a6d77f6ff0dd45df4aa3328e1137b2a9ab, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a1:4b:78:25:15:6c:e1:1c:85:0d:38:6e:ba: d2:17:37:b6:e1:89:23:88:a0:f6:69:1a:5d:c6:13: 83:72:20:f7:d2:68:75:8c:99:09:8c:00:31:57:f6: fa:d9:a0:cb:57:55:26:61:56:5e:b2:8c:f5:5a:99: da:05:85:9e:bf:b7:2a:89:61:fc:8a:0b:0f:66:9a: f4:d5:6d:5e:b9:36:4e:cb:3c:40:87:5e:26:4f:fc: 27:e2:fb:e8:ea:df:59:1a:ad:9c:b5:c9:2d:3d:b6: 49:c0:a7:01:ae:d5:25:08:cc:9c:50:6e:04:e9:a7: 61:ac:65:12:f0:d4:81:e1:b7:8a:9c:3b:f5:2c:7c: db:62:5a:b6:66:35:c5:60:32:fa:d6:a4:d4:ef:e6: e9:6a:7b:fe:6d:10:48:c5:4e:ce:6f:61:99:db:16: 6d:72:61:a1:ec:a0:60:fd:08:c6:0a:c5:6f:5b:c9: ae:47:f4:7a:7c:38:72:38:90:30:76:31:4a:99:f4: e0:31:f7:79:29:84:3b:d2:f8:11:6a:8f:ce:52:cb: 5c:44:e7:55:ce:d7:12:c7:9a:8c:90:c0:3a:48:22: 60:c4:07:55:01:0d:6f:ff:84:78:42:fc:18:67:9e: 29:1b:53:2f:14:ee:ca:be:ae:46:1a:ab:f0:44:80: 36:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:2C:E3:33:60:6B:25:F3:44:C4:10:B7:94:57:4B:E2:45:6E:6E:DB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/782623ec-d256-4ded-93c7-2ba1b2f03b63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f1e:800::/38 Signature Algorithm: sha256WithRSAEncryption 86:09:5b:7d:7f:25:3c:30:7f:46:f9:8d:17:1c:14:c2:47:ef: af:a5:9c:52:56:08:ae:b6:c6:ac:77:ae:6e:1b:d0:e1:70:ae: 00:f4:df:d7:50:cf:2b:b0:fc:40:2c:4a:bf:83:ef:e4:68:6c: 9f:01:2e:19:c3:a9:96:28:d9:a3:93:52:44:e7:d5:15:02:06: 74:79:74:20:f6:61:fd:d2:4e:95:88:9a:bd:83:88:81:b0:44: a5:c6:5a:0f:14:54:69:0b:ee:de:8f:b9:e1:7f:f6:75:25:a6: 9b:1c:35:f1:a8:8e:a4:2f:39:52:ff:9a:52:4a:e2:49:3c:44: 30:60:b5:f5:1b:ca:f9:aa:70:49:d6:3d:3b:13:b8:3e:7c:19: 7a:45:b9:2e:7f:8f:e7:db:41:90:58:89:43:08:4e:29:f3:2d: 52:d1:7f:47:42:c3:29:f7:22:9b:a8:a3:7d:e2:39:c7:13:e1: bf:30:5f:59:54:33:95:51:c6:95:39:5f:95:3b:33:75:46:c3: b4:8c:b1:c2:ee:b8:0a:33:66:96:0a:77:1a:f7:6b:7f:6b:54: 23:b6:97:7b:9c:cd:c5:dd:d5:cc:ac:ac:41:96:c0:d3:fd:07: 0d:8d:a5:20:b3:1e:06:e1:4a:1a:39:41:46:15:53:78:2a:f5: 40:35:85:4e -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUaySUXNffE2B+KE7sIM9AwAvU54wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA0MDAxMDQwWhcNMjYxMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MmRjYjAwYmZjZjU2YTBlNGFhMjQ1NmUyNjQ1YjdhNmQ3 N2Y2ZmYwZGQ0NWRmNGFhMzMyOGUxMTM3YjJhOWFiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8oUt4JRVs4RyFDThuutIXN7bhiSOIoPZpGl3GE4NyIPfS aHWMmQmMADFX9vrZoMtXVSZhVl6yjPVamdoFhZ6/tyqJYfyKCw9mmvTVbV65Nk7L PECHXiZP/Cfi++jq31karZy1yS09tknApwGu1SUIzJxQbgTpp2GsZRLw1IHht4qc O/UsfNtiWrZmNcVgMvrWpNTv5ulqe/5tEEjFTs5vYZnbFm1yYaHsoGD9CMYKxW9b ya5H9Hp8OHI4kDB2MUqZ9OAx93kphDvS+BFqj85Sy1xE51XO1xLHmoyQwDpIImDE B1UBDW//hHhC/BhnnikbUy8U7sq+rkYaq/BEgDZ/AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUVCzjM2BrJfNExBC3lFdL4kVubtswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc4MjYyM2VjLWQyNTYtNGRlZC05M2M3LTJiYTFiMmYwM2I2My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgImAB8eCDANBgkqhkiG9w0BAQsFAAOCAQEAhglbfX8lPDB/RvmNFxwUwkfv r6WcUlYIrrbGrHeubhvQ4XCuAPTf11DPK7D8QCxKv4Pv5GhsnwEuGcOplijZo5NS ROfVFQIGdHl0IPZh/dJOlYiavYOIgbBEpcZaDxRUaQvu3o+54X/2dSWmmxw18aiO pC85Uv+aUkriSTxEMGC19RvK+apwSdY9OxO4PnwZekW5Ln+P59tBkFiJQwhOKfMt UtF/R0LDKfcim6ijfeI5xxPhvzBfWVQzlVHGlTlflTszdUbDtIyxwu64CjNmlgp3 Gvdrf2tUI7aXe5zNxd3VzKysQZbA0/0HDY2lILMeBuFKGjlBRhVTeCr1QDWFTg== -----END CERTIFICATE-----Generated at Thu Sep 17 16:52:54 2026 by rpki-client