$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d7c3df5-ea22-4796-876a-5f7bb889f262.roa File: 7d7c3df5-ea22-4796-876a-5f7bb889f262.roa (raw, json) Hash identifier: KAbPavqf2kapPbzNNF4+nbsPrdIXOo7YIPT3UpeOHN4= Subject key identifier: EC:1B:47:A0:2F:4B:02:BB:BA:8E:1C:77:EC:72:C3:80:13:25:91:7D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6A8AAD13C0A95875315DE4C63FE1D6E9D0622F77 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d7c3df5-ea22-4796-876a-5f7bb889f262.roa Signing time: Wed 19 Aug 2026 00:40:50 +0000 ROA not before: Wed 19 Aug 2026 00:40:50 +0000 ROA not after: Tue 17 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fe9:8090::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:8a:ad:13:c0:a9:58:75:31:5d:e4:c6:3f:e1:d6:e9:d0:62:2f:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 19 00:40:50 2026 GMT Not After : Nov 17 23:59:59 2026 GMT Subject: serialNumber=052788a86edf9226ba3c5c661c75fef9d1f7a6cea5b222d3de7b6672e05e39aa, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:01:1c:25:c6:07:eb:f2:39:cc:a0:91:cf:be: 30:3c:d1:58:c6:ef:40:7d:16:ea:66:84:53:95:a6: 94:33:f8:19:03:d5:43:ec:49:51:9a:d9:2f:3f:f3: ff:18:b8:f9:43:d0:2d:6d:43:ea:1c:9f:b3:c6:09: c7:96:b2:a4:34:48:b0:7c:2c:e6:5d:d8:ae:44:c3: fe:e2:92:3e:0c:4d:9d:9f:1d:00:b8:9a:65:ae:08: 36:fa:41:66:c0:0c:f3:38:f1:34:46:7d:e7:f1:b0: cf:83:8b:f3:83:34:f7:42:80:cc:3c:0b:d5:55:2d: ef:5d:30:30:55:bd:ef:99:c6:06:b2:1f:6d:5b:44: 5d:a9:89:96:2d:b1:70:83:d8:17:0a:02:36:33:ae: 6a:b6:e8:eb:80:73:76:42:ea:f3:6b:12:ca:3a:2f: 59:cc:f0:61:35:ad:90:07:40:0b:5e:0e:ed:0f:87: 14:7b:4d:0e:e1:df:66:fa:d0:d6:6c:48:57:68:46: 48:34:60:c0:dc:23:4d:3c:73:50:ac:c3:0a:5e:e4: e0:49:c0:5f:ca:64:40:1e:6f:b6:70:42:0e:8c:11: 3a:16:7a:76:91:04:50:0c:c0:21:86:aa:24:e6:71: 80:1f:43:3d:bd:91:e5:a8:5f:26:77:05:dd:9f:71: 1a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:1B:47:A0:2F:4B:02:BB:BA:8E:1C:77:EC:72:C3:80:13:25:91:7D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d7c3df5-ea22-4796-876a-5f7bb889f262.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fe9:8090::/48 Signature Algorithm: sha256WithRSAEncryption 9e:87:57:d4:b2:52:3b:8e:9d:6c:01:06:3f:42:44:68:67:8e: d4:3b:ea:c0:76:40:72:1a:f3:7c:b1:2f:b5:2e:82:70:36:60: bc:76:5b:0f:2e:bc:ba:91:3c:e5:9c:18:e9:42:e9:64:3a:df: 0a:be:b3:3b:41:25:8f:01:3b:19:00:4f:ce:4e:be:ed:42:74: 37:c9:a4:74:9f:ff:cb:af:7d:a1:ff:64:23:7d:66:3d:c8:d6: 73:3d:f2:f4:28:c4:38:45:40:f2:b4:ab:94:b9:9a:2b:d6:80: 05:8e:0b:63:29:cc:be:87:b8:e0:25:76:cc:4c:9f:6f:ae:b3: 0c:85:07:27:df:a3:e8:42:4f:82:85:4d:b2:b3:e6:f8:72:67: a7:aa:58:44:2e:32:df:fd:5f:38:2f:ca:01:81:01:14:4b:8f: 9c:cd:43:39:3f:82:60:c1:8b:f9:da:e7:86:e9:86:b0:70:f5: 52:57:bd:92:63:69:7d:eb:c6:55:bf:64:3b:4c:14:ae:bc:32: 56:d4:16:76:11:01:69:72:2e:da:ce:c0:8a:ad:62:00:49:1f: d0:a1:33:a1:b7:cb:fa:a0:3a:8d:d6:41:d2:a6:f8:13:0b:d3: 8c:b1:56:4f:24:3f:cc:60:77:71:e6:73:54:9c:00:89:f0:15: 03:bd:bb:e1 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUaoqtE8CpWHUxXeTGP+HW6dBiL3cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODE5MDA0MDUwWhcNMjYxMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNTI3ODhhODZlZGY5MjI2YmEzYzVjNjYxYzc1ZmVmOWQx ZjdhNmNlYTViMjIyZDNkZTdiNjY3MmUwNWUzOWFhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDfARwlxgfr8jnMoJHPvjA80VjG70B9FupmhFOVppQz+BkD 1UPsSVGa2S8/8/8YuPlD0C1tQ+ocn7PGCceWsqQ0SLB8LOZd2K5Ew/7ikj4MTZ2f HQC4mmWuCDb6QWbADPM48TRGfefxsM+Di/ODNPdCgMw8C9VVLe9dMDBVve+Zxgay H21bRF2piZYtsXCD2BcKAjYzrmq26OuAc3ZC6vNrEso6L1nM8GE1rZAHQAteDu0P hxR7TQ7h32b60NZsSFdoRkg0YMDcI008c1Cswwpe5OBJwF/KZEAeb7ZwQg6METoW enaRBFAMwCGGqiTmcYAfQz29keWoXyZ3Bd2fcRq3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU7BtHoC9LAru6jhx37HLDgBMlkX0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdkN2MzZGY1LWVhMjItNDc5Ni04NzZhLTVmN2JiODg5ZjI2Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/pgJAwDQYJKoZIhvcNAQELBQADggEBAJ6HV9SyUjuOnWwBBj9CRGhn jtQ76sB2QHIa83yxL7UugnA2YLx2Ww8uvLqRPOWcGOlC6WQ63wq+sztBJY8BOxkA T85Ovu1CdDfJpHSf/8uvfaH/ZCN9Zj3I1nM98vQoxDhFQPK0q5S5mivWgAWOC2Mp zL6HuOAldsxMn2+uswyFByffo+hCT4KFTbKz5vhyZ6eqWEQuMt/9XzgvygGBARRL j5zNQzk/gmDBi/na54bphrBw9VJXvZJjaX3rxlW/ZDtMFK68MlbUFnYRAWlyLtrO wIqtYgBJH9ChM6G3y/qgOo3WQdKm+BML04yxVk8kP8xgd3Hmc1ScAInwFQO9u+E= -----END CERTIFICATE-----Generated at Thu Sep 17 17:05:21 2026 by rpki-client