$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86a543b8-1eba-4069-aca6-8b15838e91a6.roa File: 86a543b8-1eba-4069-aca6-8b15838e91a6.roa (raw, json) Hash identifier: TAhy+FS2zM6ZGVcnXEXE48tGNx/KJCgA7zFoIq9JrqQ= Subject key identifier: 5E:5E:32:98:5A:1B:82:24:46:0E:4A:E2:47:CB:3E:72:05:99:FF:0F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 37DB4687A67DA85118D69F0EEED3E642FD74DF05 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86a543b8-1eba-4069-aca6-8b15838e91a6.roa Signing time: Mon 10 Aug 2026 00:31:05 +0000 ROA not before: Mon 10 Aug 2026 00:31:05 +0000 ROA not after: Sun 08 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff8:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:db:46:87:a6:7d:a8:51:18:d6:9f:0e:ee:d3:e6:42:fd:74:df:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 10 00:31:05 2026 GMT Not After : Nov 8 23:59:59 2026 GMT Subject: serialNumber=cda73d435cbea3d5621626d7585422a0af0b4db88b3104cc0801d6b743ebf143, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:56:07:94:06:0b:27:51:85:46:b0:ca:b6:8f: 7d:f3:66:41:80:9e:34:75:74:50:44:05:f1:73:3c: 1b:5a:f4:2e:dc:64:49:d8:65:35:aa:40:6b:f9:16: ac:1d:ab:31:a2:8c:29:11:fd:2d:98:ce:6d:98:3c: 5c:d2:d9:2c:69:47:f4:86:61:ba:f6:0f:aa:0f:21: 2b:79:17:25:44:b4:22:0b:49:23:76:01:4d:57:a9: 60:a4:f9:01:74:22:c2:b6:a4:6b:99:c5:91:f7:b5: 01:0a:fd:87:75:74:f9:68:6a:db:93:30:ee:c4:69: 01:54:7d:74:05:42:36:a6:e7:68:3d:4c:20:c0:bb: 52:75:4a:7d:fe:ff:9a:70:0a:b4:54:3a:32:be:8f: 5f:74:ee:36:72:f3:39:b8:e8:fd:1b:eb:6c:b4:b8: 9b:e6:d5:13:4e:77:e3:22:e3:c8:12:0d:06:53:bb: 4e:b7:50:d1:c5:31:58:a1:5d:15:f7:40:1f:c1:d3: 61:fa:67:d9:a1:b5:e4:13:71:90:26:10:a2:59:e0: 86:aa:0c:82:bb:1e:4a:e5:bb:83:96:18:96:cc:27: 0d:44:bf:42:33:56:21:ef:96:95:28:74:b6:e6:96: 0b:2b:ed:44:a3:96:07:90:b3:f3:e6:3e:62:41:9d: b0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:5E:32:98:5A:1B:82:24:46:0E:4A:E2:47:CB:3E:72:05:99:FF:0F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86a543b8-1eba-4069-aca6-8b15838e91a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff8:800::/40 Signature Algorithm: sha256WithRSAEncryption 89:fe:78:1d:27:39:c8:fe:1c:73:b2:83:70:4b:63:63:fb:aa: 76:70:7e:54:6d:ba:55:7d:d7:22:8f:aa:4e:89:60:a5:71:01: 31:d1:2b:17:a9:1e:2f:e2:4d:78:9e:75:da:59:ee:33:5e:33: 4b:bd:27:22:7e:9f:ed:68:b4:36:0d:97:e4:53:b5:4d:2e:a4: 1e:70:0c:f6:e7:27:ed:5b:dd:03:ab:53:96:fd:bc:88:75:02: 86:4d:52:d8:d6:89:5c:c0:ab:5d:1d:76:ac:63:4f:2e:83:f5: 7e:d4:91:c6:26:92:d4:8e:6c:d9:5b:df:81:95:f3:b3:f3:6a: 42:85:1d:75:09:e8:b9:12:39:cb:53:86:e6:b8:60:ef:41:0f: 80:de:4e:51:e5:69:c7:62:a8:78:c5:30:93:a7:8e:d4:c8:eb: f6:8d:bb:93:78:36:6d:9c:0c:37:04:4f:75:37:90:04:2a:59: 6b:74:af:02:bc:5e:fe:fb:30:84:4c:c4:b4:f2:85:ec:f8:f3: be:37:97:33:59:fb:5a:32:8b:21:f8:da:7c:3c:fd:58:29:a8: dc:e7:a3:f7:51:4c:1e:2c:35:86:e2:aa:ad:6d:61:e5:33:02: 48:35:63:19:b0:16:f9:57:4a:b2:a9:41:5d:40:96:0b:fe:48: 94:e1:05:68 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUN9tGh6Z9qFEY1p8O7tPmQv103wUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODEwMDAzMTA1WhcNMjYxMTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZGE3M2Q0MzVjYmVhM2Q1NjIxNjI2ZDc1ODU0MjJhMGFm MGI0ZGI4OGIzMTA0Y2MwODAxZDZiNzQzZWJmMTQzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNVgeUBgsnUYVGsMq2j33zZkGAnjR1dFBEBfFzPBta9C7c ZEnYZTWqQGv5FqwdqzGijCkR/S2Yzm2YPFzS2SxpR/SGYbr2D6oPISt5FyVEtCIL SSN2AU1XqWCk+QF0IsK2pGuZxZH3tQEK/Yd1dPloatuTMO7EaQFUfXQFQjam52g9 TCDAu1J1Sn3+/5pwCrRUOjK+j1907jZy8zm46P0b62y0uJvm1RNOd+Mi48gSDQZT u063UNHFMVihXRX3QB/B02H6Z9mhteQTcZAmEKJZ4IaqDIK7Hkrlu4OWGJbMJw1E v0IzViHvlpUodLbmlgsr7USjlgeQs/PmPmJBnbDXAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUXl4ymFobgiRGDkriR8s+cgWZ/w8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg2YTU0M2I4LTFlYmEtNDA2OS1hY2E2LThiMTU4MzhlOTFhNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/4CDANBgkqhkiG9w0BAQsFAAOCAQEAif54HSc5yP4cc7KDcEtjY/uq dnB+VG26VX3XIo+qTolgpXEBMdErF6keL+JNeJ512lnuM14zS70nIn6f7Wi0Ng2X 5FO1TS6kHnAM9ucn7VvdA6tTlv28iHUChk1S2NaJXMCrXR12rGNPLoP1ftSRxiaS 1I5s2VvfgZXzs/NqQoUddQnouRI5y1OG5rhg70EPgN5OUeVpx2KoeMUwk6eO1Mjr 9o27k3g2bZwMNwRPdTeQBCpZa3SvArxe/vswhEzEtPKF7PjzvjeXM1n7WjKLIfja fDz9WCmo3Oej91FMHiw1huKqrW1h5TMCSDVjGbAW+VdKsqlBXUCWC/5IlOEFaA== -----END CERTIFICATE-----Generated at Thu Sep 17 18:51:59 2026 by rpki-client