$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ba0a37f-3522-472d-a0e5-f5d35329742b.roa File: 8ba0a37f-3522-472d-a0e5-f5d35329742b.roa (raw, json) Hash identifier: 2xZX3t922akZW+oTdXEd75A7Jt9NBCq0HJ+guii3H+Y= Subject key identifier: A5:0E:75:52:D2:1B:4A:C4:5C:FD:E5:AB:AD:D4:6F:D5:66:9A:E5:82 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0DCF34D8610154272766961AD042EB8560522936 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ba0a37f-3522-472d-a0e5-f5d35329742b.roa Signing time: Wed 09 Sep 2026 16:05:26 +0000 ROA not before: Wed 09 Sep 2026 16:05:26 +0000 ROA not after: Tue 08 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff8:e200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:cf:34:d8:61:01:54:27:27:66:96:1a:d0:42:eb:85:60:52:29:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 9 16:05:26 2026 GMT Not After : Dec 8 23:59:59 2026 GMT Subject: serialNumber=bf504b56a6e17eb23af01faa86ee88e910af8c29aa794803d78f8e230fbe8230, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a0:24:9a:51:7b:43:e7:69:80:65:dc:38:2f: d5:78:df:b7:68:cc:30:93:83:49:9d:58:3d:ad:08: 2f:01:a0:28:a6:4c:f8:c5:46:a1:6f:60:3c:03:35: 05:bf:06:dd:90:ad:4b:8c:60:e4:ea:7c:86:19:62: 3a:a1:55:21:ec:59:07:b5:15:72:d7:62:b3:e9:23: a6:2f:15:8a:f4:7b:4f:67:a0:72:18:f5:b7:78:e4: 52:09:80:5e:e3:59:8a:df:16:6b:8b:47:22:fe:52: c9:3f:52:d1:e4:29:cb:0e:cd:0f:00:d5:1c:14:87: a7:f7:f4:f4:4f:d1:ee:fa:e2:67:4e:91:6b:c4:f3: ef:17:9d:a1:d6:76:fa:b8:7d:8f:8a:e5:37:91:b3: ee:7d:2d:e6:aa:95:c5:f4:32:39:c0:ee:05:47:78: ca:f1:ba:f8:b5:1d:30:61:c4:57:76:94:00:18:16: d2:50:93:b9:42:44:61:13:f2:df:76:48:39:64:4b: e6:26:b2:e0:66:26:17:c2:05:38:ea:cc:fd:79:b3: 3e:ae:be:c9:04:b0:da:1e:f1:61:33:78:45:e8:6f: 96:8d:df:57:81:8a:b8:2d:65:67:a9:18:ba:5e:ca: ab:db:1a:44:ba:3e:ad:58:3b:66:8d:a7:82:41:b8: 76:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:0E:75:52:D2:1B:4A:C4:5C:FD:E5:AB:AD:D4:6F:D5:66:9A:E5:82 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ba0a37f-3522-472d-a0e5-f5d35329742b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff8:e200::/40 Signature Algorithm: sha256WithRSAEncryption cc:f3:ba:43:87:ec:1d:38:11:23:53:01:32:0f:f8:6c:e1:9a: 89:41:0d:e0:e7:f5:db:02:f8:06:57:5d:51:ed:ef:91:d1:ad: 4c:33:f1:0a:88:d6:61:07:77:24:66:79:f0:c2:2d:56:54:05: 6f:19:6a:c7:e7:f9:99:22:c3:a3:53:3d:fa:1d:5d:bb:f6:db: 7a:b1:17:4a:8c:6e:95:73:d3:13:d9:b8:35:f9:23:f7:14:36: de:73:35:08:04:e3:bf:42:1c:fb:01:4a:f4:8a:4c:fa:6d:c1: 7a:90:86:d1:7e:7b:1c:20:29:ae:e0:8b:2f:23:ea:c5:44:d7: f4:8e:90:6d:0e:d3:1b:b3:40:5e:2c:86:10:52:54:9a:ca:5e: 51:a8:83:ed:07:fb:db:32:56:bb:fd:67:90:bd:2e:fe:b1:7b: c1:20:cd:ec:71:2b:9a:e6:16:8b:48:e4:54:d8:2c:7d:62:b1: 0e:8e:94:98:f2:6e:40:32:c3:6a:24:03:4e:8c:fc:0f:7d:4d: 02:ca:97:25:d6:71:da:19:c3:1c:fb:10:8c:b8:c5:13:2c:c1: 28:17:83:b6:c6:20:23:1f:33:5b:ea:5f:99:5f:4a:d7:03:20: a2:50:7e:e4:57:b9:40:af:66:3a:b3:ef:89:55:7c:dc:c1:25: 5e:21:6c:f2 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUDc802GEBVCcnZpYa0ELrhWBSKTYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwOTA5MTYwNTI2WhcNMjYxMjA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZjUwNGI1NmE2ZTE3ZWIyM2FmMDFmYWE4NmVlODhlOTEw YWY4YzI5YWE3OTQ4MDNkNzhmOGUyMzBmYmU4MjMwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSoCSaUXtD52mAZdw4L9V437dozDCTg0mdWD2tCC8BoCim TPjFRqFvYDwDNQW/Bt2QrUuMYOTqfIYZYjqhVSHsWQe1FXLXYrPpI6YvFYr0e09n oHIY9bd45FIJgF7jWYrfFmuLRyL+Usk/UtHkKcsOzQ8A1RwUh6f39PRP0e764mdO kWvE8+8XnaHWdvq4fY+K5TeRs+59LeaqlcX0MjnA7gVHeMrxuvi1HTBhxFd2lAAY FtJQk7lCRGET8t92SDlkS+YmsuBmJhfCBTjqzP15sz6uvskEsNoe8WEzeEXob5aN 31eBirgtZWepGLpeyqvbGkS6Pq1YO2aNp4JBuHbrAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUpQ51UtIbSsRc/eWrrdRv1Waa5YIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhiYTBhMzdmLTM1MjItNDcyZC1hMGU1LWY1ZDM1MzI5NzQyYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/44jANBgkqhkiG9w0BAQsFAAOCAQEAzPO6Q4fsHTgRI1MBMg/4bOGa iUEN4Of12wL4BlddUe3vkdGtTDPxCojWYQd3JGZ58MItVlQFbxlqx+f5mSLDo1M9 +h1du/bberEXSoxulXPTE9m4Nfkj9xQ23nM1CATjv0Ic+wFK9IpM+m3BepCG0X57 HCApruCLLyPqxUTX9I6QbQ7TG7NAXiyGEFJUmspeUaiD7Qf72zJWu/1nkL0u/rF7 wSDN7HErmuYWi0jkVNgsfWKxDo6UmPJuQDLDaiQDToz8D31NAsqXJdZx2hnDHPsQ jLjFEyzBKBeDtsYgIx8zW+pfmV9K1wMgolB+5Fe5QK9mOrPviVV83MElXiFs8g== -----END CERTIFICATE-----Generated at Tue Sep 15 12:43:56 2026 by rpki-client