$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91db3fda-c58c-4a12-adaa-a868aad093be.roa File: 91db3fda-c58c-4a12-adaa-a868aad093be.roa (raw, json) Hash identifier: fySqW1lTbukjXmRlZVRjH20A9q567svmgYSTt5a6e9Y= Subject key identifier: 09:F0:33:38:F0:0F:C8:FB:EA:2D:64:24:F5:36:43:D5:C4:80:2D:B5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4422AECBF66F89987B9CC594708E4C3B8ECEF7A0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91db3fda-c58c-4a12-adaa-a868aad093be.roa Signing time: Mon 10 Aug 2026 00:30:41 +0000 ROA not before: Mon 10 Aug 2026 00:30:41 +0000 ROA not after: Sun 08 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f61:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:22:ae:cb:f6:6f:89:98:7b:9c:c5:94:70:8e:4c:3b:8e:ce:f7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 10 00:30:41 2026 GMT Not After : Nov 8 23:59:59 2026 GMT Subject: serialNumber=652142709cddc3491fae3b6249f190ad240677c934c0e51d6f2756fbb3352cac, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:43:0b:ee:87:80:9d:0f:b7:07:d7:5d:0d:29: 6f:f3:95:48:2e:80:56:1c:27:a5:8c:57:71:8f:15: e2:a4:e4:96:17:1a:5e:e7:b0:a4:2d:af:b8:a9:95: 0e:fe:97:b7:4e:d4:52:ef:b9:e0:2e:6c:ee:6e:b9: 16:b1:e9:cb:71:c3:a0:0c:99:58:ec:71:9b:8c:04: 69:33:21:aa:4a:9e:14:a9:db:e6:99:b4:13:d4:57: ae:fe:49:be:16:68:eb:4c:41:14:6a:b2:64:09:10: 67:9d:34:e4:44:fb:f4:6b:e6:5e:78:f1:7f:a3:9d: c8:81:fd:93:08:1b:22:06:fe:4c:fa:d4:35:d4:9f: 87:a9:31:1e:07:50:06:5b:65:55:35:67:65:0d:0f: 02:e6:40:2f:7d:61:be:77:21:5b:8d:e5:42:51:ff: 2c:1f:c1:c7:34:51:10:39:61:07:fe:68:4c:7d:75: 99:33:90:3b:6f:4d:68:8b:28:8e:08:f6:84:b5:28: 66:29:a6:a8:19:90:bc:f5:2d:7c:c5:f6:6c:25:c2: 97:bd:09:4f:4a:b4:cc:9e:46:a1:29:5f:db:38:d3: 1f:d0:3f:3a:8d:84:54:65:8f:1c:c0:5e:0c:08:6d: a5:7e:57:73:91:ae:2b:98:b1:94:c2:3b:7d:ae:30: 15:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:F0:33:38:F0:0F:C8:FB:EA:2D:64:24:F5:36:43:D5:C4:80:2D:B5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91db3fda-c58c-4a12-adaa-a868aad093be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f61:5000::/40 Signature Algorithm: sha256WithRSAEncryption ca:77:6c:c4:c2:10:ef:cf:39:10:c4:e7:c3:bf:e0:74:76:3f: fe:9d:7a:25:ed:b5:1a:24:9a:31:22:88:aa:23:f3:97:3b:d5: d1:a6:81:5d:ec:92:2c:ef:41:74:a8:24:f0:6f:84:f7:16:b6: a7:58:2f:f2:a6:77:8a:21:b6:e2:47:cf:fd:a0:59:4f:0e:f9: 4b:0f:e1:47:4b:1e:7c:42:82:d0:45:d2:dd:be:46:95:7e:d8: e1:46:21:6a:3b:3b:86:13:cf:18:f1:41:e1:d3:45:49:b0:3f: 6d:a2:28:52:b9:d8:97:4a:c9:b9:c8:0c:38:e8:3f:da:1a:ed: 6c:d2:a6:e9:17:70:69:ea:fb:95:fc:2f:ea:2a:8b:22:c3:a7: a5:4d:b5:09:c7:bd:39:54:7b:fe:85:1d:63:c9:9b:cc:07:44: 0a:88:02:28:22:0f:ac:dc:c2:2f:4a:32:98:1e:d9:b9:76:aa: de:d3:c5:ec:b3:8a:5a:f2:d5:55:42:0e:52:0a:16:b2:1f:9a: 06:ce:f2:4e:0e:e4:f5:13:09:a8:62:b0:c6:00:e8:7f:36:13: a8:f7:7f:1a:f9:36:0b:4c:e7:3b:ac:9a:75:47:e1:f4:65:4e: aa:da:69:bf:80:d4:a4:da:05:16:1a:08:36:ad:06:10:5b:68: 41:c9:70:f3 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIURCKuy/ZviZh7nMWUcI5MO47O96AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODEwMDAzMDQxWhcNMjYxMTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NTIxNDI3MDljZGRjMzQ5MWZhZTNiNjI0OWYxOTBhZDI0 MDY3N2M5MzRjMGU1MWQ2ZjI3NTZmYmIzMzUyY2FjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDQwvuh4CdD7cH110NKW/zlUgugFYcJ6WMV3GPFeKk5JYX Gl7nsKQtr7iplQ7+l7dO1FLvueAubO5uuRax6ctxw6AMmVjscZuMBGkzIapKnhSp 2+aZtBPUV67+Sb4WaOtMQRRqsmQJEGedNORE+/Rr5l548X+jnciB/ZMIGyIG/kz6 1DXUn4epMR4HUAZbZVU1Z2UNDwLmQC99Yb53IVuN5UJR/ywfwcc0URA5YQf+aEx9 dZkzkDtvTWiLKI4I9oS1KGYppqgZkLz1LXzF9mwlwpe9CU9KtMyeRqEpX9s40x/Q PzqNhFRljxzAXgwIbaV+V3ORriuYsZTCO32uMBWTAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUCfAzOPAPyPvqLWQk9TZD1cSALbUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkxZGIzZmRhLWM1OGMtNGExMi1hZGFhLWE4NjhhYWQwOTNiZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9hUDANBgkqhkiG9w0BAQsFAAOCAQEAyndsxMIQ7885EMTnw7/gdHY/ /p16Je21GiSaMSKIqiPzlzvV0aaBXeySLO9BdKgk8G+E9xa2p1gv8qZ3iiG24kfP /aBZTw75Sw/hR0sefEKC0EXS3b5GlX7Y4UYhajs7hhPPGPFB4dNFSbA/baIoUrnY l0rJucgMOOg/2hrtbNKm6Rdwaer7lfwv6iqLIsOnpU21Cce9OVR7/oUdY8mbzAdE CogCKCIPrNzCL0oymB7ZuXaq3tPF7LOKWvLVVUIOUgoWsh+aBs7yTg7k9RMJqGKw xgDofzYTqPd/Gvk2C0znO6yadUfh9GVOqtppv4DUpNoFFhoINq0GEFtoQclw8w== -----END CERTIFICATE-----Generated at Thu Sep 17 16:49:20 2026 by rpki-client