$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94209e4d-7b05-4729-b164-804591eea8be.roa File: 94209e4d-7b05-4729-b164-804591eea8be.roa (raw, json) Hash identifier: prc6QQjS99KrGLEY0HGXrGjF4kV7wbuivAy8yOjajMM= Subject key identifier: 9C:79:76:ED:1E:63:89:0B:F0:0C:89:8D:53:24:69:D5:36:0F:35:85 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3AB1D2E7B2A9EA7B145EEEA856060A79B0E01D90 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94209e4d-7b05-4729-b164-804591eea8be.roa Signing time: Tue 04 Aug 2026 00:30:41 +0000 ROA not before: Tue 04 Aug 2026 00:30:41 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fb8:3400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:b1:d2:e7:b2:a9:ea:7b:14:5e:ee:a8:56:06:0a:79:b0:e0:1d:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 00:30:41 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=428cf21edf4bd89e8e6b35a4a4531e30681e7da8b19684ecfcfe413d1f9006e1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:20:6f:64:47:7d:3f:49:4b:08:51:a7:f7:8d: 42:6a:ba:e6:4c:00:cb:e2:a7:76:0f:fe:be:55:39: b6:04:be:de:72:3b:91:a3:32:5d:d0:78:6b:97:5b: a2:4e:d5:a9:98:00:e0:ec:5e:a4:76:2c:7d:aa:f4: 20:5a:f7:96:17:94:85:49:c5:1a:bb:37:d6:16:3c: de:6d:cc:13:48:53:66:49:65:29:e4:c4:c7:f4:5a: c2:b2:e3:20:4f:44:ac:02:e6:bd:0d:01:c7:b5:fc: 8a:5b:b0:fe:eb:dc:d6:3b:4e:a8:1c:cb:19:6e:e4: 40:bb:b4:14:05:5c:30:a9:02:7f:eb:18:b1:51:84: 15:f8:87:2e:86:88:55:3f:18:37:66:9d:f7:7f:62: 75:f5:04:31:d5:f6:0d:56:0d:40:8d:ac:58:e8:f9: 51:61:e2:e9:12:e3:96:3a:62:29:87:54:a5:df:e9: 4c:90:47:fa:dd:02:27:13:02:6c:99:3f:bf:6f:69: d2:49:94:d1:9e:91:0f:f5:01:db:ec:b4:1a:9b:d3: 31:f9:a8:09:af:a0:d9:7f:55:f5:5c:d8:75:c0:39: 38:99:f6:04:be:82:53:da:7e:ac:da:9a:ad:9c:aa: e3:c2:85:0f:d8:07:68:e1:f8:3f:52:1f:2c:4c:3d: 1e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:79:76:ED:1E:63:89:0B:F0:0C:89:8D:53:24:69:D5:36:0F:35:85 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94209e4d-7b05-4729-b164-804591eea8be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fb8:3400::/40 Signature Algorithm: sha256WithRSAEncryption a7:f4:d2:ee:6f:a1:67:cd:b4:70:10:b5:16:8b:b0:db:84:dd: 0e:86:89:65:e7:50:c5:4a:c4:c8:ae:d5:80:7b:94:db:44:08: 9e:28:3f:0b:23:62:79:32:e8:fc:7b:a0:09:ed:eb:04:c9:69: e6:92:f7:9d:ee:04:b6:1e:3b:e0:94:91:1c:f5:08:4c:0d:93: 7d:ae:59:07:22:ad:27:26:a7:85:90:79:59:52:7c:a3:2d:fc: 8c:cb:0f:83:92:ca:a1:70:c8:f4:8f:b9:8a:ae:d8:b8:4b:07: 46:58:9e:80:2a:cc:c5:ff:dd:ff:37:9a:f8:78:24:f4:96:d2: ff:dc:39:0f:5f:cd:de:1b:ac:88:de:40:e3:11:a4:d9:77:13: da:b6:7c:16:69:cf:9e:77:f0:ef:ed:fe:15:76:81:dd:f1:38: 4a:2f:bd:6d:5f:6d:0c:9a:8b:1e:5d:40:51:40:83:7b:0c:df: 5c:09:ce:d9:41:1c:8a:4b:e4:b9:27:1d:51:93:7e:ca:71:8d: d7:2b:f9:3c:c0:0a:1b:7a:9e:ff:a7:c2:ec:8e:e0:c4:90:51: 70:ea:cb:8b:4e:87:38:45:5f:56:c1:37:77:d1:8b:82:92:2d: 4e:cc:be:6b:27:4f:5e:d3:2b:95:0d:54:59:d9:73:d9:92:56: c6:d4:f7:18 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUOrHS57Kp6nsUXu6oVgYKebDgHZAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA0MDAzMDQxWhcNMjYxMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MjhjZjIxZWRmNGJkODllOGU2YjM1YTRhNDUzMWUzMDY4 MWU3ZGE4YjE5Njg0ZWNmY2ZlNDEzZDFmOTAwNmUxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUIG9kR30/SUsIUaf3jUJquuZMAMvip3YP/r5VObYEvt5y O5GjMl3QeGuXW6JO1amYAODsXqR2LH2q9CBa95YXlIVJxRq7N9YWPN5tzBNIU2ZJ ZSnkxMf0WsKy4yBPRKwC5r0NAce1/IpbsP7r3NY7Tqgcyxlu5EC7tBQFXDCpAn/r GLFRhBX4hy6GiFU/GDdmnfd/YnX1BDHV9g1WDUCNrFjo+VFh4ukS45Y6YimHVKXf 6UyQR/rdAicTAmyZP79vadJJlNGekQ/1AdvstBqb0zH5qAmvoNl/VfVc2HXAOTiZ 9gS+glPafqzamq2cquPChQ/YB2jh+D9SHyxMPR5LAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUnHl27R5jiQvwDImNUyRp1TYPNYUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk0MjA5ZTRkLTdiMDUtNDcyOS1iMTY0LTgwNDU5MWVlYThiZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+4NDANBgkqhkiG9w0BAQsFAAOCAQEAp/TS7m+hZ820cBC1Fouw24Td DoaJZedQxUrEyK7VgHuU20QInig/CyNieTLo/HugCe3rBMlp5pL3ne4Eth474JSR HPUITA2Tfa5ZByKtJyanhZB5WVJ8oy38jMsPg5LKoXDI9I+5iq7YuEsHRliegCrM xf/d/zea+Hgk9JbS/9w5D1/N3husiN5A4xGk2XcT2rZ8FmnPnnfw7+3+FXaB3fE4 Si+9bV9tDJqLHl1AUUCDewzfXAnO2UEcikvkuScdUZN+ynGN1yv5PMAKG3qe/6fC 7I7gxJBRcOrLi06HOEVfVsE3d9GLgpItTsy+aydPXtMrlQ1UWdlz2ZJWxtT3GA== -----END CERTIFICATE-----Generated at Thu Sep 17 16:15:44 2026 by rpki-client