$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/953f92fa-8022-4f8d-aa19-8d28c32712f2.roa File: 953f92fa-8022-4f8d-aa19-8d28c32712f2.roa (raw, json) Hash identifier: 8zipZaOQ9/4xYa2mGZDlxHU77DWA3DjZS/J6VL/8sxg= Subject key identifier: 51:74:83:32:7A:B4:4B:F6:3F:C1:AC:9A:2A:24:54:C1:83:3E:93:4C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 03A6259A5C321B24349A46346CF3086AB126F66D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/953f92fa-8022-4f8d-aa19-8d28c32712f2.roa Signing time: Tue 04 Aug 2026 02:10:40 +0000 ROA not before: Tue 04 Aug 2026 02:10:40 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f70:3400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:a6:25:9a:5c:32:1b:24:34:9a:46:34:6c:f3:08:6a:b1:26:f6:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 02:10:40 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=affee3f6d9753a5193a4685ff68642871142f76604cdecd35227fb42e7645705, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9f:5e:2f:59:94:1b:ea:eb:79:3b:a0:55:30: 4c:3b:61:4b:1a:e9:00:32:58:ee:70:02:0f:dd:97: ab:28:c7:a7:fc:b3:62:87:35:23:89:18:93:76:44: 11:b9:57:67:cf:50:ae:f9:62:f2:b0:01:9e:97:27: e9:aa:91:3b:de:ad:93:25:73:86:12:63:43:89:5a: e1:d0:27:16:48:2f:34:69:cc:07:05:e5:e3:f4:4d: a1:ee:bc:e0:33:28:0e:49:53:2b:e1:99:92:f1:e8: bb:0c:11:46:62:e4:b1:7c:f3:b1:30:c3:0b:29:94: 59:3b:a7:b4:49:2d:48:61:3b:e3:ab:b6:1d:7c:38: f4:d9:b6:3b:70:3e:50:72:9a:f1:73:e9:e1:1f:e7: c8:13:57:97:b8:de:95:56:c8:ba:46:28:d3:34:24: 6d:59:30:9f:c8:ef:08:b0:1f:dd:ce:fb:f9:ac:83: 7f:f7:ec:12:6c:69:c6:88:0c:16:d3:cb:c5:98:51: 78:e8:04:ab:f6:33:54:c7:de:1b:27:53:a3:ae:e7: 18:1f:91:fb:ba:90:05:eb:dd:4c:6b:c1:7d:41:b9: 5a:22:15:30:80:6a:90:59:c1:92:a5:9d:50:f9:f2: 34:45:48:e6:32:4f:5b:5b:ff:bd:19:69:e7:ba:3d: e4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:74:83:32:7A:B4:4B:F6:3F:C1:AC:9A:2A:24:54:C1:83:3E:93:4C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/953f92fa-8022-4f8d-aa19-8d28c32712f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f70:3400::/40 Signature Algorithm: sha256WithRSAEncryption 7a:a1:06:75:2b:dc:3d:93:2d:0a:8a:34:34:15:5a:7e:18:eb: e5:2c:aa:b2:f5:7e:4d:b5:cf:df:dd:13:01:39:da:56:2f:c7: a2:6a:ea:d1:02:32:db:a4:6d:60:55:a4:06:9c:c5:7c:d3:9b: f3:51:77:ce:92:d3:0f:6d:b4:92:5a:01:a9:8f:f6:1d:93:b8: 23:54:92:e1:ae:ac:7c:c1:ec:86:e0:3a:13:0a:65:cf:95:c2: 74:c8:94:4a:b4:b9:51:de:2e:4e:be:30:ac:8a:77:67:9f:7b: 45:df:08:27:00:b2:41:b4:29:52:6a:97:53:7a:3d:0f:63:36: bb:b9:aa:d3:d0:70:c4:81:95:db:cf:48:4b:34:97:79:1c:30: a4:12:19:88:a6:38:a9:df:df:2c:e9:17:9f:58:07:17:4e:68: 2f:5a:d3:a0:68:cc:52:b6:c3:61:87:fe:71:28:09:ff:fb:9d: d8:00:fc:f8:0f:be:a3:73:7e:cb:04:47:d7:e0:63:1a:5f:42: fb:79:07:57:a4:14:ca:33:38:da:d5:93:a1:d2:fd:b5:db:c9: b7:7c:af:38:44:c0:67:72:2a:dd:8e:a3:08:b2:df:ba:2e:af: 4e:a5:0a:41:89:6f:29:f5:48:36:90:45:3c:1e:eb:af:db:a1: 1e:d5:8f:27 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUA6YlmlwyGyQ0mkY0bPMIarEm9m0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA0MDIxMDQwWhcNMjYxMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhZmZlZTNmNmQ5NzUzYTUxOTNhNDY4NWZmNjg2NDI4NzEx NDJmNzY2MDRjZGVjZDM1MjI3ZmI0MmU3NjQ1NzA1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3n14vWZQb6ut5O6BVMEw7YUsa6QAyWO5wAg/dl6sox6f8 s2KHNSOJGJN2RBG5V2fPUK75YvKwAZ6XJ+mqkTverZMlc4YSY0OJWuHQJxZILzRp zAcF5eP0TaHuvOAzKA5JUyvhmZLx6LsMEUZi5LF887EwwwsplFk7p7RJLUhhO+Or th18OPTZtjtwPlBymvFz6eEf58gTV5e43pVWyLpGKNM0JG1ZMJ/I7wiwH93O+/ms g3/37BJsacaIDBbTy8WYUXjoBKv2M1TH3hsnU6Ou5xgfkfu6kAXr3UxrwX1BuVoi FTCAapBZwZKlnVD58jRFSOYyT1tb/70Zaee6PeR/AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUUXSDMnq0S/Y/wayaKiRUwYM+k0wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk1M2Y5MmZhLTgwMjItNGY4ZC1hYTE5LThkMjhjMzI3MTJmMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9wNDANBgkqhkiG9w0BAQsFAAOCAQEAeqEGdSvcPZMtCoo0NBVafhjr 5SyqsvV+TbXP390TATnaVi/Homrq0QIy26RtYFWkBpzFfNOb81F3zpLTD220kloB qY/2HZO4I1SS4a6sfMHshuA6Ewplz5XCdMiUSrS5Ud4uTr4wrIp3Z597Rd8IJwCy QbQpUmqXU3o9D2M2u7mq09BwxIGV289ISzSXeRwwpBIZiKY4qd/fLOkXn1gHF05o L1rToGjMUrbDYYf+cSgJ//ud2AD8+A++o3N+ywRH1+BjGl9C+3kHV6QUyjM42tWT odL9tdvJt3yvOETAZ3Iq3Y6jCLLfui6vTqUKQYlvKfVINpBFPB7rr9uhHtWPJw== -----END CERTIFICATE-----Generated at Thu Sep 17 16:15:35 2026 by rpki-client