$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/96423295-2475-4afd-99d6-624e1f699392.roa File: 96423295-2475-4afd-99d6-624e1f699392.roa (raw, json) Hash identifier: uMS+qDZJ1SDjP/VAFu+j7pujDjuffLN5yGkgkW0fAlE= Subject key identifier: E1:20:EE:EC:C0:A2:4A:3F:66:10:F7:60:FC:1E:77:73:61:EC:DC:45 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1B123E202B78142C44021AF70514394C8A5D8A01 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/96423295-2475-4afd-99d6-624e1f699392.roa Signing time: Wed 09 Sep 2026 16:03:41 +0000 ROA not before: Wed 09 Sep 2026 16:03:41 +0000 ROA not after: Tue 08 Dec 2026 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1f62:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:12:3e:20:2b:78:14:2c:44:02:1a:f7:05:14:39:4c:8a:5d:8a:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 9 16:03:41 2026 GMT Not After : Dec 8 23:59:59 2026 GMT Subject: serialNumber=4688e22edceb96ec01834f050d6539ce42170d88baeff69eabf9b9c5880a8017, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:15:65:1e:6a:94:54:ac:27:00:93:79:64:15: 04:c2:3e:bb:c3:6b:b0:63:81:1c:8c:d6:23:af:c4: ca:0e:8e:d6:32:b7:95:6e:81:72:08:58:1f:f3:21: 4e:4a:60:2e:4b:40:53:6d:52:37:7a:bc:df:c7:85: 99:55:99:ca:e6:13:ef:b2:47:86:ed:f9:ea:ef:e9: 2a:86:8f:69:30:8f:d1:13:43:31:36:6a:4d:62:01: b4:6a:0f:b6:c9:6c:ab:bf:1e:bc:37:f8:a9:ad:18: 80:3a:d2:96:58:8f:e2:0c:ba:47:4b:2f:5f:82:63: a0:87:60:26:58:71:88:a0:70:22:0f:76:9a:eb:f9: b7:cc:06:3b:96:da:3f:f5:94:00:5c:01:c6:9e:d6: c3:bc:13:c4:a5:5c:2c:87:82:09:2c:bc:fa:98:8a: d6:9c:91:3a:3c:df:bf:a5:22:a0:71:ab:f0:a8:8f: 52:d8:d1:a8:85:62:28:f9:e7:73:e3:39:cb:a4:f3: f5:63:e5:16:0a:78:42:d4:91:75:db:cd:6f:c3:e1: 60:8c:80:2e:4d:be:a1:4e:c9:3c:39:8c:c8:fc:f4: d9:ea:08:6e:2a:70:12:0d:11:b5:a5:c5:90:45:31: 39:c2:d2:ac:6e:91:24:1d:a5:a4:16:95:d6:61:9c: aa:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:20:EE:EC:C0:A2:4A:3F:66:10:F7:60:FC:1E:77:73:61:EC:DC:45 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/96423295-2475-4afd-99d6-624e1f699392.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f62:2000::/40 Signature Algorithm: sha256WithRSAEncryption d0:f8:56:1d:bb:8f:7d:aa:52:3b:47:ce:6e:c3:3d:47:6b:0d: 23:2d:85:ae:92:bc:9e:58:93:8e:de:e9:45:a9:a0:95:fa:43: fa:38:4c:a4:06:5b:83:86:9f:bf:d7:94:c0:b8:8d:d2:ad:0d: c0:e9:5f:36:80:f1:df:11:dd:84:1f:18:e7:a2:9b:61:a2:87: c5:88:d0:2d:4e:90:0a:ef:83:06:10:cb:e9:57:b9:a1:5f:bb: 9b:83:55:fe:49:46:44:df:59:54:c7:e2:43:fe:99:d0:7c:7a: e0:26:41:eb:70:0a:e2:27:84:d1:d5:7d:66:ee:2c:ba:c1:7e: 0b:52:cb:33:7e:e7:03:2f:e9:ca:2f:88:09:9d:2f:7a:1d:2a: d4:c0:24:9d:aa:65:67:53:fe:68:48:6d:36:73:c0:b8:7c:9b: 43:ea:88:60:41:3d:96:42:b2:b7:69:fe:37:b3:ab:9c:fd:85: 6c:1e:ee:0c:83:2d:d5:1a:d1:f1:eb:73:42:e0:1d:bb:1d:09: 92:5a:5d:8f:98:91:7a:f5:28:ab:b4:b7:7d:ea:b1:18:a1:03: c0:59:c3:c8:4f:78:32:37:f0:64:0f:7a:5a:a3:bf:20:b3:79: 0f:82:23:73:4e:57:80:50:0c:a0:14:70:64:e1:6c:2d:da:b6: a9:e1:90:f3 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUGxI+ICt4FCxEAhr3BRQ5TIpdigEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwOTA5MTYwMzQxWhcNMjYxMjA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A0Njg4ZTIyZWRjZWI5NmVjMDE4MzRmMDUwZDY1MzljZTQy MTcwZDg4YmFlZmY2OWVhYmY5YjljNTg4MGE4MDE3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoFWUeapRUrCcAk3lkFQTCPrvDa7BjgRyM1iOvxMoOjtYy t5VugXIIWB/zIU5KYC5LQFNtUjd6vN/HhZlVmcrmE++yR4bt+erv6SqGj2kwj9ET QzE2ak1iAbRqD7bJbKu/Hrw3+KmtGIA60pZYj+IMukdLL1+CY6CHYCZYcYigcCIP dprr+bfMBjuW2j/1lABcAcae1sO8E8SlXCyHggksvPqYitackTo837+lIqBxq/Co j1LY0aiFYij553PjOcuk8/Vj5RYKeELUkXXbzW/D4WCMgC5NvqFOyTw5jMj89Nnq CG4qcBINEbWlxZBFMTnC0qxukSQdpaQWldZhnKpdAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU4SDu7MCiSj9mEPdg/B53c2Hs3EUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk2NDIzMjk1LTI0NzUtNGFmZC05OWQ2LTYyNGUxZjY5OTM5Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9iIDANBgkqhkiG9w0BAQsFAAOCAQEA0PhWHbuPfapSO0fObsM9R2sN Iy2FrpK8nliTjt7pRamglfpD+jhMpAZbg4afv9eUwLiN0q0NwOlfNoDx3xHdhB8Y 56KbYaKHxYjQLU6QCu+DBhDL6Ve5oV+7m4NV/klGRN9ZVMfiQ/6Z0Hx64CZB63AK 4ieE0dV9Zu4susF+C1LLM37nAy/pyi+ICZ0veh0q1MAknaplZ1P+aEhtNnPAuHyb Q+qIYEE9lkKyt2n+N7OrnP2FbB7uDIMt1RrR8etzQuAdux0Jklpdj5iRevUoq7S3 feqxGKEDwFnDyE94MjfwZA96WqO/ILN5D4Ijc05XgFAMoBRwZOFsLdq2qeGQ8w== -----END CERTIFICATE-----Generated at Thu Sep 17 19:17:00 2026 by rpki-client