$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/99e28369-0cb4-48f3-84c4-6acdddfd7115.roa File: 99e28369-0cb4-48f3-84c4-6acdddfd7115.roa (raw, json) Hash identifier: vkv6TqsqevFXGMaI7lbVwi1GhQJFa3nPfYAb+/2MuW4= Subject key identifier: 20:B3:55:17:39:54:34:C5:68:29:DB:DE:67:A7:A8:CF:58:9D:29:D2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 06E82BDE6E3C821359942A1BD76CB2D074236B88 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/99e28369-0cb4-48f3-84c4-6acdddfd7115.roa Signing time: Wed 09 Sep 2026 16:05:15 +0000 ROA not before: Wed 09 Sep 2026 16:05:15 +0000 ROA not after: Tue 08 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fe7:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:e8:2b:de:6e:3c:82:13:59:94:2a:1b:d7:6c:b2:d0:74:23:6b:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 9 16:05:15 2026 GMT Not After : Dec 8 23:59:59 2026 GMT Subject: serialNumber=3580718db9abab6cdf1b7e42e3d9b36eba91f9b93e24ca7288972f12c29d01f8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d1:04:23:fb:94:dc:57:ff:e4:7f:8c:5a:71: 5a:80:1e:2d:2c:33:af:72:a1:9d:1e:d5:69:0e:eb: 8c:c6:73:00:0a:b2:1a:0a:83:d2:c8:3c:18:13:a0: 82:05:14:7f:79:64:de:28:d1:48:f6:8f:95:cb:e8: fd:9c:9a:e1:28:01:a8:ca:d5:99:bd:1e:b7:45:24: 5e:dc:92:b3:15:e4:89:09:ec:b4:4b:2d:e0:1c:66: 7f:46:cb:10:c5:d9:f7:8c:c5:f5:ee:db:80:24:ff: 17:16:0d:dd:88:08:35:c3:8b:cb:70:a9:0f:35:3c: a9:08:5a:c1:5e:d2:d5:22:41:87:b5:4c:92:c7:58: 37:78:82:c1:f2:53:bd:6a:09:79:f0:a3:89:b0:ba: 82:c5:7c:12:07:9b:4a:67:52:86:ff:3b:a6:de:52: 57:4e:96:32:a8:1f:cb:72:6f:76:74:53:50:18:06: 1b:18:41:3a:2d:93:ab:cd:69:e0:31:30:34:4f:1c: 46:44:17:29:a2:d6:3e:25:86:2f:a2:d2:4c:86:08: bb:cb:ef:e3:50:6d:53:0d:d2:f0:6d:dc:b0:3c:db: 00:15:9d:86:04:cb:7b:11:0c:bf:f7:cd:f8:1b:98: 1c:0b:dd:3c:bf:d8:1d:99:fe:a3:ea:d2:3d:17:ff: bf:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B3:55:17:39:54:34:C5:68:29:DB:DE:67:A7:A8:CF:58:9D:29:D2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/99e28369-0cb4-48f3-84c4-6acdddfd7115.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fe7:1000::/40 Signature Algorithm: sha256WithRSAEncryption 69:8e:da:bd:2e:f0:c5:ef:a6:a6:3a:a5:cb:93:e5:3c:f1:ef: 7f:ae:ee:07:36:aa:4a:36:cc:1e:ef:68:f2:fb:c1:f5:18:a1: c4:10:16:79:68:1e:a7:94:a4:38:62:39:7c:80:1e:a9:72:97: 9e:01:9d:e7:56:08:10:b5:5d:27:49:5a:3c:ea:f3:12:e8:4a: ca:f7:4f:2e:7c:1c:1a:27:27:37:29:21:cf:28:f3:b6:3a:37: 30:33:77:fd:3a:de:5d:77:52:12:bc:60:fb:29:75:45:9f:70: bd:02:4d:40:f5:a2:9d:f3:06:75:81:ae:ba:aa:3d:81:85:dd: 73:18:5f:8e:bc:d7:ac:96:09:5b:3f:c9:bc:07:18:59:be:33: 50:10:fc:3b:4c:c0:90:da:e3:7a:67:ad:78:70:97:28:de:bd: ec:50:2c:84:d5:fe:9f:e3:4f:89:23:76:2a:c7:4d:66:be:ef: d2:ae:42:2b:58:c8:b5:99:6c:3a:3a:e4:8f:e7:c1:e6:c0:d4: 22:7b:c6:ee:73:3d:43:bb:bb:8f:7c:c3:67:03:15:fa:33:39: 07:bd:1f:ef:56:dc:5a:0e:26:50:55:e8:1e:86:6b:a4:88:c2: ee:6c:e7:81:14:6f:9f:87:33:52:bc:d3:0c:b9:d9:08:f4:9e: 9f:8e:6d:9c -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUBugr3m48ghNZlCob12yy0HQja4gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwOTA5MTYwNTE1WhcNMjYxMjA4MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNTgwNzE4ZGI5YWJhYjZjZGYxYjdlNDJlM2Q5YjM2ZWJh OTFmOWI5M2UyNGNhNzI4ODk3MmYxMmMyOWQwMWY4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDM0QQj+5TcV//kf4xacVqAHi0sM69yoZ0e1WkO64zGcwAK shoKg9LIPBgToIIFFH95ZN4o0Uj2j5XL6P2cmuEoAajK1Zm9HrdFJF7ckrMV5IkJ 7LRLLeAcZn9GyxDF2feMxfXu24Ak/xcWDd2ICDXDi8twqQ81PKkIWsFe0tUiQYe1 TJLHWDd4gsHyU71qCXnwo4mwuoLFfBIHm0pnUob/O6beUldOljKoH8tyb3Z0U1AY BhsYQTotk6vNaeAxMDRPHEZEFymi1j4lhi+i0kyGCLvL7+NQbVMN0vBt3LA82wAV nYYEy3sRDL/3zfgbmBwL3Ty/2B2Z/qPq0j0X/785AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUILNVFzlUNMVoKdveZ6eoz1idKdIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk5ZTI4MzY5LTBjYjQtNDhmMy04NGM0LTZhY2RkZGZkNzExNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/nEDANBgkqhkiG9w0BAQsFAAOCAQEAaY7avS7wxe+mpjqly5PlPPHv f67uBzaqSjbMHu9o8vvB9RihxBAWeWgep5SkOGI5fIAeqXKXngGd51YIELVdJ0la POrzEuhKyvdPLnwcGicnNykhzyjztjo3MDN3/TreXXdSErxg+yl1RZ9wvQJNQPWi nfMGdYGuuqo9gYXdcxhfjrzXrJYJWz/JvAcYWb4zUBD8O0zAkNrjemeteHCXKN69 7FAshNX+n+NPiSN2KsdNZr7v0q5CK1jItZlsOjrkj+fB5sDUInvG7nM9Q7u7j3zD ZwMV+jM5B70f71bcWg4mUFXoHoZrpIjC7mzngRRvn4czUrzTDLnZCPSen45tnA== -----END CERTIFICATE-----Generated at Tue Sep 15 13:54:28 2026 by rpki-client