$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9df526d6-2843-463e-9ea7-c558b6deb39e.roa File: 9df526d6-2843-463e-9ea7-c558b6deb39e.roa (raw, json) Hash identifier: p71rPQ9pHjLMsgP+qEQKGL3+9nFFWqNuIUuPmh3Sgs4= Subject key identifier: 2C:ED:A8:DE:3A:FF:97:2F:6B:32:18:1C:C9:72:40:CC:0A:0B:87:15 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 571DA21B010202BFE4A4AC1828C598EE94773E91 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9df526d6-2843-463e-9ea7-c558b6deb39e.roa Signing time: Tue 04 Aug 2026 01:00:45 +0000 ROA not before: Tue 04 Aug 2026 01:00:45 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f38:4000::/39 maxlen: 39 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:1d:a2:1b:01:02:02:bf:e4:a4:ac:18:28:c5:98:ee:94:77:3e:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 01:00:45 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=412aec1967563b87cf1d31a66fa1009112418645bcb23b097242e443f7f3261d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:32:5b:27:61:f0:9a:57:48:7e:ed:94:0d:af: b1:2c:a0:83:11:34:e3:67:fd:9c:8b:cf:51:7c:3d: 4e:1f:f1:ae:be:1f:af:43:d4:11:aa:c3:16:19:7d: 03:c6:db:d0:bf:76:43:ab:a6:c1:7b:fa:0e:22:af: ba:2f:60:e4:21:ac:f7:50:dc:ae:5b:be:60:78:59: f2:ab:33:64:21:06:a6:d3:a1:f9:81:df:3c:6c:32: 5b:76:b1:11:74:95:af:07:01:18:9a:3e:41:ae:da: 3e:74:d7:86:71:9b:b9:bd:bd:eb:60:45:8d:17:c7: 7e:f1:1d:15:75:48:d5:2d:ec:a2:a9:af:d3:e6:fb: 55:54:a4:70:bb:f8:91:8c:17:80:ca:5d:f2:3c:7f: 8f:6b:d8:7c:02:40:4d:4c:6e:f3:f1:4a:63:7b:75: 26:cb:0d:7d:09:d9:55:f6:22:94:47:b2:de:ea:14: 58:8d:d2:81:e3:fc:1d:12:be:88:fc:6c:48:e1:a8: 36:56:a5:23:cf:27:49:9e:54:ae:5c:c9:16:aa:41: 3b:05:13:ba:dd:f6:ca:fc:71:fc:55:9b:62:a0:8c: ac:c2:a5:3b:04:67:fe:44:bf:45:24:0d:5d:6d:6e: 76:2c:c3:0a:34:0e:45:44:43:10:4c:85:61:87:f2: 26:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:ED:A8:DE:3A:FF:97:2F:6B:32:18:1C:C9:72:40:CC:0A:0B:87:15 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9df526d6-2843-463e-9ea7-c558b6deb39e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f38:4000::/39 Signature Algorithm: sha256WithRSAEncryption 55:4e:b3:e9:7a:0e:80:5d:1d:d1:e4:df:b5:4f:ae:30:98:b1: 06:8c:50:e4:11:84:a6:97:e3:ef:36:6f:30:04:a2:93:b3:1a: cf:01:6d:c8:c1:24:d2:a8:25:ba:a6:9b:b1:ed:a2:ec:83:be: 9d:4a:44:71:65:2f:f5:c5:f7:2e:6f:57:c5:ce:e9:13:b7:f9: 92:cc:6c:4a:53:68:4f:5e:af:b5:6f:e2:df:c0:26:a6:16:bd: 04:ea:db:62:9e:4b:b3:64:26:4c:b8:84:44:c1:19:e0:5e:69: 19:0e:7d:7c:94:ed:6d:2d:3d:92:21:7c:d1:4c:82:5a:88:b3: 7b:d9:ae:3e:72:6b:b4:be:49:65:fe:28:d8:d7:23:56:3d:7f: 82:11:b9:ce:c9:22:0f:d5:67:00:8e:1b:2b:fb:10:e9:b1:66: 21:b0:ee:cd:c2:f4:41:7e:be:97:89:88:61:a5:4d:a3:b9:6a: 96:1c:50:bc:10:81:33:44:7b:66:7d:f9:05:ab:68:44:94:42: 31:03:aa:34:71:0a:03:f5:cd:93:62:db:37:5b:80:78:a2:ac: de:53:59:0e:50:f1:fc:9d:96:5f:2a:42:55:b7:ca:76:2d:e5: c4:fb:25:03:7b:56:46:c3:26:64:e4:f0:41:df:3c:fe:e1:87: cc:0d:76:f4 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUVx2iGwECAr/kpKwYKMWY7pR3PpEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA0MDEwMDQ1WhcNMjYxMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MTJhZWMxOTY3NTYzYjg3Y2YxZDMxYTY2ZmExMDA5MTEy NDE4NjQ1YmNiMjNiMDk3MjQyZTQ0M2Y3ZjMyNjFkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCUMlsnYfCaV0h+7ZQNr7EsoIMRNONn/ZyLz1F8PU4f8a6+ H69D1BGqwxYZfQPG29C/dkOrpsF7+g4ir7ovYOQhrPdQ3K5bvmB4WfKrM2QhBqbT ofmB3zxsMlt2sRF0la8HARiaPkGu2j5014Zxm7m9vetgRY0Xx37xHRV1SNUt7KKp r9Pm+1VUpHC7+JGMF4DKXfI8f49r2HwCQE1MbvPxSmN7dSbLDX0J2VX2IpRHst7q FFiN0oHj/B0Svoj8bEjhqDZWpSPPJ0meVK5cyRaqQTsFE7rd9sr8cfxVm2KgjKzC pTsEZ/5Ev0UkDV1tbnYswwo0DkVEQxBMhWGH8iYvAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQULO2o3jr/ly9rMhgcyXJAzAoLhxUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzlkZjUyNmQ2LTI4NDMtNDYzZS05ZWE3LWM1NThiNmRlYjM5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB84QDANBgkqhkiG9w0BAQsFAAOCAQEAVU6z6XoOgF0d0eTftU+uMJix BoxQ5BGEppfj7zZvMASik7MazwFtyMEk0qgluqabse2i7IO+nUpEcWUv9cX3Lm9X xc7pE7f5ksxsSlNoT16vtW/i38Ampha9BOrbYp5Ls2QmTLiERMEZ4F5pGQ59fJTt bS09kiF80UyCWoize9muPnJrtL5JZf4o2NcjVj1/ghG5zskiD9VnAI4bK/sQ6bFm IbDuzcL0QX6+l4mIYaVNo7lqlhxQvBCBM0R7Zn35BatoRJRCMQOqNHEKA/XNk2Lb N1uAeKKs3lNZDlDx/J2WXypCVbfKdi3lxPslA3tWRsMmZOTwQd88/uGHzA129A== -----END CERTIFICATE-----Generated at Thu Sep 17 17:05:41 2026 by rpki-client