$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a98ec338-f305-4f44-a3ae-87d707061666.roa File: a98ec338-f305-4f44-a3ae-87d707061666.roa (raw, json) Hash identifier: S/EM88Katzkv2aAi2xDrMTwieOmb107jQTaa7zQjgPI= Subject key identifier: A7:AE:E1:A2:C1:88:85:87:9C:68:F0:3D:13:03:BC:B1:AD:6B:75:32 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 36FB2935313514DB02513CCDBB5A47CFF41C9B0F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a98ec338-f305-4f44-a3ae-87d707061666.roa Signing time: Wed 19 Aug 2026 00:20:08 +0000 ROA not before: Wed 19 Aug 2026 00:20:08 +0000 ROA not after: Tue 17 Nov 2026 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1fba:5000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:fb:29:35:31:35:14:db:02:51:3c:cd:bb:5a:47:cf:f4:1c:9b:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 19 00:20:08 2026 GMT Not After : Nov 17 23:59:59 2026 GMT Subject: serialNumber=45cc3c3ebf46804b72d0ea75aa0abcd1443d4aa9a6de5646e414bed742a60b2b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c4:23:0b:a7:33:6a:ec:c6:91:63:9f:52:8b: 05:cc:86:50:d8:5a:71:7f:6e:24:12:95:f1:5c:c9: 56:01:6b:5d:7b:5d:4e:41:05:7f:68:c9:19:1a:a6: ec:3e:36:2e:06:1c:0c:e5:95:13:ef:d0:f5:8b:a1: 45:aa:01:3e:23:1e:86:a2:53:57:7e:48:75:5e:50: 89:8d:c4:1e:c8:88:ed:fc:3b:c6:15:a6:a1:80:88: 77:73:42:f0:5e:7c:c7:b4:e8:d9:7e:0a:d0:1d:ac: a6:4b:bf:ac:28:2e:08:2d:f2:ec:61:25:c9:9c:98: e3:22:1f:a4:a3:f6:b1:23:4a:7c:00:67:c7:0b:03: 01:c9:ad:2d:61:c3:c7:0f:b7:3b:28:0f:dc:7b:47: 3a:bb:a7:53:06:fc:8a:ec:4e:d6:19:21:ed:1b:19: de:07:5b:1e:e9:47:c7:8c:9f:dd:de:06:a5:ba:a9: 82:7e:63:ba:3a:87:9c:9e:28:fe:c2:88:c1:9a:2d: 76:ff:1f:9e:f7:63:0c:c0:3c:cc:38:43:01:72:a9: 47:ed:82:de:69:67:55:6e:c3:be:61:b6:aa:cc:dc: 5f:b2:db:d3:c5:2b:ce:61:d4:73:e6:bf:65:1f:6c: 79:83:e2:28:c2:b4:da:40:5e:ad:91:75:b7:c2:3e: 37:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:AE:E1:A2:C1:88:85:87:9C:68:F0:3D:13:03:BC:B1:AD:6B:75:32 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a98ec338-f305-4f44-a3ae-87d707061666.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fba:5000::/40 Signature Algorithm: sha256WithRSAEncryption 17:f2:00:a8:6d:9b:64:a3:7d:68:6e:f0:20:0c:b6:af:6d:1c: b1:76:f1:70:51:24:7e:e0:7e:e4:d7:06:dc:4d:7e:9b:74:48: 71:33:6b:5f:db:46:b8:6e:dd:3c:21:7e:0e:f7:b9:ff:5b:4e: c7:76:ec:c3:ff:87:78:e9:64:78:34:d0:9b:b5:0d:af:8d:80: 7b:00:b3:20:ff:11:f2:b4:92:41:e6:13:68:e8:9b:3b:ce:ff: 6c:ee:27:66:8b:89:42:29:35:5c:3b:9d:2b:b0:09:3d:98:f5: 0f:ae:2a:5a:f3:e2:0d:7e:9e:53:c8:55:4e:5c:6e:2b:67:07: aa:a9:c1:c6:93:87:5f:ce:c8:36:74:e9:6e:58:8d:71:59:f8: 18:d0:96:28:14:95:c9:f9:7f:23:45:50:d7:82:a9:5a:3b:ee: 3f:22:2e:99:e3:4a:f9:c2:2c:57:2c:a1:dd:d2:32:77:84:96: fe:17:e4:db:7c:b8:c3:91:95:ae:37:ab:f0:a6:2c:40:68:e6: 25:45:73:a4:ac:9b:e4:1f:1b:4a:26:7e:00:da:b1:ab:73:e1: 82:54:38:c6:10:a0:74:fa:eb:66:a7:ae:99:ad:2b:c8:b0:18: 57:87:45:e0:8d:b8:00:5a:7d:77:13:17:1c:2d:16:8d:4a:75: 38:f2:bb:9d -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUNvspNTE1FNsCUTzNu1pHz/Qcmw8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODE5MDAyMDA4WhcNMjYxMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NWNjM2MzZWJmNDY4MDRiNzJkMGVhNzVhYTBhYmNkMTQ0 M2Q0YWE5YTZkZTU2NDZlNDE0YmVkNzQyYTYwYjJiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6xCMLpzNq7MaRY59SiwXMhlDYWnF/biQSlfFcyVYBa117 XU5BBX9oyRkapuw+Ni4GHAzllRPv0PWLoUWqAT4jHoaiU1d+SHVeUImNxB7IiO38 O8YVpqGAiHdzQvBefMe06Nl+CtAdrKZLv6woLggt8uxhJcmcmOMiH6Sj9rEjSnwA Z8cLAwHJrS1hw8cPtzsoD9x7Rzq7p1MG/IrsTtYZIe0bGd4HWx7pR8eMn93eBqW6 qYJ+Y7o6h5yeKP7CiMGaLXb/H573YwzAPMw4QwFyqUftgt5pZ1Vuw75htqrM3F+y 29PFK85h1HPmv2UfbHmD4ijCtNpAXq2RdbfCPjd3AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUp67hosGIhYecaPA9EwO8sa1rdTIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E5OGVjMzM4LWYzMDUtNGY0NC1hM2FlLTg3ZDcwNzA2MTY2Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+6UDANBgkqhkiG9w0BAQsFAAOCAQEAF/IAqG2bZKN9aG7wIAy2r20c sXbxcFEkfuB+5NcG3E1+m3RIcTNrX9tGuG7dPCF+Dve5/1tOx3bsw/+HeOlkeDTQ m7UNr42AewCzIP8R8rSSQeYTaOibO87/bO4nZouJQik1XDudK7AJPZj1D64qWvPi DX6eU8hVTlxuK2cHqqnBxpOHX87INnTpbliNcVn4GNCWKBSVyfl/I0VQ14KpWjvu PyIumeNK+cIsVyyh3dIyd4SW/hfk23y4w5GVrjer8KYsQGjmJUVzpKyb5B8bSiZ+ ANqxq3PhglQ4xhCgdPrrZqeuma0ryLAYV4dF4I24AFp9dxMXHC0WjUp1OPK7nQ== -----END CERTIFICATE-----Generated at Thu Sep 17 16:23:59 2026 by rpki-client