$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b28510d9-e281-4c16-8bca-fa5d2b1e2b8b.roa File: b28510d9-e281-4c16-8bca-fa5d2b1e2b8b.roa (raw, json) Hash identifier: EgcCjSfSxZltRodci2sv5XW+FEHqIWKKB5pBb2ogENY= Subject key identifier: 67:4F:CC:37:CE:07:22:12:04:C0:3F:34:CA:16:0E:68:46:A7:9A:D5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 68E27F9B492525D0EE3406ABB9D2FFA9D1F74E93 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b28510d9-e281-4c16-8bca-fa5d2b1e2b8b.roa Signing time: Wed 09 Sep 2026 16:03:36 +0000 ROA not before: Wed 09 Sep 2026 16:03:36 +0000 ROA not after: Tue 08 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f22:2000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:e2:7f:9b:49:25:25:d0:ee:34:06:ab:b9:d2:ff:a9:d1:f7:4e:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 9 16:03:36 2026 GMT Not After : Dec 8 23:59:59 2026 GMT Subject: serialNumber=436ea24fd4e934ae244bf38cdb7ca54188c6b4ee78ae2a815f2fd40f1f2243d0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:31:df:e0:cd:6e:91:9c:b1:5f:20:41:b2:33: a4:f4:69:f3:0b:b6:5d:51:e8:06:c9:49:b1:e1:33: 29:22:6b:0c:17:75:14:56:09:d9:1b:53:1b:69:07: 23:69:00:70:f1:46:0b:7f:a1:97:3c:41:68:53:66: 37:6e:03:21:6e:3c:bf:fc:5d:1d:14:dc:7d:61:b4: 81:0b:46:6c:8c:a9:4b:94:8f:4d:58:6e:05:19:7f: 3b:76:ab:3b:70:29:55:0b:8c:8c:5e:d1:e8:87:28: 1b:b1:30:f6:37:1a:c8:e0:80:1f:0c:94:3f:e8:7e: 3d:ca:ed:05:a6:6e:53:14:36:07:71:f5:a0:b2:d0: dd:a7:b1:73:d2:95:07:df:8f:47:ba:95:d7:a6:86: 00:2a:34:1a:a4:f0:9b:5e:36:39:f8:7d:c0:f8:70: f6:a7:5b:33:86:79:a1:a9:3c:35:13:4a:50:76:45: 8b:a6:70:6b:80:d8:d7:0d:fb:cd:49:53:dc:01:70: 57:40:af:4c:41:d7:71:44:fc:6f:e6:92:5d:a9:84: b8:22:c8:11:68:ee:7d:87:7d:56:0b:88:3e:19:3f: 90:b5:93:29:62:72:3b:f1:1a:a0:52:a2:a5:20:e5: ec:10:14:15:e2:d7:01:cb:30:3d:13:19:b9:52:c2: ad:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:4F:CC:37:CE:07:22:12:04:C0:3F:34:CA:16:0E:68:46:A7:9A:D5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b28510d9-e281-4c16-8bca-fa5d2b1e2b8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f22:2000::/36 Signature Algorithm: sha256WithRSAEncryption 74:5f:59:a7:73:22:78:a0:50:9f:27:ef:82:13:8e:1b:4e:74: 3f:23:fe:13:e8:59:7e:42:c0:1b:67:d3:fe:50:5c:d2:03:32: 1f:de:13:b7:51:38:cc:34:fc:27:40:4f:be:b0:5b:22:75:74: ac:13:45:79:cc:d6:a6:2c:22:97:e3:cb:a5:69:61:97:3a:6f: 66:8b:6f:b9:1c:1c:fb:62:0f:57:35:d7:7d:d8:67:62:c4:5b: 37:bf:01:5e:7e:6a:ea:83:b0:aa:af:38:81:4e:c8:7a:18:eb: e1:b9:c3:7d:44:10:8a:5f:86:fe:ba:1a:d6:f0:91:2c:88:55: 6a:95:ea:ed:4c:86:1e:88:b8:21:65:9a:57:8c:d7:3a:17:0c: 89:7e:71:ee:5f:7a:bc:f4:2a:17:56:29:5f:f9:88:42:22:c2: b3:44:7b:af:96:a7:d8:52:8b:4e:58:6c:3f:ac:21:44:bd:34: a9:02:1d:f3:19:b6:bd:ee:b1:72:32:48:47:e9:ed:6c:ee:43: 6d:34:2b:15:f5:97:7d:4a:9d:7f:ca:07:e1:09:0f:62:5f:4f: 80:91:bf:77:58:90:98:2e:a4:e4:68:2e:a1:3e:33:a1:b0:bc: 06:16:d7:41:4b:e7:9e:f5:e2:0b:a2:f2:05:bf:f5:a0:d1:28: 62:13:cc:ac -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUaOJ/m0klJdDuNAarudL/qdH3TpMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwOTA5MTYwMzM2WhcNMjYxMjA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MzZlYTI0ZmQ0ZTkzNGFlMjQ0YmYzOGNkYjdjYTU0MTg4 YzZiNGVlNzhhZTJhODE1ZjJmZDQwZjFmMjI0M2QwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdMd/gzW6RnLFfIEGyM6T0afMLtl1R6AbJSbHhMykiawwX dRRWCdkbUxtpByNpAHDxRgt/oZc8QWhTZjduAyFuPL/8XR0U3H1htIELRmyMqUuU j01YbgUZfzt2qztwKVULjIxe0eiHKBuxMPY3GsjggB8MlD/ofj3K7QWmblMUNgdx 9aCy0N2nsXPSlQffj0e6ldemhgAqNBqk8JteNjn4fcD4cPanWzOGeaGpPDUTSlB2 RYumcGuA2NcN+81JU9wBcFdAr0xB13FE/G/mkl2phLgiyBFo7n2HfVYLiD4ZP5C1 kylicjvxGqBSoqUg5ewQFBXi1wHLMD0TGblSwq39AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUZ0/MN84HIhIEwD80yhYOaEanmtUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IyODUxMGQ5LWUyODEtNGMxNi04YmNhLWZhNWQyYjFlMmI4Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8iIDANBgkqhkiG9w0BAQsFAAOCAQEAdF9Zp3MieKBQnyfvghOOG050 PyP+E+hZfkLAG2fT/lBc0gMyH94Tt1E4zDT8J0BPvrBbInV0rBNFeczWpiwil+PL pWlhlzpvZotvuRwc+2IPVzXXfdhnYsRbN78BXn5q6oOwqq84gU7Iehjr4bnDfUQQ il+G/roa1vCRLIhVapXq7UyGHoi4IWWaV4zXOhcMiX5x7l96vPQqF1YpX/mIQiLC s0R7r5an2FKLTlhsP6whRL00qQId8xm2ve6xcjJIR+ntbO5DbTQrFfWXfUqdf8oH 4QkPYl9PgJG/d1iQmC6k5GguoT4zobC8BhbXQUvnnvXiC6LyBb/1oNEoYhPMrA== -----END CERTIFICATE-----Generated at Tue Sep 15 10:59:08 2026 by rpki-client