$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3cc73a2-6b35-4320-9b96-64b7cebae5b9.roa File: b3cc73a2-6b35-4320-9b96-64b7cebae5b9.roa (raw, json) Hash identifier: 1yTcL1SXNR0bQPPkXQqbp56gaIwnAtRFYFb60+XhjpU= Subject key identifier: FB:CC:41:25:0C:1A:39:C6:14:C4:B3:FF:3F:3D:E5:EA:84:0F:53:76 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1F973E415F1DD8C182B595E84A38556099583B6D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3cc73a2-6b35-4320-9b96-64b7cebae5b9.roa Signing time: Wed 05 Aug 2026 00:21:15 +0000 ROA not before: Wed 05 Aug 2026 00:21:15 +0000 ROA not after: Tue 03 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1ff3:8050::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:97:3e:41:5f:1d:d8:c1:82:b5:95:e8:4a:38:55:60:99:58:3b:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 00:21:15 2026 GMT Not After : Nov 3 23:59:59 2026 GMT Subject: serialNumber=ee7f1a852a4a9c182bf01a217ff81501ab507a2b834e66d4ae2a4931af19c134, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ee:ab:65:f1:44:88:3e:07:0c:55:b8:0c:6c: 6c:d9:91:57:ba:7a:5e:ef:d7:82:b4:9c:9b:04:35: 48:d1:48:01:cd:b5:d4:46:a6:42:92:5d:0a:76:81: c2:6b:97:98:c3:9a:30:0d:38:95:b1:83:41:be:d5: 22:66:00:25:2c:08:d2:89:a7:1e:78:88:c5:d8:fe: cb:88:35:a4:50:49:00:cb:6a:c2:fe:ba:bf:55:bc: b1:5e:ea:86:ea:d7:01:d2:dc:bf:b7:f5:c5:e1:1b: 3f:5a:b4:c5:52:89:4b:d2:d4:48:8e:ab:a7:33:03: d4:f3:89:87:a2:b9:9b:15:46:35:17:42:96:a4:3e: 48:d3:75:50:4d:15:8c:b1:d0:73:bd:a0:19:6d:bc: 86:8a:d9:4f:1e:30:05:f6:b2:e2:4a:e7:6f:bf:2b: 63:45:d3:38:50:b1:46:c7:9b:e0:09:a5:5d:1a:14: b1:15:86:e2:b7:31:7d:f5:83:9d:95:5e:31:8d:85: 0d:d2:1a:80:a1:6f:67:9c:c3:2e:c4:22:90:ba:19: ff:6f:b2:d4:8e:46:02:a5:9c:ea:79:2d:69:26:20: bd:97:57:53:9c:17:fa:16:56:83:fc:f9:38:34:52: 73:9e:1c:e8:7b:75:b7:43:19:1d:00:e3:a2:ba:61: d1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:CC:41:25:0C:1A:39:C6:14:C4:B3:FF:3F:3D:E5:EA:84:0F:53:76 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3cc73a2-6b35-4320-9b96-64b7cebae5b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff3:8050::/46 Signature Algorithm: sha256WithRSAEncryption 8a:5a:58:40:e5:1d:20:b1:4f:44:63:b1:2c:0d:88:28:c2:5c: 68:48:a1:1f:d3:8d:ce:fd:0f:b5:c6:b9:9a:ce:e3:cb:75:64: fc:ee:ee:71:34:14:96:54:b6:09:49:27:88:c5:f2:f0:d2:1d: e9:17:92:58:3c:cf:22:9b:93:4e:1f:73:d7:d5:5a:31:96:b4: eb:b4:7e:00:15:a2:3b:20:a5:90:84:7d:58:27:d4:9d:33:6f: 2b:22:1f:6c:72:15:11:ee:dc:26:26:de:24:0f:04:0b:5f:bd: 10:b9:01:b6:5f:a9:0a:6b:b2:59:cd:94:8f:13:44:58:76:2b: e5:b0:42:f2:d3:87:02:da:8b:ba:87:11:53:cf:e3:5a:be:d3: 09:2e:9f:d2:b3:4c:11:31:19:d6:0b:af:2d:e3:22:07:12:99: ec:82:b5:87:38:3f:0f:5b:04:ba:52:6d:13:83:df:3a:13:1e: c7:73:9d:79:2d:a0:6e:e5:33:e1:d1:70:59:e3:e1:f1:3d:05: 96:4e:f0:24:b9:51:b8:df:c9:9c:ea:aa:28:64:1c:5e:c7:de: 8b:62:a6:7d:d2:d7:da:0c:b3:5a:f3:cd:94:b0:2e:e5:b9:20: 00:c9:2b:d7:d4:b2:56:48:fd:d8:42:bb:4e:13:ed:e3:be:f3: cf:f2:1c:06 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUH5c+QV8d2MGCtZXoSjhVYJlYO20wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA1MDAyMTE1WhcNMjYxMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZTdmMWE4NTJhNGE5YzE4MmJmMDFhMjE3ZmY4MTUwMWFi NTA3YTJiODM0ZTY2ZDRhZTJhNDkzMWFmMTljMTM0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCb7qtl8USIPgcMVbgMbGzZkVe6el7v14K0nJsENUjRSAHN tdRGpkKSXQp2gcJrl5jDmjANOJWxg0G+1SJmACUsCNKJpx54iMXY/suINaRQSQDL asL+ur9VvLFe6obq1wHS3L+39cXhGz9atMVSiUvS1EiOq6czA9TziYeiuZsVRjUX QpakPkjTdVBNFYyx0HO9oBltvIaK2U8eMAX2suJK52+/K2NF0zhQsUbHm+AJpV0a FLEVhuK3MX31g52VXjGNhQ3SGoChb2ecwy7EIpC6Gf9vstSORgKlnOp5LWkmIL2X V1OcF/oWVoP8+Tg0UnOeHOh7dbdDGR0A46K6YdHjAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU+8xBJQwaOcYUxLP/Pz3l6oQPU3YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IzY2M3M2EyLTZiMzUtNDMyMC05Yjk2LTY0YjdjZWJhZTViOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/zgFAwDQYJKoZIhvcNAQELBQADggEBAIpaWEDlHSCxT0RjsSwNiCjC XGhIoR/Tjc79D7XGuZrO48t1ZPzu7nE0FJZUtglJJ4jF8vDSHekXklg8zyKbk04f c9fVWjGWtOu0fgAVojsgpZCEfVgn1J0zbysiH2xyFRHu3CYm3iQPBAtfvRC5AbZf qQprslnNlI8TRFh2K+WwQvLThwLai7qHEVPP41q+0wkun9KzTBExGdYLry3jIgcS meyCtYc4Pw9bBLpSbROD3zoTHsdznXktoG7lM+HRcFnj4fE9BZZO8CS5UbjfyZzq qihkHF7H3otipn3S19oMs1rzzZSwLuW5IADJK9fUslZI/dhCu04T7eO+88/yHAY= -----END CERTIFICATE-----Generated at Thu Sep 17 17:05:46 2026 by rpki-client