$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b61d5c84-0e6d-49d1-bedb-80a3b6deae29.roa File: b61d5c84-0e6d-49d1-bedb-80a3b6deae29.roa (raw, json) Hash identifier: UU4KmYCKXaBkzFm0LR4GDN9fBysreKW8iuZ0C+2Z0MY= Subject key identifier: D8:71:5D:32:DB:34:74:38:1D:15:C8:51:3D:E4:5E:59:4F:89:32:15 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 68AD065A87BE2D3ED05DEA401C2DF8AB8A1C4E8B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b61d5c84-0e6d-49d1-bedb-80a3b6deae29.roa Signing time: Wed 09 Sep 2026 16:06:50 +0000 ROA not before: Wed 09 Sep 2026 16:06:50 +0000 ROA not after: Tue 08 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f6a:1400::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:ad:06:5a:87:be:2d:3e:d0:5d:ea:40:1c:2d:f8:ab:8a:1c:4e:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 9 16:06:50 2026 GMT Not After : Dec 8 23:59:59 2026 GMT Subject: serialNumber=8a566892b25780e60e369aa352c3ca53533b25be2e713261158073d4139808df, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6b:1e:ae:05:09:5f:e7:f2:2c:c7:07:d2:e1: fc:81:5f:00:9e:2c:08:8b:38:f4:8a:c8:9a:b3:33: d1:40:c3:7a:bc:be:23:33:65:bc:40:31:25:b7:15: f4:85:da:e4:98:57:8c:71:5c:0b:49:ed:23:43:68: d6:c8:8c:72:18:4e:69:b5:fd:97:de:75:0a:fd:4a: 5d:90:e0:44:d7:46:bd:5f:e7:a4:e2:4e:4f:41:51: 28:93:3c:c2:b5:69:bf:0a:1c:ba:08:7d:8b:37:8b: e1:6b:14:8f:b6:50:fc:00:74:99:d6:74:b9:b2:38: 9b:d7:50:24:71:cf:8b:49:a6:d9:12:5c:93:64:33: fb:d3:76:dd:51:b4:ff:a4:15:1b:40:ad:30:2d:46: 54:4a:99:35:f6:bb:ed:7e:3f:b0:cb:17:31:90:0a: cf:ff:e4:c6:cc:8f:b6:36:70:cb:71:84:08:fe:77: 7a:38:51:dd:14:84:59:2d:9c:c0:4f:d2:79:32:25: 18:0e:02:13:ed:37:e8:5c:ab:81:3e:5b:c8:e1:6b: d3:d9:ad:76:5f:18:f4:3d:fc:b3:c2:1a:3d:0f:71: 03:eb:46:62:bb:2a:a8:ac:4e:e7:26:dd:66:0c:d3: 89:45:32:e8:04:10:86:46:16:8e:12:46:e6:3d:30: 68:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:71:5D:32:DB:34:74:38:1D:15:C8:51:3D:E4:5E:59:4F:89:32:15 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b61d5c84-0e6d-49d1-bedb-80a3b6deae29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f6a:1400::/46 Signature Algorithm: sha256WithRSAEncryption 79:05:d1:8d:e9:a1:21:3c:c7:af:b4:88:b7:41:23:23:09:24: bf:fb:b4:20:2d:25:74:ab:80:7c:22:9d:59:9c:9a:f7:f5:99: d9:f7:ca:61:d3:97:12:8b:cb:5c:3d:cf:f4:a0:5e:3e:a1:2f: 6c:8d:e3:d8:74:de:d7:7a:0b:e0:82:44:69:81:96:34:8c:c1: 70:5a:8a:a8:aa:dd:35:17:7f:a0:52:22:19:dd:a4:72:3d:f6: d2:57:fd:f4:d3:15:e4:44:c8:18:40:40:e5:61:1d:9d:0c:1e: 60:9d:de:93:64:b4:2e:bd:68:86:11:dc:78:fc:75:c4:8f:0c: 34:07:87:0d:a9:07:7f:01:ed:eb:cf:f8:0a:66:92:8d:2d:16: f4:2d:5a:ce:16:4e:20:48:b4:97:8a:2f:c2:7c:10:a4:bb:67: 54:5b:c4:ca:f6:55:a8:9b:36:75:be:d9:96:43:0a:e2:81:10: d6:94:28:c1:50:04:eb:88:da:e6:9e:54:25:13:46:96:76:b0: ee:f2:6a:84:bb:83:88:2b:69:6d:5f:eb:83:1f:30:49:85:7d: a7:6b:f6:d6:48:c1:77:86:df:24:f4:9c:f4:9c:17:c6:11:a3: 51:07:6c:b9:8a:48:66:05:93:a9:45:90:d6:39:b7:64:f8:e9: 8c:34:7d:7f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUaK0GWoe+LT7QXepAHC34q4ocToswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwOTA5MTYwNjUwWhcNMjYxMjA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A4YTU2Njg5MmIyNTc4MGU2MGUzNjlhYTM1MmMzY2E1MzUz M2IyNWJlMmU3MTMyNjExNTgwNzNkNDEzOTgwOGRmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4ax6uBQlf5/IsxwfS4fyBXwCeLAiLOPSKyJqzM9FAw3q8 viMzZbxAMSW3FfSF2uSYV4xxXAtJ7SNDaNbIjHIYTmm1/ZfedQr9Sl2Q4ETXRr1f 56TiTk9BUSiTPMK1ab8KHLoIfYs3i+FrFI+2UPwAdJnWdLmyOJvXUCRxz4tJptkS XJNkM/vTdt1RtP+kFRtArTAtRlRKmTX2u+1+P7DLFzGQCs//5MbMj7Y2cMtxhAj+ d3o4Ud0UhFktnMBP0nkyJRgOAhPtN+hcq4E+W8jha9PZrXZfGPQ9/LPCGj0PcQPr RmK7KqisTucm3WYM04lFMugEEIZGFo4SRuY9MGglAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU2HFdMts0dDgdFchRPeReWU+JMhUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I2MWQ1Yzg0LTBlNmQtNDlkMS1iZWRiLTgwYTNiNmRlYWUyOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB9qFAAwDQYJKoZIhvcNAQELBQADggEBAHkF0Y3poSE8x6+0iLdBIyMJ JL/7tCAtJXSrgHwinVmcmvf1mdn3ymHTlxKLy1w9z/SgXj6hL2yN49h03td6C+CC RGmBljSMwXBaiqiq3TUXf6BSIhndpHI99tJX/fTTFeREyBhAQOVhHZ0MHmCd3pNk tC69aIYR3Hj8dcSPDDQHhw2pB38B7evP+Apmko0tFvQtWs4WTiBItJeKL8J8EKS7 Z1RbxMr2VaibNnW+2ZZDCuKBENaUKMFQBOuI2uaeVCUTRpZ2sO7yaoS7g4graW1f 64MfMEmFfadr9tZIwXeG3yT0nPScF8YRo1EHbLmKSGYFk6lFkNY5t2T46Yw0fX8= -----END CERTIFICATE-----Generated at Tue Sep 15 12:09:34 2026 by rpki-client