$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8921aa3-950f-404f-99a4-dc35720ecd11.roa File: b8921aa3-950f-404f-99a4-dc35720ecd11.roa (raw, json) Hash identifier: qKmUaclwlu/bLtfVti5AjVxC31OUhFkWf+YrOdFs/Go= Subject key identifier: F5:9E:0E:AC:5D:3A:8C:00:2D:59:17:32:FC:28:F7:FC:AB:7D:FC:2B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 74D409E4421178FF1AB0F743A3D7F39AF2E1C57F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8921aa3-950f-404f-99a4-dc35720ecd11.roa Signing time: Mon 10 Aug 2026 00:31:06 +0000 ROA not before: Mon 10 Aug 2026 00:31:06 +0000 ROA not after: Sun 08 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fe8:1080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:d4:09:e4:42:11:78:ff:1a:b0:f7:43:a3:d7:f3:9a:f2:e1:c5:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 10 00:31:06 2026 GMT Not After : Nov 8 23:59:59 2026 GMT Subject: serialNumber=ff676b883a8f5f3d0112d5c6f4726f97334b9861c51bacd883cf1b7cd0786019, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:16:33:8e:8a:5b:3e:89:1c:90:08:b9:b9:b6: fe:0b:40:bd:5a:7e:0b:cc:2c:ba:6c:3c:bc:73:3e: 82:26:a9:53:ba:49:6f:dc:27:bc:c5:6a:9e:68:2f: 34:29:57:63:f9:15:16:a8:3a:30:17:00:c4:08:ca: 04:41:49:52:a0:89:5b:4f:66:63:4d:d0:bc:51:f6: 8b:42:79:00:cb:cf:bf:17:e5:85:db:89:8a:b1:15: 24:6a:06:21:5f:87:11:7a:c6:64:94:af:4e:d6:51: 62:bb:04:ad:cd:71:63:4d:95:ad:1a:aa:66:43:24: 72:9c:a1:ae:ab:4a:55:fd:d2:38:57:5a:35:83:d8: 8d:90:55:0c:b1:f5:43:44:c0:20:15:1d:93:25:42: 93:12:69:bd:27:27:43:f3:5d:7a:c6:c8:80:f3:4b: d4:d8:19:a2:79:72:f5:33:c0:fe:ee:28:61:66:df: 94:76:aa:6f:0c:cc:92:27:6b:40:47:88:ba:12:06: d7:6a:60:e4:c8:5e:3c:dd:9d:5e:a7:09:43:64:f0: 1c:e2:d8:8d:66:cc:34:8b:1e:2a:e9:3a:2f:14:49: 65:36:eb:e4:c7:8b:66:3a:5e:aa:61:0d:cb:5f:2e: c1:36:0a:51:41:bf:7e:c1:41:1e:58:5f:9c:1a:28: 83:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:9E:0E:AC:5D:3A:8C:00:2D:59:17:32:FC:28:F7:FC:AB:7D:FC:2B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8921aa3-950f-404f-99a4-dc35720ecd11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fe8:1080::/48 Signature Algorithm: sha256WithRSAEncryption 86:0a:71:b3:29:cb:75:48:c5:98:c9:9d:09:98:1a:39:f8:4f: a6:86:19:48:7b:3c:86:0e:a3:bf:62:f5:cb:09:07:cc:09:82: c5:bd:50:50:43:d2:34:5a:79:cf:eb:d1:be:f3:a6:08:78:01: fb:88:6f:fa:b1:99:ad:8a:df:2f:8c:5e:7c:d5:2d:56:91:59: ae:25:df:89:8e:24:d2:36:64:f5:aa:7b:a9:eb:79:61:00:c8: 3f:83:f3:1b:0a:af:a4:c0:bb:72:45:46:d4:f5:48:1a:52:7c: 54:1a:31:9e:bf:c4:98:25:91:20:9d:ea:fb:b4:6e:f6:1a:05: 85:7d:d7:63:17:ac:70:06:b4:e4:fb:0b:b5:f9:d1:ce:7f:8e: c5:fb:98:c5:ac:7a:79:cc:e5:a6:99:ab:4d:37:8c:74:0f:76: 1f:0b:15:f3:69:84:c1:3e:e7:f1:03:40:af:95:01:bc:97:13: b9:5d:7d:4c:c8:14:e6:f4:9a:e5:12:98:00:ea:98:f0:e6:a9: 65:f7:ad:86:98:ff:97:96:8a:13:2c:3e:44:2b:a7:da:b1:63: fb:56:c9:c1:15:3c:99:31:98:cf:27:b4:96:a7:6f:ff:30:65: 02:ef:16:81:6e:33:03:b3:17:63:6d:23:2e:85:6a:00:c3:d7: 4c:68:b0:3a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdNQJ5EIReP8asPdDo9fzmvLhxX8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODEwMDAzMTA2WhcNMjYxMTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZjY3NmI4ODNhOGY1ZjNkMDExMmQ1YzZmNDcyNmY5NzMz NGI5ODYxYzUxYmFjZDg4M2NmMWI3Y2QwNzg2MDE5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCeFjOOils+iRyQCLm5tv4LQL1afgvMLLpsPLxzPoImqVO6 SW/cJ7zFap5oLzQpV2P5FRaoOjAXAMQIygRBSVKgiVtPZmNN0LxR9otCeQDLz78X 5YXbiYqxFSRqBiFfhxF6xmSUr07WUWK7BK3NcWNNla0aqmZDJHKcoa6rSlX90jhX WjWD2I2QVQyx9UNEwCAVHZMlQpMSab0nJ0PzXXrGyIDzS9TYGaJ5cvUzwP7uKGFm 35R2qm8MzJIna0BHiLoSBtdqYOTIXjzdnV6nCUNk8Bzi2I1mzDSLHirpOi8USWU2 6+THi2Y6XqphDctfLsE2ClFBv37BQR5YX5waKIO9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU9Z4OrF06jAAtWRcy/Cj3/Kt9/CswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I4OTIxYWEzLTk1MGYtNDA0Zi05OWE0LWRjMzU3MjBlY2QxMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/oEIAwDQYJKoZIhvcNAQELBQADggEBAIYKcbMpy3VIxZjJnQmYGjn4 T6aGGUh7PIYOo79i9csJB8wJgsW9UFBD0jRaec/r0b7zpgh4AfuIb/qxma2K3y+M XnzVLVaRWa4l34mOJNI2ZPWqe6nreWEAyD+D8xsKr6TAu3JFRtT1SBpSfFQaMZ6/ xJglkSCd6vu0bvYaBYV912MXrHAGtOT7C7X50c5/jsX7mMWsennM5aaZq003jHQP dh8LFfNphME+5/EDQK+VAbyXE7ldfUzIFOb0muUSmADqmPDmqWX3rYaY/5eWihMs PkQrp9qxY/tWycEVPJkxmM8ntJanb/8wZQLvFoFuMwOzF2NtIy6FagDD10xosDo= -----END CERTIFICATE-----Generated at Thu Sep 17 16:52:57 2026 by rpki-client