$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b950ef09-433b-4531-ae44-7f6a2b482cf9.roa File: b950ef09-433b-4531-ae44-7f6a2b482cf9.roa (raw, json) Hash identifier: TW3tELtLTXtNA623ueWL4DVxakKK/AyJNUGy8MXMsqU= Subject key identifier: 5F:5C:23:77:6C:70:54:C9:B8:84:60:17:DA:17:00:83:D8:D1:C1:0C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4AF05BA1D733D40E4578F085F5DB594DC56275E6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b950ef09-433b-4531-ae44-7f6a2b482cf9.roa Signing time: Wed 09 Sep 2026 16:07:04 +0000 ROA not before: Wed 09 Sep 2026 16:07:04 +0000 ROA not after: Tue 08 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f6a:c800::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:f0:5b:a1:d7:33:d4:0e:45:78:f0:85:f5:db:59:4d:c5:62:75:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 9 16:07:04 2026 GMT Not After : Dec 8 23:59:59 2026 GMT Subject: serialNumber=639cfb37b807b132c5e70fb0055610f5995fe4020a91fbd2abb13a9debe0ef36, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6a:28:20:2f:ae:58:89:80:b1:83:08:ae:72: 4c:38:cd:45:f7:e0:14:3d:5c:68:12:fd:1e:d3:59: 98:44:45:05:6e:30:9a:9e:33:25:fc:03:33:b1:7f: 5e:70:3d:2e:19:b0:a1:58:45:5f:9b:ee:5f:92:f8: ad:ea:8b:4b:d2:44:0e:7a:92:df:98:61:d6:65:99: 1c:08:d6:4a:d5:db:39:af:eb:64:71:9b:bf:ba:dc: b2:0a:e5:b7:c5:03:36:a8:d7:c7:bf:c0:23:70:77: 53:62:3f:db:a8:44:a1:40:98:26:16:b0:a2:24:2f: ff:6b:4a:a2:73:6d:19:10:fc:38:89:3b:1a:11:26: 09:96:11:fc:2a:96:d3:61:ad:b7:ca:30:a5:5c:48: d0:5f:39:cc:19:5a:89:ce:04:fe:85:13:7a:ea:a6: 8f:75:31:c7:1a:77:16:2a:02:a9:81:bc:71:c9:a1: a7:d5:fd:20:8b:11:ed:2e:5a:70:71:64:b6:04:db: 48:3b:a7:2c:ca:21:4e:fe:ff:0b:c5:89:e5:bb:28: fe:93:13:2b:84:ff:cd:30:6d:0d:f6:c0:b2:87:b1: 2f:49:c1:f2:df:ab:eb:ef:bb:2c:b0:a9:cf:50:2b: aa:02:59:46:65:57:c2:85:0a:01:c7:f5:e9:61:a6: 91:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:5C:23:77:6C:70:54:C9:B8:84:60:17:DA:17:00:83:D8:D1:C1:0C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b950ef09-433b-4531-ae44-7f6a2b482cf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f6a:c800::/46 Signature Algorithm: sha256WithRSAEncryption 37:57:2b:ce:d5:69:66:b0:35:87:05:6b:b9:15:72:99:01:bf: 7f:5f:30:55:32:d7:56:cd:cd:61:8e:b9:3c:2c:bb:5e:4f:a4: 79:3c:68:9f:11:96:bd:cd:a2:d6:98:d6:08:33:19:07:02:e4: 51:15:b6:16:5e:3f:42:76:bd:06:3b:07:a1:59:39:e5:b7:7b: 14:08:e6:a2:82:d1:ab:a9:66:c2:0e:bb:58:75:95:03:dc:d0: 6d:07:64:05:a6:be:d7:76:01:88:f0:b8:36:46:7a:7b:b7:a6: 50:3f:09:09:1b:10:49:9c:f3:ca:cf:36:50:eb:7c:52:5e:46: 43:80:a0:7b:48:8b:ff:13:ce:ab:ed:b0:e6:2e:08:8a:72:10: 16:d2:f5:ef:df:34:ef:f4:40:62:e0:e5:75:d9:9d:2b:c8:8a: 3f:2c:f1:bd:91:b0:da:76:94:71:c6:48:4f:f8:c1:97:e9:92: a4:92:c8:29:3e:b9:ca:2c:45:05:83:21:f1:90:15:ac:37:cd: d1:38:e5:e5:6f:b7:b1:eb:c3:15:b5:4f:c6:88:84:fa:57:fa: 4f:de:37:f1:9f:a3:4a:f0:3f:ec:d0:91:01:a0:3e:c4:38:67: 55:58:a7:e9:0f:3f:63:66:62:b9:e8:2b:03:57:6a:75:2d:4e: b6:bb:ea:7c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSvBbodcz1A5FePCF9dtZTcVideYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwOTA5MTYwNzA0WhcNMjYxMjA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MzljZmIzN2I4MDdiMTMyYzVlNzBmYjAwNTU2MTBmNTk5 NWZlNDAyMGE5MWZiZDJhYmIxM2E5ZGViZTBlZjM2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpaiggL65YiYCxgwiuckw4zUX34BQ9XGgS/R7TWZhERQVu MJqeMyX8AzOxf15wPS4ZsKFYRV+b7l+S+K3qi0vSRA56kt+YYdZlmRwI1krV2zmv 62Rxm7+63LIK5bfFAzao18e/wCNwd1NiP9uoRKFAmCYWsKIkL/9rSqJzbRkQ/DiJ OxoRJgmWEfwqltNhrbfKMKVcSNBfOcwZWonOBP6FE3rqpo91MccadxYqAqmBvHHJ oafV/SCLEe0uWnBxZLYE20g7pyzKIU7+/wvFieW7KP6TEyuE/80wbQ32wLKHsS9J wfLfq+vvuyywqc9QK6oCWUZlV8KFCgHH9elhppEJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUX1wjd2xwVMm4hGAX2hcAg9jRwQwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I5NTBlZjA5LTQzM2ItNDUzMS1hZTQ0LTdmNmEyYjQ4MmNmOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB9qyAAwDQYJKoZIhvcNAQELBQADggEBADdXK87VaWawNYcFa7kVcpkB v39fMFUy11bNzWGOuTwsu15PpHk8aJ8Rlr3NotaY1ggzGQcC5FEVthZeP0J2vQY7 B6FZOeW3exQI5qKC0aupZsIOu1h1lQPc0G0HZAWmvtd2AYjwuDZGenu3plA/CQkb EEmc88rPNlDrfFJeRkOAoHtIi/8TzqvtsOYuCIpyEBbS9e/fNO/0QGLg5XXZnSvI ij8s8b2RsNp2lHHGSE/4wZfpkqSSyCk+ucosRQWDIfGQFaw3zdE45eVvt7HrwxW1 T8aIhPpX+k/eN/Gfo0rwP+zQkQGgPsQ4Z1VYp+kPP2NmYrnoKwNXanUtTra76nw= -----END CERTIFICATE-----Generated at Tue Sep 15 11:36:58 2026 by rpki-client