$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd2952bd-ccae-41d1-a73e-254ac17830cd.roa File: bd2952bd-ccae-41d1-a73e-254ac17830cd.roa (raw, json) Hash identifier: 4IswIlmkaS7v5gBd67pk1Oievf46+GcXxEASAlsdKYk= Subject key identifier: 25:36:88:66:87:42:4E:9B:08:FD:38:E4:60:4F:3E:21:C9:30:1C:FC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 480C7F0680F9D7A60B1D67707992BDD68887CBDC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd2952bd-ccae-41d1-a73e-254ac17830cd.roa Signing time: Tue 04 Aug 2026 00:20:10 +0000 ROA not before: Tue 04 Aug 2026 00:20:10 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f1f:4000::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:0c:7f:06:80:f9:d7:a6:0b:1d:67:70:79:92:bd:d6:88:87:cb:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 00:20:10 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=b22751659f3dbe3de6a4ebbb31f08cf2e7294c006c9b2c4407ecb590ed469469, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b1:c8:fe:4d:c6:34:d7:d2:0b:a4:77:90:9e: 3e:2a:e9:2d:bd:42:80:39:37:a9:d9:b7:3c:d6:d2: 91:8d:27:00:cc:74:c3:08:06:c9:1e:a9:f2:a0:e1: 94:08:04:0a:e2:1d:49:38:3d:ff:77:cb:62:73:c4: be:70:1a:50:0f:b4:4b:eb:5a:8a:1a:86:ea:12:e1: a8:94:7a:df:57:76:ab:89:01:1c:83:19:62:2f:4c: 36:d3:b9:63:e7:6c:1d:d5:b5:13:d0:18:a9:46:cd: 0b:a9:89:f0:30:fe:aa:fd:93:bd:e9:59:e4:65:ff: 05:96:5a:af:f9:cb:e9:1a:0f:62:02:b6:3e:8a:da: be:18:f7:d2:b0:32:68:63:37:35:37:46:77:39:84: 02:0c:da:f2:2b:a7:84:b0:05:74:b2:99:b2:5d:7c: ec:5d:45:65:dc:7d:57:73:4d:32:57:d2:9a:ff:64: 26:c0:74:1e:ff:69:74:5a:8b:15:69:8a:46:a7:45: 71:56:b5:dc:75:dc:b3:5c:fb:53:f9:23:31:5f:fd: 76:da:05:ff:17:36:39:cc:ff:2a:be:94:f0:78:b1: ac:1c:8d:df:55:df:79:c5:20:ec:b8:af:9c:4f:cf: 10:18:a1:24:d6:62:cf:09:c1:ee:94:d2:5e:9e:de: f1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:36:88:66:87:42:4E:9B:08:FD:38:E4:60:4F:3E:21:C9:30:1C:FC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd2952bd-ccae-41d1-a73e-254ac17830cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f1f:4000::/37 Signature Algorithm: sha256WithRSAEncryption 3e:10:ed:2f:62:3b:eb:be:9e:94:fe:b6:fb:3e:28:da:85:a3: b2:e5:58:12:31:0c:47:60:a6:fa:f4:30:f1:99:2b:a9:0b:7e: ae:66:55:a4:f9:57:84:e7:81:25:f5:52:e9:06:91:91:eb:ab: 0e:8e:84:83:bd:4b:d0:e5:b6:16:27:b0:d9:f7:87:32:ab:47: b8:5d:a2:b8:bc:a4:d5:95:04:43:4f:c0:a0:56:cf:e2:25:74: 6a:51:df:98:7e:20:a5:5c:08:7a:e8:36:97:89:31:99:01:c8: 16:51:12:fc:53:03:b9:6e:2f:dd:47:70:d4:b6:3a:c3:ff:7e: da:43:20:57:67:59:c2:ad:65:4c:06:33:43:f9:fc:06:8e:1f: ae:69:cc:a2:d1:0a:c7:91:ac:29:eb:61:89:7e:9d:a6:7c:78: 48:09:ba:00:44:ea:39:c1:fe:70:b7:42:fa:d7:43:37:2a:ab: 89:35:a8:4a:91:bd:94:18:5e:2b:85:70:98:8f:66:d0:86:cf: e6:b1:95:8f:55:ea:47:14:23:6b:a2:37:8c:27:1b:60:51:92: bd:6c:df:37:ef:6f:15:65:01:d4:90:bd:58:f0:af:6e:78:12: 92:5f:ff:60:fa:e0:84:f8:5b:2c:ba:49:f6:bb:10:11:34:bd: 3e:fb:80:d7 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUSAx/BoD516YLHWdweZK91oiHy9wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA0MDAyMDEwWhcNMjYxMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMjI3NTE2NTlmM2RiZTNkZTZhNGViYmIzMWYwOGNmMmU3 Mjk0YzAwNmM5YjJjNDQwN2VjYjU5MGVkNDY5NDY5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCTscj+TcY019ILpHeQnj4q6S29QoA5N6nZtzzW0pGNJwDM dMMIBskeqfKg4ZQIBAriHUk4Pf93y2JzxL5wGlAPtEvrWooahuoS4aiUet9XdquJ ARyDGWIvTDbTuWPnbB3VtRPQGKlGzQupifAw/qr9k73pWeRl/wWWWq/5y+kaD2IC tj6K2r4Y99KwMmhjNzU3Rnc5hAIM2vIrp4SwBXSymbJdfOxdRWXcfVdzTTJX0pr/ ZCbAdB7/aXRaixVpikanRXFWtdx13LNc+1P5IzFf/XbaBf8XNjnM/yq+lPB4sawc jd9V33nFIOy4r5xPzxAYoSTWYs8Jwe6U0l6e3vH5AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUJTaIZodCTpsI/TjkYE8+IckwHPwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JkMjk1MmJkLWNjYWUtNDFkMS1hNzNlLTI1NGFjMTc4MzBjZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8fQDANBgkqhkiG9w0BAQsFAAOCAQEAPhDtL2I7676elP62+z4o2oWj suVYEjEMR2Cm+vQw8ZkrqQt+rmZVpPlXhOeBJfVS6QaRkeurDo6Eg71L0OW2Fiew 2feHMqtHuF2iuLyk1ZUEQ0/AoFbP4iV0alHfmH4gpVwIeug2l4kxmQHIFlES/FMD uW4v3Udw1LY6w/9+2kMgV2dZwq1lTAYzQ/n8Bo4frmnMotEKx5GsKethiX6dpnx4 SAm6AETqOcH+cLdC+tdDNyqriTWoSpG9lBheK4VwmI9m0IbP5rGVj1XqRxQja6I3 jCcbYFGSvWzfN+9vFWUB1JC9WPCvbngSkl//YPrghPhbLLpJ9rsQETS9PvuA1w== -----END CERTIFICATE-----Generated at Thu Sep 17 17:05:21 2026 by rpki-client