$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c2692bf1-a717-402b-8f04-c159c349044d.roa File: c2692bf1-a717-402b-8f04-c159c349044d.roa (raw, json) Hash identifier: AWemqIjbJAlsehTfGf5bMbiShPEKZaZPu9Ob6/lho8U= Subject key identifier: 00:30:96:68:5C:88:72:73:59:84:72:DC:F2:AF:8D:CF:6C:53:9C:8B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4DA69025921AF3B345DB9F7522862B552141DB2F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c2692bf1-a717-402b-8f04-c159c349044d.roa Signing time: Thu 10 Sep 2026 00:20:42 +0000 ROA not before: Thu 10 Sep 2026 00:20:42 +0000 ROA not after: Wed 09 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f1b:c000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:a6:90:25:92:1a:f3:b3:45:db:9f:75:22:86:2b:55:21:41:db:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 10 00:20:42 2026 GMT Not After : Dec 9 23:59:59 2026 GMT Subject: serialNumber=3ee37ece11776943a18d57801570cffb9e9aa7f33da4597768107f0a0d06d6dc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4a:ff:6e:5e:30:b4:f3:45:ab:15:11:ee:cc: 4c:85:f6:75:87:e7:d8:81:0e:0b:b3:0f:2c:cc:e4: 5b:0c:e7:09:ca:37:7f:72:fb:28:8d:6a:d7:e7:f1: 82:55:0b:e4:f9:e7:81:73:04:de:09:b5:4e:94:e2: ee:98:ac:92:ce:55:6f:4b:7b:d4:cd:0f:23:e7:23: b0:52:a6:81:71:1b:28:56:ff:67:1b:01:fd:de:f2: 78:b8:25:8a:f3:ec:64:ff:0d:bc:c9:be:00:d8:69: 07:9b:0d:1e:83:35:ff:a6:4a:fb:42:b0:e7:b0:59: 68:00:da:77:91:c5:69:ae:63:35:9e:c8:ad:3c:6a: 09:e9:db:99:a4:16:ab:5c:b4:56:4e:29:27:20:24: 84:ed:e2:23:72:2b:7e:bb:ea:a3:45:5c:cd:db:d9: 90:20:0b:c3:e5:04:aa:0e:3a:e0:4b:0a:e7:e9:e2: 30:45:a7:0e:bf:8d:6f:3b:65:8c:75:d5:eb:68:db: 8d:c1:5c:1c:84:dd:d6:d9:9c:cc:2d:61:a6:55:db: 13:fe:d4:0b:f8:96:c0:9c:8f:d2:95:67:e3:73:c1: 90:36:b5:c0:f8:3c:1a:34:a0:00:3c:7a:13:ab:b0: 91:a0:7a:79:91:37:4b:aa:00:33:b5:7b:d5:40:f5: 40:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:30:96:68:5C:88:72:73:59:84:72:DC:F2:AF:8D:CF:6C:53:9C:8B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c2692bf1-a717-402b-8f04-c159c349044d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f1b:c000::/36 Signature Algorithm: sha256WithRSAEncryption b2:fa:3a:c0:f4:ca:a2:6f:33:e5:3e:05:c2:5d:8a:9e:ce:55: 07:f5:2b:2c:e3:8e:5c:cd:96:fb:4e:15:f8:45:81:0b:1e:25: a5:57:74:99:09:4a:6b:7b:a4:d4:c1:99:dd:f1:b6:89:ba:19: 7b:b8:60:eb:d1:61:86:6a:ae:43:b0:a2:54:4e:c4:e2:8b:87: d4:f8:36:41:8a:95:64:5a:c6:8f:8e:20:0e:c5:1b:da:88:cd: a9:c7:f6:b1:fe:52:75:ad:45:64:93:38:82:42:1a:07:1e:1e: 8f:1b:9e:a5:ff:a4:7b:15:cd:3c:c8:98:91:c4:3b:30:fd:aa: 09:87:00:a1:6c:f5:c3:2e:c1:62:f8:ef:c0:72:73:6b:4e:f4: 9d:9d:35:82:d1:b6:eb:66:a8:74:6e:3c:37:fc:0f:48:aa:f0: d6:9b:2a:d9:a1:ef:06:15:9d:2e:44:c3:9d:9e:c5:1d:8e:cb: a7:b1:3d:b1:9c:4d:62:8e:00:3b:8a:2f:4f:f7:ec:54:00:a6: 02:32:d8:ad:e7:fb:6c:bd:eb:de:3e:3b:dd:fa:04:9d:c3:57: ea:7a:0e:ab:8a:5c:45:0e:40:4d:f6:f7:ab:4d:e7:52:82:63: 21:65:13:0f:ac:68:43:60:7f:d7:81:54:44:66:9e:ba:c5:d1: 06:e2:e0:f3 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUTaaQJZIa87NF2591IoYrVSFB2y8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwOTEwMDAyMDQyWhcNMjYxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AzZWUzN2VjZTExNzc2OTQzYTE4ZDU3ODAxNTcwY2ZmYjll OWFhN2YzM2RhNDU5Nzc2ODEwN2YwYTBkMDZkNmRjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChSv9uXjC080WrFRHuzEyF9nWH59iBDguzDyzM5FsM5wnK N39y+yiNatfn8YJVC+T554FzBN4JtU6U4u6YrJLOVW9Le9TNDyPnI7BSpoFxGyhW /2cbAf3e8ni4JYrz7GT/DbzJvgDYaQebDR6DNf+mSvtCsOewWWgA2neRxWmuYzWe yK08agnp25mkFqtctFZOKScgJITt4iNyK3676qNFXM3b2ZAgC8PlBKoOOuBLCufp 4jBFpw6/jW87ZYx11eto243BXByE3dbZnMwtYaZV2xP+1Av4lsCcj9KVZ+NzwZA2 tcD4PBo0oAA8ehOrsJGgenmRN0uqADO1e9VA9UA3AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUADCWaFyIcnNZhHLc8q+Nz2xTnIswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MyNjkyYmYxLWE3MTctNDAyYi04ZjA0LWMxNTljMzQ5MDQ0ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8bwDANBgkqhkiG9w0BAQsFAAOCAQEAsvo6wPTKom8z5T4Fwl2Kns5V B/UrLOOOXM2W+04V+EWBCx4lpVd0mQlKa3uk1MGZ3fG2iboZe7hg69FhhmquQ7Ci VE7E4ouH1Pg2QYqVZFrGj44gDsUb2ojNqcf2sf5Sda1FZJM4gkIaBx4ejxuepf+k exXNPMiYkcQ7MP2qCYcAoWz1wy7BYvjvwHJza070nZ01gtG262aodG48N/wPSKrw 1psq2aHvBhWdLkTDnZ7FHY7Lp7E9sZxNYo4AO4ovT/fsVACmAjLYref7bL3r3j47 3foEncNX6noOq4pcRQ5ATfb3q03nUoJjIWUTD6xoQ2B/14FURGaeusXRBuLg8w== -----END CERTIFICATE-----Generated at Thu Sep 17 16:23:07 2026 by rpki-client