$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8adf094-ebcc-47e4-b1f7-410960a22db1.roa File: c8adf094-ebcc-47e4-b1f7-410960a22db1.roa (raw, json) Hash identifier: oPpCoehA7lAJLVzWNJNhEqUTamBAPYPmXaiSeqWm7eY= Subject key identifier: C9:01:10:53:F7:85:80:CC:64:0B:1E:84:1B:50:E6:D7:45:E3:A8:20 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 51D5FACAE42667A17EE0C10F335B121F3E031E2D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8adf094-ebcc-47e4-b1f7-410960a22db1.roa Signing time: Fri 28 Aug 2026 20:32:50 +0000 ROA not before: Fri 28 Aug 2026 20:32:50 +0000 ROA not after: Thu 26 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:e280::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:d5:fa:ca:e4:26:67:a1:7e:e0:c1:0f:33:5b:12:1f:3e:03:1e:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 28 20:32:50 2026 GMT Not After : Nov 26 23:59:59 2026 GMT Subject: serialNumber=1927a5068f0538a19fed909998431c1092abc6bf273902eb0f1de7858700c1c2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f4:04:5b:46:e4:2f:0f:4c:f0:50:ed:33:de: 18:6b:a7:90:e5:ce:69:2e:35:11:07:fa:ab:04:1c: b6:5d:7f:3b:1b:b7:42:7b:d3:32:48:e0:8a:9c:51: 72:69:94:42:0d:d7:55:de:6e:ab:ea:66:08:f9:5e: 87:a4:a4:9d:2e:aa:a0:49:53:7a:8d:60:a6:3c:e6: 36:c1:45:85:d7:fa:c2:3e:d4:fa:a5:6e:13:71:d7: c8:df:45:11:93:18:d5:71:fb:25:a9:fe:e1:f4:c5: 02:a7:80:08:88:22:20:b3:c2:5f:32:da:a8:6a:38: 6c:8f:c7:20:c7:4b:38:9e:5c:52:48:27:eb:bf:9a: b7:36:25:d7:53:e0:8d:9b:09:07:29:e0:fa:7a:fe: 8f:ff:a8:eb:e4:b1:f3:9f:04:99:61:a5:4f:3f:2d: 75:a2:46:00:f4:bf:09:26:9c:c5:47:03:af:b0:29: 21:0a:bc:32:4d:37:91:7d:72:ed:66:3c:8c:51:67: ee:11:12:6e:4e:38:38:2b:5e:17:a2:6c:8e:4b:c3: 78:49:9d:cc:7a:f4:bf:7a:64:68:82:91:10:81:df: 75:ad:3c:a8:be:8e:aa:4f:2f:a8:d0:c8:49:99:a4: 35:5a:33:a9:a1:35:d3:6b:d3:b3:49:b0:72:30:3c: 4d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:01:10:53:F7:85:80:CC:64:0B:1E:84:1B:50:E6:D7:45:E3:A8:20 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8adf094-ebcc-47e4-b1f7-410960a22db1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:e280::/48 Signature Algorithm: sha256WithRSAEncryption 89:66:c4:70:39:71:5c:ff:9b:b1:bc:1b:b6:e7:ee:d1:af:63: 22:34:63:29:7e:1b:5d:c8:05:f2:2b:37:ca:24:6a:89:c2:d0: 13:cc:65:f1:df:cd:06:34:99:5b:80:03:ad:52:9f:68:db:88: b9:7d:f1:42:76:e9:8a:ef:e7:7e:ff:02:4e:db:d7:f1:98:95: 89:f1:61:dd:6a:93:ca:68:3c:b7:11:e4:7b:96:ca:d0:8e:bd: 5b:d1:e3:c2:19:58:a2:02:97:28:6e:92:55:3b:83:2d:9a:15: c6:6f:b7:27:44:1b:11:f3:7c:b1:ff:a7:f4:77:0d:75:7a:1e: d2:1f:38:f6:5f:29:a2:0d:d6:2d:ab:eb:2b:af:27:dc:6e:3f: fd:d3:97:f7:f8:1e:c1:0b:bc:3c:98:4d:08:38:5c:c8:1e:dc: 82:07:8e:fc:a5:b0:55:9a:da:91:ed:c1:42:02:fd:ff:7a:85: b2:65:d1:36:bf:72:be:1e:93:3d:39:c3:d2:c7:14:4a:b1:39: bc:b8:cc:4d:28:fe:72:c4:2a:24:02:79:1f:b8:d8:c3:49:04: 69:47:c8:dd:f5:fd:62:c2:a6:e6:82:c9:3a:f1:a1:5b:15:bf: e8:e9:96:e8:55:9d:89:3f:90:2c:54:4f:dd:0a:36:ce:8a:d4: 2e:f7:d1:e2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUdX6yuQmZ6F+4MEPM1sSHz4DHi0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODI4MjAzMjUwWhcNMjYxMTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0AxOTI3YTUwNjhmMDUzOGExOWZlZDkwOTk5ODQzMWMxMDky YWJjNmJmMjczOTAyZWIwZjFkZTc4NTg3MDBjMWMyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCo9ARbRuQvD0zwUO0z3hhrp5DlzmkuNREH+qsEHLZdfzsb t0J70zJI4IqcUXJplEIN11XebqvqZgj5XoekpJ0uqqBJU3qNYKY85jbBRYXX+sI+ 1PqlbhNx18jfRRGTGNVx+yWp/uH0xQKngAiIIiCzwl8y2qhqOGyPxyDHSzieXFJI J+u/mrc2JddT4I2bCQcp4Pp6/o//qOvksfOfBJlhpU8/LXWiRgD0vwkmnMVHA6+w KSEKvDJNN5F9cu1mPIxRZ+4REm5OODgrXheibI5Lw3hJncx69L96ZGiCkRCB33Wt PKi+jqpPL6jQyEmZpDVaM6mhNdNr07NJsHIwPE3tAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUyQEQU/eFgMxkCx6EG1Dm10XjqCAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M4YWRmMDk0LWViY2MtNDdlNC1iMWY3LTQxMDk2MGEyMmRiMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//4oAwDQYJKoZIhvcNAQELBQADggEBAIlmxHA5cVz/m7G8G7bn7tGv YyI0Yyl+G13IBfIrN8okaonC0BPMZfHfzQY0mVuAA61Sn2jbiLl98UJ26Yrv537/ Ak7b1/GYlYnxYd1qk8poPLcR5HuWytCOvVvR48IZWKIClyhuklU7gy2aFcZvtydE GxHzfLH/p/R3DXV6HtIfOPZfKaIN1i2r6yuvJ9xuP/3Tl/f4HsELvDyYTQg4XMge 3IIHjvylsFWa2pHtwUIC/f96hbJl0Ta/cr4ekz05w9LHFEqxOby4zE0o/nLEKiQC eR+42MNJBGlHyN31/WLCpuaCyTrxoVsVv+jpluhVnYk/kCxUT90KNs6K1C730eI= -----END CERTIFICATE-----Generated at Tue Sep 15 13:16:13 2026 by rpki-client