$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d06d2ef9-052d-4872-acfd-4d71434b1618.roa File: d06d2ef9-052d-4872-acfd-4d71434b1618.roa (raw, json) Hash identifier: ZXHJ94ny/GFXeyMITLh4H0ztjAZAOnbljTmi/XSTAsg= Subject key identifier: 6D:67:8C:67:DD:99:0A:C9:8A:44:E6:EC:A6:B1:C8:0C:E1:99:D5:C5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 041D5500BE2C0014632CD46774FEDFAC8F13B128 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d06d2ef9-052d-4872-acfd-4d71434b1618.roa Signing time: Wed 09 Sep 2026 16:07:09 +0000 ROA not before: Wed 09 Sep 2026 16:07:09 +0000 ROA not after: Tue 08 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f38:c280::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:1d:55:00:be:2c:00:14:63:2c:d4:67:74:fe:df:ac:8f:13:b1:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 9 16:07:09 2026 GMT Not After : Dec 8 23:59:59 2026 GMT Subject: serialNumber=9c806a96d062ae778bacdcaa5f2a8f3ee90663b5f2a76e2ada54668aa1112e33, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2e:ec:af:9b:c2:e6:66:29:51:da:8e:8f:e8: fc:7c:83:7b:c4:cf:fc:36:81:a8:83:79:7e:ca:b8: 8e:79:99:89:15:39:41:34:b9:68:45:28:33:7c:7a: d8:fe:27:d3:78:ba:71:98:bc:0c:54:bf:7b:ed:ea: 00:c5:3c:fe:3f:d5:65:8c:cf:14:b1:75:5d:57:05: ca:2d:d3:c4:22:ef:a4:9c:bf:99:3f:ba:10:5b:cf: df:0d:79:d3:78:30:0d:52:31:e9:c1:e0:c2:ce:23: 70:f8:95:8d:8d:de:86:85:fd:22:af:57:2f:db:8a: 7c:d4:ce:7b:4a:dc:c0:eb:85:24:9e:7b:69:eb:6d: 8b:f4:df:10:2d:b4:d1:60:0c:8e:49:d6:94:c9:54: 3d:af:4d:25:29:9e:2b:69:7f:7f:36:5a:8e:e8:4d: b8:70:80:44:dd:5d:03:ea:67:71:38:94:c8:01:4e: 33:e6:3b:4d:31:e4:61:e5:46:2a:64:a7:b9:aa:32: ea:b2:e7:00:b4:9b:60:78:89:28:8c:3f:25:57:3a: 01:3d:5c:9e:55:66:bd:3e:65:28:35:d0:de:84:47: db:8f:cc:e1:39:a2:40:a4:0a:01:2a:41:33:42:f1: 4b:d3:7a:29:c8:9a:39:81:db:16:a7:af:f4:01:e0: d3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:67:8C:67:DD:99:0A:C9:8A:44:E6:EC:A6:B1:C8:0C:E1:99:D5:C5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d06d2ef9-052d-4872-acfd-4d71434b1618.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f38:c280::/48 Signature Algorithm: sha256WithRSAEncryption 58:07:17:e2:a2:f5:ac:1f:e6:6d:b3:2d:fa:b1:1d:e5:86:9d: 60:a2:7a:2e:85:46:1c:a1:70:58:61:45:53:af:21:d2:02:2c: 9c:23:ec:5d:da:85:4e:ed:58:a4:b1:13:17:a7:a2:f2:31:42: 9c:1c:37:2f:02:53:48:e9:cc:37:e4:77:4a:5f:a3:41:c5:fb: 3d:9a:db:a3:5f:95:da:e6:17:1e:e3:15:86:24:05:ac:41:c0: fa:b0:fe:be:a5:bd:ea:16:b0:0f:4d:49:50:95:53:ca:f3:4d: a1:0e:16:48:07:8d:14:7b:19:3b:d6:27:65:7b:56:e6:ab:58: 8b:8d:a9:19:b5:16:5a:2b:50:34:6c:15:6d:62:ee:58:85:90: 75:00:3b:99:68:e3:34:9f:03:f0:7f:f4:e6:fd:4a:15:17:22: d9:ed:f3:8c:84:98:05:c8:79:25:e6:76:ad:e4:00:a3:85:65: 6f:40:71:5e:1c:ac:ff:3c:4c:1c:d3:47:c2:d5:3a:93:ca:c4: 3a:78:42:5d:3c:f3:5e:80:b1:e8:db:fa:25:50:e6:a9:4e:26: 07:d8:f7:f5:64:12:8a:95:c3:11:34:72:19:61:ea:ca:4d:2d: ee:d7:37:66:74:5b:94:cf:18:ef:da:8c:cf:7f:45:8d:03:3f: a4:3a:31:f6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBB1VAL4sABRjLNRndP7frI8TsSgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwOTA5MTYwNzA5WhcNMjYxMjA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A5YzgwNmE5NmQwNjJhZTc3OGJhY2RjYWE1ZjJhOGYzZWU5 MDY2M2I1ZjJhNzZlMmFkYTU0NjY4YWExMTEyZTMzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOLuyvm8LmZilR2o6P6Px8g3vEz/w2gaiDeX7KuI55mYkV OUE0uWhFKDN8etj+J9N4unGYvAxUv3vt6gDFPP4/1WWMzxSxdV1XBcot08Qi76Sc v5k/uhBbz98NedN4MA1SMenB4MLOI3D4lY2N3oaF/SKvVy/binzUzntK3MDrhSSe e2nrbYv03xAttNFgDI5J1pTJVD2vTSUpnitpf382Wo7oTbhwgETdXQPqZ3E4lMgB TjPmO00x5GHlRipkp7mqMuqy5wC0m2B4iSiMPyVXOgE9XJ5VZr0+ZSg10N6ER9uP zOE5okCkCgEqQTNC8UvTeinImjmB2xanr/QB4NOJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUbWeMZ92ZCsmKRObsprHIDOGZ1cUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QwNmQyZWY5LTA1MmQtNDg3Mi1hY2ZkLTRkNzE0MzRiMTYxOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB84woAwDQYJKoZIhvcNAQELBQADggEBAFgHF+Ki9awf5m2zLfqxHeWG nWCiei6FRhyhcFhhRVOvIdICLJwj7F3ahU7tWKSxExenovIxQpwcNy8CU0jpzDfk d0pfo0HF+z2a26NfldrmFx7jFYYkBaxBwPqw/r6lveoWsA9NSVCVU8rzTaEOFkgH jRR7GTvWJ2V7VuarWIuNqRm1FlorUDRsFW1i7liFkHUAO5lo4zSfA/B/9Ob9ShUX Itnt84yEmAXIeSXmdq3kAKOFZW9AcV4crP88TBzTR8LVOpPKxDp4Ql08816Asejb +iVQ5qlOJgfY9/VkEoqVwxE0chlh6spNLe7XN2Z0W5TPGO/ajM9/RY0DP6Q6MfY= -----END CERTIFICATE-----Generated at Tue Sep 15 10:59:04 2026 by rpki-client