$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dd938bed-1db1-4633-a8dd-0c92e030c213.roa File: dd938bed-1db1-4633-a8dd-0c92e030c213.roa (raw, json) Hash identifier: t3NuCbzzJy7QNTEq4k6junU+4j9oRIpGF6NY5ks9NxQ= Subject key identifier: 45:13:0A:CD:DE:7A:49:E9:5A:D1:6A:DB:1F:C5:2F:E6:D4:DA:42:65 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 36A18182FFE1C024A82B5571974B645128CC9CC7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dd938bed-1db1-4633-a8dd-0c92e030c213.roa Signing time: Tue 18 Aug 2026 18:05:01 +0000 ROA not before: Tue 18 Aug 2026 18:05:01 +0000 ROA not after: Mon 16 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f33:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:a1:81:82:ff:e1:c0:24:a8:2b:55:71:97:4b:64:51:28:cc:9c:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 18 18:05:01 2026 GMT Not After : Nov 16 23:59:59 2026 GMT Subject: serialNumber=d3c4257b1622ada4c981ebbd1eefa5f2b4a08187d6b4fb640778628d24af1aea, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0f:33:e8:4b:94:3c:5f:3c:ba:7c:57:53:7a: 97:c6:86:dc:0a:ed:af:2b:d0:95:97:07:a7:fd:3c: 75:23:0f:6d:29:a1:59:da:a3:c7:2e:61:7d:12:85: 08:a8:6b:55:48:4c:ff:7b:3f:ff:a4:f3:20:05:2f: 8b:0c:3c:65:f7:d7:c4:3c:4d:31:58:5f:47:44:11: 15:7d:7e:a4:f9:ec:ea:b0:eb:2d:7f:66:3a:51:d8: 12:06:65:8a:74:f5:bf:98:d6:73:70:a1:78:f1:54: 5d:a4:f8:1d:b2:73:58:15:cf:ef:ba:cc:1d:df:e0: 16:9d:46:34:95:5a:4b:2d:8a:b2:4c:39:40:d6:5d: d2:1d:a3:ea:a6:9c:2d:e5:03:9c:19:38:23:07:ff: a1:80:9a:32:3f:59:54:8a:3d:3d:15:9f:f3:c9:a9: 93:7c:3a:3a:1b:3f:08:a3:1d:3f:3f:5c:50:bd:fd: 88:97:91:20:45:b0:87:fe:b9:65:4f:37:f9:ec:99: e6:e6:c6:d1:c7:1e:58:5e:8f:ba:3f:e8:98:a0:88: db:9a:f8:ce:b0:28:08:91:6b:34:9e:cd:b9:a3:9e: 90:12:1d:20:82:ed:13:46:c8:c4:a2:ba:45:3a:0c: 30:02:db:08:02:38:4b:54:a7:c1:b4:66:d8:b4:2e: 6c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:13:0A:CD:DE:7A:49:E9:5A:D1:6A:DB:1F:C5:2F:E6:D4:DA:42:65 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dd938bed-1db1-4633-a8dd-0c92e030c213.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f33:800::/40 Signature Algorithm: sha256WithRSAEncryption 0c:fb:95:2e:38:56:ef:c7:2d:a3:7e:95:8c:70:9f:0b:4c:ba: 8b:5d:d5:70:b7:32:dc:09:5c:43:e5:d9:60:39:09:75:97:c5: ed:7c:1a:6e:d4:52:64:ad:b0:2f:52:17:14:a3:76:f7:60:1d: 42:36:1f:fe:e4:0d:d5:ea:56:a9:ba:17:74:11:ac:06:5a:83: e7:ac:56:63:a9:57:49:78:6e:74:d7:9c:4e:6a:bd:0d:38:43: 9f:eb:e5:25:76:b0:68:78:b3:0a:fd:69:60:04:19:34:f4:6a: 55:b5:cc:a2:32:bf:de:32:52:06:d7:57:1a:c8:c2:7c:d7:10: 55:8f:bd:21:0d:e6:58:f7:f2:88:d6:16:cf:79:5d:56:69:c9: 54:61:bf:f4:28:26:c7:c6:36:13:32:25:b9:7b:0f:90:b5:b9: a4:26:01:73:b8:7a:f0:db:5d:ba:a8:28:fa:48:51:c9:0a:04: 5e:07:48:92:f6:70:88:fe:e3:2c:59:bd:ae:dc:7d:87:c2:70: 50:cc:2a:bb:0f:2b:e4:9f:f7:e8:c2:2e:b4:7e:45:64:62:1d: db:fa:02:4d:ea:ee:18:f3:8b:e5:9f:f2:46:77:81:6e:cd:29: 65:63:da:dc:0d:66:1b:5d:5b:df:8a:ce:d4:34:8d:72:cc:8b: e2:e4:9d:53 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUNqGBgv/hwCSoK1Vxl0tkUSjMnMcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODE4MTgwNTAxWhcNMjYxMTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BkM2M0MjU3YjE2MjJhZGE0Yzk4MWViYmQxZWVmYTVmMmI0 YTA4MTg3ZDZiNGZiNjQwNzc4NjI4ZDI0YWYxYWVhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKDzPoS5Q8Xzy6fFdTepfGhtwK7a8r0JWXB6f9PHUjD20p oVnao8cuYX0ShQioa1VITP97P/+k8yAFL4sMPGX318Q8TTFYX0dEERV9fqT57Oqw 6y1/ZjpR2BIGZYp09b+Y1nNwoXjxVF2k+B2yc1gVz++6zB3f4BadRjSVWkstirJM OUDWXdIdo+qmnC3lA5wZOCMH/6GAmjI/WVSKPT0Vn/PJqZN8OjobPwijHT8/XFC9 /YiXkSBFsIf+uWVPN/nsmebmxtHHHlhej7o/6JigiNua+M6wKAiRazSezbmjnpAS HSCC7RNGyMSiukU6DDAC2wgCOEtUp8G0Zti0LmwXAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQURRMKzd56Sela0WrbH8Uv5tTaQmUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RkOTM4YmVkLTFkYjEtNDYzMy1hOGRkLTBjOTJlMDMwYzIxMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB8zCDANBgkqhkiG9w0BAQsFAAOCAQEADPuVLjhW78cto36VjHCfC0y6 i13VcLcy3AlcQ+XZYDkJdZfF7XwabtRSZK2wL1IXFKN292AdQjYf/uQN1epWqboX dBGsBlqD56xWY6lXSXhudNecTmq9DThDn+vlJXawaHizCv1pYAQZNPRqVbXMojK/ 3jJSBtdXGsjCfNcQVY+9IQ3mWPfyiNYWz3ldVmnJVGG/9Cgmx8Y2EzIluXsPkLW5 pCYBc7h68Ntduqgo+khRyQoEXgdIkvZwiP7jLFm9rtx9h8JwUMwquw8r5J/36MIu tH5FZGId2/oCTeruGPOL5Z/yRneBbs0pZWPa3A1mG11b34rO1DSNcsyL4uSdUw== -----END CERTIFICATE-----Generated at Tue Sep 15 13:56:49 2026 by rpki-client