$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dfb6a751-8b09-416e-94a6-4be4b11aea26.roa File: dfb6a751-8b09-416e-94a6-4be4b11aea26.roa (raw, json) Hash identifier: tGwoNv8ycfQTen2L44FS6LWlu84euv75axu2BiVdGFo= Subject key identifier: 28:FE:CD:23:8C:62:28:EE:B5:33:59:F0:B3:59:53:19:3C:5F:CE:00 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2167ADADBFADCBAD7F87178912E4A7242EEC8ACC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dfb6a751-8b09-416e-94a6-4be4b11aea26.roa Signing time: Sat 08 Aug 2026 00:20:12 +0000 ROA not before: Sat 08 Aug 2026 00:20:12 +0000 ROA not after: Fri 06 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fec:4400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:67:ad:ad:bf:ad:cb:ad:7f:87:17:89:12:e4:a7:24:2e:ec:8a:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 8 00:20:12 2026 GMT Not After : Nov 6 23:59:59 2026 GMT Subject: serialNumber=520a964f87626a4f03fd4709d4da535addedce09f1f1a54b8730cebe10740ce1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a2:49:28:b8:70:82:17:69:6e:d4:90:d8:82: 7b:e6:31:a1:f2:23:fa:6e:6c:6c:64:2d:19:e8:a7: 00:9c:88:d1:8b:c4:a8:24:f0:f8:59:51:02:8e:b7: 99:e5:3b:1d:27:36:2c:4a:28:c3:92:3e:ef:78:13: a7:0c:27:79:50:06:e9:fb:96:3c:8d:c1:4b:52:d2: 5d:c1:af:b1:0a:ba:38:a8:49:01:19:82:cb:98:66: bd:b3:12:07:f8:8e:86:00:d3:e1:2b:4a:c5:34:e8: 3e:60:12:5f:1c:b3:8d:8a:ef:28:98:43:db:5c:cc: 14:ba:21:37:50:a6:70:a4:fd:38:5f:b2:85:58:5d: 21:74:b0:e2:c9:8c:89:79:eb:9d:1f:b5:2e:bd:47: af:7c:f2:8b:02:e7:6b:93:ed:23:0a:1e:db:0b:92: 20:c6:ba:1e:f2:ca:42:67:ac:41:19:62:47:18:21: 4d:ee:ce:f9:53:33:d3:b9:01:ba:b8:02:29:44:89: 9e:9f:ac:24:4a:34:7d:c7:6c:b7:4c:76:e3:90:47: 98:c7:b8:aa:58:b4:34:f0:3d:18:59:b7:2b:fc:d4: b7:0f:92:02:49:5f:76:d5:0b:b9:a3:f4:de:fd:a5: 04:1c:06:f8:70:6e:db:80:d5:0a:99:5a:fd:fc:24: 95:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:FE:CD:23:8C:62:28:EE:B5:33:59:F0:B3:59:53:19:3C:5F:CE:00 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dfb6a751-8b09-416e-94a6-4be4b11aea26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fec:4400::/48 Signature Algorithm: sha256WithRSAEncryption 23:53:69:1e:7d:d5:bf:83:c6:31:67:a5:a6:fe:a7:db:f3:9a: 27:7a:4e:f8:74:46:53:15:fb:79:bc:51:df:ce:89:46:a8:72: b2:81:7a:55:16:8b:ca:b9:42:41:07:db:89:d1:b2:ce:96:d2: 7d:c1:25:41:be:02:ca:b4:9d:d3:12:f2:ff:c8:ea:75:fc:bc: 7b:05:8d:a8:90:32:01:ea:75:78:c0:f7:a5:fd:62:90:2b:35: 85:6e:60:1c:71:63:d6:27:fe:1c:1a:3f:d4:b8:02:f9:26:3a: 7e:0f:3c:d8:52:c0:4d:3d:88:e1:31:87:cb:61:cd:f2:c9:2d: c9:c6:74:2b:03:c8:b9:b7:1b:b5:f8:11:a1:6d:34:16:00:f1: 7e:5e:25:21:00:e4:9b:11:20:10:b4:0a:70:e4:b4:0f:93:93: 44:7c:4c:d1:98:0a:d8:d2:1a:2e:83:53:59:49:9d:b8:9d:fc: 52:d0:8d:5c:9f:6a:0e:86:73:c7:21:1e:fc:af:5c:b6:68:50: c3:49:1e:c7:aa:a4:ed:df:5e:1a:c7:24:73:26:43:41:f0:d7: 11:16:0c:04:f0:1f:9a:35:24:ce:3b:34:94:eb:81:a7:9f:82: 1b:6d:cf:21:f6:45:23:d1:03:d9:37:61:66:d1:46:df:de:5a: 69:be:84:df -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUIWetrb+ty61/hxeJEuSnJC7siswwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA4MDAyMDEyWhcNMjYxMTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MjBhOTY0Zjg3NjI2YTRmMDNmZDQ3MDlkNGRhNTM1YWRk ZWRjZTA5ZjFmMWE1NGI4NzMwY2ViZTEwNzQwY2UxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDiokkouHCCF2lu1JDYgnvmMaHyI/pubGxkLRnopwCciNGL xKgk8PhZUQKOt5nlOx0nNixKKMOSPu94E6cMJ3lQBun7ljyNwUtS0l3Br7EKujio SQEZgsuYZr2zEgf4joYA0+ErSsU06D5gEl8cs42K7yiYQ9tczBS6ITdQpnCk/Thf soVYXSF0sOLJjIl5650ftS69R6988osC52uT7SMKHtsLkiDGuh7yykJnrEEZYkcY IU3uzvlTM9O5Abq4AilEiZ6frCRKNH3HbLdMduOQR5jHuKpYtDTwPRhZtyv81LcP kgJJX3bVC7mj9N79pQQcBvhwbtuA1QqZWv38JJUxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUKP7NI4xiKO61M1nws1lTGTxfzgAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RmYjZhNzUxLThiMDktNDE2ZS05NGE2LTRiZTRiMTFhZWEyNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/sRAAwDQYJKoZIhvcNAQELBQADggEBACNTaR591b+DxjFnpab+p9vz mid6Tvh0RlMV+3m8Ud/OiUaocrKBelUWi8q5QkEH24nRss6W0n3BJUG+Asq0ndMS 8v/I6nX8vHsFjaiQMgHqdXjA96X9YpArNYVuYBxxY9Yn/hwaP9S4AvkmOn4PPNhS wE09iOExh8thzfLJLcnGdCsDyLm3G7X4EaFtNBYA8X5eJSEA5JsRIBC0CnDktA+T k0R8TNGYCtjSGi6DU1lJnbid/FLQjVyfag6Gc8chHvyvXLZoUMNJHseqpO3fXhrH JHMmQ0Hw1xEWDATwH5o1JM47NJTrgaefghttzyH2RSPRA9k3YWbRRt/eWmm+hN8= -----END CERTIFICATE-----Generated at Tue Sep 15 11:38:34 2026 by rpki-client