$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2a343a4-8d80-46ca-bf4f-f3c58aa09e06.roa File: e2a343a4-8d80-46ca-bf4f-f3c58aa09e06.roa (raw, json) Hash identifier: p1ziGTNiysT0upshurV6BYM6XpW7GrWqxknaP3U4tEU= Subject key identifier: 83:A3:11:44:21:FE:0B:A5:BF:79:0E:F4:58:47:92:66:F5:18:52:69 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1D9997426D71ABB5D6B64CF02F094ACA9161B39B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2a343a4-8d80-46ca-bf4f-f3c58aa09e06.roa Signing time: Wed 09 Sep 2026 16:08:34 +0000 ROA not before: Wed 09 Sep 2026 16:08:34 +0000 ROA not after: Tue 08 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fb8:c200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:99:97:42:6d:71:ab:b5:d6:b6:4c:f0:2f:09:4a:ca:91:61:b3:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 9 16:08:34 2026 GMT Not After : Dec 8 23:59:59 2026 GMT Subject: serialNumber=d390fcd37943b393b9a65228f6515e9166f0496fb36ae1e0d98296c8df2bb901, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2b:90:36:5d:58:63:7e:a0:17:9a:74:55:e0: 28:39:a0:58:66:8a:6a:7d:a2:f5:c4:b3:c0:c9:bd: 38:9f:5b:66:c9:de:79:71:95:34:5f:5c:a4:64:d5: e4:a6:e4:35:3b:05:9a:f6:df:08:e6:92:32:bd:b3: d4:cf:4d:1a:61:e8:1e:05:4b:ae:24:be:7d:19:15: 4e:19:25:ff:10:23:29:69:40:6f:4e:95:36:6e:ec: 64:12:44:4b:38:50:da:1b:f2:71:ae:d2:df:f0:d5: 02:56:98:ed:99:ec:c5:09:31:c9:8d:ab:0a:5b:69: f9:81:74:d7:a3:bb:89:8c:bd:20:1b:9e:fd:6d:26: 34:b7:28:2c:7b:f7:8d:9c:27:a5:96:ee:0b:f4:d4: 70:94:61:63:f7:9f:26:4c:60:b3:c4:0e:ec:05:7a: 3b:b0:8f:78:bd:69:4b:90:82:dd:ae:ce:7f:a6:ca: 75:93:5b:87:f2:c9:51:05:d6:f1:1a:93:0d:68:f5: 49:70:cd:8b:dd:af:11:06:1c:3a:eb:c7:34:eb:3f: d4:0e:fc:ea:e8:c9:13:a9:53:2e:d7:53:ab:57:4c: da:53:1e:0d:d4:97:75:1b:07:bb:f1:57:11:03:db: df:4f:99:da:76:4e:28:a5:0c:74:74:c9:7a:6d:ca: 7b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:A3:11:44:21:FE:0B:A5:BF:79:0E:F4:58:47:92:66:F5:18:52:69 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2a343a4-8d80-46ca-bf4f-f3c58aa09e06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fb8:c200::/40 Signature Algorithm: sha256WithRSAEncryption 47:0d:10:72:bc:3d:f9:1c:9f:5c:e8:67:b3:35:f2:72:28:34: 35:c9:6a:be:10:88:e6:fc:3b:77:ae:83:01:4e:55:1d:9c:5d: de:ec:bb:29:f9:63:15:bc:23:df:03:f3:e7:87:3b:7c:86:2b: 38:5e:eb:fe:54:ba:f0:6d:fb:a2:7e:e7:71:60:4a:93:a8:c6: 7f:41:e8:75:ea:c0:74:53:12:03:53:52:c8:a9:2e:21:14:1b: d7:89:27:47:aa:73:16:b5:22:d3:a4:df:26:18:b7:23:7d:af: be:19:1b:41:7e:cd:01:21:72:d4:90:7d:ee:84:ff:b7:16:dc: 87:ad:48:9e:99:42:bc:6d:b8:33:fc:d1:11:0a:4b:4a:7d:cf: b4:c1:9e:94:7c:1d:63:40:f4:8f:13:2d:47:6a:d3:84:82:b0: 22:90:d7:c4:bd:de:36:97:bf:88:61:a4:a7:b5:9a:30:23:b7: ba:80:5f:76:49:c2:5c:cd:b0:04:b7:c1:33:19:ee:f2:9e:5a: 20:6b:f1:54:70:e9:40:b0:f7:2d:f9:5b:a3:78:1b:c7:37:a5: 41:96:40:98:ec:3d:f1:f8:2e:1c:ae:68:46:f8:be:31:c7:5a: a7:48:e3:12:ee:fd:9b:98:e0:5e:06:c7:33:ce:5f:d5:07:89: 2f:80:f4:e4 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUHZmXQm1xq7XWtkzwLwlKypFhs5swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwOTA5MTYwODM0WhcNMjYxMjA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMzkwZmNkMzc5NDNiMzkzYjlhNjUyMjhmNjUxNWU5MTY2 ZjA0OTZmYjM2YWUxZTBkOTgyOTZjOGRmMmJiOTAxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdK5A2XVhjfqAXmnRV4Cg5oFhmimp9ovXEs8DJvTifW2bJ 3nlxlTRfXKRk1eSm5DU7BZr23wjmkjK9s9TPTRph6B4FS64kvn0ZFU4ZJf8QIylp QG9OlTZu7GQSREs4UNob8nGu0t/w1QJWmO2Z7MUJMcmNqwpbafmBdNeju4mMvSAb nv1tJjS3KCx7942cJ6WW7gv01HCUYWP3nyZMYLPEDuwFejuwj3i9aUuQgt2uzn+m ynWTW4fyyVEF1vEakw1o9UlwzYvdrxEGHDrrxzTrP9QO/OroyROpUy7XU6tXTNpT Hg3Ul3UbB7vxVxED299Pmdp2TiilDHR0yXptynstAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUg6MRRCH+C6W/eQ70WEeSZvUYUmkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2UyYTM0M2E0LThkODAtNDZjYS1iZjRmLWYzYzU4YWEwOWUwNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+4wjANBgkqhkiG9w0BAQsFAAOCAQEARw0Qcrw9+RyfXOhnszXycig0 NclqvhCI5vw7d66DAU5VHZxd3uy7KfljFbwj3wPz54c7fIYrOF7r/lS68G37on7n cWBKk6jGf0HoderAdFMSA1NSyKkuIRQb14knR6pzFrUi06TfJhi3I32vvhkbQX7N ASFy1JB97oT/txbch61InplCvG24M/zREQpLSn3PtMGelHwdY0D0jxMtR2rThIKw IpDXxL3eNpe/iGGkp7WaMCO3uoBfdknCXM2wBLfBMxnu8p5aIGvxVHDpQLD3Lflb o3gbxzelQZZAmOw98fguHK5oRvi+Mcdap0jjEu79m5jgXgbHM85f1QeJL4D05A== -----END CERTIFICATE-----Generated at Tue Sep 15 11:36:46 2026 by rpki-client