$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4006bda-b759-4e7b-9053-ede436ff5f1d.roa File: e4006bda-b759-4e7b-9053-ede436ff5f1d.roa (raw, json) Hash identifier: B21miBmd0tdB1vOGfdjoVKtPCVGKa1EGDQjNJro3ki8= Subject key identifier: 9E:6F:A6:73:ED:C5:9F:A3:2A:49:76:07:01:F1:7F:EA:38:09:D0:C0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1DF21EA26CCE8B675321617CC2C02392D741808C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4006bda-b759-4e7b-9053-ede436ff5f1d.roa Signing time: Wed 09 Sep 2026 16:03:37 +0000 ROA not before: Wed 09 Sep 2026 16:03:37 +0000 ROA not after: Tue 08 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fe7:4000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:f2:1e:a2:6c:ce:8b:67:53:21:61:7c:c2:c0:23:92:d7:41:80:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 9 16:03:37 2026 GMT Not After : Dec 8 23:59:59 2026 GMT Subject: serialNumber=f01f65b7fda2430640125153f4a00836b27a3c0a19570efac8fccc855d8c19d2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:19:cf:ea:22:12:fe:5d:94:52:29:56:3d:6a: 54:6e:12:51:60:02:14:2c:9a:90:80:cc:08:14:ff: 68:ae:f1:f7:4e:b4:b4:7f:ee:7a:d7:de:9d:ea:61: 70:3b:d8:13:66:a1:47:7f:47:70:c0:00:4c:3b:54: 5f:fc:72:9e:5d:27:23:70:c8:ba:22:70:01:22:a0: 2d:2e:a4:44:8c:87:2a:61:02:e1:7e:5a:3a:d5:31: e2:f9:f4:8e:3a:89:71:83:e1:f2:d5:85:8a:b6:24: 78:11:15:0a:a2:65:c2:86:3b:79:d8:33:ee:16:42: d8:45:fe:fe:06:32:56:f8:28:1a:8b:dd:bb:b8:a2: 5e:fb:d7:00:30:76:30:82:42:75:7c:86:77:e4:0e: ca:86:38:0c:6e:42:ed:0e:06:ad:3c:21:59:83:e1: 88:49:82:b9:78:7c:47:26:b5:e7:0e:f5:b1:69:fa: c1:a5:b8:ba:04:ae:24:cd:af:25:16:39:cc:e0:5e: 39:eb:12:12:ff:b9:7c:00:20:98:28:f3:d2:bf:af: f7:29:a9:6d:3f:a3:e0:af:c4:08:c8:f8:4e:7c:17: d3:81:d3:98:16:43:d2:ae:eb:b8:4e:5a:fc:d6:15: 48:07:37:83:21:09:57:bc:5c:a7:c4:c4:ea:63:1b: b6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:6F:A6:73:ED:C5:9F:A3:2A:49:76:07:01:F1:7F:EA:38:09:D0:C0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4006bda-b759-4e7b-9053-ede436ff5f1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fe7:4000::/39 Signature Algorithm: sha256WithRSAEncryption ad:59:fd:64:35:3f:02:fe:e0:72:0a:5c:de:76:17:ed:3b:c3: 7e:52:ab:5a:6b:0e:61:25:96:a7:e9:b0:4b:b6:7c:f8:2a:f7: 03:ca:82:7d:4a:06:85:35:3f:72:00:16:05:71:63:a4:09:14: 74:51:8d:e6:85:ac:e5:59:4e:8b:0f:2c:81:09:41:1e:cf:66: cc:00:4a:37:7d:96:47:7f:34:73:0e:61:16:04:44:1a:a8:02: 3e:2d:f0:f4:9b:fa:b6:5b:ab:f3:d9:0f:6c:08:92:2d:f0:cd: 5a:d8:1d:ab:24:e6:af:ed:03:03:44:6b:3e:41:aa:5a:f1:1d: b0:55:c2:68:0d:78:f4:30:01:4a:2d:5f:1f:2d:28:6b:0f:ee: 88:55:47:8b:a5:6e:f1:a5:48:cc:eb:3f:bc:24:12:50:6c:89: d0:9b:d1:60:7c:ce:70:32:77:14:b1:a7:a2:d0:b6:25:90:f1: c6:b3:54:96:c4:4f:c4:c8:05:b1:ab:1d:14:9d:07:e9:9f:b4: 99:0d:9d:64:5c:7d:f6:6f:5b:7d:99:a5:b9:b1:08:9a:34:80: 61:fd:8e:c3:1c:f0:f6:2e:66:e8:84:b2:06:a6:e6:c6:a3:7c: 71:c1:24:49:9f:97:80:cb:be:f4:82:1c:16:8c:2b:d9:24:78: f0:e5:50:fc -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUHfIeomzOi2dTIWF8wsAjktdBgIwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwOTA5MTYwMzM3WhcNMjYxMjA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMDFmNjViN2ZkYTI0MzA2NDAxMjUxNTNmNGEwMDgzNmIy N2EzYzBhMTk1NzBlZmFjOGZjY2M4NTVkOGMxOWQyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClGc/qIhL+XZRSKVY9alRuElFgAhQsmpCAzAgU/2iu8fdO tLR/7nrX3p3qYXA72BNmoUd/R3DAAEw7VF/8cp5dJyNwyLoicAEioC0upESMhyph AuF+WjrVMeL59I46iXGD4fLVhYq2JHgRFQqiZcKGO3nYM+4WQthF/v4GMlb4KBqL 3bu4ol771wAwdjCCQnV8hnfkDsqGOAxuQu0OBq08IVmD4YhJgrl4fEcmtecO9bFp +sGluLoEriTNryUWOczgXjnrEhL/uXwAIJgo89K/r/cpqW0/o+CvxAjI+E58F9OB 05gWQ9Ku67hOWvzWFUgHN4MhCVe8XKfExOpjG7ZxAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUnm+mc+3Fn6MqSXYHAfF/6jgJ0MAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U0MDA2YmRhLWI3NTktNGU3Yi05MDUzLWVkZTQzNmZmNWYxZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB/nQDANBgkqhkiG9w0BAQsFAAOCAQEArVn9ZDU/Av7gcgpc3nYX7TvD flKrWmsOYSWWp+mwS7Z8+Cr3A8qCfUoGhTU/cgAWBXFjpAkUdFGN5oWs5VlOiw8s gQlBHs9mzABKN32WR380cw5hFgREGqgCPi3w9Jv6tlur89kPbAiSLfDNWtgdqyTm r+0DA0RrPkGqWvEdsFXCaA149DABSi1fHy0oaw/uiFVHi6Vu8aVIzOs/vCQSUGyJ 0JvRYHzOcDJ3FLGnotC2JZDxxrNUlsRPxMgFsasdFJ0H6Z+0mQ2dZFx99m9bfZml ubEImjSAYf2Owxzw9i5m6ISyBqbmxqN8ccEkSZ+XgMu+9IIcFowr2SR48OVQ/A== -----END CERTIFICATE-----Generated at Tue Sep 15 12:43:15 2026 by rpki-client