$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e63bdbcb-77e0-4539-a66b-efd13e162e56.roa File: e63bdbcb-77e0-4539-a66b-efd13e162e56.roa (raw, json) Hash identifier: qX0XooWlavDe3D3buHFgT/ydON2dDt5kfCIOkiXTw04= Subject key identifier: E7:C6:87:09:11:D3:DE:30:23:E2:D0:BC:30:98:E2:D5:ED:E8:E2:9B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3A529586E81B268A2112A91B2A2A824AD8604BC6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e63bdbcb-77e0-4539-a66b-efd13e162e56.roa Signing time: Wed 19 Aug 2026 00:20:10 +0000 ROA not before: Wed 19 Aug 2026 00:20:10 +0000 ROA not after: Tue 17 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fba:6040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:52:95:86:e8:1b:26:8a:21:12:a9:1b:2a:2a:82:4a:d8:60:4b:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 19 00:20:10 2026 GMT Not After : Nov 17 23:59:59 2026 GMT Subject: serialNumber=632eed3a3e7ecd6f3b67938083343e568f45185d0c1176fe66cc3c2dd04f2077, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:13:f7:29:bf:39:3b:28:c4:83:19:9d:13:41: 52:09:72:3e:65:a7:52:86:56:3c:29:f4:b8:ec:8d: 94:52:18:7c:2b:4f:9e:0f:ca:0b:56:4c:de:b5:d5: 6d:aa:e7:a7:12:ff:cd:83:d8:44:10:17:f0:d1:a7: d6:c7:14:32:3a:7e:f1:1e:18:7c:d4:93:7a:da:f5: 74:c4:74:e8:77:3d:a7:3e:c0:d9:e0:1d:91:23:1b: 3c:0c:01:0c:c7:45:90:3c:b2:87:17:18:b0:6a:23: dc:a9:c3:f1:40:26:61:c6:a8:3a:a0:89:87:d0:e2: 93:f3:b2:06:6f:7a:a9:49:a4:db:1e:cb:2d:60:92: d3:15:67:dc:c3:a4:88:b6:13:50:1f:8d:24:d9:88: ea:70:39:6e:82:8d:5b:d1:58:92:c6:41:49:4e:d0: e7:88:45:02:dd:b9:36:84:a8:42:b4:10:4a:b2:e5: 38:f5:08:a7:2c:fd:aa:97:88:a4:e4:ad:69:cf:32: aa:6f:27:76:49:d8:54:fa:32:1b:b0:fd:cb:70:75: 44:16:c5:ec:bd:ea:21:55:9a:b4:78:b7:e6:d6:6b: e3:d0:2e:fe:20:cc:fc:0c:7f:41:3a:d3:b2:15:46: 5b:e8:e6:db:fd:a6:78:63:fb:b9:89:1b:e1:7f:a5: 2e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C6:87:09:11:D3:DE:30:23:E2:D0:BC:30:98:E2:D5:ED:E8:E2:9B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e63bdbcb-77e0-4539-a66b-efd13e162e56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fba:6040::/48 Signature Algorithm: sha256WithRSAEncryption b6:82:a1:df:1c:85:f4:35:4b:91:4d:c6:eb:73:1f:ff:39:ad: 06:68:85:ea:be:18:2d:44:12:74:29:d8:c8:bc:34:63:b5:32: 00:d2:24:1a:be:29:87:1f:49:e5:35:0d:9d:48:bd:89:dc:83: 8d:29:d2:ed:7f:31:a9:e6:82:5b:9b:5d:40:67:39:5f:e0:7b: 31:8e:01:05:34:50:2e:b0:5c:1d:58:bd:ed:aa:e0:5b:bd:4b: ba:d0:20:97:86:91:fe:68:72:c1:3d:5c:8c:2f:7d:bd:5e:68: ac:67:ba:fe:a8:7d:68:8f:23:c3:8f:be:14:cf:8e:60:ee:b1: 2e:05:90:8e:47:8d:dd:79:9d:5d:d7:9a:03:4d:44:64:94:8a: 90:a1:10:8f:a7:29:4c:d5:50:3b:3f:b1:22:9e:c4:37:23:74: 28:af:5b:5e:23:78:04:d3:65:15:d9:62:a9:c6:4f:30:60:80: 1f:aa:89:4f:78:35:72:8a:4d:92:80:ec:6b:f2:f3:67:66:98: a2:2d:df:5c:0a:c2:7d:53:ff:8e:77:15:a1:ac:32:ee:cf:e4: 7a:26:18:91:42:97:23:35:d3:2d:36:b3:3a:89:de:62:f2:a3: 9b:cb:36:20:33:fb:61:ec:74:dd:6f:0a:21:aa:cc:7c:6e:1e: 06:b4:e5:0b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUOlKVhugbJoohEqkbKiqCSthgS8YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODE5MDAyMDEwWhcNMjYxMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MzJlZWQzYTNlN2VjZDZmM2I2NzkzODA4MzM0M2U1Njhm NDUxODVkMGMxMTc2ZmU2NmNjM2MyZGQwNGYyMDc3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyE/cpvzk7KMSDGZ0TQVIJcj5lp1KGVjwp9LjsjZRSGHwr T54PygtWTN611W2q56cS/82D2EQQF/DRp9bHFDI6fvEeGHzUk3ra9XTEdOh3Pac+ wNngHZEjGzwMAQzHRZA8socXGLBqI9ypw/FAJmHGqDqgiYfQ4pPzsgZveqlJpNse yy1gktMVZ9zDpIi2E1AfjSTZiOpwOW6CjVvRWJLGQUlO0OeIRQLduTaEqEK0EEqy 5Tj1CKcs/aqXiKTkrWnPMqpvJ3ZJ2FT6Mhuw/ctwdUQWxey96iFVmrR4t+bWa+PQ Lv4gzPwMf0E607IVRlvo5tv9pnhj+7mJG+F/pS5JAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU58aHCRHT3jAj4tC8MJji1e3o4pswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U2M2JkYmNiLTc3ZTAtNDUzOS1hNjZiLWVmZDEzZTE2MmU1Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB+6YEAwDQYJKoZIhvcNAQELBQADggEBALaCod8chfQ1S5FNxutzH/85 rQZoheq+GC1EEnQp2Mi8NGO1MgDSJBq+KYcfSeU1DZ1IvYncg40p0u1/Manmglub XUBnOV/gezGOAQU0UC6wXB1Yve2q4Fu9S7rQIJeGkf5ocsE9XIwvfb1eaKxnuv6o fWiPI8OPvhTPjmDusS4FkI5Hjd15nV3XmgNNRGSUipChEI+nKUzVUDs/sSKexDcj dCivW14jeATTZRXZYqnGTzBggB+qiU94NXKKTZKA7Gvy82dmmKIt31wKwn1T/453 FaGsMu7P5HomGJFClyM10y02szqJ3mLyo5vLNiAz+2HsdN1vCiGqzHxuHga05Qs= -----END CERTIFICATE-----Generated at Tue Sep 15 11:37:53 2026 by rpki-client