$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e86b1ece-30a7-46ee-b48a-abad2e6236ed.roa File: e86b1ece-30a7-46ee-b48a-abad2e6236ed.roa (raw, json) Hash identifier: MqZpAl+LGbCx2NgpD1Bu4Nr/AS3r4O3uaPcBshqV4vY= Subject key identifier: E3:98:91:38:EA:D4:C4:D3:B7:64:4F:0B:88:E8:16:09:99:84:49:F5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 31070A0B2A024E0C401B1143D11590DD1C3F85B9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e86b1ece-30a7-46ee-b48a-abad2e6236ed.roa Signing time: Wed 09 Sep 2026 16:10:06 +0000 ROA not before: Wed 09 Sep 2026 16:10:06 +0000 ROA not after: Tue 08 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f2e:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:07:0a:0b:2a:02:4e:0c:40:1b:11:43:d1:15:90:dd:1c:3f:85:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 9 16:10:06 2026 GMT Not After : Dec 8 23:59:59 2026 GMT Subject: serialNumber=c3e5d1908efbd01695f1e0d766584f778443c80d2ad05ff43f37609d9aa38b27, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:76:bd:b7:25:49:9e:f6:20:e1:d6:26:72:df: c5:3d:e5:d3:4f:0d:9a:5c:7d:8b:f5:df:b8:06:ff: f6:e5:25:a5:7c:64:b8:9a:b7:55:e1:b4:1e:fe:52: 7e:a8:68:e9:94:b7:e7:60:00:b1:48:42:aa:fd:c9: 75:d7:20:e6:44:01:f5:5f:a9:ac:82:63:4c:c5:3b: d6:95:1d:57:28:7f:29:22:bd:7b:6c:d8:8b:a4:fc: da:3e:21:b2:37:bf:86:86:6c:e6:fa:ec:36:82:35: 55:49:83:f9:5a:3d:d1:9f:3a:a8:aa:ad:8e:4c:6f: 4f:db:67:9b:b2:1b:48:45:fd:0c:30:71:23:e7:b5: 9c:cc:bf:e4:cd:54:68:4c:0a:f1:a4:f4:c1:5c:ff: 44:45:68:57:8e:f6:44:74:94:43:8b:ec:ab:f3:ea: 9d:fb:40:57:b0:71:26:95:b0:08:06:79:94:de:47: 2a:2d:09:45:b7:e0:6b:97:e2:93:f1:aa:13:85:d7: b2:49:39:3e:68:b4:c2:ae:3c:63:29:37:27:9c:ce: e2:c2:8d:fa:6e:d8:0d:3a:87:fc:f0:ba:58:2b:3f: 83:1b:3a:e6:0c:90:10:40:a1:a8:c9:72:a0:3b:c2: d0:da:d9:3d:e6:31:78:41:08:e8:05:94:43:4f:ad: 6c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:98:91:38:EA:D4:C4:D3:B7:64:4F:0B:88:E8:16:09:99:84:49:F5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e86b1ece-30a7-46ee-b48a-abad2e6236ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f2e:2000::/36 Signature Algorithm: sha256WithRSAEncryption 8a:07:a0:6d:ba:88:ae:b5:cd:ed:e3:6c:58:fd:de:54:3d:0a: d8:54:08:67:8b:d9:07:05:af:d2:9c:0d:7a:b3:1a:36:f9:e7: a6:ba:8c:24:0d:05:1e:d3:40:7d:1c:69:99:c4:3c:7f:f3:c7: 24:37:21:66:db:f9:e4:99:4d:83:ce:fa:ef:bf:55:49:46:f1: 49:21:30:f1:92:1c:99:54:34:b0:39:3b:19:fa:b6:5e:aa:60: 89:03:91:ca:1c:f7:c6:78:26:ca:4d:02:d3:7a:f8:f7:01:54: 3d:4e:a8:57:77:29:df:9d:cc:fe:f1:de:67:bc:86:e3:e8:49: 3b:e0:4a:96:1a:ad:3e:b1:27:42:3d:63:88:ea:00:39:1e:03: 94:f0:f7:76:17:0e:3d:49:17:b7:ea:31:de:c1:46:c1:28:ee: 39:01:8a:3d:92:fc:7e:e6:40:9c:f8:06:f9:68:1c:35:6b:0e: ca:2a:e7:98:b5:a2:3f:2c:46:4e:1a:e2:89:b8:a7:90:6f:38: 40:bc:dd:33:a2:df:a1:bb:85:6f:43:e4:cf:e9:89:87:64:cb: bf:10:be:a5:5e:f2:19:70:e8:a0:84:5a:71:d9:da:49:f0:1e: a6:8c:62:33:ff:5e:16:ce:f4:64:35:54:48:6c:76:69:52:fe: b7:d0:2f:76 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUMQcKCyoCTgxAGxFD0RWQ3Rw/hbkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwOTA5MTYxMDA2WhcNMjYxMjA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BjM2U1ZDE5MDhlZmJkMDE2OTVmMWUwZDc2NjU4NGY3Nzg0 NDNjODBkMmFkMDVmZjQzZjM3NjA5ZDlhYTM4YjI3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwdr23JUme9iDh1iZy38U95dNPDZpcfYv137gG//blJaV8 ZLiat1XhtB7+Un6oaOmUt+dgALFIQqr9yXXXIOZEAfVfqayCY0zFO9aVHVcofyki vXts2Iuk/No+IbI3v4aGbOb67DaCNVVJg/laPdGfOqiqrY5Mb0/bZ5uyG0hF/Qww cSPntZzMv+TNVGhMCvGk9MFc/0RFaFeO9kR0lEOL7Kvz6p37QFewcSaVsAgGeZTe RyotCUW34GuX4pPxqhOF17JJOT5otMKuPGMpNyeczuLCjfpu2A06h/zwulgrP4Mb OuYMkBBAoajJcqA7wtDa2T3mMXhBCOgFlENPrWx7AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU45iROOrUxNO3ZE8LiOgWCZmESfUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U4NmIxZWNlLTMwYTctNDZlZS1iNDhhLWFiYWQyZTYyMzZlZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8uIDANBgkqhkiG9w0BAQsFAAOCAQEAigegbbqIrrXN7eNsWP3eVD0K 2FQIZ4vZBwWv0pwNerMaNvnnprqMJA0FHtNAfRxpmcQ8f/PHJDchZtv55JlNg876 779VSUbxSSEw8ZIcmVQ0sDk7Gfq2XqpgiQORyhz3xngmyk0C03r49wFUPU6oV3cp 353M/vHeZ7yG4+hJO+BKlhqtPrEnQj1jiOoAOR4DlPD3dhcOPUkXt+ox3sFGwSju OQGKPZL8fuZAnPgG+WgcNWsOyirnmLWiPyxGThriibinkG84QLzdM6LfobuFb0Pk z+mJh2TLvxC+pV7yGXDooIRacdnaSfAepoxiM/9eFs70ZDVUSGx2aVL+t9Avdg== -----END CERTIFICATE-----Generated at Tue Sep 15 11:36:58 2026 by rpki-client