$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eab9cd52-4a50-4190-b19a-83d17dc45a1e.roa File: eab9cd52-4a50-4190-b19a-83d17dc45a1e.roa (raw, json) Hash identifier: 3HpvOAUzZz7V+A6vGakN/XOZWlBZ/oSWZ8+9ZNX8Tfw= Subject key identifier: 8F:97:A8:53:49:3E:AA:CD:95:74:83:5F:68:E5:78:3C:CE:3D:2B:2F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5016F2BE54C7DB10E31A69220CD9FECCD395A26C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eab9cd52-4a50-4190-b19a-83d17dc45a1e.roa Signing time: Mon 10 Aug 2026 00:41:21 +0000 ROA not before: Mon 10 Aug 2026 00:41:21 +0000 ROA not after: Sun 08 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fba:840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:16:f2:be:54:c7:db:10:e3:1a:69:22:0c:d9:fe:cc:d3:95:a2:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 10 00:41:21 2026 GMT Not After : Nov 8 23:59:59 2026 GMT Subject: serialNumber=0865b21894cc329f33d55c8c8b0a251c173d9e34213e675fca508a74c62eb9ac, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fb:96:a3:36:56:b0:2c:c7:ba:18:d9:f8:a8: de:e8:45:e7:1e:5a:dc:10:47:96:aa:3e:a1:2a:ca: f6:f3:3d:bf:93:68:53:14:47:eb:41:3e:0d:aa:d8: 58:bc:35:62:3c:f7:cd:93:d4:9b:3c:3c:d6:66:bb: 02:8c:e9:e8:d3:1e:b6:72:f4:0e:1d:ac:61:7e:e8: f1:ce:59:aa:b6:6d:25:a1:d4:d3:bb:22:bf:a0:15: bd:70:70:36:43:1c:04:84:cf:e1:8c:01:be:b1:28: 60:7c:13:1f:ed:da:9f:2f:9f:e4:b5:3c:07:d3:ad: 68:f2:96:37:5f:33:cf:62:22:20:4a:bc:9f:4c:02: 50:c6:00:0e:d1:3e:f9:4c:8b:e2:19:9f:0e:80:15: 6d:36:20:e3:19:96:45:80:3b:70:32:73:ab:60:3a: 6a:5a:59:49:fa:75:dc:70:cb:0c:56:a6:6c:7e:34: c6:82:f0:20:59:48:d5:4e:53:83:ff:57:3b:25:dd: 8d:17:08:a3:83:ba:19:84:b3:85:11:f8:44:1f:92: 06:58:a2:4a:69:4a:b2:6a:48:1d:13:c0:03:e2:9a: 99:0f:86:0c:03:4f:12:45:e7:fd:26:21:eb:9f:a3: ca:1b:ca:aa:bf:99:a2:52:05:d3:0e:88:75:bb:02: eb:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:97:A8:53:49:3E:AA:CD:95:74:83:5F:68:E5:78:3C:CE:3D:2B:2F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eab9cd52-4a50-4190-b19a-83d17dc45a1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fba:840::/48 Signature Algorithm: sha256WithRSAEncryption 59:28:cd:ee:82:79:21:9b:68:b8:b9:8d:81:5c:6e:21:f0:69: 41:0e:04:a5:6a:6f:02:fe:9d:0a:dc:cc:96:41:f3:52:6f:0e: 37:1d:19:9d:d3:ad:48:08:cd:8f:7a:f6:95:48:ba:e5:f0:fa: 0b:ba:cd:9f:09:e6:f6:8d:62:97:6d:b9:53:f7:36:b0:af:ad: 0a:d8:68:48:16:2a:3e:57:ba:d4:c8:60:2d:64:29:02:08:95: b1:eb:51:9e:61:fd:03:35:1e:e8:25:08:83:f5:43:18:14:51: 19:5b:52:f1:d6:11:32:53:17:47:14:12:5b:92:8c:c0:23:ba: 9c:13:1e:4a:d2:e7:eb:6c:8b:83:bf:1b:f1:96:d2:e3:a0:5a: 62:74:3f:66:6b:64:d1:9b:ef:77:66:4b:a0:8b:15:de:1a:7c: 8e:aa:52:12:10:0e:0d:07:95:c6:8f:10:f8:81:21:a0:b9:91: 38:7f:80:f6:1e:2a:52:fb:1f:92:5e:f2:97:97:f4:72:53:e0: f7:1b:53:7d:a0:eb:bc:71:61:2d:be:e9:57:75:1a:ae:c4:25: cf:c9:cd:c7:a7:b5:25:85:59:d6:59:af:3c:4e:c2:e8:90:7d: 82:4b:33:76:f1:35:ee:ef:22:1e:c2:86:79:8d:65:76:f2:84: 12:a6:55:88 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUBbyvlTH2xDjGmkiDNn+zNOVomwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODEwMDA0MTIxWhcNMjYxMTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0AwODY1YjIxODk0Y2MzMjlmMzNkNTVjOGM4YjBhMjUxYzE3 M2Q5ZTM0MjEzZTY3NWZjYTUwOGE3NGM2MmViOWFjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCy+5ajNlawLMe6GNn4qN7oReceWtwQR5aqPqEqyvbzPb+T aFMUR+tBPg2q2Fi8NWI8982T1Js8PNZmuwKM6ejTHrZy9A4drGF+6PHOWaq2bSWh 1NO7Ir+gFb1wcDZDHASEz+GMAb6xKGB8Ex/t2p8vn+S1PAfTrWjyljdfM89iIiBK vJ9MAlDGAA7RPvlMi+IZnw6AFW02IOMZlkWAO3Ayc6tgOmpaWUn6ddxwywxWpmx+ NMaC8CBZSNVOU4P/Vzsl3Y0XCKODuhmEs4UR+EQfkgZYokppSrJqSB0TwAPimpkP hgwDTxJF5/0mIeufo8obyqq/maJSBdMOiHW7AusvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUj5eoU0k+qs2VdINfaOV4PM49Ky8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VhYjljZDUyLTRhNTAtNDE5MC1iMTlhLTgzZDE3ZGM0NWExZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB+6CEAwDQYJKoZIhvcNAQELBQADggEBAFkoze6CeSGbaLi5jYFcbiHw aUEOBKVqbwL+nQrczJZB81JvDjcdGZ3TrUgIzY969pVIuuXw+gu6zZ8J5vaNYpdt uVP3NrCvrQrYaEgWKj5XutTIYC1kKQIIlbHrUZ5h/QM1HuglCIP1QxgUURlbUvHW ETJTF0cUEluSjMAjupwTHkrS5+tsi4O/G/GW0uOgWmJ0P2ZrZNGb73dmS6CLFd4a fI6qUhIQDg0HlcaPEPiBIaC5kTh/gPYeKlL7H5Je8peX9HJT4PcbU32g67xxYS2+ 6Vd1Gq7EJc/JzcentSWFWdZZrzxOwuiQfYJLM3bxNe7vIh7ChnmNZXbyhBKmVYg= -----END CERTIFICATE-----Generated at Tue Sep 15 11:36:57 2026 by rpki-client