$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef71b51e-0993-4ab0-a1eb-057e8e1333ed.roa File: ef71b51e-0993-4ab0-a1eb-057e8e1333ed.roa (raw, json) Hash identifier: Rk8+RWdSMCHQvb52WI9FQRUNYNZyvdpLoFszlyVmpKc= Subject key identifier: 7E:4D:5B:0F:67:F1:B9:FC:8C:24:E7:FA:23:99:60:E9:AE:04:A0:C2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3B56CB6B132FFCBE58831D9852C0D43B4DA07ECC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef71b51e-0993-4ab0-a1eb-057e8e1333ed.roa Signing time: Tue 18 Aug 2026 18:04:55 +0000 ROA not before: Tue 18 Aug 2026 18:04:55 +0000 ROA not after: Mon 16 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f33:8000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:56:cb:6b:13:2f:fc:be:58:83:1d:98:52:c0:d4:3b:4d:a0:7e:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 18 18:04:55 2026 GMT Not After : Nov 16 23:59:59 2026 GMT Subject: serialNumber=9a25c9bf299d03d3e777cb05606dd0025aba49522719e47b554c79a1929381b9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:32:7f:19:44:c9:96:cf:9f:d7:f9:99:28:35: dd:a9:4b:8b:eb:cc:05:15:ae:2c:92:d6:cb:97:b1: 38:15:44:19:b5:f0:be:da:34:2a:d2:50:9c:7e:81: 41:5a:d4:98:a6:9e:68:b6:41:f9:5f:43:9d:28:18: 89:5a:af:bb:e1:a8:a9:77:d0:68:62:ca:97:b1:e6: cf:45:87:fb:66:c0:dd:4c:ee:21:85:88:f3:4c:50: e7:7b:a1:0b:9f:ce:2f:8f:0a:04:7f:9b:af:f1:bd: b2:0c:42:96:ea:fb:f4:08:01:8f:ff:b0:12:42:15: 90:41:72:0b:a2:27:e4:71:20:ef:b8:b2:b9:e9:64: ac:6d:4f:af:c9:b9:7d:73:29:7c:d4:2d:05:a7:d8: 92:05:4a:b1:9d:64:e5:85:14:ca:17:47:f4:2b:80: e8:b0:48:43:f1:0d:3b:a0:c4:7c:22:77:46:9c:66: a2:4a:50:61:e2:e0:88:f8:80:57:db:0f:3c:d2:1b: 48:ee:6e:c2:8f:b9:5a:83:01:d5:f6:6e:22:f2:81: 00:4e:93:1d:36:ed:8b:62:26:8c:59:7c:c1:3e:3e: 69:a4:82:6d:65:55:ea:2a:f2:f7:77:bd:40:40:95: 85:dd:27:8c:06:1b:32:f1:48:92:cc:61:4f:01:4b: 9f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:4D:5B:0F:67:F1:B9:FC:8C:24:E7:FA:23:99:60:E9:AE:04:A0:C2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef71b51e-0993-4ab0-a1eb-057e8e1333ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f33:8000::/39 Signature Algorithm: sha256WithRSAEncryption 0e:68:f5:41:98:41:f8:09:7e:17:a9:7b:c4:8e:b4:c3:3c:53: a5:4f:45:94:ed:17:23:5c:24:fa:ad:28:6f:63:41:35:bd:ab: 7f:6b:78:88:21:eb:1f:05:27:41:d1:7a:89:32:30:c9:da:78: 7c:b0:31:ae:d3:bd:95:69:84:7f:83:ea:87:4e:b0:eb:8b:19: b0:71:9c:a8:eb:3d:cb:d4:e3:2a:7c:d5:38:10:be:cb:85:58: 1c:e1:50:62:c9:9a:4e:60:44:41:0a:d5:9b:28:6c:ab:61:b5: d9:c0:87:4b:92:d0:a4:74:ae:a0:87:68:6c:57:62:c5:55:cc: 4b:41:42:92:75:cf:76:82:36:0d:6d:e2:20:17:28:3c:0b:f8: 1a:a0:44:44:6c:ce:55:7f:19:1b:38:41:b1:e0:bf:d9:87:c5: 66:d5:8b:a6:5b:27:84:17:87:2e:b4:49:c7:89:7d:ad:2b:23: 81:a9:dd:c5:4d:78:31:be:f5:39:74:12:4f:df:53:f7:ca:9b: 5b:97:f3:43:1b:6e:82:fe:b1:28:a6:12:6c:d6:01:18:ac:55: 26:7c:c4:26:50:b2:6f:6c:65:39:f4:1a:d8:10:a8:6c:44:d7: 98:41:7f:66:dd:d9:66:59:a2:b9:22:2e:ac:f8:ab:2d:ce:b8: ef:2f:b1:68 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUO1bLaxMv/L5Ygx2YUsDUO02gfswwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODE4MTgwNDU1WhcNMjYxMTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A5YTI1YzliZjI5OWQwM2QzZTc3N2NiMDU2MDZkZDAwMjVh YmE0OTUyMjcxOWU0N2I1NTRjNzlhMTkyOTM4MWI5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDcMn8ZRMmWz5/X+ZkoNd2pS4vrzAUVriyS1suXsTgVRBm1 8L7aNCrSUJx+gUFa1Jimnmi2QflfQ50oGIlar7vhqKl30Ghiypex5s9Fh/tmwN1M 7iGFiPNMUOd7oQufzi+PCgR/m6/xvbIMQpbq+/QIAY//sBJCFZBBcguiJ+RxIO+4 srnpZKxtT6/JuX1zKXzULQWn2JIFSrGdZOWFFMoXR/QrgOiwSEPxDTugxHwid0ac ZqJKUGHi4Ij4gFfbDzzSG0jubsKPuVqDAdX2biLygQBOkx027YtiJoxZfME+Pmmk gm1lVeoq8vd3vUBAlYXdJ4wGGzLxSJLMYU8BS5/fAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUfk1bD2fxufyMJOf6I5lg6a4EoMIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VmNzFiNTFlLTA5OTMtNGFiMC1hMWViLTA1N2U4ZTEzMzNlZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB8zgDANBgkqhkiG9w0BAQsFAAOCAQEADmj1QZhB+Al+F6l7xI60wzxT pU9FlO0XI1wk+q0ob2NBNb2rf2t4iCHrHwUnQdF6iTIwydp4fLAxrtO9lWmEf4Pq h06w64sZsHGcqOs9y9TjKnzVOBC+y4VYHOFQYsmaTmBEQQrVmyhsq2G12cCHS5LQ pHSuoIdobFdixVXMS0FCknXPdoI2DW3iIBcoPAv4GqBERGzOVX8ZGzhBseC/2YfF ZtWLplsnhBeHLrRJx4l9rSsjgandxU14Mb71OXQST99T98qbW5fzQxtugv6xKKYS bNYBGKxVJnzEJlCyb2xlOfQa2BCobETXmEF/Zt3ZZlmiuSIurPirLc647y+xaA== -----END CERTIFICATE-----Generated at Tue Sep 15 13:55:48 2026 by rpki-client