$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0bfd803-ff17-4146-a35b-8824d41bfca6.roa File: f0bfd803-ff17-4146-a35b-8824d41bfca6.roa (raw, json) Hash identifier: vrMa1M2L5UvwTw3kbYWo8xCDI/F7Sz9wkL+zS/IvmTM= Subject key identifier: 36:34:3D:F0:30:06:EC:37:F0:33:3A:51:F2:AC:BF:0B:7A:DC:1E:00 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1787D299EDD6A8C85B22C3A50FA10F9B7F845848 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0bfd803-ff17-4146-a35b-8824d41bfca6.roa Signing time: Tue 04 Aug 2026 00:41:09 +0000 ROA not before: Tue 04 Aug 2026 00:41:09 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f69:6040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:87:d2:99:ed:d6:a8:c8:5b:22:c3:a5:0f:a1:0f:9b:7f:84:58:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 00:41:09 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=1bb8871dce4bf4e31a13469a36de5e093d423dcc533ed1b22f1ede567f050d50, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a3:2c:44:74:5b:6e:0f:b1:36:0e:68:2f:eb: 3d:e7:80:36:ee:97:56:90:85:18:7c:9c:c4:f7:3b: 01:12:e7:d1:4f:23:6a:bd:86:d6:6c:a8:7d:5e:6e: f1:dc:07:42:22:c4:04:28:86:db:e1:8d:f3:05:72: 8d:ff:22:7a:42:3f:56:bf:d4:62:fc:02:1a:b0:13: 0c:a7:69:6f:f4:4c:08:22:ef:2f:d3:7e:36:3a:dc: 0b:76:81:cf:0a:de:9b:52:d8:ec:24:9a:4b:c3:5b: 32:d5:fd:5c:46:62:dc:e9:e6:4a:44:d6:b6:94:26: a0:3b:db:b0:69:9a:1b:f5:1f:68:a8:e6:ea:60:41: ef:9a:85:32:41:fc:7a:98:20:a1:7f:a6:86:61:13: dc:b2:fa:73:60:3f:81:9f:fa:fa:09:ca:e4:c9:ad: 8c:51:d9:61:bb:db:48:3c:16:54:4b:32:09:60:eb: 2e:4c:6f:6b:4a:33:2a:0a:34:63:e0:9a:74:4b:6e: de:75:5b:00:95:0b:8e:31:a6:d4:87:06:2f:cd:b2: 32:e6:c8:22:d8:ed:19:c1:fb:65:94:15:eb:d0:a6: 50:18:96:a9:2c:e7:c9:11:b7:02:42:89:b4:f0:4e: 33:d9:c5:f1:b4:50:53:38:c5:04:eb:6c:e7:7b:00: 6a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:34:3D:F0:30:06:EC:37:F0:33:3A:51:F2:AC:BF:0B:7A:DC:1E:00 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0bfd803-ff17-4146-a35b-8824d41bfca6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f69:6040::/46 Signature Algorithm: sha256WithRSAEncryption 11:a2:94:e9:2a:4c:db:74:51:5e:3c:52:3c:50:08:2a:75:b2: 06:17:b7:02:51:6b:85:20:57:1e:4f:23:b9:0d:a5:92:37:c5: 90:9f:18:ba:a4:90:23:8b:29:f7:5f:5d:d9:04:0d:9c:b2:4a: 9a:60:ba:72:5c:84:0e:ff:fd:e2:c1:50:cc:bb:73:03:fe:d0: d6:d5:8c:51:9a:a4:f7:54:7e:70:da:ac:4e:c9:12:e6:38:4a: b9:f4:e2:60:88:1c:7c:64:65:e5:91:5c:18:bf:0b:20:0b:7b: 72:34:cd:44:40:69:61:b4:b2:c8:56:91:3c:70:b5:8e:6f:8b: ef:2b:7d:0b:89:f5:2e:ae:fc:ff:b8:f2:4e:7e:2f:a3:85:a6: 73:9f:5c:1c:a0:63:0f:de:70:39:ee:52:cb:14:5a:87:0b:a0: c8:7c:b0:5c:09:6e:36:54:10:f5:9e:14:51:e0:5c:f1:9e:60: 60:14:b0:95:83:c4:36:16:fb:ce:f4:0e:34:9f:5d:6a:28:38: 9e:bd:72:1f:4d:21:7d:24:7f:e4:5e:d7:84:f2:a2:1f:1c:20: f8:fb:c1:3d:8b:b2:59:18:2c:83:21:7f:83:6d:27:72:83:ee: c8:c4:d0:18:19:47:c0:4e:2c:65:55:d4:70:7d:34:1e:3a:b3: 55:fe:8d:fd -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUF4fSme3WqMhbIsOlD6EPm3+EWEgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA0MDA0MTA5WhcNMjYxMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxYmI4ODcxZGNlNGJmNGUzMWExMzQ2OWEzNmRlNWUwOTNk NDIzZGNjNTMzZWQxYjIyZjFlZGU1NjdmMDUwZDUwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXoyxEdFtuD7E2Dmgv6z3ngDbul1aQhRh8nMT3OwES59FP I2q9htZsqH1ebvHcB0IixAQohtvhjfMFco3/InpCP1a/1GL8AhqwEwynaW/0TAgi 7y/TfjY63At2gc8K3ptS2OwkmkvDWzLV/VxGYtzp5kpE1raUJqA727Bpmhv1H2io 5upgQe+ahTJB/HqYIKF/poZhE9yy+nNgP4Gf+voJyuTJrYxR2WG720g8FlRLMglg 6y5Mb2tKMyoKNGPgmnRLbt51WwCVC44xptSHBi/NsjLmyCLY7RnB+2WUFevQplAY lqks58kRtwJCibTwTjPZxfG0UFM4xQTrbOd7AGo9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUNjQ98DAG7DfwMzpR8qy/C3rcHgAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YwYmZkODAzLWZmMTctNDE0Ni1hMzViLTg4MjRkNDFiZmNhNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB9pYEAwDQYJKoZIhvcNAQELBQADggEBABGilOkqTNt0UV48UjxQCCp1 sgYXtwJRa4UgVx5PI7kNpZI3xZCfGLqkkCOLKfdfXdkEDZyySppgunJchA7//eLB UMy7cwP+0NbVjFGapPdUfnDarE7JEuY4Srn04mCIHHxkZeWRXBi/CyALe3I0zURA aWG0sshWkTxwtY5vi+8rfQuJ9S6u/P+48k5+L6OFpnOfXBygYw/ecDnuUssUWocL oMh8sFwJbjZUEPWeFFHgXPGeYGAUsJWDxDYW+870DjSfXWooOJ69ch9NIX0kf+Re 14Tyoh8cIPj7wT2LslkYLIMhf4NtJ3KD7sjE0BgZR8BOLGVV1HB9NB46s1X+jf0= -----END CERTIFICATE-----Generated at Tue Sep 15 13:22:28 2026 by rpki-client