$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0fc5f71-8798-4b58-8abb-30699949a54c.roa File: f0fc5f71-8798-4b58-8abb-30699949a54c.roa (raw, json) Hash identifier: 13bY/ntQPtLe+DBHtPohUCnAvRArnDh9dCNBhbVgnQA= Subject key identifier: FD:69:66:82:0B:0F:F9:C1:B7:A1:76:D4:AA:79:C8:9D:8D:47:38:1E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 45CCDAD5E9A483C66D70C80E7606280A9085359D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0fc5f71-8798-4b58-8abb-30699949a54c.roa Signing time: Wed 05 Aug 2026 00:12:02 +0000 ROA not before: Wed 05 Aug 2026 00:12:02 +0000 ROA not after: Tue 03 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff3:8010::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:cc:da:d5:e9:a4:83:c6:6d:70:c8:0e:76:06:28:0a:90:85:35:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 00:12:02 2026 GMT Not After : Nov 3 23:59:59 2026 GMT Subject: serialNumber=e10eb3761e669be0924c57bcd3e1ee66ab72cd42bd76ce695edfa86a8ee02916, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:87:91:79:40:48:9b:8f:b5:98:31:d3:d5:e3: f0:a9:19:95:5d:7f:7a:3a:34:23:48:59:5e:c3:3f: 26:d4:d8:39:c3:c4:2c:8a:dd:7b:a7:d4:66:9a:7f: fd:3d:f6:8a:ff:be:64:6c:55:27:8f:d2:3a:2d:9b: dc:db:f5:3a:17:f2:0a:1e:14:4d:35:5a:a9:bc:d7: 02:f2:84:78:94:18:20:54:39:73:61:1c:c4:a6:76: 74:e5:e2:72:92:9f:88:af:86:b0:77:7d:ab:17:0f: 04:cf:b9:b5:1f:07:a0:e8:d6:34:d6:5b:30:2d:77: 36:39:85:9d:b6:44:fb:38:64:87:68:69:dd:7f:e5: e8:62:36:3e:4b:09:37:ee:61:92:a9:49:89:c2:bb: a3:47:17:49:4b:8c:84:82:c2:45:38:49:46:15:e3: 62:7d:57:6a:aa:ef:86:0f:85:db:a1:25:ad:31:a7: 31:92:11:12:fa:65:98:30:96:31:82:bf:f6:8a:d4: 1f:9c:d6:21:b1:f7:df:0e:8d:1a:da:ef:43:4f:70: 0e:8d:e0:0e:f9:33:85:0d:49:25:21:b1:44:a3:3c: 12:57:05:8b:3c:81:79:05:a9:ed:ca:ca:1e:14:89: 93:1a:07:11:30:99:31:ea:2d:41:6f:13:2f:4d:e5: 1f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:69:66:82:0B:0F:F9:C1:B7:A1:76:D4:AA:79:C8:9D:8D:47:38:1E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0fc5f71-8798-4b58-8abb-30699949a54c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff3:8010::/46 Signature Algorithm: sha256WithRSAEncryption 9e:d0:9d:70:d4:a4:1a:b6:f5:70:da:b7:8f:8f:f6:03:7a:c0: 79:25:d0:d4:0a:e9:50:b2:f4:fe:bd:ce:70:78:25:fb:a4:a4: 58:42:9d:fd:a4:51:56:89:93:a4:62:12:1e:a9:f3:fc:d7:70: 69:aa:f1:fa:47:3f:11:12:0c:10:38:90:7f:d9:6b:8a:1e:d1: c3:5c:26:74:92:62:79:cd:ca:d7:70:90:fd:5f:3c:12:f6:44: b5:ba:45:0f:5f:a1:45:71:b5:16:cd:7c:93:ef:f6:24:ea:cd: d1:ec:32:90:ee:4a:60:34:67:26:0b:61:fc:07:3b:7e:61:04: 2e:36:79:f5:7e:a0:85:32:53:75:60:80:01:ef:08:f2:0c:7b: a5:55:ed:3a:65:b6:d2:ef:dd:e1:ea:0b:f7:84:3f:76:22:4e: c5:ea:d7:fe:d1:dc:83:fe:de:ef:c8:93:4d:c0:1a:ad:c9:d0: 2d:ea:9b:13:38:f3:1c:ba:43:80:09:fb:21:38:9c:26:2b:66: 1b:d9:e5:66:30:48:45:77:df:de:a8:bc:3f:c5:27:da:57:ce: 59:46:85:7e:54:2f:80:7f:d9:1c:f9:8f:6c:91:d5:54:ab:57: 32:65:a2:41:33:76:3d:85:65:09:c3:20:82:d4:8b:01:2b:4a: 80:f0:3c:fc -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURcza1emkg8ZtcMgOdgYoCpCFNZ0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA1MDAxMjAyWhcNMjYxMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMTBlYjM3NjFlNjY5YmUwOTI0YzU3YmNkM2UxZWU2NmFi NzJjZDQyYmQ3NmNlNjk1ZWRmYTg2YThlZTAyOTE2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDh5F5QEibj7WYMdPV4/CpGZVdf3o6NCNIWV7DPybU2DnD xCyK3Xun1Gaaf/099or/vmRsVSeP0jotm9zb9ToX8goeFE01Wqm81wLyhHiUGCBU OXNhHMSmdnTl4nKSn4ivhrB3fasXDwTPubUfB6Do1jTWWzAtdzY5hZ22RPs4ZIdo ad1/5ehiNj5LCTfuYZKpSYnCu6NHF0lLjISCwkU4SUYV42J9V2qq74YPhduhJa0x pzGSERL6ZZgwljGCv/aK1B+c1iGx998OjRra70NPcA6N4A75M4UNSSUhsUSjPBJX BYs8gXkFqe3Kyh4UiZMaBxEwmTHqLUFvEy9N5R+/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU/WlmggsP+cG3oXbUqnnInY1HOB4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YwZmM1ZjcxLTg3OTgtNGI1OC04YWJiLTMwNjk5OTQ5YTU0Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/zgBAwDQYJKoZIhvcNAQELBQADggEBAJ7QnXDUpBq29XDat4+P9gN6 wHkl0NQK6VCy9P69znB4JfukpFhCnf2kUVaJk6RiEh6p8/zXcGmq8fpHPxESDBA4 kH/Za4oe0cNcJnSSYnnNytdwkP1fPBL2RLW6RQ9foUVxtRbNfJPv9iTqzdHsMpDu SmA0ZyYLYfwHO35hBC42efV+oIUyU3VggAHvCPIMe6VV7TplttLv3eHqC/eEP3Yi TsXq1/7R3IP+3u/Ik03AGq3J0C3qmxM48xy6Q4AJ+yE4nCYrZhvZ5WYwSEV3396o vD/FJ9pXzllGhX5UL4B/2Rz5j2yR1VSrVzJlokEzdj2FZQnDIILUiwErSoDwPPw= -----END CERTIFICATE-----Generated at Tue Sep 15 12:13:26 2026 by rpki-client