$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f728985f-8826-4b38-8bbf-42ae411f9610.roa File: f728985f-8826-4b38-8bbf-42ae411f9610.roa (raw, json) Hash identifier: CPRi5QziLLwchPa21t1vQ3Rp8PN2XUpyX+F9dFrOC9I= Subject key identifier: DC:98:B4:BE:2C:EC:F7:C4:17:D8:E5:84:BC:79:07:61:FC:24:D5:14 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0D10773A72C98F733B61AA99B22C90B0084F7E29 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f728985f-8826-4b38-8bbf-42ae411f9610.roa Signing time: Sun 23 Aug 2026 00:00:02 +0000 ROA not before: Sun 23 Aug 2026 00:00:02 +0000 ROA not after: Sat 21 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fe9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:10:77:3a:72:c9:8f:73:3b:61:aa:99:b2:2c:90:b0:08:4f:7e:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 23 00:00:02 2026 GMT Not After : Nov 21 23:59:59 2026 GMT Subject: serialNumber=eee316763fb18d7fb51984997188c28a0878eee93f75099e25fb5dc4a8356afc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9b:37:c8:fe:d1:50:05:24:b3:d9:8f:2b:1f: a6:97:a0:45:5b:b0:ae:ed:f4:49:42:06:2f:3d:4f: 1a:69:41:0b:a1:fc:72:27:f6:36:89:ab:f8:ff:34: a8:7e:e2:20:80:7c:71:73:83:c6:3d:4b:20:cd:68: b5:b2:9c:46:1f:72:17:27:e2:70:0a:c8:40:56:19: ce:e6:c2:a1:24:a2:e2:4f:83:1f:79:d9:b3:1e:f1: a6:e4:e8:e0:69:e6:01:bb:17:15:5a:c2:f3:a0:e9: d7:85:ce:56:b5:92:98:a4:e5:21:c0:53:11:27:f7: 8a:cf:8e:35:6c:8c:44:e2:ec:99:09:4a:6c:6f:aa: 8a:03:7f:34:a7:8c:c2:14:12:47:3d:e7:9d:8e:e3: 74:56:9b:c8:d6:ba:33:c5:34:ff:5f:30:a9:62:f1: b2:3f:27:a3:56:54:6c:60:e2:a8:de:ac:ad:e4:46: 4d:5b:42:cd:99:ca:3e:48:28:f1:2a:60:01:bd:c1: e4:c5:75:48:03:89:f4:f5:63:a6:38:78:7d:28:c2: 13:2b:1b:28:c6:9d:02:eb:f0:2f:d6:5d:f6:09:55: d9:a1:27:44:85:5b:9a:81:e6:cc:fe:e7:63:c9:05: 91:15:be:c7:75:66:16:b7:b5:01:ae:f3:07:e9:10: 3c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:98:B4:BE:2C:EC:F7:C4:17:D8:E5:84:BC:79:07:61:FC:24:D5:14 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f728985f-8826-4b38-8bbf-42ae411f9610.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fe9::/32 Signature Algorithm: sha256WithRSAEncryption 5a:05:af:84:15:fc:89:23:a4:e9:1e:79:d1:4a:8e:92:c5:f4: 03:18:b9:7b:e8:bc:7a:04:f2:29:c6:1c:72:06:3c:ba:32:7e: 0c:84:a4:a4:10:ec:d3:bc:c6:bb:81:ec:4e:b5:9c:4c:0f:4b: b8:de:0f:0b:ec:ac:0f:b6:2b:52:5d:7e:ad:33:8a:df:26:45: 70:9a:74:fc:76:bf:56:72:3a:8e:93:7b:02:65:cb:3a:fe:ca: 7b:66:0f:eb:71:64:99:b0:5d:b0:16:06:8a:e4:ff:31:8b:1b: 73:d5:00:63:bc:47:9f:4c:11:3f:e2:29:85:78:0a:01:77:e8: a2:de:be:d1:9d:0a:fc:83:b2:b8:eb:89:20:48:63:6a:88:a3: 8f:5e:8b:db:b9:85:66:cd:ce:2a:c0:90:e1:a7:a7:12:3f:69: 16:01:92:1d:3f:4c:8b:ce:28:cf:c6:18:63:9b:2e:3f:85:80: 2c:73:2f:5d:49:a1:ef:d2:e8:be:bf:db:b8:35:ed:d1:2b:55: 15:65:1b:84:bf:d6:b2:87:d1:09:56:fa:14:64:fa:e0:34:ff: 31:55:f1:8a:c1:4a:22:c8:1e:36:ce:47:4c:16:ce:04:f6:b0: ee:9e:9f:b2:18:98:f7:0a:20:b9:3c:36:35:fe:ae:29:96:6d: 1e:1f:6e:d6 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUDRB3OnLJj3M7YaqZsiyQsAhPfikwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODIzMDAwMDAyWhcNMjYxMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZWUzMTY3NjNmYjE4ZDdmYjUxOTg0OTk3MTg4YzI4YTA4 NzhlZWU5M2Y3NTA5OWUyNWZiNWRjNGE4MzU2YWZjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7mzfI/tFQBSSz2Y8rH6aXoEVbsK7t9ElCBi89TxppQQuh /HIn9jaJq/j/NKh+4iCAfHFzg8Y9SyDNaLWynEYfchcn4nAKyEBWGc7mwqEkouJP gx952bMe8abk6OBp5gG7FxVawvOg6deFzla1kpik5SHAUxEn94rPjjVsjETi7JkJ SmxvqooDfzSnjMIUEkc9552O43RWm8jWujPFNP9fMKli8bI/J6NWVGxg4qjerK3k Rk1bQs2Zyj5IKPEqYAG9weTFdUgDifT1Y6Y4eH0owhMrGyjGnQLr8C/WXfYJVdmh J0SFW5qB5sz+52PJBZEVvsd1Zha3tQGu8wfpEDyxAgMBAAGjggKyMIICrjAdBgNV HQ4EFgQU3Ji0vizs98QX2OWEvHkHYfwk1RQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y3Mjg5ODVmLTg4MjYtNGIzOC04YmJmLTQyYWU0MTFmOTYxMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAmAB/pMA0GCSqGSIb3DQEBCwUAA4IBAQBaBa+EFfyJI6TpHnnRSo6SxfQD GLl76Lx6BPIpxhxyBjy6Mn4MhKSkEOzTvMa7gexOtZxMD0u43g8L7KwPtitSXX6t M4rfJkVwmnT8dr9WcjqOk3sCZcs6/sp7Zg/rcWSZsF2wFgaK5P8xixtz1QBjvEef TBE/4imFeAoBd+ii3r7RnQr8g7K464kgSGNqiKOPXovbuYVmzc4qwJDhp6cSP2kW AZIdP0yLzijPxhhjmy4/hYAscy9dSaHv0ui+v9u4Ne3RK1UVZRuEv9ayh9EJVvoU ZPrgNP8xVfGKwUoiyB42zkdMFs4E9rDunp+yGJj3CiC5PDY1/q4plm0eH27W -----END CERTIFICATE-----Generated at Tue Sep 15 13:23:52 2026 by rpki-client