$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f7e841be-8773-49b7-96d9-e62d90280cdf.roa File: f7e841be-8773-49b7-96d9-e62d90280cdf.roa (raw, json) Hash identifier: NN7TbsfJNQ4O/Q18GT/xwpjt1nY8SirJ1U9lEaAg/zo= Subject key identifier: 41:DE:FA:21:F0:8C:07:CB:B4:9B:4D:89:56:44:E9:C4:80:07:FE:19 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0DB03DB3C1C31F030F768DB0597F902415E8D122 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f7e841be-8773-49b7-96d9-e62d90280cdf.roa Signing time: Mon 10 Aug 2026 00:20:06 +0000 ROA not before: Mon 10 Aug 2026 00:20:06 +0000 ROA not after: Sun 08 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fe0:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:b0:3d:b3:c1:c3:1f:03:0f:76:8d:b0:59:7f:90:24:15:e8:d1:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 10 00:20:06 2026 GMT Not After : Nov 8 23:59:59 2026 GMT Subject: serialNumber=8cf39f86cc716c90d0df7097c4f924ca370bb8cf97fe06bdb9baa79d1a411f5a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1a:52:57:75:a0:e0:a5:ab:a6:ef:3a:e9:ec: c4:73:10:e3:9c:81:46:5d:24:88:db:db:9e:52:8a: 59:c1:42:87:90:eb:93:a7:69:8a:ca:39:23:2b:0b: 27:24:5d:82:f7:97:1c:6a:4e:39:8c:9e:d5:f2:9e: 5f:1e:8f:a1:82:d3:83:25:04:92:0c:60:a2:8a:ce: a4:16:5a:a9:c7:21:b9:5d:37:72:3f:ba:30:57:94: b3:41:0a:44:bd:7c:6f:1a:c3:d9:7d:02:b6:29:97: ab:cc:20:10:22:af:d6:58:a2:63:47:6b:9d:81:e2: 1f:2b:c9:e2:0d:bf:e5:35:73:e7:9d:95:29:44:96: 05:be:b9:7f:bd:ae:2e:5c:9a:f0:74:bf:b2:08:b5: 69:39:a3:14:f8:f6:be:60:ba:e1:6a:6a:d8:80:a4: bb:12:74:87:4e:38:05:a3:e0:28:3f:2d:c1:b6:89: 1e:74:93:c0:36:d0:70:39:12:17:79:48:1f:f3:bb: d8:5b:6a:87:f0:be:26:60:db:4f:91:93:2b:1e:1c: 2d:5b:b0:e1:c8:3b:44:99:b3:91:e4:a4:70:83:07: c0:61:00:9a:1c:dd:5d:b6:68:36:bb:d0:db:2a:a9: 8b:b0:38:a3:9a:09:a8:cb:e0:15:bb:c3:e0:ed:12: c5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:DE:FA:21:F0:8C:07:CB:B4:9B:4D:89:56:44:E9:C4:80:07:FE:19 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f7e841be-8773-49b7-96d9-e62d90280cdf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fe0:5000::/40 Signature Algorithm: sha256WithRSAEncryption 2a:4c:75:5c:d4:2e:06:91:96:4e:4b:6e:6d:f7:91:94:d1:7e: b8:16:f6:2f:a7:df:7e:5a:28:6f:58:2e:a3:84:91:66:6e:06: 99:d0:e0:6f:db:b4:3b:7a:96:d2:12:ae:fb:10:7c:78:17:21: 5c:71:d9:2c:6f:4c:54:c3:5e:e3:ef:db:f3:0a:11:c7:3b:96: 88:7f:6f:ac:43:ad:b2:2a:1a:30:a3:be:37:d0:53:fa:e6:73: d6:0b:cd:db:58:32:f9:48:e9:bd:0f:7b:a1:e0:99:db:74:f3: 1b:6b:5a:27:5f:c0:50:fc:16:62:eb:c0:17:1a:08:75:20:c1: 60:fa:d8:df:29:d6:ca:62:ef:0c:d1:21:fd:87:30:eb:a5:44: 79:f0:51:6a:0e:23:a1:87:32:a8:73:42:33:fa:bc:b3:6d:ee: 74:77:e7:be:6d:21:8b:53:95:4e:2b:c0:bb:b1:76:55:1e:83: 91:6c:50:dc:da:a6:ae:16:50:b0:4e:24:4a:02:8f:3e:7d:cc: fd:a4:2f:85:af:b3:81:fb:76:99:fd:09:b4:ba:2d:f0:c3:de: 9e:ef:2c:32:7e:34:e6:ca:65:23:62:4a:4e:fd:ff:61:2a:97: 5c:57:bd:95:2b:25:8a:d0:c2:04:4e:1e:40:43:91:16:b9:ed: e3:01:c3:44 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUDbA9s8HDHwMPdo2wWX+QJBXo0SIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODEwMDAyMDA2WhcNMjYxMTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A4Y2YzOWY4NmNjNzE2YzkwZDBkZjcwOTdjNGY5MjRjYTM3 MGJiOGNmOTdmZTA2YmRiOWJhYTc5ZDFhNDExZjVhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCeGlJXdaDgpaum7zrp7MRzEOOcgUZdJIjb255SilnBQoeQ 65OnaYrKOSMrCyckXYL3lxxqTjmMntXynl8ej6GC04MlBJIMYKKKzqQWWqnHIbld N3I/ujBXlLNBCkS9fG8aw9l9ArYpl6vMIBAir9ZYomNHa52B4h8ryeINv+U1c+ed lSlElgW+uX+9ri5cmvB0v7IItWk5oxT49r5guuFqatiApLsSdIdOOAWj4Cg/LcG2 iR50k8A20HA5Ehd5SB/zu9hbaofwviZg20+RkyseHC1bsOHIO0SZs5HkpHCDB8Bh AJoc3V22aDa70NsqqYuwOKOaCajL4BW7w+DtEsUPAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUQd76IfCMB8u0m02JVkTpxIAH/hkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y3ZTg0MWJlLTg3NzMtNDliNy05NmQ5LWU2MmQ5MDI4MGNkZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/gUDANBgkqhkiG9w0BAQsFAAOCAQEAKkx1XNQuBpGWTktubfeRlNF+ uBb2L6fffloob1guo4SRZm4GmdDgb9u0O3qW0hKu+xB8eBchXHHZLG9MVMNe4+/b 8woRxzuWiH9vrEOtsioaMKO+N9BT+uZz1gvN21gy+UjpvQ97oeCZ23TzG2taJ1/A UPwWYuvAFxoIdSDBYPrY3ynWymLvDNEh/Ycw66VEefBRag4joYcyqHNCM/q8s23u dHfnvm0hi1OVTivAu7F2VR6DkWxQ3NqmrhZQsE4kSgKPPn3M/aQvha+zgft2mf0J tLot8MPenu8sMn405splI2JKTv3/YSqXXFe9lSslitDCBE4eQEORFrnt4wHDRA== -----END CERTIFICATE-----Generated at Tue Sep 15 11:02:12 2026 by rpki-client