$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff6a3224-997f-47ea-bd39-71765a1fb276.roa File: ff6a3224-997f-47ea-bd39-71765a1fb276.roa (raw, json) Hash identifier: X+uhXd44jnj1vo0XnnH79W73g/P5tJGhlqlI4+ufGsY= Subject key identifier: 64:8F:84:CF:4F:84:D6:4A:37:3D:75:30:84:8A:2A:43:E2:42:0B:0E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1F1A2EF5057F313888E88E92CDA70852BA5AE70C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff6a3224-997f-47ea-bd39-71765a1fb276.roa Signing time: Tue 04 Aug 2026 02:00:44 +0000 ROA not before: Tue 04 Aug 2026 02:00:44 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f24:c800::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:1a:2e:f5:05:7f:31:38:88:e8:8e:92:cd:a7:08:52:ba:5a:e7:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 02:00:44 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=af672260003047ed5592c9a5ce55f995110bd6eb61b51f851ebdb4b759a1eba4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b4:f1:0f:67:40:21:68:04:9b:c6:b6:80:ba: 93:93:90:02:85:20:fe:7a:0f:25:fe:51:7d:60:13: 95:57:82:e4:c7:98:1b:4b:32:2a:3c:d3:db:86:ae: 5e:fa:73:9a:7a:3b:bf:eb:33:d4:c9:2c:fb:c1:16: fa:1f:30:91:cb:a7:c4:1b:bf:e5:8f:c4:5d:be:83: 44:0d:e5:c6:d1:51:87:77:b7:0a:dd:13:82:1d:10: 63:89:2d:9d:f2:40:42:31:41:0b:5e:9d:00:1a:15: a6:f4:ae:da:2a:20:e8:2c:37:83:e5:3a:ca:e6:9d: b5:dc:c4:84:58:4a:63:2e:f1:80:10:2f:88:47:4a: 71:4a:bf:9a:4e:de:d3:b4:cd:b4:0b:59:11:f8:62: 78:fb:fd:07:b3:5a:4e:81:28:19:6e:7d:02:57:0d: 68:01:df:dd:82:9c:b6:17:77:93:18:65:2f:d9:28: 1a:7a:af:e2:be:76:06:0f:19:5f:6d:4c:c0:b7:28: 42:a8:a1:86:8b:71:8f:76:a2:50:15:bb:bc:33:49: 3b:4b:c6:9f:1f:b7:59:8b:95:2f:1f:49:eb:9a:34: 5b:84:1c:f8:27:6a:62:38:b2:eb:9b:a8:1c:20:96: ee:17:78:83:e4:7b:32:81:f1:cb:59:c8:87:3b:56: 9a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:8F:84:CF:4F:84:D6:4A:37:3D:75:30:84:8A:2A:43:E2:42:0B:0E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff6a3224-997f-47ea-bd39-71765a1fb276.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f24:c800::/37 Signature Algorithm: sha256WithRSAEncryption aa:c0:d9:87:97:8a:04:cc:54:10:43:97:4b:99:15:80:0e:73: f4:6a:c1:38:59:f9:3c:f0:b9:77:af:5f:7a:4d:f8:ee:b3:fb: 7a:18:19:be:18:b7:3a:97:81:bc:34:21:33:be:23:fc:94:29: 58:49:0e:df:08:49:f4:ea:f4:9b:86:44:3a:1d:d0:a8:2f:d9: ff:28:e4:80:f6:a7:f5:ae:b3:13:92:bd:10:db:a4:25:92:32: 30:aa:c2:d9:23:f6:8b:b0:b6:7a:b2:a0:3e:87:ac:0c:0b:08: f3:b9:be:a2:39:88:91:44:d0:c2:dc:63:0a:10:c2:5c:0f:32: d6:dc:31:27:74:89:75:44:e1:68:1a:31:84:9c:f1:30:92:52: 20:e3:6b:48:6b:0e:47:1d:bd:5f:f4:b9:96:0f:be:3c:96:d9: 39:a0:32:8b:f1:92:ff:5c:3a:da:a6:f5:62:35:10:9a:79:a5: 6e:c1:01:d5:99:9a:d8:94:26:db:e1:4d:4a:80:50:0a:3f:93: 4d:92:8b:22:43:0f:68:0e:9a:08:17:04:0e:e6:20:bf:b2:d3: da:6a:9f:4b:04:cb:d4:8c:90:e5:e1:b8:65:c6:af:c5:4a:e7: 3b:92:55:f3:e0:7a:2e:0a:21:70:b2:8b:80:d4:a3:4a:bd:4c: fb:fc:57:3f -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUHxou9QV/MTiI6I6SzacIUrpa5wwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA0MDIwMDQ0WhcNMjYxMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhZjY3MjI2MDAwMzA0N2VkNTU5MmM5YTVjZTU1Zjk5NTEx MGJkNmViNjFiNTFmODUxZWJkYjRiNzU5YTFlYmE0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChtPEPZ0AhaASbxraAupOTkAKFIP56DyX+UX1gE5VXguTH mBtLMio809uGrl76c5p6O7/rM9TJLPvBFvofMJHLp8Qbv+WPxF2+g0QN5cbRUYd3 twrdE4IdEGOJLZ3yQEIxQQtenQAaFab0rtoqIOgsN4PlOsrmnbXcxIRYSmMu8YAQ L4hHSnFKv5pO3tO0zbQLWRH4Ynj7/QezWk6BKBlufQJXDWgB392CnLYXd5MYZS/Z KBp6r+K+dgYPGV9tTMC3KEKooYaLcY92olAVu7wzSTtLxp8ft1mLlS8fSeuaNFuE HPgnamI4suubqBwglu4XeIPkezKB8ctZyIc7VppfAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUZI+Ez0+E1ko3PXUwhIoqQ+JCCw4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZmNmEzMjI0LTk5N2YtNDdlYS1iZDM5LTcxNzY1YTFmYjI3Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8kyDANBgkqhkiG9w0BAQsFAAOCAQEAqsDZh5eKBMxUEEOXS5kVgA5z 9GrBOFn5PPC5d69fek347rP7ehgZvhi3OpeBvDQhM74j/JQpWEkO3whJ9Or0m4ZE Oh3QqC/Z/yjkgPan9a6zE5K9ENukJZIyMKrC2SP2i7C2erKgPoesDAsI87m+ojmI kUTQwtxjChDCXA8y1twxJ3SJdUThaBoxhJzxMJJSIONrSGsORx29X/S5lg++PJbZ OaAyi/GS/1w62qb1YjUQmnmlbsEB1Zma2JQm2+FNSoBQCj+TTZKLIkMPaA6aCBcE DuYgv7LT2mqfSwTL1IyQ5eG4ZcavxUrnO5JV8+B6LgohcLKLgNSjSr1M+/xXPw== -----END CERTIFICATE-----Generated at Tue Sep 15 13:22:29 2026 by rpki-client