$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2062309-a07e-4752-8307-f95c61c019c8.roa File: a2062309-a07e-4752-8307-f95c61c019c8.roa (raw, json) Hash identifier: 5iMrfvjdU4m1t0gAZxfdqDVg2Nq3Ib8vM4695eTwJpU= Subject key identifier: 95:60:71:EB:2F:62:46:8C:70:FF:67:EF:7E:02:7C:A6:DE:76:72:71 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 45AA459B76383531AACEFDA917B5DF579CBDC167 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2062309-a07e-4752-8307-f95c61c019c8.roa Signing time: Thu 10 Sep 2026 00:21:29 +0000 ROA not before: Thu 10 Sep 2026 00:21:29 +0000 ROA not after: Wed 09 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1feb:8050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:aa:45:9b:76:38:35:31:aa:ce:fd:a9:17:b5:df:57:9c:bd:c1:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 10 00:21:29 2026 GMT Not After : Dec 9 23:59:59 2026 GMT Subject: serialNumber=84494b101f9feba590ce79688f3c2d96ceae68f59fed2e1368134023a0a156f4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d2:3d:82:61:f4:53:8b:42:74:55:ae:3a:ee: cb:5c:24:1c:54:90:fc:3c:42:44:46:87:2e:8e:8e: 6d:f9:8d:65:a6:28:82:b6:2a:b9:17:a8:3c:0f:93: 91:fb:0b:2d:18:ec:20:ad:fe:0f:aa:a3:83:05:ee: d7:a0:d9:ed:ff:f5:e5:fa:52:23:95:c4:19:bb:75: b0:5a:d4:d1:b7:fd:0e:fb:6b:16:1f:72:ac:d9:2c: 93:fe:17:4b:12:e8:7d:47:9c:89:37:3a:87:ab:bc: 9a:46:87:ab:2e:b1:6f:e4:96:1f:13:c1:7e:59:6e: 9d:cf:c5:81:93:5e:50:b7:2d:cf:46:75:57:2c:7c: 52:7c:b8:a6:60:cc:b3:4e:42:5b:e1:f2:f9:6d:ef: 94:d9:53:c9:1e:f5:39:6e:fd:b2:bd:1c:20:4e:62: e8:c7:c5:d3:8f:0c:e5:87:9f:75:98:41:f0:94:f2: 1a:d3:39:87:36:7b:8e:36:08:a0:31:59:a9:8f:eb: 5c:fa:68:91:32:59:22:da:1b:b7:5b:0b:ad:a2:2c: b5:35:8b:81:ae:7d:63:5b:65:50:e2:aa:3c:82:33: c8:21:59:d3:11:53:ad:80:e3:e4:28:c9:48:4b:ba: b1:5f:09:08:30:80:60:e1:49:15:30:3c:23:3a:20: df:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:60:71:EB:2F:62:46:8C:70:FF:67:EF:7E:02:7C:A6:DE:76:72:71 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2062309-a07e-4752-8307-f95c61c019c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1feb:8050::/48 Signature Algorithm: sha256WithRSAEncryption 90:ee:44:55:34:e3:a3:f1:bb:82:66:b5:d2:7a:e6:5d:6f:eb: 08:79:29:22:8e:ed:21:5b:f4:d5:2f:10:81:e0:70:6c:db:fe: 86:be:ad:45:03:d3:fd:55:10:67:68:31:67:17:5e:c7:08:59: 14:46:5d:98:a3:5c:f7:79:c0:01:8b:6d:76:65:88:19:d9:ad: 74:23:c6:22:5a:a7:69:9e:2a:bb:a1:cf:9c:65:9a:ab:d8:4f: a0:59:e9:d2:9b:df:6d:d8:96:a1:99:0b:90:d0:a9:66:ad:1e: 49:54:b8:3a:dd:ed:d1:e4:e1:43:ec:77:d5:df:5c:52:23:07: 18:83:86:bb:7c:ac:4e:24:f4:a6:06:32:05:f9:49:ee:3d:38: e6:cd:9d:fe:35:ef:0a:d7:50:44:38:58:db:03:e7:46:bf:55: f4:86:6e:e7:9b:f7:a9:2d:4f:2f:7e:fd:b8:a2:f9:0c:ad:95: 4a:59:e9:b9:e0:a8:7a:30:71:30:20:22:a9:19:aa:de:58:83: 02:ae:f7:dd:04:c2:17:67:7c:b2:a5:d2:bb:cc:65:18:2d:4f: 38:e9:6a:af:b1:9c:73:1a:53:9d:d9:b0:18:95:11:5b:71:2a: 9b:79:ca:86:b4:fc:8e:bc:81:d0:08:1c:2f:18:41:6e:47:be: 96:8b:6f:0e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURapFm3Y4NTGqzv2pF7XfV5y9wWcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwOTEwMDAyMTI5WhcNMjYxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NDQ5NGIxMDFmOWZlYmE1OTBjZTc5Njg4ZjNjMmQ5NmNl YWU2OGY1OWZlZDJlMTM2ODEzNDAyM2EwYTE1NmY0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCJ0j2CYfRTi0J0Va467stcJBxUkPw8QkRGhy6Ojm35jWWm KIK2KrkXqDwPk5H7Cy0Y7CCt/g+qo4MF7teg2e3/9eX6UiOVxBm7dbBa1NG3/Q77 axYfcqzZLJP+F0sS6H1HnIk3OoervJpGh6susW/klh8TwX5Zbp3PxYGTXlC3Lc9G dVcsfFJ8uKZgzLNOQlvh8vlt75TZU8ke9Tlu/bK9HCBOYujHxdOPDOWHn3WYQfCU 8hrTOYc2e442CKAxWamP61z6aJEyWSLaG7dbC62iLLU1i4GufWNbZVDiqjyCM8gh WdMRU62A4+QoyUhLurFfCQgwgGDhSRUwPCM6IN/dAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUlWBx6y9iRoxw/2fvfgJ8pt52cnEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EyMDYyMzA5LWEwN2UtNDc1Mi04MzA3LWY5NWM2MWMwMTljOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/rgFAwDQYJKoZIhvcNAQELBQADggEBAJDuRFU046Pxu4JmtdJ65l1v 6wh5KSKO7SFb9NUvEIHgcGzb/oa+rUUD0/1VEGdoMWcXXscIWRRGXZijXPd5wAGL bXZliBnZrXQjxiJap2meKruhz5xlmqvYT6BZ6dKb323YlqGZC5DQqWatHklUuDrd 7dHk4UPsd9XfXFIjBxiDhrt8rE4k9KYGMgX5Se49OObNnf417wrXUEQ4WNsD50a/ VfSGbueb96ktTy9+/bii+QytlUpZ6bngqHowcTAgIqkZqt5YgwKu990EwhdnfLKl 0rvMZRgtTzjpaq+xnHMaU53ZsBiVEVtxKpt5yoa0/I68gdAIHC8YQW5HvpaLbw4= -----END CERTIFICATE-----Generated at Sun Sep 20 19:38:23 2026 by rpki-client