$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a47a2049-1e4b-43e8-8574-6e668e56858a.roa File: a47a2049-1e4b-43e8-8574-6e668e56858a.roa (raw, json) Hash identifier: dH+6xHxCL2F38yfAKS5uBHNqKQvzqpv5bVl7u+Cjskc= Subject key identifier: AD:28:16:D8:DD:45:2F:33:02:23:BA:CC:06:62:4B:63:0D:48:69:97 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 39CA6D43BA7E7172AF1B5483CA5CB963F7E1D7FE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a47a2049-1e4b-43e8-8574-6e668e56858a.roa Signing time: Thu 10 Sep 2026 00:10:41 +0000 ROA not before: Thu 10 Sep 2026 00:10:41 +0000 ROA not after: Wed 09 Dec 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1feb:3400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ca:6d:43:ba:7e:71:72:af:1b:54:83:ca:5c:b9:63:f7:e1:d7:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 10 00:10:41 2026 GMT Not After : Dec 9 23:59:59 2026 GMT Subject: serialNumber=4cf57677f8532e275775f94f357f9ca3058e0e12209b03003136ffc26a294dff, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cd:8e:0c:7e:18:f9:9c:b2:8d:35:21:a4:35: 98:f5:bb:ef:4f:d0:62:8b:59:31:78:63:15:70:17: 6b:4d:f7:f9:f5:2c:26:5a:ce:be:5e:b8:26:43:0f: c5:03:f4:f2:4e:c1:59:5c:45:51:56:0a:74:9a:e1: 74:9b:d9:ad:a5:4a:98:ee:4b:fd:4f:93:3d:57:32: de:fd:b5:dd:be:3b:f2:2c:32:49:89:25:00:70:22: 6a:7c:4b:94:96:bd:cf:ec:dc:eb:1f:e6:38:16:34: 43:17:b2:94:3a:e2:6a:1b:7d:fb:d8:c1:ed:27:ce: 8a:d7:c3:73:1f:b0:f2:e7:49:c3:e4:6c:cf:7a:cb: 38:1f:66:4e:97:e7:56:3c:29:a1:e1:1d:ab:dc:1d: dd:c5:8f:d9:84:51:53:97:d0:77:0e:3a:22:c3:7f: eb:15:08:d6:f6:56:85:23:0f:dd:26:af:09:9d:a4: 84:bf:2c:bd:e9:63:77:34:bf:81:e8:c5:4b:a6:d6: 83:dd:fa:ce:e4:e9:3a:5f:fb:d9:5b:2b:88:2d:87: 33:f4:fe:e0:09:a1:76:6b:24:97:0a:c6:31:a0:a5: e2:d9:e0:1e:7d:3a:1d:ef:7d:c3:70:25:59:1a:b0: 38:4b:1f:f8:d7:f1:73:84:a1:99:7e:22:26:41:32: d4:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:28:16:D8:DD:45:2F:33:02:23:BA:CC:06:62:4B:63:0D:48:69:97 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a47a2049-1e4b-43e8-8574-6e668e56858a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1feb:3400::/40 Signature Algorithm: sha256WithRSAEncryption 3e:82:99:0f:03:65:e1:68:60:95:57:a0:71:7c:a9:f6:e8:86: 93:ac:76:a4:34:db:17:7a:9f:72:6c:99:15:f6:f9:25:19:4c: be:1a:6f:1b:04:26:a1:d8:bb:43:53:19:e2:f1:79:f4:bc:34: 70:c3:91:fc:3b:a0:c0:23:be:26:3e:24:e9:00:41:f4:96:7e: 7f:82:c9:c2:cf:b9:d6:f0:c9:20:3c:0a:40:c0:57:20:b2:5f: 3b:1f:11:8a:b8:cd:c6:08:ac:42:7a:01:e9:49:39:c8:49:a0: 91:cc:41:66:d0:47:65:ef:c9:fa:54:32:df:f0:b9:a8:e2:5d: 27:b8:2d:64:f2:b4:ab:da:b4:7f:9d:9e:10:eb:74:25:b8:3c: 3e:97:84:82:46:75:a0:a8:5f:a8:f1:a6:92:2d:ea:a9:ab:6d: 81:80:97:5a:c8:0d:04:0b:93:49:26:39:0b:1c:da:46:51:bd: cb:85:2c:19:42:7b:68:3e:7a:48:7a:3d:41:6d:c4:23:4b:d7: b9:a5:77:0a:1f:e3:49:26:ce:49:8d:0c:04:70:14:c9:e6:00: 09:7d:d0:3c:fe:68:9d:0a:90:8e:66:76:ec:1b:cf:6d:67:d0: af:d8:9d:3a:25:69:aa:cc:db:4c:f8:2b:a6:1c:88:ec:13:89: e8:96:a4:6e -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUOcptQ7p+cXKvG1SDyly5Y/fh1/4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwOTEwMDAxMDQxWhcNMjYxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A0Y2Y1NzY3N2Y4NTMyZTI3NTc3NWY5NGYzNTdmOWNhMzA1 OGUwZTEyMjA5YjAzMDAzMTM2ZmZjMjZhMjk0ZGZmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+zY4Mfhj5nLKNNSGkNZj1u+9P0GKLWTF4YxVwF2tN9/n1 LCZazr5euCZDD8UD9PJOwVlcRVFWCnSa4XSb2a2lSpjuS/1Pkz1XMt79td2+O/Is MkmJJQBwImp8S5SWvc/s3Osf5jgWNEMXspQ64mobffvYwe0nzorXw3MfsPLnScPk bM96yzgfZk6X51Y8KaHhHavcHd3Fj9mEUVOX0HcOOiLDf+sVCNb2VoUjD90mrwmd pIS/LL3pY3c0v4HoxUum1oPd+s7k6Tpf+9lbK4gthzP0/uAJoXZrJJcKxjGgpeLZ 4B59Oh3vfcNwJVkasDhLH/jX8XOEoZl+IiZBMtRDAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUrSgW2N1FLzMCI7rMBmJLYw1IaZcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E0N2EyMDQ5LTFlNGItNDNlOC04NTc0LTZlNjY4ZTU2ODU4YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/rNDANBgkqhkiG9w0BAQsFAAOCAQEAPoKZDwNl4WhglVegcXyp9uiG k6x2pDTbF3qfcmyZFfb5JRlMvhpvGwQmodi7Q1MZ4vF59Lw0cMOR/DugwCO+Jj4k 6QBB9JZ+f4LJws+51vDJIDwKQMBXILJfOx8RirjNxgisQnoB6Uk5yEmgkcxBZtBH Ze/J+lQy3/C5qOJdJ7gtZPK0q9q0f52eEOt0Jbg8PpeEgkZ1oKhfqPGmki3qqatt gYCXWsgNBAuTSSY5CxzaRlG9y4UsGUJ7aD56SHo9QW3EI0vXuaV3Ch/jSSbOSY0M BHAUyeYACX3QPP5onQqQjmZ27BvPbWfQr9idOiVpqszbTPgrphyI7BOJ6Jakbg== -----END CERTIFICATE-----Generated at Mon Sep 21 11:05:30 2026 by rpki-client