$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3dd0926-e4d2-48b1-af66-72022719417d.roa File: c3dd0926-e4d2-48b1-af66-72022719417d.roa (raw, json) Hash identifier: Gksr1V3O7xkLWbk23BDugD50+ttaSd6mJwPSvFKCUrU= Subject key identifier: 8C:9C:1A:09:44:9C:07:23:EF:C5:E3:59:68:3E:39:08:7E:34:7E:57 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 628313B10037C23FD41244480BA4CC995583FC29 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3dd0926-e4d2-48b1-af66-72022719417d.roa Signing time: Thu 10 Sep 2026 00:20:06 +0000 ROA not before: Thu 10 Sep 2026 00:20:06 +0000 ROA not after: Wed 09 Dec 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1feb:8010::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:83:13:b1:00:37:c2:3f:d4:12:44:48:0b:a4:cc:99:55:83:fc:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 10 00:20:06 2026 GMT Not After : Dec 9 23:59:59 2026 GMT Subject: serialNumber=96caf401c541cc120404af3caaeeb1584ae75315eefd4bb55a89a8314c5174dc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:4f:ce:6a:c8:e7:1b:94:8b:53:10:ec:38:f2: 8a:26:55:30:6f:77:35:e8:ba:15:02:dd:29:f0:53: 07:2b:a3:2d:46:b2:5d:c0:bf:54:12:4c:38:a9:0c: 99:fe:85:cd:2f:a0:e9:e5:d2:e5:26:7a:8e:e9:80: 3d:38:84:f4:13:a8:3e:9b:1f:52:9e:a4:ee:45:9d: 03:5e:94:ae:e4:42:28:25:db:48:5c:50:6c:e9:42: b8:c2:bf:bf:eb:74:4e:a6:ea:20:1f:4c:38:8c:14: 39:dd:66:98:f0:f4:e4:83:e3:da:74:64:dc:4c:41: c8:37:16:7a:1c:49:36:4e:48:30:67:6e:f0:dc:36: e8:23:54:26:83:97:f8:90:c2:4e:09:0f:02:ea:de: 9d:8b:c8:fa:90:fc:02:29:21:2d:4a:cc:66:d0:1e: 02:a5:97:83:10:8a:34:a7:1c:71:58:62:bb:54:6a: 48:28:05:9f:fb:a6:39:28:ac:85:25:ef:fb:84:24: 93:77:c7:e6:07:c0:1b:58:b3:a1:18:12:5d:d6:bf: f4:9c:29:7d:fa:85:71:f2:9d:05:07:03:87:04:dd: 58:da:33:78:32:e1:71:5c:e5:a4:d9:f3:cb:e0:96: 47:d7:4b:79:a7:17:3a:ac:fe:60:6a:1c:15:93:ba: a6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:9C:1A:09:44:9C:07:23:EF:C5:E3:59:68:3E:39:08:7E:34:7E:57 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3dd0926-e4d2-48b1-af66-72022719417d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1feb:8010::/48 Signature Algorithm: sha256WithRSAEncryption 53:2c:e7:e6:27:4c:e6:1c:27:11:79:d9:bf:68:e4:dd:ab:bc: 21:20:13:5b:a9:07:27:77:18:99:f9:41:dc:0f:f2:87:16:79: ee:f0:dd:45:41:6f:d7:1f:74:e8:9e:be:87:25:a7:d0:4a:6c: 86:56:90:11:aa:a2:5b:29:63:a1:d0:e4:ae:00:88:2e:a3:2b: 46:b2:8e:e3:7f:f5:3f:88:c2:f6:d8:2b:69:e6:1b:07:6b:24: f3:c6:fc:e2:b4:8a:c6:04:e8:13:10:aa:db:b9:6e:2e:f2:00: bf:31:86:70:5c:0a:2e:00:a2:d5:cb:cf:b9:4e:da:a7:a0:d8: b6:6b:08:85:41:9f:3e:2a:cd:40:5e:28:cb:11:68:1b:5f:b7: a2:0d:a4:5b:c1:92:75:c2:6f:28:2a:f2:d1:1c:d1:02:55:f9: fb:cd:70:51:b5:3a:35:5e:45:18:27:e0:6d:45:48:df:e2:b6: d4:e3:ea:21:3c:1e:02:be:57:13:9e:dd:a7:ea:d6:3e:d4:45: 72:7e:b8:24:37:16:ad:2c:c3:04:c2:c5:ef:ac:e9:de:34:f5: 2e:e8:e3:7b:2e:30:b9:a8:1d:82:9b:f4:32:84:e5:9e:d3:05: 3c:69:ca:85:c1:ff:f0:a5:76:2d:94:06:27:63:e1:02:36:e0: 06:13:40:5d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUYoMTsQA3wj/UEkRIC6TMmVWD/CkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwOTEwMDAyMDA2WhcNMjYxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NmNhZjQwMWM1NDFjYzEyMDQwNGFmM2NhYWVlYjE1ODRh ZTc1MzE1ZWVmZDRiYjU1YTg5YTgzMTRjNTE3NGRjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDhT85qyOcblItTEOw48oomVTBvdzXouhUC3SnwUwcroy1G sl3Av1QSTDipDJn+hc0voOnl0uUmeo7pgD04hPQTqD6bH1KepO5FnQNelK7kQigl 20hcUGzpQrjCv7/rdE6m6iAfTDiMFDndZpjw9OSD49p0ZNxMQcg3FnocSTZOSDBn bvDcNugjVCaDl/iQwk4JDwLq3p2LyPqQ/AIpIS1KzGbQHgKll4MQijSnHHFYYrtU akgoBZ/7pjkorIUl7/uEJJN3x+YHwBtYs6EYEl3Wv/ScKX36hXHynQUHA4cE3Vja M3gy4XFc5aTZ88vglkfXS3mnFzqs/mBqHBWTuqYpAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUjJwaCUScByPvxeNZaD45CH40flcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MzZGQwOTI2LWU0ZDItNDhiMS1hZjY2LTcyMDIyNzE5NDE3ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/rgBAwDQYJKoZIhvcNAQELBQADggEBAFMs5+YnTOYcJxF52b9o5N2r vCEgE1upByd3GJn5QdwP8ocWee7w3UVBb9cfdOievoclp9BKbIZWkBGqolspY6HQ 5K4AiC6jK0ayjuN/9T+IwvbYK2nmGwdrJPPG/OK0isYE6BMQqtu5bi7yAL8xhnBc Ci4AotXLz7lO2qeg2LZrCIVBnz4qzUBeKMsRaBtft6INpFvBknXCbygq8tEc0QJV +fvNcFG1OjVeRRgn4G1FSN/ittTj6iE8HgK+VxOe3afq1j7URXJ+uCQ3Fq0swwTC xe+s6d409S7o43suMLmoHYKb9DKE5Z7TBTxpyoXB//Cldi2UBidj4QI24AYTQF0= -----END CERTIFICATE-----Generated at Sun Sep 20 16:48:11 2026 by rpki-client