$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c94fe362-280f-4e34-9a80-031cdcf06de2.roa File: c94fe362-280f-4e34-9a80-031cdcf06de2.roa (raw, json) Hash identifier: jbHukP/KHIfaWxx42GZs8kSHVQuDeT6hTrpjCWpfzsg= Subject key identifier: B7:05:84:52:A8:50:91:F2:B8:BF:15:A4:6C:58:77:3C:69:58:31:65 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 08A2A56CAA2D557ABBCE601DEB4E1D1720246D0A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c94fe362-280f-4e34-9a80-031cdcf06de2.roa Signing time: Tue 25 Aug 2026 00:00:07 +0000 ROA not before: Tue 25 Aug 2026 00:00:07 +0000 ROA not after: Mon 23 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fba:8030::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:a2:a5:6c:aa:2d:55:7a:bb:ce:60:1d:eb:4e:1d:17:20:24:6d:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 25 00:00:07 2026 GMT Not After : Nov 23 23:59:59 2026 GMT Subject: serialNumber=2c97e8f153a2541e5b1e3e6e77f5fa8b3885b0c067201d7d9d8fd729ad86b96c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c1:0f:38:a8:6e:07:98:3d:d2:59:a1:fa:bf: 57:fe:b4:e1:1a:25:53:fc:1d:37:ea:49:cb:33:9c: de:e8:68:56:57:7f:4d:00:99:e6:72:b5:33:ad:76: 54:1a:d3:f6:53:75:c3:ea:ad:e5:8b:2b:ba:cb:11: 5f:42:23:61:06:8a:59:0f:0d:5b:a9:ba:73:a0:a5: 22:a7:68:29:e1:67:6c:4f:af:e4:58:c0:bb:f2:59: a1:a5:99:b5:22:2c:f3:70:41:c5:f2:d9:23:e3:fd: 13:f4:1c:fe:b0:46:32:b5:51:ef:d8:7c:76:0f:fe: 4a:ac:82:34:8b:75:0a:1e:9c:4d:56:6d:2d:18:69: c5:36:a0:68:18:e5:90:4b:0d:15:42:07:dd:aa:c8: 35:8b:84:7d:d6:b0:e0:8b:d7:53:46:d7:c8:8f:dc: 2d:f6:94:e6:9f:5b:f6:bc:a3:2a:e8:d0:3f:8c:6e: f9:ba:7d:c5:4c:ab:48:87:ce:5c:7d:8d:47:82:f1: bd:d8:ab:28:c0:0a:10:3f:b8:45:3a:5e:12:b6:64: a9:d7:16:0c:5f:02:40:30:55:b2:e9:38:dc:cb:5d: a9:ba:bf:9c:fe:b1:b7:5c:45:06:3b:f2:f4:0b:a6: 8a:ff:ec:0c:2c:be:4a:f0:a8:df:00:1f:f7:57:2b: 0b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:05:84:52:A8:50:91:F2:B8:BF:15:A4:6C:58:77:3C:69:58:31:65 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c94fe362-280f-4e34-9a80-031cdcf06de2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fba:8030::/48 Signature Algorithm: sha256WithRSAEncryption 92:9d:5e:ba:1d:94:37:65:6e:6d:d7:b2:f8:08:b4:5a:9b:43: 5a:6a:bb:52:b9:2a:fc:3e:13:ec:21:ed:13:35:8b:36:1b:aa: f6:d7:c4:e0:c5:f4:80:f3:3f:bc:0a:e4:b0:e1:9f:a1:26:a8: f7:fe:ed:37:1a:b9:3b:26:29:37:18:70:f0:1b:ba:1d:9f:58: dd:00:c7:0b:43:a8:43:9b:33:96:aa:69:2f:75:65:ba:7d:38: 9a:3c:2c:8d:fa:ce:b1:8c:15:5a:b8:d0:f1:b7:82:2e:e5:77: ab:7c:bd:9d:ee:aa:70:5d:69:f4:17:fe:54:52:b5:66:11:d0: c7:36:f0:15:5b:37:bd:eb:7d:15:18:e8:ca:97:42:fe:ab:6f: 32:7f:63:1d:ba:e0:25:18:03:62:5c:ff:ae:8b:36:80:a3:5c: 61:a4:61:17:f0:a8:8e:f6:3a:43:71:e5:f7:46:af:e4:be:8d: 15:e7:ce:1a:50:1a:48:1d:38:47:b9:5f:59:77:1b:e5:b8:74: da:dc:5f:dd:8b:fe:88:64:f5:ab:80:f4:4f:77:04:8c:0d:1c: 16:40:dc:f7:4b:76:ba:c8:3b:a2:92:07:83:33:36:ca:f9:c8: 09:f4:c7:84:f0:af:04:8a:0a:19:5b:5d:03:f5:0f:66:14:ba: 71:18:2f:4d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCKKlbKotVXq7zmAd604dFyAkbQowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODI1MDAwMDA3WhcNMjYxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYzk3ZThmMTUzYTI1NDFlNWIxZTNlNmU3N2Y1ZmE4YjM4 ODViMGMwNjcyMDFkN2Q5ZDhmZDcyOWFkODZiOTZjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOwQ84qG4HmD3SWaH6v1f+tOEaJVP8HTfqScsznN7oaFZX f00AmeZytTOtdlQa0/ZTdcPqreWLK7rLEV9CI2EGilkPDVupunOgpSKnaCnhZ2xP r+RYwLvyWaGlmbUiLPNwQcXy2SPj/RP0HP6wRjK1Ue/YfHYP/kqsgjSLdQoenE1W bS0YacU2oGgY5ZBLDRVCB92qyDWLhH3WsOCL11NG18iP3C32lOafW/a8oyro0D+M bvm6fcVMq0iHzlx9jUeC8b3YqyjAChA/uEU6XhK2ZKnXFgxfAkAwVbLpONzLXam6 v5z+sbdcRQY78vQLpor/7AwsvkrwqN8AH/dXKwuhAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUtwWEUqhQkfK4vxWkbFh3PGlYMWUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M5NGZlMzYyLTI4MGYtNGUzNC05YTgwLTAzMWNkY2YwNmRlMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB+6gDAwDQYJKoZIhvcNAQELBQADggEBAJKdXrodlDdlbm3XsvgItFqb Q1pqu1K5Kvw+E+wh7RM1izYbqvbXxODF9IDzP7wK5LDhn6EmqPf+7TcauTsmKTcY cPAbuh2fWN0AxwtDqEObM5aqaS91Zbp9OJo8LI36zrGMFVq40PG3gi7ld6t8vZ3u qnBdafQX/lRStWYR0Mc28BVbN73rfRUY6MqXQv6rbzJ/Yx264CUYA2Jc/66LNoCj XGGkYRfwqI72OkNx5fdGr+S+jRXnzhpQGkgdOEe5X1l3G+W4dNrcX92L/ohk9auA 9E93BIwNHBZA3PdLdrrIO6KSB4MzNsr5yAn0x4TwrwSKChlbXQP1D2YUunEYL00= -----END CERTIFICATE-----Generated at Sun Sep 20 20:07:53 2026 by rpki-client