$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb7dd045-a966-4ee9-9545-308026b51a14.roa File: cb7dd045-a966-4ee9-9545-308026b51a14.roa (raw, json) Hash identifier: Y+zuwXpPuqUTI22f2ooIRHQ6Azj0jMbqJKLlDNUu20E= Subject key identifier: A1:D3:14:6F:FE:7A:EB:F8:A7:E9:1C:29:C6:A0:ED:51:EF:5F:4B:B7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1F75B6B701560A5F5EE24E5B5549292FF3E629DB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb7dd045-a966-4ee9-9545-308026b51a14.roa Signing time: Wed 05 Aug 2026 00:50:09 +0000 ROA not before: Wed 05 Aug 2026 00:50:09 +0000 ROA not after: Tue 03 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1ff3:8000::/39 maxlen: 39 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:75:b6:b7:01:56:0a:5f:5e:e2:4e:5b:55:49:29:2f:f3:e6:29:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 00:50:09 2026 GMT Not After : Nov 3 23:59:59 2026 GMT Subject: serialNumber=6c614b90caa31f6f35a7e98990de63196bcf76d4255f34c6678bdd3944e14309, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:61:fa:4d:05:37:40:e2:18:c5:77:2e:62:e5: 21:47:38:d8:4c:67:26:c8:f5:52:aa:36:ae:86:c5: e1:e7:de:0a:eb:24:0f:c2:7d:7e:aa:00:2f:52:e7: 0b:0f:91:48:d6:e1:1b:36:8e:16:73:74:a0:8f:07: 44:c6:a3:28:a8:d6:fc:fa:9b:d4:45:0e:df:24:b4: 25:17:ed:45:86:0b:3f:5c:55:e1:dc:f3:5d:99:c6: 02:1d:fd:2a:12:ca:88:29:57:32:7f:fa:b0:97:16: 7a:29:a8:32:dc:61:4f:c9:28:f5:7f:f0:88:71:f5: 7f:14:4c:43:d3:4e:4b:33:83:cf:3e:ec:fe:23:5e: 43:55:53:de:5c:7a:6f:63:ec:33:46:c1:66:22:1b: 31:94:f4:bb:af:f9:50:1c:8a:de:6d:f1:58:08:3b: e9:0d:d0:c0:00:cc:e1:34:75:cd:c8:ba:20:db:d7: 56:a1:db:19:dc:c5:d0:6b:37:3f:80:b4:22:a4:15: 6e:26:eb:62:44:66:53:d9:10:8f:0a:52:34:8e:43: 02:77:3b:c7:5f:49:8f:80:e7:8e:cd:a2:90:8f:bf: 2f:97:5e:7b:2e:30:c9:86:56:a0:37:40:fa:b3:f9: bd:92:3d:06:dc:50:29:e7:62:0c:f0:1a:1c:39:c5: 4c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D3:14:6F:FE:7A:EB:F8:A7:E9:1C:29:C6:A0:ED:51:EF:5F:4B:B7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb7dd045-a966-4ee9-9545-308026b51a14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff3:8000::/39 Signature Algorithm: sha256WithRSAEncryption 44:4f:bd:ed:2c:2f:d6:39:0b:1f:80:2a:f8:3c:8c:12:85:ba: a1:d3:35:cd:00:c9:96:e3:cd:15:ab:f5:cf:73:09:35:51:3d: bf:58:b4:09:71:31:0e:a8:1f:6a:f2:08:16:ad:59:07:d1:99: 35:8b:a7:1f:c9:cb:23:c3:eb:ca:f7:b9:c2:23:56:c9:5b:8a: 69:8b:0c:bb:de:37:09:0c:1d:4e:18:5f:55:e1:8f:22:62:74: 40:d1:c3:89:43:a0:e6:a8:27:9e:69:91:10:4f:8e:d4:e2:ea: b4:3b:6f:71:fc:7e:67:8f:03:df:16:32:de:64:03:17:f1:23: 6f:8e:8e:83:f0:ed:2d:08:0b:4d:1a:1c:60:bf:14:38:9b:f8: 05:90:fe:96:72:b2:68:01:d8:aa:0d:41:4c:2c:ce:d9:8f:fe: c4:24:ca:79:11:a1:0b:3e:b9:34:6c:2c:a7:95:72:b0:09:d8: af:e9:21:ec:18:cd:a6:17:3d:02:c9:c3:62:99:88:0d:9c:92: 77:d2:15:fa:a7:58:79:1b:7f:cc:61:8e:b7:21:ad:d4:0e:28: b6:97:76:17:7b:62:c4:60:0f:4b:d2:38:cf:1a:6a:b8:bd:4e: 90:8c:69:21:6c:f7:ca:9e:d4:80:3c:45:51:c9:c1:76:ec:00: 8a:87:18:57 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUH3W2twFWCl9e4k5bVUkpL/PmKdswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA1MDA1MDA5WhcNMjYxMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2YzYxNGI5MGNhYTMxZjZmMzVhN2U5ODk5MGRlNjMxOTZi Y2Y3NmQ0MjU1ZjM0YzY2NzhiZGQzOTQ0ZTE0MzA5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdYfpNBTdA4hjFdy5i5SFHONhMZybI9VKqNq6GxeHn3grr JA/CfX6qAC9S5wsPkUjW4Rs2jhZzdKCPB0TGoyio1vz6m9RFDt8ktCUX7UWGCz9c VeHc812ZxgId/SoSyogpVzJ/+rCXFnopqDLcYU/JKPV/8Ihx9X8UTEPTTkszg88+ 7P4jXkNVU95cem9j7DNGwWYiGzGU9Luv+VAcit5t8VgIO+kN0MAAzOE0dc3IuiDb 11ah2xncxdBrNz+AtCKkFW4m62JEZlPZEI8KUjSOQwJ3O8dfSY+A547NopCPvy+X XnsuMMmGVqA3QPqz+b2SPQbcUCnnYgzwGhw5xUxzAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUodMUb/566/in6RwpxqDtUe9fS7cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NiN2RkMDQ1LWE5NjYtNGVlOS05NTQ1LTMwODAyNmI1MWExNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB/zgDANBgkqhkiG9w0BAQsFAAOCAQEARE+97Swv1jkLH4Aq+DyMEoW6 odM1zQDJluPNFav1z3MJNVE9v1i0CXExDqgfavIIFq1ZB9GZNYunH8nLI8Pryve5 wiNWyVuKaYsMu943CQwdThhfVeGPImJ0QNHDiUOg5qgnnmmREE+O1OLqtDtvcfx+ Z48D3xYy3mQDF/Ejb46Og/DtLQgLTRocYL8UOJv4BZD+lnKyaAHYqg1BTCzO2Y/+ xCTKeRGhCz65NGwsp5VysAnYr+kh7BjNphc9AsnDYpmIDZySd9IV+qdYeRt/zGGO tyGt1A4otpd2F3tixGAPS9I4zxpquL1OkIxpIWz3yp7UgDxFUcnBduwAiocYVw== -----END CERTIFICATE-----Generated at Sun Sep 20 15:39:10 2026 by rpki-client