$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef4e5441-f6d9-45b0-884c-4d963b0d7930.roa File: ef4e5441-f6d9-45b0-884c-4d963b0d7930.roa (raw, json) Hash identifier: CX3jkPG23judvisP2/U3RhLLSQMiSsKXzS0ZW8Me5IM= Subject key identifier: 84:C1:69:DD:FE:7D:FC:9F:EB:46:19:93:09:20:DC:D4:C3:2C:6A:09 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5D914A6DE1B8CCF33B7F7278013BB3246612344B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef4e5441-f6d9-45b0-884c-4d963b0d7930.roa Signing time: Wed 09 Sep 2026 16:03:35 +0000 ROA not before: Wed 09 Sep 2026 16:03:35 +0000 ROA not after: Tue 08 Dec 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f20:2000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:91:4a:6d:e1:b8:cc:f3:3b:7f:72:78:01:3b:b3:24:66:12:34:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 9 16:03:35 2026 GMT Not After : Dec 8 23:59:59 2026 GMT Subject: serialNumber=5ba8bbd450df18751128b5c8054fcd616418014644a00770e5b2fd459da5a5a6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:68:b6:b1:8a:38:73:f6:6e:ab:6a:2e:51:e2: c1:67:fd:75:95:eb:05:fb:92:ca:c3:9a:58:aa:ad: 4e:26:72:52:f3:b6:89:9c:d4:24:a9:91:21:ed:4c: 32:b9:66:96:fb:61:f3:87:1a:9e:5c:21:e2:cb:68: 56:1f:28:e6:45:4a:04:00:92:71:41:9d:97:10:9f: b6:da:4d:84:39:f2:af:12:b0:06:db:e9:59:18:e5: ee:90:2b:5a:0a:61:d4:3a:e3:74:5d:b8:2c:60:12: ed:70:0a:d0:2e:29:f9:36:30:18:cf:be:27:5c:3c: 8d:78:83:a4:e8:b5:9b:a7:5b:2c:df:2d:bf:a3:74: e4:a5:4e:f1:46:d3:2d:7a:b8:52:92:cc:36:98:fe: 1e:fe:0c:b5:b0:43:37:70:e3:9a:64:dc:2d:aa:51: ce:de:ca:9d:0a:58:1d:d5:10:5a:0b:b7:a7:22:dc: 5c:99:40:75:b3:89:60:50:5d:b8:cd:54:2e:bd:76: 18:9d:83:dc:70:e5:d5:83:31:8a:ac:bc:c4:dc:2c: f9:7a:b9:86:01:3d:3e:58:db:d3:8d:86:f4:12:98: 77:6a:35:e6:d2:32:f1:a8:3f:39:79:a4:88:ae:77: ea:eb:d1:94:aa:57:a3:07:02:da:ad:e0:f3:f2:84: 90:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C1:69:DD:FE:7D:FC:9F:EB:46:19:93:09:20:DC:D4:C3:2C:6A:09 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef4e5441-f6d9-45b0-884c-4d963b0d7930.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f20:2000::/36 Signature Algorithm: sha256WithRSAEncryption 32:89:00:41:1e:af:72:5b:29:a4:19:8b:7c:64:a5:52:30:fa: df:b4:19:c8:db:29:cd:e7:f4:44:45:54:57:16:e0:6f:1d:e2: 11:b7:f4:1d:e2:5c:e6:56:0f:5b:b9:00:d6:c4:71:eb:e1:4e: 43:0a:60:1b:d5:3a:a5:c2:5d:32:64:b1:f1:50:01:cc:83:11: b4:cb:78:da:58:37:2c:1e:0f:c8:c5:a8:1a:f5:4c:54:11:70: 2e:ad:42:9e:52:2f:87:da:41:8b:53:db:77:42:1e:f6:54:ee: ec:ed:f7:38:8e:ba:b4:18:d1:e4:8a:ec:88:88:86:ed:64:1e: 07:6a:6c:91:63:a1:cc:fe:94:c9:74:d1:e2:95:0c:cd:ad:e3: 6d:a0:f8:0a:09:82:ee:63:a4:f0:96:73:e7:15:3b:ad:a8:2d: d0:f5:05:8e:ff:6d:16:42:f9:d0:47:19:ef:bb:3d:d0:0e:6a: 25:d0:26:14:96:eb:f9:eb:90:3a:63:e9:7f:ee:a7:0e:99:6b: 0a:e5:03:5b:45:43:d9:58:03:c2:6e:54:b4:34:27:1c:e9:f3: 72:f8:2e:94:28:70:38:02:89:f9:9d:f2:c0:15:90:37:c7:6f: b4:79:ef:03:ee:c2:90:f2:ce:73:27:09:7c:63:8b:27:29:51: bc:0a:38:ec -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUXZFKbeG4zPM7f3J4ATuzJGYSNEswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwOTA5MTYwMzM1WhcNMjYxMjA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YmE4YmJkNDUwZGYxODc1MTEyOGI1YzgwNTRmY2Q2MTY0 MTgwMTQ2NDRhMDA3NzBlNWIyZmQ0NTlkYTVhNWE2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNaLaxijhz9m6rai5R4sFn/XWV6wX7ksrDmliqrU4mclLz tomc1CSpkSHtTDK5Zpb7YfOHGp5cIeLLaFYfKOZFSgQAknFBnZcQn7baTYQ58q8S sAbb6VkY5e6QK1oKYdQ643RduCxgEu1wCtAuKfk2MBjPvidcPI14g6TotZunWyzf Lb+jdOSlTvFG0y16uFKSzDaY/h7+DLWwQzdw45pk3C2qUc7eyp0KWB3VEFoLt6ci 3FyZQHWziWBQXbjNVC69dhidg9xw5dWDMYqsvMTcLPl6uYYBPT5Y29ONhvQSmHdq NebSMvGoPzl5pIiud+rr0ZSqV6MHAtqt4PPyhJD3AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUhMFp3f59/J/rRhmTCSDc1MMsagkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VmNGU1NDQxLWY2ZDktNDViMC04ODRjLTRkOTYzYjBkNzkzMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8gIDANBgkqhkiG9w0BAQsFAAOCAQEAMokAQR6vclsppBmLfGSlUjD6 37QZyNspzef0REVUVxbgbx3iEbf0HeJc5lYPW7kA1sRx6+FOQwpgG9U6pcJdMmSx 8VABzIMRtMt42lg3LB4PyMWoGvVMVBFwLq1CnlIvh9pBi1Pbd0Ie9lTu7O33OI66 tBjR5IrsiIiG7WQeB2pskWOhzP6UyXTR4pUMza3jbaD4CgmC7mOk8JZz5xU7ragt 0PUFjv9tFkL50EcZ77s90A5qJdAmFJbr+euQOmPpf+6nDplrCuUDW0VD2VgDwm5U tDQnHOnzcvgulChwOAKJ+Z3ywBWQN8dvtHnvA+7CkPLOcycJfGOLJylRvAo47A== -----END CERTIFICATE-----Generated at Mon Sep 21 01:01:59 2026 by rpki-client