$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00b5a095-fe4a-4a96-b512-d808a94a2ea2.roa File: 00b5a095-fe4a-4a96-b512-d808a94a2ea2.roa (raw, json) Hash identifier: nhxotqvsXAwYnjswyptdmBakkMuuAH9BPVIsKppeay0= Subject key identifier: BF:51:C9:29:31:52:D5:0B:94:2A:B0:49:B2:6F:2D:57:39:B3:D2:B2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1E7967820B4DFD7C60BBA32689BB33236758A2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00b5a095-fe4a-4a96-b512-d808a94a2ea2.roa Signing time: Mon 03 Aug 2026 02:20:11 +0000 ROA not before: Mon 03 Aug 2026 02:20:11 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f21:c000::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:79:67:82:0b:4d:fd:7c:60:bb:a3:26:89:bb:33:23:67:58:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 3 02:20:11 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=ce58c2506e2a0a1057ff7567b406c4541425663b03b495ca56e3b2877b7b9890, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a5:f3:e0:86:c6:c3:59:ec:0b:f1:15:8f:30: 3e:f9:67:3d:ea:be:d3:6f:24:eb:bd:1f:c3:1f:1a: b2:75:77:b7:16:b6:c8:1e:40:0a:68:87:f0:22:00: 75:aa:34:e0:4a:1a:ae:f9:08:92:06:14:b6:05:24: dc:6a:53:b5:7a:c1:d7:34:e9:8e:bb:ad:2e:df:22: df:30:c9:94:6f:08:6a:f1:34:1a:a2:bb:d8:fc:07: cc:14:21:29:df:57:ec:2e:cb:fc:99:f0:a2:f7:97: b4:9f:c2:28:e4:88:83:8b:33:03:d0:36:e5:73:e0: c2:c3:a7:c5:00:6a:2b:f0:60:ef:d7:98:76:ca:5b: 8f:ef:f2:39:bb:ca:07:73:96:f7:65:8e:ac:a1:b4: f2:db:cc:65:6a:be:72:81:d7:df:eb:1f:f1:ce:57: 69:bf:74:b5:2a:e7:88:16:7b:21:76:8d:4b:5e:d4: 33:c2:83:69:32:cf:91:fb:3c:35:bd:82:d2:fc:26: 60:2e:78:15:7c:30:fd:4a:dc:35:de:e8:2e:6e:6b: 54:af:00:2f:9f:a6:26:fd:2a:4f:b2:d5:dc:ec:36: 84:57:b4:bf:65:93:63:f1:e5:01:04:01:17:15:41: 2f:38:fa:3c:f2:56:8f:5d:4f:72:48:aa:0b:e6:67: 2d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:51:C9:29:31:52:D5:0B:94:2A:B0:49:B2:6F:2D:57:39:B3:D2:B2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00b5a095-fe4a-4a96-b512-d808a94a2ea2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f21:c000::/37 Signature Algorithm: sha256WithRSAEncryption 29:44:e2:4e:a1:1e:a4:ed:07:ae:15:c7:1d:c7:8c:b7:6d:7f: 36:05:75:1c:35:b3:84:6c:2b:40:84:d7:c1:3e:3c:1d:bd:ad: 22:bf:18:44:8b:de:b3:13:8b:78:20:1d:48:8f:2e:eb:22:9a: 59:0d:a7:46:52:66:78:19:bd:54:18:2c:9b:06:94:14:42:91: 92:d9:75:f2:89:5f:06:89:ce:c1:ae:04:77:49:b5:06:a8:2d: 55:01:a3:35:f7:b2:f1:44:65:b0:50:cb:fd:e3:79:69:2e:55: f9:ad:08:82:7d:09:db:c0:46:43:6d:59:b4:d6:a4:34:1b:9d: cc:75:92:e0:05:62:98:eb:1a:55:ed:91:ae:ed:34:41:84:cc: 4f:b9:ea:43:5a:75:88:75:cc:fb:81:59:34:f3:ee:5d:05:be: 69:52:5f:d8:4c:e7:23:76:d0:16:bd:10:4d:50:ed:1c:23:c4: 3e:d7:02:85:36:52:a5:30:85:dd:db:33:cf:47:e6:ba:a1:56: e2:f9:b7:c9:af:4d:47:21:a3:51:c4:fc:2e:67:85:12:7c:81: 0e:9a:3b:62:fd:e1:43:67:1f:6b:fb:32:9d:68:8f:13:a6:ae: 1e:e6:96:de:11:fa:c3:53:80:e0:43:5f:f6:0d:e2:ec:8f:4b: 01:1e:f2:2f -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgITHnlnggtN/Xxgu6MmibszI2dYojANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNjA4MDMwMjIwMTFaFw0yNjExMDEyMzU5NTla MHoxSTBHBgNVBAUTQGNlNThjMjUwNmUyYTBhMTA1N2ZmNzU2N2I0MDZjNDU0MTQy NTY2M2IwM2I0OTVjYTU2ZTNiMjg3N2I3Yjk4OTAxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAJSl8+CGxsNZ7AvxFY8wPvlnPeq+028k670fwx8asnV3txa2 yB5ACmiH8CIAdao04EoarvkIkgYUtgUk3GpTtXrB1zTpjrutLt8i3zDJlG8IavE0 GqK72PwHzBQhKd9X7C7L/JnwoveXtJ/CKOSIg4szA9A25XPgwsOnxQBqK/Bg79eY dspbj+/yObvKB3OW92WOrKG08tvMZWq+coHX3+sf8c5Xab90tSrniBZ7IXaNS17U M8KDaTLPkfs8Nb2C0vwmYC54FXww/UrcNd7oLm5rVK8AL5+mJv0qT7LV3Ow2hFe0 v2WTY/HlAQQBFxVBLzj6PPJWj11PckiqC+ZnLR0CAwEAAaOCArMwggKvMB0GA1Ud DgQWBBS/UckpMVLVC5QqsEmyby1XObPSsjAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvMDBiNWEwOTUtZmU0YS00YTk2LWI1MTItZDgwOGE5NGEyZWEyLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw CAMGAyYAHyHAMA0GCSqGSIb3DQEBCwUAA4IBAQApROJOoR6k7QeuFccdx4y3bX82 BXUcNbOEbCtAhNfBPjwdva0ivxhEi96zE4t4IB1Ijy7rIppZDadGUmZ4Gb1UGCyb BpQUQpGS2XXyiV8Gic7BrgR3SbUGqC1VAaM197LxRGWwUMv943lpLlX5rQiCfQnb wEZDbVm01qQ0G53MdZLgBWKY6xpV7ZGu7TRBhMxPuepDWnWIdcz7gVk08+5dBb5p Ul/YTOcjdtAWvRBNUO0cI8Q+1wKFNlKlMIXd2zPPR+a6oVbi+bfJr01HIaNRxPwu Z4USfIEOmjti/eFDZx9r+zKdaI8Tpq4e5pbeEfrDU4DgQ1/2DeLsj0sBHvIv -----END CERTIFICATE-----Generated at Mon Aug 3 05:38:02 2026 by rpki-client