$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20835921-52a1-4298-9dfe-c6c9d7802f1c.roa File: 20835921-52a1-4298-9dfe-c6c9d7802f1c.roa (raw, json) Hash identifier: uxml2mYmlhgRKO9iUx8Kwo2LuxzhY/YB75KW+e1VLh4= Subject key identifier: 45:A4:D7:BD:C5:0A:32:AD:05:DC:63:27:AE:C7:DF:EA:B3:53:22:37 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4952E5D80FB156DEFE99978813F65108F6A9F6EA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20835921-52a1-4298-9dfe-c6c9d7802f1c.roa Signing time: Mon 03 Aug 2026 00:50:10 +0000 ROA not before: Mon 03 Aug 2026 00:50:10 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1ff2:8060::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:52:e5:d8:0f:b1:56:de:fe:99:97:88:13:f6:51:08:f6:a9:f6:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 3 00:50:10 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=1e8a05cf879718d45d302c3ac632e3df7f48520e55886cbe80c03a87d51f9673, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:92:34:cd:e9:64:8f:f2:f7:44:9b:da:03:e8: e1:a1:c6:36:8c:9b:b7:e2:a3:05:5b:39:28:1c:d1: 0a:e2:de:06:e6:e2:a5:4f:9f:c7:a3:5d:0b:59:c5: 50:56:6c:3b:5b:ae:eb:8d:3a:6d:49:74:87:b4:f9: b6:ea:fe:46:48:91:9f:fc:8b:92:88:75:55:d5:41: 34:ea:9b:04:10:2e:dc:93:1b:f0:a3:3d:b4:bc:e1: f3:e6:e9:c7:f8:0a:f5:d0:63:42:a2:1e:75:7c:f8: f0:05:01:e2:ea:8a:39:ec:04:d7:f5:07:9f:cb:f6: 5c:47:48:75:0a:29:30:03:a4:40:50:df:f2:be:12: 08:cc:0c:1d:44:c1:d5:c7:01:73:4a:03:99:52:ca: 73:46:54:fc:73:13:38:75:32:80:20:3d:2a:71:28: 98:c7:16:52:33:c0:90:8f:17:b5:cf:ed:6a:11:d6: 76:f3:6a:8e:52:7a:55:55:54:3d:60:ed:da:d2:0b: 8d:f2:a6:21:e2:ff:bd:72:95:da:6b:dd:bb:0b:7f: 8e:02:32:e8:59:cb:81:e0:f5:94:e7:3b:66:4b:b1: 1a:f8:e4:1c:3d:7b:e9:34:b4:1b:39:42:9b:c4:28: 94:c3:ff:0d:0d:95:e8:79:a9:01:80:cb:be:5b:33: bd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A4:D7:BD:C5:0A:32:AD:05:DC:63:27:AE:C7:DF:EA:B3:53:22:37 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20835921-52a1-4298-9dfe-c6c9d7802f1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff2:8060::/48 Signature Algorithm: sha256WithRSAEncryption 1e:c6:e3:2c:1b:ca:23:1e:d2:10:f2:bf:28:b7:1e:8f:54:98: 5b:aa:8b:d7:51:0e:ab:0a:b3:3b:c0:e4:e4:91:bc:8a:24:2b: ef:b9:02:e5:db:b4:7d:8f:01:bd:3a:10:0c:84:29:48:3e:d3: e5:1c:aa:52:06:14:3e:39:95:41:f2:3f:c5:8f:07:38:cb:8c: 0a:fc:9b:93:92:fe:c4:31:f3:6d:0d:af:bf:23:00:f1:97:b1: c8:1b:90:02:85:f3:28:54:32:e1:ad:d5:10:56:f5:70:5f:51: 1b:58:f2:e4:cd:e3:8c:b7:a1:4b:5b:55:4d:0e:a8:60:1a:74: 74:2c:b1:a7:fc:3f:3c:b9:f1:48:93:65:29:77:1f:f4:59:e5: 42:e6:39:71:c3:6a:18:c8:4c:18:4a:1a:45:49:53:db:d0:aa: 69:08:72:54:58:e8:76:f7:8d:ea:3b:04:94:ce:a0:c3:28:73: ee:92:db:be:e9:e2:aa:4a:b9:15:0c:e9:a2:f0:45:21:68:5d: 85:b7:b3:47:e0:2b:8f:19:ce:69:4a:b7:4b:9e:26:d0:63:50: 55:c7:f0:33:1c:9b:6d:b3:e3:fa:71:c6:e2:82:3f:4d:3d:71: b5:7e:26:50:69:41:af:6b:b6:d6:dc:85:a7:71:8d:1d:05:95: 73:7a:89:48 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSVLl2A+xVt7+mZeIE/ZRCPap9uowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODAzMDA1MDEwWhcNMjYxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0AxZThhMDVjZjg3OTcxOGQ0NWQzMDJjM2FjNjMyZTNkZjdm NDg1MjBlNTU4ODZjYmU4MGMwM2E4N2Q1MWY5NjczMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzkjTN6WSP8vdEm9oD6OGhxjaMm7fiowVbOSgc0Qri3gbm 4qVPn8ejXQtZxVBWbDtbruuNOm1JdIe0+bbq/kZIkZ/8i5KIdVXVQTTqmwQQLtyT G/CjPbS84fPm6cf4CvXQY0KiHnV8+PAFAeLqijnsBNf1B5/L9lxHSHUKKTADpEBQ 3/K+EgjMDB1EwdXHAXNKA5lSynNGVPxzEzh1MoAgPSpxKJjHFlIzwJCPF7XP7WoR 1nbzao5SelVVVD1g7drSC43ypiHi/71yldpr3bsLf44CMuhZy4Hg9ZTnO2ZLsRr4 5Bw9e+k0tBs5QpvEKJTD/w0Nleh5qQGAy75bM70vAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQURaTXvcUKMq0F3GMnrsff6rNTIjcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIwODM1OTIxLTUyYTEtNDI5OC05ZGZlLWM2YzlkNzgwMmYxYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/ygGAwDQYJKoZIhvcNAQELBQADggEBAB7G4ywbyiMe0hDyvyi3Ho9U mFuqi9dRDqsKszvA5OSRvIokK++5AuXbtH2PAb06EAyEKUg+0+UcqlIGFD45lUHy P8WPBzjLjAr8m5OS/sQx820Nr78jAPGXscgbkAKF8yhUMuGt1RBW9XBfURtY8uTN 44y3oUtbVU0OqGAadHQssaf8Pzy58UiTZSl3H/RZ5ULmOXHDahjITBhKGkVJU9vQ qmkIclRY6Hb3jeo7BJTOoMMoc+6S277p4qpKuRUM6aLwRSFoXYW3s0fgK48ZzmlK t0ueJtBjUFXH8DMcm22z4/pxxuKCP009cbV+JlBpQa9rttbchadxjR0FlXN6iUg= -----END CERTIFICATE-----Generated at Mon Aug 3 06:55:48 2026 by rpki-client