$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5988892c-5d54-4e98-a5b0-3a2691a42a24.roa File: 5988892c-5d54-4e98-a5b0-3a2691a42a24.roa (raw, json) Hash identifier: Bh9Z7HNKaO994zS6sG2pR5zlwgHdYIa2aySOs9AmUng= Subject key identifier: AA:C7:FF:19:20:FE:1D:A1:D2:FF:D9:4E:D5:26:D4:DC:22:0A:0B:D5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5B3C16F6D6CD8230DD81077E72A1B3EC0F2D7E8C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5988892c-5d54-4e98-a5b0-3a2691a42a24.roa Signing time: Mon 03 Aug 2026 02:00:09 +0000 ROA not before: Mon 03 Aug 2026 02:00:09 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:74c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:3c:16:f6:d6:cd:82:30:dd:81:07:7e:72:a1:b3:ec:0f:2d:7e:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 3 02:00:09 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=2f50346f3db28adfc0981c9ea0a0256422a6473e3e8aa0084b14298c176b949e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:94:fc:09:5b:9c:68:86:a9:82:03:d3:7d:5f: f8:de:e9:fd:56:11:28:10:7d:15:78:8f:3c:13:78: d8:00:51:0d:37:7b:c4:dc:59:ae:1c:ac:3c:94:f2: 80:13:52:ac:d7:08:c3:7d:b4:48:50:69:14:de:38: b6:af:a3:96:28:d5:ad:b5:c2:c8:bb:8b:f5:ba:b0: 76:8e:fa:cf:7c:dc:20:6f:27:35:67:77:ae:14:82: e1:c4:76:dd:73:b8:aa:25:a7:b0:40:40:9a:98:86: 78:4f:82:ff:47:fe:5f:54:2e:11:a2:35:e6:81:22: 40:28:e3:48:c5:6e:34:90:40:97:e9:85:47:63:74: 8e:0e:a6:06:ef:23:00:7c:68:68:9d:1a:2e:1a:76: ee:2c:0e:02:a0:17:2b:f6:63:0e:97:1f:73:d8:64: 1d:11:c3:03:80:7d:f7:76:8e:11:a8:8e:8d:c9:3e: 81:99:6a:dc:87:86:c7:64:b8:4d:48:98:e0:c9:ae: 70:4c:55:06:42:fe:c8:78:f9:ee:fc:29:16:c5:22: 72:f4:36:dd:3d:18:2a:ed:4e:47:a5:4f:2c:13:6d: c7:74:de:a6:6b:48:d3:93:16:a6:ae:ef:06:bc:37: b5:3c:51:24:4d:6b:50:b1:92:03:d3:e9:15:63:a4: 01:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:C7:FF:19:20:FE:1D:A1:D2:FF:D9:4E:D5:26:D4:DC:22:0A:0B:D5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5988892c-5d54-4e98-a5b0-3a2691a42a24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:74c0::/48 Signature Algorithm: sha256WithRSAEncryption 93:f4:fe:d6:37:da:4c:8c:55:2d:a2:f7:08:51:cb:3f:4f:4f: bb:60:84:2d:ce:69:eb:f9:30:10:16:d5:47:87:06:de:8c:98: 96:0a:24:a6:1d:91:4c:95:bb:3b:3c:6c:63:60:48:11:0e:69: e8:75:05:a7:5f:09:3e:9a:0e:57:bf:26:5a:83:b6:62:2e:10: e9:ab:ef:c8:4e:23:56:14:f3:9c:59:eb:81:53:2a:83:44:9c: 23:17:ca:e1:f4:35:15:bc:c4:38:63:66:0c:59:b5:a8:66:c6: ca:23:c8:3f:97:84:21:03:7d:28:d1:53:fd:fb:00:f6:14:e1: b4:2c:1b:69:b5:8b:2d:6c:8f:ba:03:86:7b:c6:84:ac:95:96: 07:8c:00:e2:26:67:bd:c9:1f:8f:56:0c:a1:6d:51:44:4c:1c: 22:71:f9:65:bf:72:d9:d5:1f:c5:5e:f1:37:e3:76:c1:a8:ec: f6:d7:a4:40:8a:f0:57:8f:10:58:c2:00:48:25:2e:22:d6:0d: 1a:ef:b9:bd:5c:ac:d2:3a:0f:aa:63:e2:3f:6d:5b:ba:80:41: 81:cb:21:c0:1b:7d:15:51:84:f6:ce:b5:92:49:cd:91:2e:7f: 44:f6:51:70:b7:0c:6e:9a:b0:d8:a3:87:bf:16:0d:f5:66:e5: fe:8c:2d:c4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWzwW9tbNgjDdgQd+cqGz7A8tfowwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODAzMDIwMDA5WhcNMjYxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyZjUwMzQ2ZjNkYjI4YWRmYzA5ODFjOWVhMGEwMjU2NDIy YTY0NzNlM2U4YWEwMDg0YjE0Mjk4YzE3NmI5NDllMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/lPwJW5xohqmCA9N9X/je6f1WESgQfRV4jzwTeNgAUQ03 e8TcWa4crDyU8oATUqzXCMN9tEhQaRTeOLavo5Yo1a21wsi7i/W6sHaO+s983CBv JzVnd64UguHEdt1zuKolp7BAQJqYhnhPgv9H/l9ULhGiNeaBIkAo40jFbjSQQJfp hUdjdI4OpgbvIwB8aGidGi4adu4sDgKgFyv2Yw6XH3PYZB0RwwOAffd2jhGojo3J PoGZatyHhsdkuE1ImODJrnBMVQZC/sh4+e78KRbFInL0Nt09GCrtTkelTywTbcd0 3qZrSNOTFqau7wa8N7U8USRNa1CxkgPT6RVjpAHJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUqsf/GSD+HaHS/9lO1SbU3CIKC9UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU5ODg4OTJjLTVkNTQtNGU5OC1hNWIwLTNhMjY5MWE0MmEyNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AdMAwDQYJKoZIhvcNAQELBQADggEBAJP0/tY32kyMVS2i9whRyz9P T7tghC3Oaev5MBAW1UeHBt6MmJYKJKYdkUyVuzs8bGNgSBEOaeh1BadfCT6aDle/ JlqDtmIuEOmr78hOI1YU85xZ64FTKoNEnCMXyuH0NRW8xDhjZgxZtahmxsojyD+X hCEDfSjRU/37APYU4bQsG2m1iy1sj7oDhnvGhKyVlgeMAOImZ73JH49WDKFtUURM HCJx+WW/ctnVH8Ve8TfjdsGo7PbXpECK8FePEFjCAEglLiLWDRrvub1crNI6D6pj 4j9tW7qAQYHLIcAbfRVRhPbOtZJJzZEuf0T2UXC3DG6asNijh78WDfVm5f6MLcQ= -----END CERTIFICATE-----Generated at Mon Aug 3 05:40:34 2026 by rpki-client