$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aefe6c81-632c-40a2-8e1a-da305750174d.roa File: aefe6c81-632c-40a2-8e1a-da305750174d.roa (raw, json) Hash identifier: 3S7Hhd+X9bKyUp8mgyYFxeWlnkCHuiOlUtLAHRZKmP0= Subject key identifier: 83:97:CC:1B:F0:52:5E:5F:87:C1:28:AB:1E:29:DE:50:8C:5F:B5:F9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 47534183F3609A8A655B101EE788B90E4E89A0F1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aefe6c81-632c-40a2-8e1a-da305750174d.roa Signing time: Mon 03 Aug 2026 02:00:37 +0000 ROA not before: Mon 03 Aug 2026 02:00:37 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:4090::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:53:41:83:f3:60:9a:8a:65:5b:10:1e:e7:88:b9:0e:4e:89:a0:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 3 02:00:37 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=ff463968304e25109809ecb889eb6c8e4ccce74e7a04e1c238c324983f6c3adf, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:9c:63:0a:e0:1f:ad:9c:0e:ad:9e:ac:43:ba: c7:f4:d3:fe:41:08:ea:74:61:aa:c6:d0:58:d1:a6: 4c:6f:86:23:fe:75:c8:b5:70:8d:82:88:41:b2:dd: b7:29:c0:68:da:9e:24:6f:54:d3:0d:40:c4:46:ae: 1b:94:d3:2e:f5:4b:0b:01:1a:83:bd:5e:f8:ca:85: da:a1:35:fe:93:f6:04:99:90:82:a3:b1:53:ef:21: 95:cd:ad:76:9c:0c:e7:44:4a:97:22:a2:83:a1:b5: 54:3f:5c:d0:af:61:d1:71:5e:ef:93:99:a6:33:50: a1:76:84:4f:49:27:12:bf:80:92:ce:54:17:30:e8: c0:50:6b:92:f7:e6:53:24:a2:a1:fd:8a:05:d0:32: 0c:64:6d:f6:37:b6:ac:b4:37:36:b8:3d:7a:76:8a: cb:fe:fb:32:0a:fb:0a:93:32:1e:88:ad:4a:e1:fc: 7e:0a:d4:ee:60:77:b9:a7:a9:9d:8f:f6:01:42:a2: 75:39:7d:70:da:36:14:df:f8:3e:7c:26:5f:c7:84: 31:0e:33:17:2c:50:96:a8:71:d6:7e:07:d9:4a:52: 60:12:31:91:34:42:93:96:bc:c4:03:a2:e4:bf:03: bc:88:db:45:24:6a:c5:32:30:b9:5e:08:9e:eb:0b: b8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:97:CC:1B:F0:52:5E:5F:87:C1:28:AB:1E:29:DE:50:8C:5F:B5:F9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aefe6c81-632c-40a2-8e1a-da305750174d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:4090::/48 Signature Algorithm: sha256WithRSAEncryption 9d:57:7e:6f:11:db:e6:68:5f:16:bd:4c:fe:21:c8:fc:0a:e6: cd:09:53:44:53:d1:e1:62:80:4f:f1:42:f3:23:2d:5e:ab:a6: b6:c8:ab:d1:ab:2d:8f:23:54:5f:e4:84:ca:1e:5f:e8:f5:13: e5:c7:78:a3:33:30:d9:bc:d0:16:e8:68:8f:75:e5:26:68:11: 7c:0c:11:5a:f7:4d:a4:49:69:c9:06:4d:11:38:3d:28:b0:48: 54:1f:89:43:d7:7d:0f:00:02:74:5a:8a:41:af:b7:d5:2f:f0: 0e:a7:f8:f0:6e:7a:5b:ca:80:1e:c5:de:a3:ba:04:e7:f8:f1: c0:a8:1b:17:50:0a:e9:6d:dc:e0:e9:e1:7c:d6:8f:2d:9b:6d: 66:63:61:28:93:5b:e8:79:df:b9:fb:56:fe:26:bb:ff:34:c7: e7:fb:33:1b:82:44:2c:eb:08:43:d7:3f:cb:01:48:96:78:62: 64:ae:20:94:9c:bb:91:16:6c:7c:54:fa:0e:2c:af:a9:d6:ad: 3c:c0:6d:bf:c4:1b:0f:6f:b5:ea:df:00:a2:f5:89:04:c7:b5: 25:dc:10:d4:13:76:18:04:b4:23:2c:cf:5a:ff:89:8e:e3:a1: 26:f3:1d:45:67:4f:b7:35:db:f6:8a:e2:73:77:fe:77:7b:f6: b9:0a:5d:ec -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUR1NBg/NgmoplWxAe54i5Dk6JoPEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODAzMDIwMDM3WhcNMjYxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BmZjQ2Mzk2ODMwNGUyNTEwOTgwOWVjYjg4OWViNmM4ZTRj Y2NlNzRlN2EwNGUxYzIzOGMzMjQ5ODNmNmMzYWRmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDqnGMK4B+tnA6tnqxDusf00/5BCOp0YarG0FjRpkxvhiP+ dci1cI2CiEGy3bcpwGjaniRvVNMNQMRGrhuU0y71SwsBGoO9XvjKhdqhNf6T9gSZ kIKjsVPvIZXNrXacDOdESpciooOhtVQ/XNCvYdFxXu+TmaYzUKF2hE9JJxK/gJLO VBcw6MBQa5L35lMkoqH9igXQMgxkbfY3tqy0Nza4PXp2isv++zIK+wqTMh6IrUrh /H4K1O5gd7mnqZ2P9gFConU5fXDaNhTf+D58Jl/HhDEOMxcsUJaocdZ+B9lKUmAS MZE0QpOWvMQDouS/A7yI20UkasUyMLleCJ7rC7iXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUg5fMG/BSXl+HwSirHineUIxftfkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FlZmU2YzgxLTYzMmMtNDBhMi04ZTFhLWRhMzA1NzUwMTc0ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//QJAwDQYJKoZIhvcNAQELBQADggEBAJ1Xfm8R2+ZoXxa9TP4hyPwK 5s0JU0RT0eFigE/xQvMjLV6rprbIq9GrLY8jVF/khMoeX+j1E+XHeKMzMNm80Bbo aI915SZoEXwMEVr3TaRJackGTRE4PSiwSFQfiUPXfQ8AAnRaikGvt9Uv8A6n+PBu elvKgB7F3qO6BOf48cCoGxdQCult3ODp4XzWjy2bbWZjYSiTW+h537n7Vv4mu/80 x+f7MxuCRCzrCEPXP8sBSJZ4YmSuIJScu5EWbHxU+g4sr6nWrTzAbb/EGw9vterf AKL1iQTHtSXcENQTdhgEtCMsz1r/iY7joSbzHUVnT7c12/aK4nN3/nd79rkKXew= -----END CERTIFICATE-----Generated at Mon Aug 3 05:41:27 2026 by rpki-client