$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af587f49-38bf-4b30-8bc9-8c7823a6b805.roa File: af587f49-38bf-4b30-8bc9-8c7823a6b805.roa (raw, json) Hash identifier: IcPBkyHfRsGGv+xlUYGL7XtbyPkswaNbrMUurik6E8A= Subject key identifier: 21:89:DA:85:72:C2:57:EA:A9:79:00:C0:40:D0:3D:34:DA:2D:78:5F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 790AACE211B46F380A7F6547A84CD4988B27161D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af587f49-38bf-4b30-8bc9-8c7823a6b805.roa Signing time: Mon 03 Aug 2026 00:30:16 +0000 ROA not before: Mon 03 Aug 2026 00:30:16 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fff:8120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:0a:ac:e2:11:b4:6f:38:0a:7f:65:47:a8:4c:d4:98:8b:27:16:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 3 00:30:16 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=dbad5af7a875c5443c62d1920d705b33a5c9100f2284996ff77f4c087458f207, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6d:85:4f:d2:a2:e7:9a:45:82:37:ed:6b:4b: f2:f5:32:ed:93:28:02:13:2a:53:fe:0c:7e:d6:fc: 65:10:f9:89:5d:ac:47:ae:77:c0:a7:cd:4d:47:1a: 1d:86:ac:d7:58:5c:13:d7:eb:34:a2:16:1b:ba:77: 35:2c:47:04:be:e9:61:4a:10:66:ce:06:c5:0d:3e: 51:e9:61:c5:70:b9:ac:6b:5a:e6:44:72:3c:7f:91: 88:b2:72:68:e0:84:1f:98:dd:17:61:6b:19:be:dd: 16:92:58:87:b8:da:3e:74:7e:3d:b6:4f:d9:2c:16: 0d:37:7f:cb:da:1a:f1:4b:40:4b:ea:2d:0e:2c:6e: fd:9d:98:c0:24:4d:7c:28:2a:83:9c:ba:31:51:03: 32:3e:eb:a8:b2:a8:8d:8f:50:a8:18:2e:e4:9d:55: 2a:f5:f1:37:4b:ab:1a:ae:72:e1:47:16:3a:6a:ad: ef:e4:f9:99:5d:39:92:b3:22:0d:03:65:9d:c8:3a: e2:97:cc:20:0d:52:5f:07:84:e4:12:7b:3a:07:05: 70:6d:43:8e:67:75:9a:17:b5:48:3f:29:26:ff:36: 9c:88:e8:cb:d6:e4:e9:93:e5:f9:95:21:f4:be:f9: 53:87:38:3d:80:20:86:e7:d9:b3:f3:a6:c9:c1:9a: fd:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:89:DA:85:72:C2:57:EA:A9:79:00:C0:40:D0:3D:34:DA:2D:78:5F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af587f49-38bf-4b30-8bc9-8c7823a6b805.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:8120::/48 Signature Algorithm: sha256WithRSAEncryption cf:55:17:d3:74:63:5f:a3:86:01:88:47:12:ad:54:4d:f9:e4: 26:fc:94:b9:82:8d:4d:77:89:e6:a8:41:1c:48:a2:05:53:69: 29:fc:e0:6a:fd:f3:6b:d8:b6:f6:91:cd:ac:30:19:d9:b8:eb: dd:6d:ba:f6:8b:5d:82:58:c8:22:c6:2d:58:81:a7:89:76:b3: 77:45:74:14:eb:aa:26:02:5d:e7:d1:44:7c:0e:8b:f7:11:7f: 19:72:18:b3:9c:9e:ae:39:af:ca:79:69:25:97:90:0c:d5:d0: 8f:a0:fd:60:5a:68:15:e3:1d:08:30:cf:a6:72:54:ec:2e:27: 5e:e9:68:98:4a:4a:ab:03:fa:52:7e:f1:6b:76:68:2b:70:84: ca:19:a0:1d:92:69:5e:8e:26:9e:e8:59:d5:86:40:8d:81:7f: f3:c6:07:97:32:42:64:cf:c7:50:1a:eb:66:c0:9e:5b:22:1a: 58:19:e0:a3:2d:86:b8:45:9c:d0:af:cc:7f:bc:09:2b:0b:15: a2:c6:c9:ec:ef:97:7b:1f:29:39:57:a1:70:08:9c:5b:8a:f4: f6:26:f5:59:b9:02:54:6b:a0:38:d1:0f:0f:0b:90:10:3a:43: 61:86:fd:73:20:ce:d1:20:32:4a:25:7f:ed:c3:e6:89:23:59: 56:88:29:28 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUeQqs4hG0bzgKf2VHqEzUmIsnFh0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODAzMDAzMDE2WhcNMjYxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkYmFkNWFmN2E4NzVjNTQ0M2M2MmQxOTIwZDcwNWIzM2E1 YzkxMDBmMjI4NDk5NmZmNzdmNGMwODc0NThmMjA3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVbYVP0qLnmkWCN+1rS/L1Mu2TKAITKlP+DH7W/GUQ+Yld rEeud8CnzU1HGh2GrNdYXBPX6zSiFhu6dzUsRwS+6WFKEGbOBsUNPlHpYcVwuaxr WuZEcjx/kYiycmjghB+Y3Rdhaxm+3RaSWIe42j50fj22T9ksFg03f8vaGvFLQEvq LQ4sbv2dmMAkTXwoKoOcujFRAzI+66iyqI2PUKgYLuSdVSr18TdLqxqucuFHFjpq re/k+ZldOZKzIg0DZZ3IOuKXzCANUl8HhOQSezoHBXBtQ45ndZoXtUg/KSb/NpyI 6MvW5OmT5fmVIfS++VOHOD2AIIbn2bPzpsnBmv1LAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUIYnahXLCV+qpeQDAQNA9NNoteF8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FmNTg3ZjQ5LTM4YmYtNGIzMC04YmM5LThjNzgyM2E2YjgwNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//gSAwDQYJKoZIhvcNAQELBQADggEBAM9VF9N0Y1+jhgGIRxKtVE35 5Cb8lLmCjU13ieaoQRxIogVTaSn84Gr982vYtvaRzawwGdm4691tuvaLXYJYyCLG LViBp4l2s3dFdBTrqiYCXefRRHwOi/cRfxlyGLOcnq45r8p5aSWXkAzV0I+g/WBa aBXjHQgwz6ZyVOwuJ17paJhKSqsD+lJ+8Wt2aCtwhMoZoB2SaV6OJp7oWdWGQI2B f/PGB5cyQmTPx1Aa62bAnlsiGlgZ4KMthrhFnNCvzH+8CSsLFaLGyezvl3sfKTlX oXAInFuK9PYm9Vm5AlRroDjRDw8LkBA6Q2GG/XMgztEgMkolf+3D5okjWVaIKSg= -----END CERTIFICATE-----Generated at Thu Aug 20 21:56:12 2026 by rpki-client