$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd842759-1d22-4dc0-98e2-f1ca7b7cdf28.roa File: bd842759-1d22-4dc0-98e2-f1ca7b7cdf28.roa (raw, json) Hash identifier: XKy2mQQtIiIMs8L1eEgC6Ji8MtM/+zEBvMC1RNrpf7M= Subject key identifier: EA:5F:12:30:A3:0C:AD:E6:DB:C1:FF:82:35:C0:C4:02:8D:81:CE:3A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0ECB915666BE2A7F0E4EF778D8F971D71A8A74AD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd842759-1d22-4dc0-98e2-f1ca7b7cdf28.roa Signing time: Fri 31 Jul 2026 01:00:46 +0000 ROA not before: Fri 31 Jul 2026 01:00:46 +0000 ROA not after: Thu 29 Oct 2026 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1fec:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:cb:91:56:66:be:2a:7f:0e:4e:f7:78:d8:f9:71:d7:1a:8a:74:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 31 01:00:46 2026 GMT Not After : Oct 29 23:59:59 2026 GMT Subject: serialNumber=0ddc92a1e003818c7cce3356618583b9a212b6bbce9f4b7f6915ac6a9abb0df2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c7:55:f6:6f:54:84:99:b3:f0:71:12:5b:de: 83:2a:c0:c1:fc:b7:c5:0a:26:73:e0:0d:e7:6f:08: b9:2f:0c:c3:f1:74:10:96:09:18:6c:6f:19:87:39: 0b:13:f7:c8:d1:e4:15:5f:cf:b0:56:3c:19:67:cd: 3d:81:b8:eb:1d:95:ad:5f:ea:53:69:f8:4c:f5:27: 5c:1a:ed:be:ea:4c:60:33:5e:b6:23:92:15:6f:34: 68:43:09:23:d4:92:c2:4b:a3:53:10:46:71:ed:53: 3b:f1:a4:a6:58:e9:be:36:08:37:9d:a6:3c:c2:7f: a8:b1:95:1b:28:ee:19:0c:3b:0d:32:63:b4:8c:22: c8:19:62:b3:84:c8:e6:57:2f:09:f2:14:6e:53:68: ce:49:21:0d:f7:a1:4e:d9:b9:fc:bc:d1:0d:6b:f2: 4a:2e:31:a4:d5:3b:bf:65:c7:be:96:c2:9c:ed:c9: 19:ce:78:0a:06:20:10:d7:95:4a:73:62:2b:04:b5: 85:16:0a:e7:2a:c9:83:90:c4:d6:e8:2b:da:7b:4c: 85:d3:80:e2:59:2d:9f:50:45:48:58:21:10:f4:a0: 62:d0:3f:8b:35:44:f7:34:d6:58:69:45:1e:81:20: 75:77:29:3c:9e:f8:57:83:cd:b9:6a:5b:7f:1e:4e: dc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:5F:12:30:A3:0C:AD:E6:DB:C1:FF:82:35:C0:C4:02:8D:81:CE:3A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd842759-1d22-4dc0-98e2-f1ca7b7cdf28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fec:2000::/48 Signature Algorithm: sha256WithRSAEncryption 4b:dd:0a:cd:16:00:4e:c3:33:95:9b:87:a4:ca:9a:ec:32:3a: 88:91:55:2e:43:8d:23:cb:86:20:df:1f:d2:3e:b9:2e:ab:2d: 7f:be:4d:5d:9b:fb:03:d2:38:29:51:5a:9c:cb:d8:7c:1e:da: e3:1a:8c:f6:98:31:67:48:13:bd:24:93:71:35:e0:ac:cc:28: f3:47:2a:bf:d0:66:4f:5e:71:91:00:b7:61:42:2d:1b:16:9a: bf:e1:f7:c1:6a:d2:78:e6:24:82:20:67:37:cd:fe:68:c1:72: 57:99:aa:da:35:b5:4d:66:56:16:61:a0:64:42:1d:42:f8:23: c5:c0:c7:c1:d1:87:13:99:89:9a:c4:6c:c5:1f:94:f2:14:d3: 83:fe:33:65:8d:bb:89:81:ab:70:8a:51:6f:ba:ae:50:b5:a2: 78:09:bc:d6:fa:35:20:7b:d1:c4:0e:b4:47:da:14:9b:05:b9: 25:f4:1c:8e:bb:c6:9d:f1:a0:c3:27:7b:d8:e7:94:4d:c3:12: 12:8d:e6:70:24:8f:11:8f:f4:98:1e:f2:13:03:fe:aa:02:a0: be:ad:8d:d7:a5:8f:45:56:bb:9c:be:fb:32:4a:1a:f3:9b:71: 6f:19:8e:49:b0:0f:4f:ea:ba:16:e5:d3:8f:bc:e2:af:a9:fe: ae:b2:6c:9a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDsuRVma+Kn8OTvd42Plx1xqKdK0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzMxMDEwMDQ2WhcNMjYxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZGRjOTJhMWUwMDM4MThjN2NjZTMzNTY2MTg1ODNiOWEy MTJiNmJiY2U5ZjRiN2Y2OTE1YWM2YTlhYmIwZGYyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDmx1X2b1SEmbPwcRJb3oMqwMH8t8UKJnPgDedvCLkvDMPx dBCWCRhsbxmHOQsT98jR5BVfz7BWPBlnzT2BuOsdla1f6lNp+Ez1J1wa7b7qTGAz XrYjkhVvNGhDCSPUksJLo1MQRnHtUzvxpKZY6b42CDedpjzCf6ixlRso7hkMOw0y Y7SMIsgZYrOEyOZXLwnyFG5TaM5JIQ33oU7Zufy80Q1r8kouMaTVO79lx76Wwpzt yRnOeAoGIBDXlUpzYisEtYUWCucqyYOQxNboK9p7TIXTgOJZLZ9QRUhYIRD0oGLQ P4s1RPc01lhpRR6BIHV3KTye+FeDzblqW38eTtwlAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU6l8SMKMMrebbwf+CNcDEAo2BzjowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JkODQyNzU5LTFkMjItNGRjMC05OGUyLWYxY2E3YjdjZGYyOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/sIAAwDQYJKoZIhvcNAQELBQADggEBAEvdCs0WAE7DM5Wbh6TKmuwy OoiRVS5DjSPLhiDfH9I+uS6rLX++TV2b+wPSOClRWpzL2Hwe2uMajPaYMWdIE70k k3E14KzMKPNHKr/QZk9ecZEAt2FCLRsWmr/h98Fq0njmJIIgZzfN/mjBcleZqto1 tU1mVhZhoGRCHUL4I8XAx8HRhxOZiZrEbMUflPIU04P+M2WNu4mBq3CKUW+6rlC1 ongJvNb6NSB70cQOtEfaFJsFuSX0HI67xp3xoMMne9jnlE3DEhKN5nAkjxGP9Jge 8hMD/qoCoL6tjdelj0VWu5y++zJKGvObcW8ZjkmwD0/quhbl04+84q+p/q6ybJo= -----END CERTIFICATE-----Generated at Mon Aug 3 05:43:40 2026 by rpki-client