$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e68ff319-92bb-453f-804e-b0970eeb1ab1.roa File: e68ff319-92bb-453f-804e-b0970eeb1ab1.roa (raw, json) Hash identifier: PjWBxU7i+DiQNgF7gvnCwnSQWJnjL+lKxT+CZga0rh8= Subject key identifier: B0:73:13:2C:4A:79:11:48:23:CA:76:75:96:16:FE:DE:8F:1A:A5:10 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 325719CE87C280022EFF0E168E41BD683DDE34B6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e68ff319-92bb-453f-804e-b0970eeb1ab1.roa Signing time: Fri 31 Jul 2026 00:51:30 +0000 ROA not before: Fri 31 Jul 2026 00:51:30 +0000 ROA not after: Thu 29 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff7:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:57:19:ce:87:c2:80:02:2e:ff:0e:16:8e:41:bd:68:3d:de:34:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 31 00:51:30 2026 GMT Not After : Oct 29 23:59:59 2026 GMT Subject: serialNumber=be22dd2f0a979ec582e0f299d320d17827a78124039f38777c1f0593cf7a1876, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ac:05:23:c9:61:fc:74:6e:2d:00:79:93:67: 1f:25:c9:42:5b:b0:f1:ca:0f:25:1a:07:48:86:c0: a1:4a:b8:46:e8:36:55:6b:ec:16:e7:f5:36:af:9d: 74:03:a4:44:16:f8:97:ff:47:c2:6c:4a:7d:79:49: 93:79:74:29:66:4b:3f:5b:fb:d0:6b:14:0f:83:88: cc:f9:51:8c:d1:57:06:d1:21:12:f2:17:78:42:b5: 9e:8f:82:58:d0:44:aa:65:84:c3:b1:3c:5c:8f:49: d5:a4:68:b3:e4:18:19:b0:b9:82:aa:62:ce:38:7c: 27:c4:66:36:ec:be:bf:d4:38:cd:96:d7:24:d5:bc: 69:a5:15:04:0c:07:9f:e8:c2:73:59:8e:17:25:13: 4f:5c:a0:3a:e8:d2:d6:71:30:c1:72:b3:62:d7:99: c8:fb:36:08:84:31:b3:e3:16:4d:3d:23:80:62:e1: 15:fe:7a:50:02:91:20:3f:0d:a0:5f:23:57:8e:7c: b2:29:22:79:51:1f:34:35:75:e7:ba:d8:bf:1c:5f: ab:9d:af:7f:ca:db:71:45:f7:f7:fd:fc:d4:e3:b8: db:0c:93:3e:4b:8d:73:c1:11:0b:48:ac:8a:cd:92: 2a:3c:6c:85:eb:c6:fb:d7:d9:5f:c5:52:d8:4e:f2: b5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:73:13:2C:4A:79:11:48:23:CA:76:75:96:16:FE:DE:8F:1A:A5:10 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e68ff319-92bb-453f-804e-b0970eeb1ab1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff7:2000::/40 Signature Algorithm: sha256WithRSAEncryption 0e:65:99:36:c9:e7:0a:c6:2e:f7:4b:16:80:81:2d:15:81:45: 36:91:21:42:5d:39:18:3a:10:cb:56:f5:48:6d:88:09:b0:b1: 89:b7:ca:40:47:2a:34:1c:22:dd:34:57:35:81:24:70:a0:18: 98:e8:76:fb:43:69:30:a0:0c:0d:fa:65:ca:cf:aa:2b:11:43: 7e:7d:1a:fd:b3:15:73:9b:7f:f4:cb:fb:44:ea:4d:d7:7c:2c: 90:b8:37:2c:bb:e6:37:8d:4d:56:43:0f:92:b1:3c:7b:e1:c5: 22:75:60:b9:74:14:6a:e9:60:00:23:d3:1e:f6:80:67:d0:b8: 1a:d1:3a:d7:62:82:e9:a0:98:34:92:19:05:26:0d:69:44:9b: 95:df:e3:2d:17:6c:a0:0d:53:f9:88:50:d9:f9:b2:9e:6c:2c: 5c:88:67:7c:b7:40:7a:b1:28:54:24:3c:ea:76:a7:8e:11:82: c4:5f:82:fc:fd:41:cf:b3:43:df:65:b6:ca:80:5d:5e:e2:96: 74:5b:cc:c4:6c:5f:6e:a6:26:ce:97:7b:a4:29:84:3b:23:39: e4:fe:a3:a7:d9:ff:fb:f7:a4:e3:bb:99:d4:52:0b:d9:9e:f1: db:8d:8c:b9:d0:03:db:4b:9a:b0:d9:93:89:7f:27:f4:c1:54: 5b:11:82:d9 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUMlcZzofCgAIu/w4WjkG9aD3eNLYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzMxMDA1MTMwWhcNMjYxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZTIyZGQyZjBhOTc5ZWM1ODJlMGYyOTlkMzIwZDE3ODI3 YTc4MTI0MDM5ZjM4Nzc3YzFmMDU5M2NmN2ExODc2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwrAUjyWH8dG4tAHmTZx8lyUJbsPHKDyUaB0iGwKFKuEbo NlVr7Bbn9TavnXQDpEQW+Jf/R8JsSn15SZN5dClmSz9b+9BrFA+DiMz5UYzRVwbR IRLyF3hCtZ6PgljQRKplhMOxPFyPSdWkaLPkGBmwuYKqYs44fCfEZjbsvr/UOM2W 1yTVvGmlFQQMB5/ownNZjhclE09coDro0tZxMMFys2LXmcj7NgiEMbPjFk09I4Bi 4RX+elACkSA/DaBfI1eOfLIpInlRHzQ1dee62L8cX6udr3/K23FF9/f9/NTjuNsM kz5LjXPBEQtIrIrNkio8bIXrxvvX2V/FUthO8rWTAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUsHMTLEp5EUgjynZ1lhb+3o8apRAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U2OGZmMzE5LTkyYmItNDUzZi04MDRlLWIwOTcwZWViMWFiMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/3IDANBgkqhkiG9w0BAQsFAAOCAQEADmWZNsnnCsYu90sWgIEtFYFF NpEhQl05GDoQy1b1SG2ICbCxibfKQEcqNBwi3TRXNYEkcKAYmOh2+0NpMKAMDfpl ys+qKxFDfn0a/bMVc5t/9Mv7ROpN13wskLg3LLvmN41NVkMPkrE8e+HFInVguXQU aulgACPTHvaAZ9C4GtE612KC6aCYNJIZBSYNaUSbld/jLRdsoA1T+YhQ2fmynmws XIhnfLdAerEoVCQ86nanjhGCxF+C/P1Bz7ND32W2yoBdXuKWdFvMxGxfbqYmzpd7 pCmEOyM55P6jp9n/+/ek47uZ1FIL2Z7x242MudAD20uasNmTiX8n9MFUWxGC2Q== -----END CERTIFICATE-----Generated at Tue Sep 15 11:38:09 2026 by rpki-client