$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2b86293-a6d6-4aef-a1fa-91171f2e774e.roa File: f2b86293-a6d6-4aef-a1fa-91171f2e774e.roa (raw, json) Hash identifier: VrDf697yMoxMY5G3QscMSNkZnyvtQW/NX2pUX7sfl0U= Subject key identifier: 5D:43:00:8C:4F:6D:3A:BA:BC:CE:8A:CD:16:8E:10:2A:E6:84:D9:E3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 401A2C0714BBA5436CBAB7B79228258D84F01165 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2b86293-a6d6-4aef-a1fa-91171f2e774e.roa Signing time: Tue 04 Aug 2026 00:30:42 +0000 ROA not before: Tue 04 Aug 2026 00:30:42 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f2c:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:1a:2c:07:14:bb:a5:43:6c:ba:b7:b7:92:28:25:8d:84:f0:11:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 00:30:42 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=122bc7b1f26f525b52961ce34329c7975e6c6feae9c1f3ef7311b446bec8a568, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e6:0e:86:fd:a9:70:17:35:83:93:79:e6:9e: f3:ec:21:7a:d1:dc:4d:b1:21:5a:07:12:03:a7:42: d0:49:c5:69:e6:5f:10:d9:ce:d4:76:77:37:1f:f1: 47:b2:b4:32:f2:41:48:12:c4:53:be:f4:91:24:68: d0:e0:36:9b:98:cb:e1:ca:27:92:48:7a:6e:6d:8e: 4d:47:ad:66:78:d5:5b:41:b5:a2:c7:bc:e4:27:86: 52:de:85:bd:02:b5:49:2c:00:b6:8c:73:9a:07:5d: e8:fb:c1:82:a1:63:00:a9:5e:bd:59:5f:ac:c0:be: 58:b0:85:41:ae:30:b0:12:ab:5c:a1:db:0c:f6:56: fc:54:75:89:a1:73:72:63:27:6f:4b:9a:e6:86:19: a8:5a:55:c7:21:ab:21:c9:36:c5:78:49:fd:57:71: 7d:f7:7c:08:57:30:66:54:6f:d6:41:82:25:33:a1: 72:06:51:83:a0:2d:a0:d4:9f:c1:f9:8b:2f:48:f7: 74:a5:eb:a0:1c:fb:4e:8e:18:47:14:3b:b9:21:5e: c6:f4:59:b2:cd:3d:b6:69:69:44:54:b9:df:71:84: 05:ce:c6:7b:ba:68:83:f6:fe:e6:cc:ad:77:09:c6: 5a:57:6c:33:b2:ac:d4:92:67:43:6c:cb:e8:4a:2a: 5c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:43:00:8C:4F:6D:3A:BA:BC:CE:8A:CD:16:8E:10:2A:E6:84:D9:E3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2b86293-a6d6-4aef-a1fa-91171f2e774e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f2c:8000::/36 Signature Algorithm: sha256WithRSAEncryption 51:10:d1:3f:43:f5:8a:07:96:54:e0:cc:03:a6:fd:e7:bd:f5: 7b:ac:bd:ec:ed:c1:4f:6e:be:25:65:a1:6b:a4:58:09:dd:d4: 77:1e:30:0c:2c:97:76:e7:89:ca:ab:70:11:ed:8e:35:cb:11: d1:f9:72:2f:7c:c4:f1:7b:15:45:d5:22:e3:59:83:99:6f:36: 07:3d:52:e5:af:e9:d2:d9:c7:79:7e:fa:51:46:87:f8:04:e6: c1:cd:70:b0:c7:14:01:62:e9:d6:78:10:63:4d:32:85:1e:04: 1f:7d:5c:f4:f7:d1:21:c4:84:45:84:e3:68:dd:c6:0d:2d:1e: 7a:b0:eb:d5:33:9c:5c:2b:8e:5f:23:26:4d:a2:42:f2:cd:c9: 62:f2:44:9a:af:6b:5b:40:21:22:0e:fa:31:72:88:b2:e5:14: 68:78:f4:12:8a:d6:56:6e:46:c6:4a:60:3b:bb:fd:a3:ff:31: 98:d6:3d:67:b6:5e:1d:8e:e6:ec:2d:72:3b:65:a5:f0:70:02: a5:86:c8:ae:86:0d:d6:01:b1:ec:78:06:87:17:58:6b:87:fc: f3:26:b0:4b:0c:9a:36:c6:4b:fa:d2:4f:12:31:42:c5:82:95: ff:14:7f:de:1c:b1:5a:0e:13:ba:59:e7:d8:16:b0:0c:a8:e0: c1:5d:bd:e6 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUQBosBxS7pUNsure3kigljYTwEWUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA0MDAzMDQyWhcNMjYxMTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMjJiYzdiMWYyNmY1MjViNTI5NjFjZTM0MzI5Yzc5NzVl NmM2ZmVhZTljMWYzZWY3MzExYjQ0NmJlYzhhNTY4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDB5g6G/alwFzWDk3nmnvPsIXrR3E2xIVoHEgOnQtBJxWnm XxDZztR2dzcf8UeytDLyQUgSxFO+9JEkaNDgNpuYy+HKJ5JIem5tjk1HrWZ41VtB taLHvOQnhlLehb0CtUksALaMc5oHXej7wYKhYwCpXr1ZX6zAvliwhUGuMLASq1yh 2wz2VvxUdYmhc3JjJ29LmuaGGahaVcchqyHJNsV4Sf1XcX33fAhXMGZUb9ZBgiUz oXIGUYOgLaDUn8H5iy9I93Sl66Ac+06OGEcUO7khXsb0WbLNPbZpaURUud9xhAXO xnu6aIP2/ubMrXcJxlpXbDOyrNSSZ0Nsy+hKKlz5AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUXUMAjE9tOrq8zorNFo4QKuaE2eMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YyYjg2MjkzLWE2ZDYtNGFlZi1hMWZhLTkxMTcxZjJlNzc0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8sgDANBgkqhkiG9w0BAQsFAAOCAQEAURDRP0P1igeWVODMA6b95731 e6y97O3BT26+JWWha6RYCd3Udx4wDCyXdueJyqtwEe2ONcsR0flyL3zE8XsVRdUi 41mDmW82Bz1S5a/p0tnHeX76UUaH+ATmwc1wsMcUAWLp1ngQY00yhR4EH31c9PfR IcSERYTjaN3GDS0eerDr1TOcXCuOXyMmTaJC8s3JYvJEmq9rW0AhIg76MXKIsuUU aHj0EorWVm5GxkpgO7v9o/8xmNY9Z7ZeHY7m7C1yO2Wl8HACpYbIroYN1gGx7HgG hxdYa4f88yawSwyaNsZL+tJPEjFCxYKV/xR/3hyxWg4Tulnn2BawDKjgwV295g== -----END CERTIFICATE-----Generated at Thu Aug 20 21:55:09 2026 by rpki-client