$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/073eb97d-e872-4ff0-ad8a-a334146b45e0.roa File: 073eb97d-e872-4ff0-ad8a-a334146b45e0.roa (raw, json) Hash identifier: 1MK7obIkGzuoPKBm9Ng2+88OZGe0bFDxTXgZRFiPv8w= Subject key identifier: 52:9F:E7:EA:6C:57:21:B4:B3:73:19:A6:A5:B1:B4:32:D4:38:F2:CD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2D95F5D96292EF1D238BD9D7F5B678A3F7C142C1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/073eb97d-e872-4ff0-ad8a-a334146b45e0.roa Signing time: Mon 20 Jul 2026 00:00:46 +0000 ROA not before: Mon 20 Jul 2026 00:00:46 +0000 ROA not after: Sun 18 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff9:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:95:f5:d9:62:92:ef:1d:23:8b:d9:d7:f5:b6:78:a3:f7:c1:42:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 20 00:00:46 2026 GMT Not After : Oct 18 23:59:59 2026 GMT Subject: serialNumber=26d6387a02e1d1f812f79441bbb2e564c2faf358317b0f5aace600bd672d912b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5d:88:04:31:7c:37:ab:10:66:02:10:bc:b6: ee:2a:9f:8d:cd:6d:93:a6:cf:e6:55:d4:1a:30:e3: 45:bf:7e:f3:47:4c:88:d3:54:7d:c5:32:97:d1:c2: 9b:a3:9e:4b:16:b0:1b:dd:d4:c6:e0:91:b8:80:10: 95:f0:11:10:57:22:fc:b9:43:b2:29:c4:90:0d:f3: 8b:d2:c9:de:ac:2b:37:8c:ba:51:72:16:96:83:e0: 7a:ba:25:b5:e9:ba:e5:3c:b9:75:87:62:5c:cd:8e: 56:e1:02:65:36:bf:22:a3:07:f5:cb:17:af:46:e5: b7:26:7b:16:c5:94:f0:3f:56:58:20:55:d1:2a:62: de:93:8d:14:81:f5:b3:21:3e:28:f8:95:bf:a4:a6: 81:23:45:63:9f:7f:a4:0a:7e:42:2a:2b:2b:fd:0c: e2:86:77:0c:9d:0d:c9:6b:45:2c:c1:32:95:33:3e: 58:2a:ce:a9:15:99:1e:bc:3b:0b:d8:64:b4:c9:8e: c1:c9:5c:ff:59:72:fe:43:19:a9:61:45:ce:a7:e4: 46:5d:94:1e:80:85:7c:6f:f8:ae:8f:8a:62:33:e6: e7:79:55:ff:30:35:4f:3c:b6:88:02:27:c8:38:5c: 92:41:9b:2b:15:f7:3c:e4:da:0f:bd:f2:ad:fe:5a: b8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:9F:E7:EA:6C:57:21:B4:B3:73:19:A6:A5:B1:B4:32:D4:38:F2:CD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/073eb97d-e872-4ff0-ad8a-a334146b45e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff9:2000::/40 Signature Algorithm: sha256WithRSAEncryption 96:bb:b3:f9:b0:aa:e9:ad:4d:18:63:d3:e2:aa:1b:12:31:b8: cc:f9:e3:dc:d3:3e:eb:05:6b:14:6e:9e:e8:be:5c:b0:8b:99: a7:a9:9f:fb:35:1e:98:5a:04:b9:ef:20:92:8e:c1:b8:4a:2d: 30:58:30:13:68:8b:f3:2e:2c:17:80:71:22:28:78:9e:a5:0c: ac:a8:a0:97:20:b6:78:ab:c9:d7:74:07:67:3c:54:bf:3a:f3: 22:76:55:ed:ce:b1:22:bd:bb:bd:6c:24:3d:03:09:1a:06:be: bd:04:c7:ac:b6:3b:de:e3:9c:64:32:75:3b:08:4e:00:11:a8: 4f:11:f4:48:69:86:79:c5:65:79:42:0b:7e:a2:79:41:dd:45: a7:e5:ab:36:95:61:bc:18:36:1f:b8:06:31:b4:35:22:84:3e: 20:2c:7f:43:f3:1d:7b:a7:fa:79:d3:56:30:5c:13:27:45:93: 61:44:5a:31:3c:fa:0f:69:74:e1:6b:39:67:45:d4:92:9a:03: a9:c3:0f:d3:fe:39:69:6b:39:ac:9c:cf:ca:01:98:6f:dc:47: de:c2:be:d9:46:03:80:6c:83:f8:9f:9a:0d:12:55:9b:39:ab: f2:f9:fe:cc:8f:10:4f:6a:39:8b:f5:41:49:5b:03:54:48:05: 5b:42:5a:b0 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIULZX12WKS7x0ji9nX9bZ4o/fBQsEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIwMDAwMDQ2WhcNMjYxMDE4MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNmQ2Mzg3YTAyZTFkMWY4MTJmNzk0NDFiYmIyZTU2NGMy ZmFmMzU4MzE3YjBmNWFhY2U2MDBiZDY3MmQ5MTJiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCUXYgEMXw3qxBmAhC8tu4qn43NbZOmz+ZV1Bow40W/fvNH TIjTVH3FMpfRwpujnksWsBvd1MbgkbiAEJXwERBXIvy5Q7IpxJAN84vSyd6sKzeM ulFyFpaD4Hq6JbXpuuU8uXWHYlzNjlbhAmU2vyKjB/XLF69G5bcmexbFlPA/Vlgg VdEqYt6TjRSB9bMhPij4lb+kpoEjRWOff6QKfkIqKyv9DOKGdwydDclrRSzBMpUz PlgqzqkVmR68OwvYZLTJjsHJXP9Zcv5DGalhRc6n5EZdlB6AhXxv+K6PimIz5ud5 Vf8wNU88togCJ8g4XJJBmysV9zzk2g+98q3+WrhVAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUUp/n6mxXIbSzcxmmpbG0MtQ48s0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA3M2ViOTdkLWU4NzItNGZmMC1hZDhhLWEzMzQxNDZiNDVlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/5IDANBgkqhkiG9w0BAQsFAAOCAQEAlruz+bCq6a1NGGPT4qobEjG4 zPnj3NM+6wVrFG6e6L5csIuZp6mf+zUemFoEue8gko7BuEotMFgwE2iL8y4sF4Bx Iih4nqUMrKiglyC2eKvJ13QHZzxUvzrzInZV7c6xIr27vWwkPQMJGga+vQTHrLY7 3uOcZDJ1OwhOABGoTxH0SGmGecVleUILfqJ5Qd1Fp+WrNpVhvBg2H7gGMbQ1IoQ+ ICx/Q/Mde6f6edNWMFwTJ0WTYURaMTz6D2l04Ws5Z0XUkpoDqcMP0/45aWs5rJzP ygGYb9xH3sK+2UYDgGyD+J+aDRJVmzmr8vn+zI8QT2o5i/VBSVsDVEgFW0JasA== -----END CERTIFICATE-----Generated at Fri Jul 24 03:57:25 2026 by rpki-client