$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/160933c3-b761-41a9-87a6-9e744a40b1ba.roa File: 160933c3-b761-41a9-87a6-9e744a40b1ba.roa (raw, json) Hash identifier: oYcqfafBN4pCyAqg5LWab3kIwQ1o7cp6pQBOKUxKHKs= Subject key identifier: 74:41:6E:CA:97:BC:7A:51:F5:4E:67:67:63:DE:29:88:B7:F9:10:D1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 224EBEB9473E26F0A462D8BD28B5F8C5BD90E058 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/160933c3-b761-41a9-87a6-9e744a40b1ba.roa Signing time: Tue 21 Jul 2026 01:11:20 +0000 ROA not before: Tue 21 Jul 2026 01:11:20 +0000 ROA not after: Mon 19 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fb8:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:4e:be:b9:47:3e:26:f0:a4:62:d8:bd:28:b5:f8:c5:bd:90:e0:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 21 01:11:20 2026 GMT Not After : Oct 19 23:59:59 2026 GMT Subject: serialNumber=7ebc84b9aef6c98cc45d2e5da47e1eb758b84cffe891752ca9cc87f810d1caca, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:25:14:c4:57:90:4d:99:6a:24:f6:e8:c4:43: c0:23:e6:3b:3e:07:4f:4d:c7:d5:82:a3:22:00:ba: b6:32:4c:44:5f:18:4a:62:69:ed:39:0a:b9:3b:7b: 71:22:12:f8:d4:f3:6f:8f:b7:21:e6:45:30:02:4c: f3:83:b2:b2:f9:3f:80:ae:97:9b:63:b3:16:d0:86: b4:d2:44:3f:58:f7:6d:81:19:23:1d:93:03:6d:99: 42:f9:e4:61:6c:88:41:22:7c:b4:43:fb:d3:02:29: f4:0f:af:38:70:34:7f:24:44:91:4d:0e:cd:e5:69: 8e:98:fb:12:ff:56:48:cb:9a:6f:7b:bc:ea:22:57: 6f:bf:f8:ca:7f:cb:da:0d:87:15:d3:f9:42:e1:76: a4:c6:8e:3a:77:0c:31:eb:87:5a:48:36:df:15:b9: 25:8e:a3:f6:d9:7f:f3:6f:a3:8d:1a:14:c6:f3:1e: a4:51:15:b5:7e:45:1e:25:7f:a0:0c:e9:d5:af:27: 5d:12:e8:b0:d3:9a:15:88:fb:b1:09:19:04:f3:b0: cc:d8:ce:66:1f:d9:8b:b4:4f:22:7e:f2:77:54:7b: fe:79:a1:09:22:04:46:75:18:9b:67:c6:ae:66:16: 49:c0:d2:44:76:a9:b0:c5:95:95:9c:39:72:fa:72: 47:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:41:6E:CA:97:BC:7A:51:F5:4E:67:67:63:DE:29:88:B7:F9:10:D1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/160933c3-b761-41a9-87a6-9e744a40b1ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fb8:1000::/40 Signature Algorithm: sha256WithRSAEncryption 42:6b:49:10:5c:ff:c1:cd:87:73:75:04:59:55:87:23:f8:01: ce:6e:9d:fa:70:be:12:a9:c3:18:1e:3a:b2:e2:ae:83:7e:4a: 12:e6:10:84:8c:89:4d:b4:a8:70:32:03:19:4b:e2:75:99:0b: 72:f6:f4:8f:89:21:32:6f:3a:ac:0f:1c:7c:63:6a:0f:a6:8a: 3d:b5:78:38:5c:1c:f6:32:bf:50:76:bc:3a:53:3e:0e:16:26: 30:26:57:96:c4:c7:4f:a4:1c:95:15:cc:0d:18:1b:54:86:27: c8:14:df:0f:19:78:a5:d3:d1:f6:21:01:a1:dc:05:7e:bf:a6: 8c:9c:03:1a:57:1f:cf:44:b5:f4:5b:b1:44:06:36:b9:8c:1d: 8f:c9:04:6a:3c:8c:aa:02:43:0c:e4:60:47:e5:f0:e7:e2:e8: 74:7e:9d:33:d0:b3:94:10:0a:66:2e:c1:6f:8d:a2:d4:7e:dd: 2f:55:f7:7e:b2:40:ed:b7:2f:7a:23:82:cd:46:d0:04:6f:ee: 09:62:a8:4b:3b:21:5d:f2:36:cb:9a:08:04:00:1a:bf:83:4f: 93:17:84:a2:6f:f5:ff:04:44:39:93:05:6a:7d:4b:8c:28:5d: 86:eb:b2:41:24:22:da:f8:5d:87:5b:6a:dc:59:89:18:79:6e: 40:15:34:bc -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUIk6+uUc+JvCkYti9KLX4xb2Q4FgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIxMDExMTIwWhcNMjYxMDE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZWJjODRiOWFlZjZjOThjYzQ1ZDJlNWRhNDdlMWViNzU4 Yjg0Y2ZmZTg5MTc1MmNhOWNjODdmODEwZDFjYWNhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1JRTEV5BNmWok9ujEQ8Aj5js+B09Nx9WCoyIAurYyTERf GEpiae05Crk7e3EiEvjU82+PtyHmRTACTPODsrL5P4Cul5tjsxbQhrTSRD9Y922B GSMdkwNtmUL55GFsiEEifLRD+9MCKfQPrzhwNH8kRJFNDs3laY6Y+xL/VkjLmm97 vOoiV2+/+Mp/y9oNhxXT+ULhdqTGjjp3DDHrh1pINt8VuSWOo/bZf/Nvo40aFMbz HqRRFbV+RR4lf6AM6dWvJ10S6LDTmhWI+7EJGQTzsMzYzmYf2Yu0TyJ+8ndUe/55 oQkiBEZ1GJtnxq5mFknA0kR2qbDFlZWcOXL6ckdDAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUdEFuype8elH1TmdnY94piLf5ENEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE2MDkzM2MzLWI3NjEtNDFhOS04N2E2LTllNzQ0YTQwYjFiYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+4EDANBgkqhkiG9w0BAQsFAAOCAQEAQmtJEFz/wc2Hc3UEWVWHI/gB zm6d+nC+EqnDGB46suKug35KEuYQhIyJTbSocDIDGUvidZkLcvb0j4khMm86rA8c fGNqD6aKPbV4OFwc9jK/UHa8OlM+DhYmMCZXlsTHT6QclRXMDRgbVIYnyBTfDxl4 pdPR9iEBodwFfr+mjJwDGlcfz0S19FuxRAY2uYwdj8kEajyMqgJDDORgR+Xw5+Lo dH6dM9CzlBAKZi7Bb42i1H7dL1X3frJA7bcveiOCzUbQBG/uCWKoSzshXfI2y5oI BAAav4NPkxeEom/1/wREOZMFan1LjChdhuuyQSQi2vhdh1tq3FmJGHluQBU0vA== -----END CERTIFICATE-----Generated at Thu Jul 23 21:33:15 2026 by rpki-client