$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18d1318b-510e-4319-b28e-c54538d56a3d.roa File: 18d1318b-510e-4319-b28e-c54538d56a3d.roa (raw, json) Hash identifier: 1Yfnoy5XtI/zY2MftLdfRyijGZjitZWGFozz3vKIGUk= Subject key identifier: 4F:28:BB:24:8E:B1:3F:5D:42:04:34:C4:25:53:78:3F:41:EB:BF:25 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6890803BCAD5228BC039DA7837D95D3FC173DE70 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18d1318b-510e-4319-b28e-c54538d56a3d.roa Signing time: Tue 21 Jul 2026 00:50:46 +0000 ROA not before: Tue 21 Jul 2026 00:50:46 +0000 ROA not after: Mon 19 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fea:80a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:90:80:3b:ca:d5:22:8b:c0:39:da:78:37:d9:5d:3f:c1:73:de:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 21 00:50:46 2026 GMT Not After : Oct 19 23:59:59 2026 GMT Subject: serialNumber=bd400ef3606f314d0f33237637037ce1af85e0d6c098fd29cbe041a41d294b45, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7d:48:84:ee:5c:39:99:5b:a5:fc:ef:32:7d: 6a:20:ad:4a:e5:bf:9d:81:30:f2:f6:1b:28:30:1c: 1e:56:3c:e0:79:4e:0a:23:78:ef:30:9a:e8:e9:b4: 74:70:44:7a:66:df:d4:ab:59:69:80:88:3a:e7:37: 64:72:b9:e4:98:b6:13:22:de:4b:78:ce:02:d5:50: 59:ec:c5:10:f0:8b:88:3b:b1:25:5f:b1:5a:9d:52: cd:cd:fb:8d:72:9f:55:b4:4c:3a:2d:be:63:16:ce: e1:29:f3:e1:d2:09:32:71:93:99:79:12:b9:3e:13: a8:ca:a1:25:5d:0b:49:97:25:8f:fa:c3:58:5e:81: e8:1f:bf:cd:44:2b:22:c7:fb:a2:cf:93:7b:06:46: 03:09:0c:a0:c0:19:ab:2a:46:4c:94:49:85:ea:2c: cc:da:7e:dd:e3:c4:75:34:50:ae:d2:2d:bd:6f:55: e8:68:dd:14:18:1d:37:ee:27:88:0d:85:8e:cc:69: a0:ea:8a:1d:57:82:78:cb:6e:b9:de:c6:c5:20:35: f8:90:05:6f:ae:67:83:cf:8a:82:fd:e4:42:7c:dd: 12:24:dc:f7:8a:2b:3d:68:39:d3:8d:bd:fe:22:13: db:d3:3f:e4:ab:99:aa:f4:cf:de:21:dc:ff:10:7f: cd:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:28:BB:24:8E:B1:3F:5D:42:04:34:C4:25:53:78:3F:41:EB:BF:25 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18d1318b-510e-4319-b28e-c54538d56a3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fea:80a0::/48 Signature Algorithm: sha256WithRSAEncryption ca:6c:c9:88:a3:17:ca:bc:53:66:26:ab:c2:b0:58:c7:96:42: 42:93:a1:fd:9b:4f:d4:93:ec:48:e8:cc:10:ab:24:fa:aa:65: 2f:fd:d1:04:6b:4b:02:7e:d9:b2:24:a6:f2:cb:6d:d9:38:06: c2:5b:82:2b:ad:6f:cd:b7:c5:1e:2a:7e:cb:ae:f4:36:28:38: 2f:45:b5:60:42:0b:39:10:4f:5b:46:69:7b:46:4a:0b:cb:2a: b6:b4:96:77:70:ef:7e:80:87:aa:45:17:41:d0:67:74:1b:3b: 53:da:74:f9:99:0f:a7:54:03:14:78:ab:82:d5:02:37:7e:3e: b2:b6:37:6b:bc:b7:63:3d:56:ea:f2:d3:4d:5c:82:dd:97:f0: 18:fe:11:12:8b:96:b5:f8:a6:7b:09:83:cb:45:3e:f1:ad:0f: f9:ad:f2:76:63:79:d8:9e:56:9d:fb:0b:ae:7c:25:74:6f:0a: 20:32:8b:c0:02:5c:20:78:fa:13:5f:58:cd:41:f8:cf:48:db: b3:08:c3:96:50:c6:e3:38:42:bb:ca:d7:ce:cd:8b:8d:3f:9e: 76:25:11:1f:6a:1a:df:2d:63:6a:d7:1f:38:43:95:32:02:17: 79:e2:a1:4b:f0:66:07:8e:8f:2b:ee:62:5f:e1:54:5d:a5:ef: 32:91:99:0d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUaJCAO8rVIovAOdp4N9ldP8Fz3nAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIxMDA1MDQ2WhcNMjYxMDE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZDQwMGVmMzYwNmYzMTRkMGYzMzIzNzYzNzAzN2NlMWFm ODVlMGQ2YzA5OGZkMjljYmUwNDFhNDFkMjk0YjQ1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCofUiE7lw5mVul/O8yfWogrUrlv52BMPL2GygwHB5WPOB5 TgojeO8wmujptHRwRHpm39SrWWmAiDrnN2RyueSYthMi3kt4zgLVUFnsxRDwi4g7 sSVfsVqdUs3N+41yn1W0TDotvmMWzuEp8+HSCTJxk5l5Erk+E6jKoSVdC0mXJY/6 w1hegegfv81EKyLH+6LPk3sGRgMJDKDAGasqRkyUSYXqLMzaft3jxHU0UK7SLb1v Veho3RQYHTfuJ4gNhY7MaaDqih1XgnjLbrnexsUgNfiQBW+uZ4PPioL95EJ83RIk 3PeKKz1oOdONvf4iE9vTP+Srmar0z94h3P8Qf80PAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUTyi7JI6xP11CBDTEJVN4P0HrvyUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE4ZDEzMThiLTUxMGUtNDMxOS1iMjhlLWM1NDUzOGQ1NmEzZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/qgKAwDQYJKoZIhvcNAQELBQADggEBAMpsyYijF8q8U2Ymq8KwWMeW QkKTof2bT9ST7EjozBCrJPqqZS/90QRrSwJ+2bIkpvLLbdk4BsJbgiutb823xR4q fsuu9DYoOC9FtWBCCzkQT1tGaXtGSgvLKra0lndw736Ah6pFF0HQZ3QbO1PadPmZ D6dUAxR4q4LVAjd+PrK2N2u8t2M9Vury001cgt2X8Bj+ERKLlrX4pnsJg8tFPvGt D/mt8nZjedieVp37C658JXRvCiAyi8ACXCB4+hNfWM1B+M9I27MIw5ZQxuM4QrvK 187Ni40/nnYlER9qGt8tY2rXHzhDlTICF3nioUvwZgeOjyvuYl/hVF2l7zKRmQ0= -----END CERTIFICATE-----Generated at Thu Jul 23 23:44:17 2026 by rpki-client