$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24b61501-4505-4056-a7c1-935daabf5a4e.roa File: 24b61501-4505-4056-a7c1-935daabf5a4e.roa (raw, json) Hash identifier: uUTPhgl3zcPDTkSDuG3WHecBAcBj8fckmLWySoJpU7E= Subject key identifier: 56:3D:2F:47:D9:95:16:E0:26:CE:F0:8A:E8:64:27:44:75:49:3C:69 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 40BA480AED7E99EE25F60C8B4B27C93B7A6E5E65 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24b61501-4505-4056-a7c1-935daabf5a4e.roa Signing time: Sat 18 Jul 2026 00:41:34 +0000 ROA not before: Sat 18 Jul 2026 00:41:34 +0000 ROA not after: Fri 16 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fa0:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:ba:48:0a:ed:7e:99:ee:25:f6:0c:8b:4b:27:c9:3b:7a:6e:5e:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 18 00:41:34 2026 GMT Not After : Oct 16 23:59:59 2026 GMT Subject: serialNumber=78afcc7d9cba93179749c399cbc640ff23e56b71cf9c3cdd431a9946506c362c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a3:60:50:76:23:02:db:3a:09:1b:30:54:cb: d7:c3:8d:39:27:cf:93:9e:59:41:b5:ef:51:72:ae: 9f:6d:46:b3:74:e2:10:7c:d0:e7:2d:99:50:42:8f: 2c:d8:b0:ce:dc:5c:64:82:58:95:45:df:f7:a0:26: f1:ad:3b:86:0f:d6:e8:9d:48:59:a6:7e:c9:8c:63: 2a:64:23:b3:05:26:c4:6e:51:5b:24:08:16:51:5f: 35:5a:96:c0:1a:ff:03:fc:c0:e8:3b:da:09:79:33: 00:36:fa:65:12:2b:49:59:6e:a5:5d:b1:bd:5f:d6: 87:e6:e5:b5:d3:6c:2e:6d:f1:4e:4d:4b:f2:7e:98: 7d:47:6f:40:80:9c:db:0c:42:75:02:b9:ea:45:b7: 64:2a:df:d7:76:d5:ae:12:c6:46:6a:b6:3a:c4:62: cf:52:04:1a:5c:e7:1a:f6:c0:0e:1d:5a:f8:ad:bd: 08:d5:5f:25:04:7e:84:17:be:07:ac:7a:0f:93:2b: 69:fe:e9:15:60:ec:a2:2d:20:81:2a:ae:eb:06:d9: 86:20:2c:e3:1e:1b:b8:ee:4e:60:61:ab:66:b8:d2: 3f:67:c6:02:f8:cf:85:00:04:2d:2a:88:6b:31:b8: ec:3c:d7:a6:60:16:b6:3a:d5:68:a6:de:0a:76:2f: 5a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:3D:2F:47:D9:95:16:E0:26:CE:F0:8A:E8:64:27:44:75:49:3C:69 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24b61501-4505-4056-a7c1-935daabf5a4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fa0:6000::/40 Signature Algorithm: sha256WithRSAEncryption a9:f3:5f:7e:e9:e4:cb:43:66:bd:08:04:65:27:80:79:84:39: 56:6a:54:c3:75:a2:83:ef:7f:c2:9b:50:03:1d:b9:b8:91:f0: 64:6a:d6:f6:a8:6e:25:19:51:7b:2d:4d:bc:34:ac:97:17:45: ca:56:2e:c0:8e:de:d4:ef:d4:b4:c3:59:09:12:6b:94:79:08: 4f:21:69:7f:57:50:9d:19:65:68:28:a4:64:7f:f0:61:3a:e7: 2e:fb:dd:b0:fb:fb:22:0d:5f:f3:c8:2c:10:b9:78:3a:75:45: 84:3c:0f:59:2c:f2:6c:60:d3:69:1a:c9:ae:e4:b0:33:9e:ec: 17:a1:45:b6:ec:8b:f7:c9:c3:e4:a5:55:7c:29:08:56:58:9a: 0f:0e:f8:1f:9f:ea:4d:b2:a7:4e:39:dd:29:3a:f3:82:a7:7d: 20:85:64:03:41:6c:9b:04:13:84:12:26:ca:9b:2b:d8:b9:23: 52:5f:6e:57:ef:07:d0:c6:da:7f:64:fc:49:cf:8a:30:a5:d0: ee:d8:e6:f3:1d:29:b3:46:86:41:99:18:15:44:14:f0:ce:a9: a1:38:20:22:8f:19:dd:95:d6:39:32:ca:3e:89:ed:a4:54:ee: f6:5d:c4:16:4c:65:be:fc:91:59:ec:9d:a6:9e:09:40:70:0e: 35:f9:d1:ff -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUQLpICu1+me4l9gyLSyfJO3puXmUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE4MDA0MTM0WhcNMjYxMDE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A3OGFmY2M3ZDljYmE5MzE3OTc0OWMzOTljYmM2NDBmZjIz ZTU2YjcxY2Y5YzNjZGQ0MzFhOTk0NjUwNmMzNjJjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCo2BQdiMC2zoJGzBUy9fDjTknz5OeWUG171Fyrp9tRrN0 4hB80OctmVBCjyzYsM7cXGSCWJVF3/egJvGtO4YP1uidSFmmfsmMYypkI7MFJsRu UVskCBZRXzValsAa/wP8wOg72gl5MwA2+mUSK0lZbqVdsb1f1ofm5bXTbC5t8U5N S/J+mH1Hb0CAnNsMQnUCuepFt2Qq39d21a4SxkZqtjrEYs9SBBpc5xr2wA4dWvit vQjVXyUEfoQXvgeseg+TK2n+6RVg7KItIIEqrusG2YYgLOMeG7juTmBhq2a40j9n xgL4z4UABC0qiGsxuOw816ZgFrY61Wim3gp2L1onAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUVj0vR9mVFuAmzvCK6GQnRHVJPGkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI0YjYxNTAxLTQ1MDUtNDA1Ni1hN2MxLTkzNWRhYWJmNWE0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+gYDANBgkqhkiG9w0BAQsFAAOCAQEAqfNffunky0NmvQgEZSeAeYQ5 VmpUw3Wig+9/wptQAx25uJHwZGrW9qhuJRlRey1NvDSslxdFylYuwI7e1O/UtMNZ CRJrlHkITyFpf1dQnRllaCikZH/wYTrnLvvdsPv7Ig1f88gsELl4OnVFhDwPWSzy bGDTaRrJruSwM57sF6FFtuyL98nD5KVVfCkIVliaDw74H5/qTbKnTjndKTrzgqd9 IIVkA0FsmwQThBImypsr2LkjUl9uV+8H0Mbaf2T8Sc+KMKXQ7tjm8x0ps0aGQZkY FUQU8M6poTggIo8Z3ZXWOTLKPontpFTu9l3EFkxlvvyRWeydpp4JQHAONfnR/w== -----END CERTIFICATE-----Generated at Fri Jul 24 06:21:05 2026 by rpki-client