$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2af3cff2-866a-4113-89c5-1f4d664924c6.roa File: 2af3cff2-866a-4113-89c5-1f4d664924c6.roa (raw, json) Hash identifier: gIwJ8wlSO75UO/kVLwMjX9FCl8p1AVO4bJsCPYynHyM= Subject key identifier: 56:C8:4B:FD:48:C9:48:8E:81:BA:1A:E3:DF:7E:85:CC:10:4E:CE:4E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 753E4BDB476C3047038AB6DB018D80CE9CF44483 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2af3cff2-866a-4113-89c5-1f4d664924c6.roa Signing time: Sat 18 Jul 2026 00:20:30 +0000 ROA not before: Sat 18 Jul 2026 00:20:30 +0000 ROA not after: Fri 16 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f01:4806::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:3e:4b:db:47:6c:30:47:03:8a:b6:db:01:8d:80:ce:9c:f4:44:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 18 00:20:30 2026 GMT Not After : Oct 16 23:59:59 2026 GMT Subject: serialNumber=5f390deb2d6adfede99c8940f3a19728d18ee6ccdad768d6514adbde57e351ca, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:18:e1:ae:b1:87:2a:62:fe:e5:98:a2:db:9f: b7:d5:54:8b:2e:47:7b:48:ac:91:4f:19:26:b9:ae: 5c:bb:5a:f2:bf:b0:0c:81:5e:6e:a4:30:7c:2a:3c: c3:f5:8e:d1:a2:fb:75:2d:e1:e6:d6:63:a3:f2:19: 1f:7f:3f:4e:9c:d2:73:74:5f:c1:5c:6d:04:bd:d4: 31:ea:29:19:e7:e1:f9:9a:7f:c7:53:22:8e:1d:5e: 9b:70:99:ef:b9:c9:0a:de:f7:83:27:6b:de:b0:eb: 8f:64:d7:eb:d9:20:d7:fe:34:a9:8e:72:d4:80:93: 3f:f9:ec:33:14:cb:c3:64:ff:ac:c3:ea:dd:b8:5e: 9a:2a:97:53:ab:bd:36:94:df:4a:45:6b:a9:c7:0f: 5b:6a:80:f4:58:a4:fe:33:9f:d6:7b:1d:3c:74:8f: c3:a5:71:04:66:9c:2d:35:5a:7d:46:92:33:7b:79: 52:12:d3:2b:c4:21:b8:b7:78:8e:b2:91:b0:d5:98: ac:cc:56:62:cf:15:59:cd:59:bc:76:2d:d9:4d:7b: fb:67:00:86:ad:d5:e4:74:16:9d:f2:57:03:c6:88: a3:58:81:9d:2a:1b:1d:00:d7:27:63:0f:ae:70:c8: 1d:bf:92:4e:6c:b0:dc:7e:8e:e8:b2:5b:50:27:3e: 8d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:C8:4B:FD:48:C9:48:8E:81:BA:1A:E3:DF:7E:85:CC:10:4E:CE:4E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2af3cff2-866a-4113-89c5-1f4d664924c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f01:4806::/47 Signature Algorithm: sha256WithRSAEncryption c4:b6:91:70:82:9d:9e:06:1e:61:df:23:6e:c8:e2:ab:d6:6f: 7b:a1:6e:13:54:2c:b5:b2:83:29:c5:ec:25:64:41:68:84:02: da:64:0a:e3:15:77:76:43:e6:8c:71:62:69:01:39:71:3d:0d: d9:c5:6e:41:a8:87:68:24:17:a9:1f:91:7a:59:2e:1f:68:03: 8f:93:53:76:37:bf:b9:fe:12:b1:b1:37:93:b1:e3:1f:8f:83: d1:34:99:7f:29:ca:e8:4e:8f:5e:dd:5b:fe:02:64:80:07:55: cc:66:5a:e0:af:80:6f:d0:c9:db:a9:d4:5e:7b:af:c9:94:cc: 97:7c:de:db:73:4a:c0:25:77:cd:7a:1b:be:28:72:bf:07:6f: b0:01:cf:63:0c:53:97:66:c4:80:40:5d:10:af:61:f4:01:2d: fc:23:31:fc:9a:65:01:36:de:36:b7:ae:ac:66:b6:6a:d2:97: 20:c9:b6:6b:55:d4:64:29:eb:d6:f0:4f:f7:fb:59:43:68:33: 5b:6a:16:34:15:35:29:ee:39:de:ef:66:af:ca:16:2d:65:ec: 2e:a0:1f:cb:9c:7e:35:88:44:20:3a:12:8a:18:91:cd:c9:85: 0f:8b:27:70:36:b8:61:70:8c:eb:1d:f2:60:d3:21:4f:e4:3b: b0:68:94:b2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdT5L20dsMEcDirbbAY2Azpz0RIMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE4MDAyMDMwWhcNMjYxMDE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZjM5MGRlYjJkNmFkZmVkZTk5Yzg5NDBmM2ExOTcyOGQx OGVlNmNjZGFkNzY4ZDY1MTRhZGJkZTU3ZTM1MWNhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZGOGusYcqYv7lmKLbn7fVVIsuR3tIrJFPGSa5rly7WvK/ sAyBXm6kMHwqPMP1jtGi+3Ut4ebWY6PyGR9/P06c0nN0X8FcbQS91DHqKRnn4fma f8dTIo4dXptwme+5yQre94Mna96w649k1+vZINf+NKmOctSAkz/57DMUy8Nk/6zD 6t24Xpoql1OrvTaU30pFa6nHD1tqgPRYpP4zn9Z7HTx0j8OlcQRmnC01Wn1GkjN7 eVIS0yvEIbi3eI6ykbDVmKzMVmLPFVnNWbx2LdlNe/tnAIat1eR0Fp3yVwPGiKNY gZ0qGx0A1ydjD65wyB2/kk5ssNx+juiyW1AnPo3dAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUVshL/UjJSI6Buhrj336FzBBOzk4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJhZjNjZmYyLTg2NmEtNDExMy04OWM1LTFmNGQ2NjQ5MjRjNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAB8BSAYwDQYJKoZIhvcNAQELBQADggEBAMS2kXCCnZ4GHmHfI27I4qvW b3uhbhNULLWygynF7CVkQWiEAtpkCuMVd3ZD5oxxYmkBOXE9DdnFbkGoh2gkF6kf kXpZLh9oA4+TU3Y3v7n+ErGxN5Ox4x+Pg9E0mX8pyuhOj17dW/4CZIAHVcxmWuCv gG/Qydup1F57r8mUzJd83ttzSsAld816G74ocr8Hb7ABz2MMU5dmxIBAXRCvYfQB LfwjMfyaZQE23ja3rqxmtmrSlyDJtmtV1GQp69bwT/f7WUNoM1tqFjQVNSnuOd7v Zq/KFi1l7C6gH8ucfjWIRCA6EooYkc3JhQ+LJ3A2uGFwjOsd8mDTIU/kO7BolLI= -----END CERTIFICATE-----Generated at Thu Jul 23 21:32:48 2026 by rpki-client