$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33d00f85-2dad-40e9-ad84-05aa8de0f228.roa File: 33d00f85-2dad-40e9-ad84-05aa8de0f228.roa (raw, json) Hash identifier: 0gJ5EEGxfmfWZriYjEWIu6GaYWikaSY30NaoHRAVGvU= Subject key identifier: A0:61:37:44:95:15:04:46:D7:52:C3:42:91:D0:89:86:AF:11:78:0D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4CEF61141760BF249DD974C0F6E0028999D99270 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33d00f85-2dad-40e9-ad84-05aa8de0f228.roa Signing time: Mon 20 Jul 2026 00:50:10 +0000 ROA not before: Mon 20 Jul 2026 00:50:10 +0000 ROA not after: Sun 18 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f1b:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:ef:61:14:17:60:bf:24:9d:d9:74:c0:f6:e0:02:89:99:d9:92:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 20 00:50:10 2026 GMT Not After : Oct 18 23:59:59 2026 GMT Subject: serialNumber=d4fe220a554d0fa669a439f341b0faa5c079dd1e84a940d9f1f0b7df94a0dcd1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5b:15:dd:1c:55:66:41:70:31:6f:e6:2f:a0: 2a:54:06:21:d1:f2:1b:ef:22:9d:34:3a:ad:49:92: f3:ad:04:72:80:fb:5d:0e:d2:91:f9:37:e5:25:9c: 2b:79:e9:a7:c4:44:91:73:89:c4:a1:61:72:ba:97: d6:cb:b0:d9:14:a8:26:53:f1:1d:e2:8a:df:3e:5b: 5e:e2:09:df:92:51:f7:32:b5:81:9e:ce:49:51:84: 3e:16:75:ed:86:9b:46:cf:b9:0c:47:4a:2f:fc:53: c2:54:84:4c:32:4e:7b:a5:a6:26:e1:95:7a:6b:c3: ac:af:6c:c8:1b:f5:23:af:3c:f2:74:ea:98:eb:e0: 36:ce:46:c8:38:45:a1:2f:4a:a4:ef:ee:db:80:33: a6:34:02:9f:ef:96:e7:76:5e:e1:61:5f:16:a6:77: fe:9a:c9:73:fd:75:76:06:21:e2:09:8e:2b:b0:23: 6a:15:b8:16:3c:e0:51:59:a4:51:ac:60:54:64:76: fe:19:80:2d:1d:10:1d:2f:33:0e:37:5f:b1:f7:26: e1:83:80:31:07:c2:c6:a4:ed:16:24:72:fe:23:4d: 60:a3:36:e6:8f:82:6f:f5:70:3a:14:60:b4:42:ce: c7:bb:0c:d7:1d:f6:30:10:3c:4a:d4:ed:66:4e:b4: 97:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:61:37:44:95:15:04:46:D7:52:C3:42:91:D0:89:86:AF:11:78:0D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33d00f85-2dad-40e9-ad84-05aa8de0f228.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f1b:8000::/36 Signature Algorithm: sha256WithRSAEncryption 01:76:c5:06:3a:0d:b0:cb:18:b0:73:61:c5:92:58:73:67:c1: 92:0d:19:f5:f9:02:8d:79:1c:7e:51:ff:06:30:9f:3e:78:7d: 9b:c2:79:2c:82:85:db:c8:28:f1:15:f6:21:6c:95:e9:71:f2: 69:ad:95:41:5d:80:c0:25:43:0e:99:ab:87:1f:82:45:c3:d3: d9:d7:c0:3b:a2:10:ed:eb:2c:3c:a2:41:b1:33:c8:99:d9:f8: 4e:0c:09:8b:42:05:df:bc:5d:66:ff:1a:cb:c4:bd:ed:71:58: 47:1d:c3:c0:5f:98:22:83:12:6f:bc:ef:1e:79:99:dd:48:8f: 6c:74:c3:45:3f:84:94:93:fe:b7:27:06:cf:3d:9a:b0:a3:60: ba:7e:70:69:7f:94:fa:c5:d7:5a:18:96:a8:fb:ac:72:b9:ba: 29:84:08:2b:4a:ec:ea:b1:28:7c:ae:0c:e4:a6:93:20:06:37: 17:b3:eb:6e:f1:f7:92:b5:4a:9c:2f:fe:d0:a9:44:a1:af:15: d9:a7:43:2f:56:01:09:d5:e8:cd:45:b5:07:6e:d0:12:c0:18: 2f:82:51:78:b0:46:f4:75:1f:9e:18:21:03:14:ba:8a:02:90: 08:1e:63:d5:c7:4b:93:5d:62:b3:de:80:53:1b:92:79:1e:94: c7:8c:bd:e4 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUTO9hFBdgvySd2XTA9uACiZnZknAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIwMDA1MDEwWhcNMjYxMDE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNGZlMjIwYTU1NGQwZmE2NjlhNDM5ZjM0MWIwZmFhNWMw NzlkZDFlODRhOTQwZDlmMWYwYjdkZjk0YTBkY2QxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7WxXdHFVmQXAxb+YvoCpUBiHR8hvvIp00Oq1JkvOtBHKA +10O0pH5N+UlnCt56afERJFzicShYXK6l9bLsNkUqCZT8R3iit8+W17iCd+SUfcy tYGezklRhD4Wde2Gm0bPuQxHSi/8U8JUhEwyTnulpibhlXprw6yvbMgb9SOvPPJ0 6pjr4DbORsg4RaEvSqTv7tuAM6Y0Ap/vlud2XuFhXxamd/6ayXP9dXYGIeIJjiuw I2oVuBY84FFZpFGsYFRkdv4ZgC0dEB0vMw43X7H3JuGDgDEHwsak7RYkcv4jTWCj NuaPgm/1cDoUYLRCzse7DNcd9jAQPErU7WZOtJcDAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUoGE3RJUVBEbXUsNCkdCJhq8ReA0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMzZDAwZjg1LTJkYWQtNDBlOS1hZDg0LTA1YWE4ZGUwZjIyOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8bgDANBgkqhkiG9w0BAQsFAAOCAQEAAXbFBjoNsMsYsHNhxZJYc2fB kg0Z9fkCjXkcflH/BjCfPnh9m8J5LIKF28go8RX2IWyV6XHyaa2VQV2AwCVDDpmr hx+CRcPT2dfAO6IQ7essPKJBsTPImdn4TgwJi0IF37xdZv8ay8S97XFYRx3DwF+Y IoMSb7zvHnmZ3UiPbHTDRT+ElJP+tycGzz2asKNgun5waX+U+sXXWhiWqPuscrm6 KYQIK0rs6rEofK4M5KaTIAY3F7PrbvH3krVKnC/+0KlEoa8V2adDL1YBCdXozUW1 B27QEsAYL4JReLBG9HUfnhghAxS6igKQCB5j1cdLk11is96AUxuSeR6Ux4y95A== -----END CERTIFICATE-----Generated at Thu Jul 23 21:30:51 2026 by rpki-client