$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7af8fbfb-6b0b-487d-a94a-f7e96f31acaa.roa File: 7af8fbfb-6b0b-487d-a94a-f7e96f31acaa.roa (raw, json) Hash identifier: Cghq8OvXfE7tpJmSHY9mHVX6CygHOSIEIiWcIALC4ZE= Subject key identifier: 37:4D:85:BB:A3:76:3D:CD:DC:5B:B9:EF:17:FC:5B:A8:26:3F:CE:A0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4920E5448E7550A2D5DD63AEF67B22FB4AE2C19E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7af8fbfb-6b0b-487d-a94a-f7e96f31acaa.roa Signing time: Mon 20 Jul 2026 00:10:10 +0000 ROA not before: Mon 20 Jul 2026 00:10:10 +0000 ROA not after: Sun 18 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff6:1001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:20:e5:44:8e:75:50:a2:d5:dd:63:ae:f6:7b:22:fb:4a:e2:c1:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 20 00:10:10 2026 GMT Not After : Oct 18 23:59:59 2026 GMT Subject: serialNumber=55c1cf5756c6f3c800b5e7dbec1722c7ffa185fdf762dee3e6b39db0df41d73d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b4:95:f8:c9:ee:53:71:27:83:10:de:d5:6e: c4:a8:76:73:d6:a2:73:e0:0e:38:d0:00:64:50:cf: f2:1e:46:57:93:e3:e4:15:b2:13:e3:21:ad:d9:18: d7:43:e8:0c:77:8c:0c:c9:8d:11:ea:17:30:25:5c: ea:49:ae:a7:dc:58:4e:31:3e:e4:58:eb:1b:57:09: 6f:c3:0f:a4:0e:6b:1c:34:e7:98:12:30:9b:07:f3: ef:fe:74:a3:24:74:3d:9c:6b:4b:9b:35:6b:3f:c7: 39:0d:bd:c4:02:06:18:1b:7f:a4:8c:5c:44:1e:ef: da:ad:f1:63:13:fc:43:30:d5:08:f2:89:dc:fe:77: d3:cf:7a:e0:4d:4e:7c:8a:ad:97:08:54:22:3b:77: f4:76:56:68:9a:58:94:d0:42:5f:3f:d5:82:0d:3c: f7:b4:66:34:6d:d7:da:46:64:da:bc:d1:f6:38:cd: 95:49:e9:32:08:af:d0:3b:e7:c4:3f:cd:8f:cc:78: 85:c4:4d:e6:3c:ef:79:b4:6e:ee:db:86:b9:5c:3b: 31:b2:d7:a4:75:97:eb:3a:c1:17:3e:37:62:fc:3d: c6:71:2c:4e:20:7f:55:61:66:d9:e8:b9:2c:d7:91: b9:b4:72:07:42:cd:5f:91:60:c4:92:a4:d4:e9:25: ad:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:4D:85:BB:A3:76:3D:CD:DC:5B:B9:EF:17:FC:5B:A8:26:3F:CE:A0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7af8fbfb-6b0b-487d-a94a-f7e96f31acaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff6:1001::/48 Signature Algorithm: sha256WithRSAEncryption c1:3a:6c:e2:93:56:5e:ae:ba:3f:fd:3f:fe:a9:45:86:c7:a1: 55:8d:26:96:d8:ea:f0:a1:54:38:b3:d3:11:f4:5c:5e:e0:52: 7b:0d:20:e2:25:b3:c6:ca:ee:22:5c:41:39:df:a1:c4:bd:48: 66:56:5b:48:b5:19:4e:d3:b8:d9:ba:59:d9:60:0b:2e:9c:1e: af:50:00:2e:74:b0:2b:70:97:c2:86:18:3e:e6:a9:11:de:ea: 46:ac:36:d2:16:c2:44:c2:a6:5e:1f:9d:dc:83:66:51:40:5d: e9:d0:27:ea:2c:5a:4e:46:d0:33:eb:73:4a:d4:3b:73:bb:c9: 18:70:28:0e:59:2f:51:fc:e9:2d:60:c3:d8:d4:f5:2e:08:3f: 3d:c9:82:b7:ee:50:35:dd:7a:1b:08:d6:dd:9f:f3:5a:fd:9b: 11:a0:12:0a:28:83:8f:a0:db:1d:8f:a8:bf:ef:85:2e:53:fb: b0:c5:8c:5d:88:9a:1d:e1:50:ed:77:86:aa:c6:14:eb:a8:70: 6b:f0:cf:c3:9e:a8:28:b5:c4:17:60:ac:73:8b:7d:31:90:47: 0d:e6:25:f4:12:56:74:52:30:32:e1:6d:ca:70:7a:fa:f9:0c: 0a:73:4f:38:04:49:f6:52:4e:11:4d:c5:ab:dd:48:70:95:e3: fd:40:d6:24 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSSDlRI51UKLV3WOu9nsi+0riwZ4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIwMDAxMDEwWhcNMjYxMDE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NWMxY2Y1NzU2YzZmM2M4MDBiNWU3ZGJlYzE3MjJjN2Zm YTE4NWZkZjc2MmRlZTNlNmIzOWRiMGRmNDFkNzNkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDftJX4ye5TcSeDEN7VbsSodnPWonPgDjjQAGRQz/IeRleT 4+QVshPjIa3ZGNdD6Ax3jAzJjRHqFzAlXOpJrqfcWE4xPuRY6xtXCW/DD6QOaxw0 55gSMJsH8+/+dKMkdD2ca0ubNWs/xzkNvcQCBhgbf6SMXEQe79qt8WMT/EMw1Qjy idz+d9PPeuBNTnyKrZcIVCI7d/R2VmiaWJTQQl8/1YINPPe0ZjRt19pGZNq80fY4 zZVJ6TIIr9A758Q/zY/MeIXETeY873m0bu7bhrlcOzGy16R1l+s6wRc+N2L8PcZx LE4gf1VhZtnouSzXkbm0cgdCzV+RYMSSpNTpJa1FAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUN02Fu6N2Pc3cW7nvF/xbqCY/zqAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdhZjhmYmZiLTZiMGItNDg3ZC1hOTRhLWY3ZTk2ZjMxYWNhYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/2EAEwDQYJKoZIhvcNAQELBQADggEBAME6bOKTVl6uuj/9P/6pRYbH oVWNJpbY6vChVDiz0xH0XF7gUnsNIOIls8bK7iJcQTnfocS9SGZWW0i1GU7TuNm6 WdlgCy6cHq9QAC50sCtwl8KGGD7mqRHe6kasNtIWwkTCpl4fndyDZlFAXenQJ+os Wk5G0DPrc0rUO3O7yRhwKA5ZL1H86S1gw9jU9S4IPz3JgrfuUDXdehsI1t2f81r9 mxGgEgoog4+g2x2PqL/vhS5T+7DFjF2Imh3hUO13hqrGFOuocGvwz8OeqCi1xBdg rHOLfTGQRw3mJfQSVnRSMDLhbcpwevr5DApzTzgESfZSThFNxavdSHCV4/1A1iQ= -----END CERTIFICATE-----Generated at Thu Jul 23 22:32:30 2026 by rpki-client