$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c48945e-9b34-4ed2-955b-b924ac69c245.roa File: 7c48945e-9b34-4ed2-955b-b924ac69c245.roa (raw, json) Hash identifier: A4KdeFAbLu8UMVR3SvQzyRMSl3NhgyjUEMZOWXjzqzY= Subject key identifier: 9B:64:D8:3F:2C:F0:3E:E7:14:49:FD:8C:56:45:C1:E3:A1:FB:EC:F6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 27214BE1DEAB50D1C35F324B3CF64141388024D9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c48945e-9b34-4ed2-955b-b924ac69c245.roa Signing time: Mon 22 Jun 2026 00:10:06 +0000 ROA not before: Mon 22 Jun 2026 00:10:06 +0000 ROA not after: Sun 20 Sep 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1feb:ec00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:21:4b:e1:de:ab:50:d1:c3:5f:32:4b:3c:f6:41:41:38:80:24:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 22 00:10:06 2026 GMT Not After : Sep 20 23:59:59 2026 GMT Subject: serialNumber=470fb5c9dbdf96f37fde34b25f3f319f74efe2e66fdb3bbca1beba81c9b13352, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fb:d7:19:5e:e9:a3:df:18:0c:b1:ea:d4:e6: ab:92:8e:c7:62:e2:0d:0e:39:e9:40:ce:8d:b8:f8: 72:00:b8:7f:b6:a7:36:b3:70:16:a7:a2:c9:c9:10: 60:5d:bd:14:f6:32:0f:f5:a3:d5:3f:99:4d:2d:a8: ac:eb:bd:d4:32:c9:f5:44:07:06:ef:c1:c5:43:56: 65:33:e5:bf:2a:22:73:a3:24:98:f5:96:f8:41:eb: db:d1:63:41:39:91:01:63:81:61:38:54:fa:64:0a: 09:cd:35:99:43:77:34:d2:ef:af:16:d5:e6:3d:6a: 0e:5b:ee:60:f2:9d:95:28:b4:c4:2f:53:d7:f4:21: 24:0f:68:d5:01:49:7a:4c:c4:a9:48:dd:5a:e5:64: 15:14:9c:dc:b9:51:73:59:d2:06:01:cb:8c:d7:9e: 4d:fe:3a:6c:9d:11:25:3b:ec:1f:91:df:96:6a:63: 95:85:33:87:40:67:54:e4:5c:21:20:f2:27:93:d3: a0:4b:48:64:ea:61:5a:2b:33:8f:41:23:76:d7:10: 99:01:93:02:b3:74:5f:cc:43:db:b9:5a:86:ff:7d: f9:34:9d:f7:12:e4:d4:f4:2d:ca:9e:de:b9:f9:78: 44:bc:0b:bb:1b:02:9f:5d:35:4c:26:36:e9:89:5e: c9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:64:D8:3F:2C:F0:3E:E7:14:49:FD:8C:56:45:C1:E3:A1:FB:EC:F6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c48945e-9b34-4ed2-955b-b924ac69c245.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1feb:ec00::/40 Signature Algorithm: sha256WithRSAEncryption 3b:c9:b3:74:56:5f:56:bc:56:e4:65:15:35:40:ac:08:51:b1: 26:e1:bc:c1:b5:df:8e:e2:7c:94:39:fc:6e:b8:3d:e0:2c:b5: 7a:89:5c:a7:e7:48:52:06:d8:13:7f:4e:3b:77:e0:53:d2:6b: 3f:d9:fc:da:7e:0e:70:47:62:9c:dc:4e:6f:34:c5:c0:f1:bf: 21:aa:cc:75:5a:a0:db:22:13:24:b6:52:3b:f7:a7:19:84:d7: f2:83:83:db:96:1e:74:de:b3:dd:2a:be:5c:2e:a5:e8:80:95: 75:81:5f:e2:c2:65:4f:55:98:45:5c:7f:fd:f2:ec:76:ff:f9: 4d:19:61:8b:af:c4:fd:e6:c5:47:c2:a9:ff:92:85:6c:93:5b: cd:96:09:86:e8:fa:6a:78:57:da:b1:11:19:e0:0a:40:47:7e: 66:c1:97:4d:ce:fb:49:a9:d1:a7:0a:aa:76:a9:a6:11:4f:d9: fb:13:b5:3b:04:63:88:83:f7:f5:09:d4:d7:c4:1c:a6:9a:6c: a2:3f:23:23:76:2b:b5:53:67:c7:e8:ac:a1:05:f0:22:27:2b: 60:b6:26:73:e3:d1:50:d4:a2:27:71:94:52:92:6c:a7:f9:c4: e1:e6:b9:0b:0f:ea:9e:d6:cc:63:09:31:6a:98:c5:d6:bd:05: f3:5c:42:5c -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUJyFL4d6rUNHDXzJLPPZBQTiAJNkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNjIyMDAxMDA2WhcNMjYwOTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0NzBmYjVjOWRiZGY5NmYzN2ZkZTM0YjI1ZjNmMzE5Zjc0 ZWZlMmU2NmZkYjNiYmNhMWJlYmE4MWM5YjEzMzUyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQ+9cZXumj3xgMserU5quSjsdi4g0OOelAzo24+HIAuH+2 pzazcBanosnJEGBdvRT2Mg/1o9U/mU0tqKzrvdQyyfVEBwbvwcVDVmUz5b8qInOj JJj1lvhB69vRY0E5kQFjgWE4VPpkCgnNNZlDdzTS768W1eY9ag5b7mDynZUotMQv U9f0ISQPaNUBSXpMxKlI3VrlZBUUnNy5UXNZ0gYBy4zXnk3+OmydESU77B+R35Zq Y5WFM4dAZ1TkXCEg8ieT06BLSGTqYVorM49BI3bXEJkBkwKzdF/MQ9u5Wob/ffk0 nfcS5NT0Lcqe3rn5eES8C7sbAp9dNUwmNumJXsnlAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUm2TYPyzwPucUSf2MVkXB46H77PYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdjNDg5NDVlLTliMzQtNGVkMi05NTViLWI5MjRhYzY5YzI0NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/r7DANBgkqhkiG9w0BAQsFAAOCAQEAO8mzdFZfVrxW5GUVNUCsCFGx JuG8wbXfjuJ8lDn8brg94Cy1eolcp+dIUgbYE39OO3fgU9JrP9n82n4OcEdinNxO bzTFwPG/IarMdVqg2yITJLZSO/enGYTX8oOD25YedN6z3Sq+XC6l6ICVdYFf4sJl T1WYRVx//fLsdv/5TRlhi6/E/ebFR8Kp/5KFbJNbzZYJhuj6anhX2rERGeAKQEd+ ZsGXTc77SanRpwqqdqmmEU/Z+xO1OwRjiIP39QnU18Qcpppsoj8jI3YrtVNnx+is oQXwIicrYLYmc+PRUNSiJ3GUUpJsp/nE4ea5Cw/qntbMYwkxapjF1r0F81xCXA== -----END CERTIFICATE-----Generated at Thu Jul 23 23:44:35 2026 by rpki-client