$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c4a9717-79b8-463d-b0c1-f3d48ef2c8ef.roa File: 7c4a9717-79b8-463d-b0c1-f3d48ef2c8ef.roa (raw, json) Hash identifier: qw2oIISH1MX/DOc7gQ5uLibVM9Xm9pMzp64Hw0MF8QM= Subject key identifier: 40:EC:11:53:FD:8E:24:D3:4D:22:B8:F5:CD:83:70:64:2E:13:5E:41 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 424B0C1554352BE8C18EC7E1AA22A020426A8B6D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c4a9717-79b8-463d-b0c1-f3d48ef2c8ef.roa Signing time: Thu 23 Jul 2026 00:20:41 +0000 ROA not before: Thu 23 Jul 2026 00:20:41 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff2:ec40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:4b:0c:15:54:35:2b:e8:c1:8e:c7:e1:aa:22:a0:20:42:6a:8b:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 23 00:20:41 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=6548a0f80f720033a2dd1a586b5c1b5856eb70b7652e58c7e229641f0bc27f19, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e0:dc:05:d0:16:7e:da:26:39:8b:5e:db:09: 66:11:2f:4c:37:af:4d:98:ca:db:69:0c:7e:1b:39: e7:c6:ac:48:8e:a9:0b:76:20:b7:a6:a6:78:9b:60: aa:7c:6a:33:30:d4:11:e0:a4:c4:15:30:87:80:13: c3:9f:71:59:2d:57:93:8b:bc:af:03:5e:a4:1e:9e: d5:14:3e:73:29:52:0a:ca:98:fb:97:c0:21:4a:2d: 65:01:09:f1:87:02:6c:6b:3e:e9:03:09:10:d7:3f: ff:fa:ee:af:00:1b:8a:62:cb:f7:d3:3b:44:07:ab: 7b:ea:95:ff:c8:89:29:e8:eb:f2:0e:78:ce:e5:2e: 22:17:ed:f9:da:9c:fb:fe:0a:b6:2b:37:ed:09:c9: bb:b5:e6:9d:ea:5b:45:58:86:e1:27:0a:89:af:03: 9f:63:22:03:2f:f0:d1:1b:6e:1b:f4:9b:ad:34:8a: 04:be:e4:91:08:31:ed:08:c6:cb:c6:29:9d:98:bf: 9f:e8:d3:40:e9:3c:28:b6:39:45:ba:e8:79:a0:20: b0:27:3e:5d:84:c1:36:8e:1e:c8:66:c2:78:0a:80: 64:d4:d9:1d:6c:5f:7c:7c:44:a5:ed:90:2a:ef:dc: ea:6a:85:4a:9e:9a:db:15:47:ce:ba:4a:09:3c:d3: 20:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:EC:11:53:FD:8E:24:D3:4D:22:B8:F5:CD:83:70:64:2E:13:5E:41 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c4a9717-79b8-463d-b0c1-f3d48ef2c8ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff2:ec40::/48 Signature Algorithm: sha256WithRSAEncryption c4:3a:d3:ac:51:79:a7:34:9e:fc:f5:a1:9c:2d:3e:96:62:1e: 0e:bc:cd:4c:ec:3d:16:ea:90:89:97:d7:0f:ff:a5:3d:1e:75: b2:c6:56:77:24:c7:6c:d3:4b:7b:9e:3a:3b:26:b4:3d:29:86: b2:4b:26:53:15:f2:6f:e7:4a:8a:7d:2c:af:16:c2:27:02:cf: d7:ab:c4:d9:e8:3b:0c:db:89:1a:d7:79:4d:72:cf:0c:c4:bb: e4:11:2f:2a:ed:28:1a:53:a4:8a:05:30:6d:a0:60:97:fe:b3: ba:40:16:07:ce:6c:ee:bf:05:5b:30:f7:cc:f8:0e:24:a7:6c: f0:c9:00:a7:d8:4e:4e:1f:2a:b6:58:6d:7e:2b:89:37:c8:17: ad:e9:88:06:e8:ce:54:86:0f:8d:ec:16:17:09:96:e0:b4:63: 1a:52:47:05:5f:1a:c8:fa:2c:09:e5:83:41:e0:1a:62:4b:3c: e4:02:26:aa:7f:49:db:ff:fa:46:79:ed:a9:4a:94:0d:70:e9: d2:0b:91:37:bf:fb:61:f8:bd:27:7e:4d:fc:63:96:1b:41:d2: d4:52:9a:b4:53:ea:ea:7f:4b:af:20:9a:1f:d1:54:1c:21:c0: bf:49:30:ca:9b:85:07:e3:ce:cd:c9:3d:d8:fc:20:35:33:47: 13:cf:58:6d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQksMFVQ1K+jBjsfhqiKgIEJqi20wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIzMDAyMDQxWhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NTQ4YTBmODBmNzIwMDMzYTJkZDFhNTg2YjVjMWI1ODU2 ZWI3MGI3NjUyZTU4YzdlMjI5NjQxZjBiYzI3ZjE5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCh4NwF0BZ+2iY5i17bCWYRL0w3r02YyttpDH4bOefGrEiO qQt2ILempnibYKp8ajMw1BHgpMQVMIeAE8OfcVktV5OLvK8DXqQentUUPnMpUgrK mPuXwCFKLWUBCfGHAmxrPukDCRDXP//67q8AG4piy/fTO0QHq3vqlf/IiSno6/IO eM7lLiIX7fnanPv+CrYrN+0Jybu15p3qW0VYhuEnComvA59jIgMv8NEbbhv0m600 igS+5JEIMe0IxsvGKZ2Yv5/o00DpPCi2OUW66HmgILAnPl2EwTaOHshmwngKgGTU 2R1sX3x8RKXtkCrv3OpqhUqemtsVR866Sgk80yDxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUQOwRU/2OJNNNIrj1zYNwZC4TXkEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdjNGE5NzE3LTc5YjgtNDYzZC1iMGMxLWYzZDQ4ZWYyYzhlZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/y7EAwDQYJKoZIhvcNAQELBQADggEBAMQ606xReac0nvz1oZwtPpZi Hg68zUzsPRbqkImX1w//pT0edbLGVnckx2zTS3ueOjsmtD0phrJLJlMV8m/nSop9 LK8WwicCz9erxNnoOwzbiRrXeU1yzwzEu+QRLyrtKBpTpIoFMG2gYJf+s7pAFgfO bO6/BVsw98z4DiSnbPDJAKfYTk4fKrZYbX4riTfIF63piAbozlSGD43sFhcJluC0 YxpSRwVfGsj6LAnlg0HgGmJLPOQCJqp/Sdv/+kZ57alKlA1w6dILkTe/+2H4vSd+ TfxjlhtB0tRSmrRT6up/S68gmh/RVBwhwL9JMMqbhQfjzs3JPdj8IDUzRxPPWG0= -----END CERTIFICATE-----Generated at Thu Jul 23 21:32:52 2026 by rpki-client