$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/872c2b8b-568c-474e-983b-2d8e078949ba.roa File: 872c2b8b-568c-474e-983b-2d8e078949ba.roa (raw, json) Hash identifier: S6ZYdR7Zab1gtIZ8tfejDMtnLr02LBwFouIA8Grt2Ok= Subject key identifier: 8E:BF:19:CC:75:21:A9:F0:98:22:9E:46:51:75:A6:98:F1:67:B6:5C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2C5287F9BFA5DD01C3E5E4C76F887DF8B5DBCF4D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/872c2b8b-568c-474e-983b-2d8e078949ba.roa Signing time: Mon 22 Jun 2026 00:11:10 +0000 ROA not before: Mon 22 Jun 2026 00:11:10 +0000 ROA not after: Sun 20 Sep 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1feb:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:52:87:f9:bf:a5:dd:01:c3:e5:e4:c7:6f:88:7d:f8:b5:db:cf:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 22 00:11:10 2026 GMT Not After : Sep 20 23:59:59 2026 GMT Subject: serialNumber=45220a6dfa4b4748a1653723978fd53e19cb4b1dd584b3d675f96756a486d5ec, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:16:78:2a:7c:88:16:01:d3:c7:5e:4b:8c:73: 3a:b1:7e:28:69:79:9b:7b:9e:78:44:3f:46:2d:74: c5:c6:94:27:e5:7d:cc:34:21:a5:21:2b:0b:0b:92: 5a:e1:5d:c4:00:42:2b:f0:16:83:06:2a:00:44:e3: 05:db:5c:a2:fd:0d:5c:fa:0e:38:66:ed:30:95:32: 97:90:7d:ca:bf:f5:60:b5:59:0b:34:02:5a:67:4c: 58:54:1f:14:0e:d5:1f:d1:a4:ae:2d:ae:20:aa:d0: 27:ba:39:97:44:e2:96:5d:e6:db:17:f6:69:5e:40: e7:2a:05:f0:72:ee:40:fe:89:b4:d6:a6:cb:51:51: 4d:23:b5:d8:fc:20:54:e6:15:80:94:7a:00:0a:24: c4:64:8d:a1:63:be:a1:1d:6e:f3:04:d6:a5:ed:d9: ca:ae:ca:6a:25:15:bc:21:3c:9f:d4:e7:fa:ab:18: 4f:27:a3:66:58:56:dd:23:26:bb:0a:7d:ff:59:0a: 6e:17:0b:73:50:9b:8d:3f:d2:ff:5f:75:b0:bf:88: 56:da:d6:df:b2:40:0b:58:60:24:be:50:cd:1c:96: 5e:3e:46:08:77:8e:d7:aa:33:38:15:67:c0:72:a1: 40:2f:27:07:bb:3e:cb:bc:c5:1f:5c:9c:23:ee:9b: c9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:BF:19:CC:75:21:A9:F0:98:22:9E:46:51:75:A6:98:F1:67:B6:5C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/872c2b8b-568c-474e-983b-2d8e078949ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1feb:2000::/40 Signature Algorithm: sha256WithRSAEncryption 09:a4:13:43:f4:41:02:01:c5:f5:42:11:3e:11:38:c9:98:c7: 91:7f:b1:7c:2c:a8:0c:db:63:f7:3c:b4:2d:a2:10:71:78:bd: 73:ae:33:87:41:1c:1c:12:af:75:1d:88:da:08:6b:11:dc:88: c3:73:2a:e9:6f:a4:4f:84:f5:69:98:76:5c:dd:c9:21:54:6d: e7:36:9b:af:53:7d:a4:c5:2f:bc:85:7a:92:7c:4f:38:5f:48: 88:df:71:b5:0a:53:dd:c0:70:58:3e:de:f1:2a:2c:f1:8d:b8: a7:7a:20:64:9d:8f:e9:54:c2:3b:9b:32:07:c9:e8:b2:a1:0d: 3b:f2:38:7b:53:48:f4:c6:05:35:38:89:03:0f:80:42:a7:71: c9:9d:09:19:9b:e8:44:cd:c8:9b:d4:2c:8e:44:6a:18:b5:f1: e2:18:33:89:e8:54:84:c8:52:ff:39:3c:08:fc:0d:e8:70:2d: 12:d5:15:69:6e:ac:5a:a8:33:0a:8a:36:11:6e:f9:c6:56:b0: 3c:54:c3:f5:59:37:cd:e7:35:52:11:5e:1f:7e:ea:38:49:fa: e1:4e:5c:9f:3d:bd:c6:d0:af:1f:b6:e4:7a:5b:6d:72:98:bb: cf:af:1a:ca:9c:79:43:de:8a:c6:37:bc:7b:09:8b:25:07:f8: db:a9:c6:cd -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIULFKH+b+l3QHD5eTHb4h9+LXbz00wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNjIyMDAxMTEwWhcNMjYwOTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0NTIyMGE2ZGZhNGI0NzQ4YTE2NTM3MjM5NzhmZDUzZTE5 Y2I0YjFkZDU4NGIzZDY3NWY5Njc1NmE0ODZkNWVjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgFngqfIgWAdPHXkuMczqxfihpeZt7nnhEP0YtdMXGlCfl fcw0IaUhKwsLklrhXcQAQivwFoMGKgBE4wXbXKL9DVz6Djhm7TCVMpeQfcq/9WC1 WQs0AlpnTFhUHxQO1R/RpK4triCq0Ce6OZdE4pZd5tsX9mleQOcqBfBy7kD+ibTW pstRUU0jtdj8IFTmFYCUegAKJMRkjaFjvqEdbvME1qXt2cquymolFbwhPJ/U5/qr GE8no2ZYVt0jJrsKff9ZCm4XC3NQm40/0v9fdbC/iFba1t+yQAtYYCS+UM0cll4+ Rgh3jteqMzgVZ8ByoUAvJwe7Psu8xR9cnCPum8mRAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUjr8ZzHUhqfCYIp5GUXWmmPFntlwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg3MmMyYjhiLTU2OGMtNDc0ZS05ODNiLTJkOGUwNzg5NDliYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/rIDANBgkqhkiG9w0BAQsFAAOCAQEACaQTQ/RBAgHF9UIRPhE4yZjH kX+xfCyoDNtj9zy0LaIQcXi9c64zh0EcHBKvdR2I2ghrEdyIw3Mq6W+kT4T1aZh2 XN3JIVRt5zabr1N9pMUvvIV6knxPOF9IiN9xtQpT3cBwWD7e8Sos8Y24p3ogZJ2P 6VTCO5syB8nosqENO/I4e1NI9MYFNTiJAw+AQqdxyZ0JGZvoRM3Im9QsjkRqGLXx 4hgziehUhMhS/zk8CPwN6HAtEtUVaW6sWqgzCoo2EW75xlawPFTD9Vk3zec1UhFe H37qOEn64U5cnz29xtCvH7bkelttcpi7z68aypx5Q96Kxje8ewmLJQf426nGzQ== -----END CERTIFICATE-----Generated at Fri Jul 24 04:14:50 2026 by rpki-client