$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89570917-e234-4dbb-8694-dc75eb220444.roa File: 89570917-e234-4dbb-8694-dc75eb220444.roa (raw, json) Hash identifier: JiFUY2vDrbmawkx3F3S7TOcthDJ/DHpCx+8InUiudx0= Subject key identifier: CE:5B:EA:4A:30:48:DA:85:09:21:12:93:8F:A9:A8:8B:7F:28:45:95 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6A439E5EB15CE36DC45003C76FB3C8DDB21495 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89570917-e234-4dbb-8694-dc75eb220444.roa Signing time: Tue 21 Jul 2026 00:50:03 +0000 ROA not before: Tue 21 Jul 2026 00:50:03 +0000 ROA not after: Mon 19 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1ff2:8000::/39 maxlen: 39 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:43:9e:5e:b1:5c:e3:6d:c4:50:03:c7:6f:b3:c8:dd:b2:14:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 21 00:50:03 2026 GMT Not After : Oct 19 23:59:59 2026 GMT Subject: serialNumber=762e1212c2ce261244bc3d22d4e1eaed4ef5ea8b1e3f2b3438f3937dae274ac5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:47:e3:52:28:8f:a9:aa:75:64:2f:76:28:95: d1:81:0b:26:f8:c7:af:6c:0c:02:e4:af:de:86:a7: 4b:c3:36:f2:42:db:56:05:d2:a8:6b:74:a2:ea:bc: 7a:4d:47:a6:2a:d8:a4:c7:f5:4c:31:c7:c2:72:28: e7:a1:69:eb:61:a1:08:ee:69:0e:89:3d:7f:14:9e: ed:f1:76:8a:23:fe:25:5a:89:3c:90:74:c1:91:25: a4:83:ec:c0:21:9a:b5:39:e1:bf:3f:5e:55:45:ac: e7:7b:90:37:e4:f1:1d:4a:ad:31:2c:40:5c:b0:60: aa:76:62:bc:f7:73:ae:f6:ed:0a:90:5e:e9:3d:4b: bd:3f:14:d7:6d:2e:7a:7c:47:e0:c4:be:92:7c:4f: 4e:c3:84:b0:cd:e4:68:7d:a5:d7:b1:6b:dd:09:1c: 87:52:87:a3:32:e1:33:5b:47:b2:98:76:5e:bb:2c: d4:a7:e7:52:5e:86:9a:45:fd:43:2f:f3:c7:b4:95: 7c:b9:3c:bc:cc:18:9b:59:e3:c8:0c:08:71:11:b6: 68:07:91:b9:a1:c9:ff:72:1a:fa:d1:e8:f0:b8:d5: c6:47:64:ef:df:a8:b1:5e:10:65:29:7d:10:93:10: 31:2f:c4:00:c0:68:bc:8d:f9:2a:ef:4f:fd:9a:8a: 6f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:5B:EA:4A:30:48:DA:85:09:21:12:93:8F:A9:A8:8B:7F:28:45:95 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89570917-e234-4dbb-8694-dc75eb220444.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff2:8000::/39 Signature Algorithm: sha256WithRSAEncryption b1:83:19:06:51:a5:af:9d:97:95:79:c8:05:b7:e0:3f:e8:38: a8:aa:3d:6a:d3:ab:f5:58:04:bc:f1:04:0c:18:ce:84:70:52: fb:01:b1:f2:70:b8:39:0b:52:55:d5:ac:47:d0:84:3e:95:01: 9f:0a:24:ca:58:65:17:21:58:29:bc:41:a2:93:be:08:46:a0: 06:31:66:d6:9d:1c:fb:31:ef:9d:ac:76:e3:72:42:63:48:af: 16:9a:7e:aa:f3:b8:43:09:97:c3:f1:46:cb:a4:cd:f2:45:01: 2d:96:a9:9f:75:f2:b9:6b:0c:36:cf:08:f5:12:3b:d8:7f:45: 1d:61:83:e7:e5:8c:b5:34:fa:db:27:b0:b6:a1:5c:2a:d0:14: 17:21:f3:0c:bc:83:83:e6:3d:00:f2:7e:1a:77:2d:e4:33:13: 7a:90:18:df:0c:cf:39:c2:41:7c:e5:ae:37:16:f3:25:f5:5f: 49:44:ae:7d:11:76:cb:50:47:95:88:70:31:d4:b1:69:0b:24: 15:ea:0c:1c:ce:b2:57:15:9b:b7:33:b6:79:9f:68:33:23:f0: 2f:3a:a0:0f:cc:1a:0b:d3:55:39:65:80:62:4f:42:dc:d7:0b: cd:66:f8:dc:39:1b:6c:be:65:59:b9:a8:50:35:cb:6b:71:a9: 66:13:eb:c8 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgITakOeXrFc423EUAPHb7PI3bIUlTANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNjA3MjEwMDUwMDNaFw0yNjEwMTkyMzU5NTla MHoxSTBHBgNVBAUTQDc2MmUxMjEyYzJjZTI2MTI0NGJjM2QyMmQ0ZTFlYWVkNGVm NWVhOGIxZTNmMmIzNDM4ZjM5MzdkYWUyNzRhYzUxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAJ1H41Ioj6mqdWQvdiiV0YELJvjHr2wMAuSv3oanS8M28kLb VgXSqGt0ouq8ek1HpirYpMf1TDHHwnIo56Fp62GhCO5pDok9fxSe7fF2iiP+JVqJ PJB0wZElpIPswCGatTnhvz9eVUWs53uQN+TxHUqtMSxAXLBgqnZivPdzrvbtCpBe 6T1LvT8U120uenxH4MS+knxPTsOEsM3kaH2l17Fr3Qkch1KHozLhM1tHsph2Xrss 1KfnUl6GmkX9Qy/zx7SVfLk8vMwYm1njyAwIcRG2aAeRuaHJ/3Ia+tHo8LjVxkdk 79+osV4QZSl9EJMQMS/EAMBovI35Ku9P/ZqKb0MCAwEAAaOCArMwggKvMB0GA1Ud DgQWBBTOW+pKMEjahQkhEpOPqaiLfyhFlTAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvODk1NzA5MTctZTIzNC00ZGJiLTg2OTQtZGM3NWViMjIwNDQ0LnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw CAMGASYAH/KAMA0GCSqGSIb3DQEBCwUAA4IBAQCxgxkGUaWvnZeVecgFt+A/6Dio qj1q06v1WAS88QQMGM6EcFL7AbHycLg5C1JV1axH0IQ+lQGfCiTKWGUXIVgpvEGi k74IRqAGMWbWnRz7Me+drHbjckJjSK8Wmn6q87hDCZfD8UbLpM3yRQEtlqmfdfK5 aww2zwj1EjvYf0UdYYPn5Yy1NPrbJ7C2oVwq0BQXIfMMvIOD5j0A8n4ady3kMxN6 kBjfDM85wkF85a43FvMl9V9JRK59EXbLUEeViHAx1LFpCyQV6gwczrJXFZu3M7Z5 n2gzI/AvOqAPzBoL01U5ZYBiT0Lc1wvNZvjcORtsvmVZuahQNctrcalmE+vI -----END CERTIFICATE-----Generated at Thu Jul 23 22:32:10 2026 by rpki-client