$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/907c2395-b661-4997-9c87-b20a9e615473.roa File: 907c2395-b661-4997-9c87-b20a9e615473.roa (raw, json) Hash identifier: plx+EYBdQc1mhYs+lw4TFUSQPwD2hkXp81vEKoQsmKo= Subject key identifier: D4:DB:51:83:91:96:7F:38:34:D2:7A:FB:0E:42:8B:AC:65:4C:D3:6C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 347C97EE13B5759E15D69C42F8F9D4E96DE1A36E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/907c2395-b661-4997-9c87-b20a9e615473.roa Signing time: Sat 18 Jul 2026 00:10:08 +0000 ROA not before: Sat 18 Jul 2026 00:10:08 +0000 ROA not after: Fri 16 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff1:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:7c:97:ee:13:b5:75:9e:15:d6:9c:42:f8:f9:d4:e9:6d:e1:a3:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 18 00:10:08 2026 GMT Not After : Oct 16 23:59:59 2026 GMT Subject: serialNumber=64f71aa4f47b60734686208b2599b9f10d4d9c45645eaca7269186060c25c25f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ac:c6:81:a2:34:88:d9:36:d2:06:13:5f:ef: ce:b8:de:43:50:bb:06:3c:57:67:47:88:31:8d:dd: 85:27:8c:06:62:ab:69:a9:f3:81:32:65:99:18:32: b7:4c:b1:d2:65:e8:16:61:7c:87:5c:d5:7a:3a:8d: b7:f4:ea:74:eb:1f:e0:ee:65:f1:dd:0f:3e:97:fa: 67:02:76:4b:91:0e:3f:2a:b3:80:62:06:14:7f:e6: ed:b0:0b:24:df:3e:48:6f:99:51:ba:f1:62:ac:2d: 0c:63:71:db:ae:62:96:57:16:79:a5:c7:6f:8c:a8: 3b:cb:e6:26:5e:c8:00:56:39:ec:c5:50:ff:36:d1: 78:86:9e:b0:ea:08:59:f0:47:c3:4c:7f:4e:62:71: 1d:6f:ab:18:16:7d:d5:f3:17:c6:93:ec:a4:7a:60: df:de:61:ad:69:b7:d6:fb:72:84:d7:36:31:f0:e7: dd:d6:d3:01:ce:e0:c0:69:2d:b1:21:8b:94:6b:f1: ac:9b:72:fa:57:10:68:91:36:88:3d:c3:ad:07:24: 19:07:4d:57:8e:5a:8e:fe:ed:d1:3e:e6:cb:b1:16: 26:27:c2:52:29:24:02:fb:9f:df:d6:01:c7:87:ec: a3:07:ff:f7:69:37:58:3b:84:c0:9d:f6:59:26:f3: e6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:DB:51:83:91:96:7F:38:34:D2:7A:FB:0E:42:8B:AC:65:4C:D3:6C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/907c2395-b661-4997-9c87-b20a9e615473.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff1:5000::/40 Signature Algorithm: sha256WithRSAEncryption af:a1:c9:a8:de:db:bb:d4:cd:b0:03:5d:73:58:9d:5a:97:06: 06:17:ad:77:a2:67:96:96:8b:75:39:03:11:be:ab:90:ed:fa: 04:46:de:bd:a4:7b:c6:4a:d0:99:1f:f5:46:54:91:08:3e:5c: dd:e7:d3:c4:b9:85:21:b6:20:bf:ed:57:d4:d7:68:17:e5:db: 02:18:ec:32:47:09:c9:4e:6c:fb:ed:3b:65:ea:e5:40:d4:b7: 6f:ca:21:a5:bc:f0:e4:c0:1b:75:08:df:29:75:6b:9a:01:70: d2:8d:7c:0f:05:46:ae:25:03:99:30:2c:6b:99:53:78:26:f3: cb:ec:a4:ec:8a:28:d0:98:21:ec:83:ba:af:2a:1b:3d:8e:dd: 4a:55:14:8d:9a:4f:93:df:76:b1:29:e9:d9:d3:ab:80:24:ee: 6c:e7:62:ab:ad:dd:32:b8:48:10:41:47:b9:78:1d:16:d7:a7: 95:8f:cc:71:08:c7:24:07:8e:92:e1:a3:0e:bd:2e:43:1d:d9: 30:bd:a9:a2:ee:e7:81:a6:be:70:2e:4f:92:fd:f2:40:96:29: 68:29:97:f2:26:25:3d:c7:fb:3f:0b:c7:4c:20:b4:2b:a9:af: ca:6d:f0:20:99:c5:d3:4e:2f:79:9c:0e:db:f7:5d:54:06:99: 2c:2c:e5:4f -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUNHyX7hO1dZ4V1pxC+PnU6W3ho24wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE4MDAxMDA4WhcNMjYxMDE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NGY3MWFhNGY0N2I2MDczNDY4NjIwOGIyNTk5YjlmMTBk NGQ5YzQ1NjQ1ZWFjYTcyNjkxODYwNjBjMjVjMjVmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcrMaBojSI2TbSBhNf78643kNQuwY8V2dHiDGN3YUnjAZi q2mp84EyZZkYMrdMsdJl6BZhfIdc1Xo6jbf06nTrH+DuZfHdDz6X+mcCdkuRDj8q s4BiBhR/5u2wCyTfPkhvmVG68WKsLQxjcduuYpZXFnmlx2+MqDvL5iZeyABWOezF UP820XiGnrDqCFnwR8NMf05icR1vqxgWfdXzF8aT7KR6YN/eYa1pt9b7coTXNjHw 593W0wHO4MBpLbEhi5Rr8aybcvpXEGiRNog9w60HJBkHTVeOWo7+7dE+5suxFiYn wlIpJAL7n9/WAceH7KMH//dpN1g7hMCd9lkm8+Z3AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU1NtRg5GWfzg00nr7DkKLrGVM02wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkwN2MyMzk1LWI2NjEtNDk5Ny05Yzg3LWIyMGE5ZTYxNTQ3My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/xUDANBgkqhkiG9w0BAQsFAAOCAQEAr6HJqN7bu9TNsANdc1idWpcG Bhetd6JnlpaLdTkDEb6rkO36BEbevaR7xkrQmR/1RlSRCD5c3efTxLmFIbYgv+1X 1NdoF+XbAhjsMkcJyU5s++07ZerlQNS3b8ohpbzw5MAbdQjfKXVrmgFw0o18DwVG riUDmTAsa5lTeCbzy+yk7Ioo0Jgh7IO6ryobPY7dSlUUjZpPk992sSnp2dOrgCTu bOdiq63dMrhIEEFHuXgdFtenlY/McQjHJAeOkuGjDr0uQx3ZML2pou7ngaa+cC5P kv3yQJYpaCmX8iYlPcf7PwvHTCC0K6mvym3wIJnF004veZwO2/ddVAaZLCzlTw== -----END CERTIFICATE-----Generated at Thu Jul 23 21:43:08 2026 by rpki-client