$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97b3cbc3-4709-409c-b305-fcfb0195d1cd.roa File: 97b3cbc3-4709-409c-b305-fcfb0195d1cd.roa (raw, json) Hash identifier: EWqNigdwv2wyfL5k4r4E2wYq30elwH4R063p/5fWi+A= Subject key identifier: 3A:FC:15:79:6D:46:D6:E2:73:E5:84:2E:DE:CA:71:15:3C:64:44:A3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3DDC43BDA586F3E87A259D61D75E7B521F036F84 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97b3cbc3-4709-409c-b305-fcfb0195d1cd.roa Signing time: Mon 22 Jun 2026 00:20:40 +0000 ROA not before: Mon 22 Jun 2026 00:20:40 +0000 ROA not after: Sun 20 Sep 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f2d:c000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:dc:43:bd:a5:86:f3:e8:7a:25:9d:61:d7:5e:7b:52:1f:03:6f:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 22 00:20:40 2026 GMT Not After : Sep 20 23:59:59 2026 GMT Subject: serialNumber=14de0416395419b3aff9c7301f90a29381b12a2c70b3879b827c9f0f8825ddf5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3f:4c:9b:e1:0c:f1:d7:ac:64:b7:ec:03:c2: a6:e1:15:15:34:eb:02:cb:cc:1d:46:00:ca:7a:ef: 7b:3f:91:4c:f5:17:de:76:ad:f2:e9:df:04:0f:a3: 26:7b:89:db:28:6f:a1:45:af:3a:be:74:ba:4b:a7: 61:7b:cb:0e:a7:f8:0d:1d:75:45:e7:6c:7c:cc:fd: ce:66:2e:96:e8:46:ae:3e:90:84:65:54:66:44:c0: 83:6b:12:16:96:0a:32:4e:e7:ce:9d:52:15:75:8b: a1:b2:60:37:b6:9b:30:69:4e:65:d7:ff:62:23:6a: a2:44:e2:1e:e7:12:24:30:b4:ac:e2:7c:eb:28:34: 1e:e1:bf:b9:35:0f:96:de:bf:f6:ab:ae:f6:24:5c: e9:55:c5:d4:ed:5e:bc:26:7b:23:9a:ff:56:ef:13: 76:66:d5:50:cb:c5:83:0b:a1:fb:a2:b7:0f:7d:d7: 8e:1f:79:b7:26:da:f5:96:58:9d:20:69:63:e8:dd: 9a:79:3a:9a:54:33:56:0c:12:ef:1a:3e:98:b2:65: 79:69:80:a6:41:0d:56:4f:51:68:b5:b2:fc:1c:6e: 27:d1:2a:61:c7:78:b1:12:a8:3b:61:99:01:ad:77: f2:87:08:cc:a7:50:59:66:9b:1f:da:a0:1a:40:e7: 3b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:FC:15:79:6D:46:D6:E2:73:E5:84:2E:DE:CA:71:15:3C:64:44:A3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97b3cbc3-4709-409c-b305-fcfb0195d1cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f2d:c000::/36 Signature Algorithm: sha256WithRSAEncryption 89:f0:98:53:48:eb:a6:45:0a:38:d0:f4:f4:0b:d7:86:c6:4a: 4d:0b:06:aa:52:87:6c:25:0e:ee:75:1e:c7:67:f3:aa:b7:a9: 4c:de:f7:b0:66:95:00:4e:2f:03:3e:0f:90:20:7a:1b:c8:56: 1c:05:b1:72:5c:1e:9b:e7:a8:10:ba:c2:c2:d5:b3:ef:49:46: 37:3b:a3:ce:f4:c2:45:81:85:17:42:7b:ff:7c:df:f7:8f:27: 04:29:2f:21:03:c9:06:e0:0a:3a:27:c1:a5:f5:f8:93:23:65: 3d:1d:bc:e4:47:79:36:d9:61:89:0b:f9:44:f5:a7:3e:9d:20: 6d:64:99:f0:11:76:83:a0:b1:e5:24:83:93:a5:8f:bf:6e:19: db:2e:ef:91:f6:63:82:9c:96:24:15:bc:53:99:53:8a:52:b6: c6:af:bc:2e:85:71:f0:30:52:9c:04:dd:96:5e:86:14:6e:4a: 15:db:08:04:c7:68:0a:92:c6:31:b8:a8:63:df:6e:d4:59:df: a3:ea:1b:bb:69:27:4a:ff:73:45:a1:60:9f:13:29:ab:4b:2c: 92:a6:f5:8b:f7:ce:bc:26:3b:bf:a3:cb:86:49:58:54:d9:15: e7:41:bc:c8:c3:fa:18:a8:68:eb:12:4c:6b:fb:fa:82:6a:33: ba:e2:5a:e4 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUPdxDvaWG8+h6JZ1h1157Uh8Db4QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNjIyMDAyMDQwWhcNMjYwOTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNGRlMDQxNjM5NTQxOWIzYWZmOWM3MzAxZjkwYTI5Mzgx YjEyYTJjNzBiMzg3OWI4MjdjOWYwZjg4MjVkZGY1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1P0yb4Qzx16xkt+wDwqbhFRU06wLLzB1GAMp673s/kUz1 F952rfLp3wQPoyZ7idsob6FFrzq+dLpLp2F7yw6n+A0ddUXnbHzM/c5mLpboRq4+ kIRlVGZEwINrEhaWCjJO586dUhV1i6GyYDe2mzBpTmXX/2IjaqJE4h7nEiQwtKzi fOsoNB7hv7k1D5bev/arrvYkXOlVxdTtXrwmeyOa/1bvE3Zm1VDLxYMLofuitw99 144febcm2vWWWJ0gaWPo3Zp5OppUM1YMEu8aPpiyZXlpgKZBDVZPUWi1svwcbifR KmHHeLESqDthmQGtd/KHCMynUFlmmx/aoBpA5ztxAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUOvwVeW1G1uJz5YQu3spxFTxkRKMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk3YjNjYmMzLTQ3MDktNDA5Yy1iMzA1LWZjZmIwMTk1ZDFjZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8twDANBgkqhkiG9w0BAQsFAAOCAQEAifCYU0jrpkUKOND09AvXhsZK TQsGqlKHbCUO7nUex2fzqrepTN73sGaVAE4vAz4PkCB6G8hWHAWxclwem+eoELrC wtWz70lGNzujzvTCRYGFF0J7/3zf948nBCkvIQPJBuAKOifBpfX4kyNlPR285Ed5 NtlhiQv5RPWnPp0gbWSZ8BF2g6Cx5SSDk6WPv24Z2y7vkfZjgpyWJBW8U5lTilK2 xq+8LoVx8DBSnATdll6GFG5KFdsIBMdoCpLGMbioY99u1Fnfo+obu2knSv9zRaFg nxMpq0sskqb1i/fOvCY7v6PLhklYVNkV50G8yMP6GKho6xJMa/v6gmozuuJa5A== -----END CERTIFICATE-----Generated at Thu Jul 23 21:37:29 2026 by rpki-client