$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8dd8af6-08d5-49b1-8425-477edba3254f.roa File: b8dd8af6-08d5-49b1-8425-477edba3254f.roa (raw, json) Hash identifier: n+kNylpD5TyEipgxnIkhV6qZG0m6yQwt4snjramqhcw= Subject key identifier: 7B:E3:15:71:D9:A8:43:0F:67:E8:0E:D0:94:0D:A1:7D:5B:33:D7:BC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1598911EE573C983B58F7363E5A0D7D2490D320E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8dd8af6-08d5-49b1-8425-477edba3254f.roa Signing time: Sat 18 Jul 2026 00:31:24 +0000 ROA not before: Sat 18 Jul 2026 00:31:24 +0000 ROA not after: Fri 16 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2620:107:4005::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:98:91:1e:e5:73:c9:83:b5:8f:73:63:e5:a0:d7:d2:49:0d:32:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 18 00:31:24 2026 GMT Not After : Oct 16 23:59:59 2026 GMT Subject: serialNumber=debb2cdfa8abc8fb0050f9dcfe0953cafe80432860629b7e4c4613f0e405e6e0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e0:dd:b5:4c:8b:af:93:b6:53:01:f6:d7:5e: 00:ce:02:f0:48:74:40:6d:33:ed:1e:6d:d0:52:5b: 93:92:49:94:ce:77:09:62:e8:c0:dd:4f:6f:77:a8: 7a:4e:71:7a:90:e3:2c:62:e0:18:17:83:d7:55:9f: c6:a3:f3:59:e0:5c:ed:10:9a:a8:a9:e9:f0:9e:0b: ab:26:f2:60:cb:f3:bb:cb:bc:53:95:55:9c:52:12: 79:5c:7d:88:7f:89:14:03:af:3d:df:ff:48:d2:43: 83:f7:30:5e:c4:95:74:56:3a:f7:c9:a8:ff:1b:e2: 71:2c:1a:e0:22:1e:cf:68:72:b6:47:84:1a:f3:6e: f9:62:a2:2f:fe:56:b3:e9:03:93:aa:95:70:f5:02: 51:57:bf:1c:4a:75:f5:17:34:44:58:0a:af:55:ab: 01:b6:cb:73:6f:7e:fe:c5:f8:d8:42:60:7f:ac:39: 44:f9:01:3b:ee:58:51:7a:7d:94:59:0b:18:57:60: 7b:e2:78:81:5e:9d:0c:40:3c:a5:be:4e:8e:1b:e9: 89:a1:3c:c8:92:8b:4f:fe:a2:6a:70:cb:f5:41:c7: c3:67:91:4d:05:7c:ab:7f:28:66:1e:8b:56:da:d0: bb:77:d9:77:1c:fb:ce:ab:28:34:d3:b8:ab:e4:b6: 2f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E3:15:71:D9:A8:43:0F:67:E8:0E:D0:94:0D:A1:7D:5B:33:D7:BC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8dd8af6-08d5-49b1-8425-477edba3254f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2620:107:4005::/48 Signature Algorithm: sha256WithRSAEncryption 6f:19:8c:60:e7:76:d7:01:d0:e0:ea:c5:58:83:fb:ea:ec:5f: 9d:73:90:d5:3f:e7:2f:2d:f8:27:49:5d:77:3a:32:6b:5a:96: d8:15:c8:8b:fc:e2:67:6c:4e:3d:ee:8a:16:01:04:52:e7:ce: 2f:cb:48:8c:01:2a:fe:dc:15:0f:d0:33:48:8a:22:e8:c3:29: ee:3d:2f:70:42:32:e6:92:a0:5b:0c:00:f0:30:52:44:78:20: fa:c1:8f:6a:68:44:53:ba:c4:5c:96:67:33:62:07:fc:46:e7: eb:2c:a2:1d:e9:72:fe:ba:72:15:91:f1:20:02:b2:a4:fd:3f: 32:31:17:cf:0f:b0:58:9d:ce:48:83:dc:6f:ea:71:3f:2a:62: 30:9e:1e:a6:39:98:c1:cb:98:33:73:c0:93:db:e6:04:65:d3: 45:57:f0:93:ce:b8:8d:98:e2:e3:94:b9:c4:ab:4c:82:af:0d: 3b:70:77:88:32:b1:08:d5:27:71:9e:c8:cd:eb:25:0e:64:fc: 24:ff:8d:21:c9:44:ec:12:27:f6:38:63:91:39:a9:d3:c3:c5: 03:d4:f8:bc:c5:84:bd:9d:23:99:23:ef:7b:66:62:8e:d9:bb: e2:3f:30:60:56:f9:43:a7:e7:cf:5f:8e:e3:ea:3f:82:b0:93: 81:44:7c:7f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUFZiRHuVzyYO1j3Nj5aDX0kkNMg4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE4MDAzMTI0WhcNMjYxMDE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZWJiMmNkZmE4YWJjOGZiMDA1MGY5ZGNmZTA5NTNjYWZl ODA0MzI4NjA2MjliN2U0YzQ2MTNmMGU0MDVlNmUwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDd4N21TIuvk7ZTAfbXXgDOAvBIdEBtM+0ebdBSW5OSSZTO dwli6MDdT293qHpOcXqQ4yxi4BgXg9dVn8aj81ngXO0Qmqip6fCeC6sm8mDL87vL vFOVVZxSEnlcfYh/iRQDrz3f/0jSQ4P3MF7ElXRWOvfJqP8b4nEsGuAiHs9ocrZH hBrzbvlioi/+VrPpA5OqlXD1AlFXvxxKdfUXNERYCq9VqwG2y3Nvfv7F+NhCYH+s OUT5ATvuWFF6fZRZCxhXYHvieIFenQxAPKW+To4b6YmhPMiSi0/+ompwy/VBx8Nn kU0FfKt/KGYei1ba0Lt32Xcc+86rKDTTuKvkti+zAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUe+MVcdmoQw9n6A7QlA2hfVsz17wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I4ZGQ4YWY2LTA4ZDUtNDliMS04NDI1LTQ3N2VkYmEzMjU0Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmIAEHQAUwDQYJKoZIhvcNAQELBQADggEBAG8ZjGDndtcB0ODqxViD++rs X51zkNU/5y8t+CdJXXc6MmtaltgVyIv84mdsTj3uihYBBFLnzi/LSIwBKv7cFQ/Q M0iKIujDKe49L3BCMuaSoFsMAPAwUkR4IPrBj2poRFO6xFyWZzNiB/xG5+ssoh3p cv66chWR8SACsqT9PzIxF88PsFidzkiD3G/qcT8qYjCeHqY5mMHLmDNzwJPb5gRl 00VX8JPOuI2Y4uOUucSrTIKvDTtwd4gysQjVJ3GeyM3rJQ5k/CT/jSHJROwSJ/Y4 Y5E5qdPDxQPU+LzFhL2dI5kj73tmYo7Zu+I/MGBW+UOn589fjuPqP4Kwk4FEfH8= -----END CERTIFICATE-----Generated at Fri Jul 24 00:09:38 2026 by rpki-client