$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4d7033d-2443-415e-b118-06f9d052957f.roa File: c4d7033d-2443-415e-b118-06f9d052957f.roa (raw, json) Hash identifier: 0D/MVZaDbXToIQvOTs2Lel8Wr9ZcBE9tt0LlOJBR4S0= Subject key identifier: 16:6F:3C:24:68:E2:BB:F8:F3:0A:E5:CA:0D:DA:73:C4:63:46:4D:23 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3C586F9AEBBA02DB6F882FE58A3F2A435226ADEB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4d7033d-2443-415e-b118-06f9d052957f.roa Signing time: Mon 20 Jul 2026 00:10:34 +0000 ROA not before: Mon 20 Jul 2026 00:10:34 +0000 ROA not after: Sun 18 Oct 2026 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1ff8:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:58:6f:9a:eb:ba:02:db:6f:88:2f:e5:8a:3f:2a:43:52:26:ad:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 20 00:10:34 2026 GMT Not After : Oct 18 23:59:59 2026 GMT Subject: serialNumber=333569eb2dafe61d87e11d555295fd3e9ebbd2fd70cc68edc01ca15d09f53cb9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:52:41:de:ca:50:82:4f:e7:b7:ce:1e:99:ce: 15:f3:e4:33:7f:63:78:78:99:dc:79:bc:71:e7:0b: 2c:7c:b4:2d:b9:68:4a:e1:03:0e:99:59:f4:83:b7: 07:3f:51:eb:5d:e3:16:f8:a3:5c:12:49:2d:b5:65: 38:68:9b:d5:4e:65:11:fe:e3:a5:af:e3:2b:db:21: 57:bd:20:fb:ff:a5:91:cd:f1:ee:18:08:d8:ed:0c: 62:0a:05:ad:7b:53:21:b3:58:61:c0:41:e1:dc:d4: d3:ed:9d:41:78:53:4c:64:c6:f1:0f:3d:b2:81:b6: 18:f0:b8:27:09:09:2f:8b:d9:9f:93:58:f5:5c:f8: 50:05:77:d5:97:dd:91:59:40:62:65:75:b4:74:1b: e6:2a:bf:8e:db:a6:25:55:1a:cc:c2:47:68:4e:40: 37:25:47:36:43:36:53:a6:29:82:c3:42:09:ac:f3: 35:7d:31:f6:5b:45:f9:dd:95:09:5f:ef:e8:21:f8: 3b:fc:87:ff:15:c5:7c:d1:0d:1d:78:0b:f6:5a:06: ab:1b:b7:60:93:45:c3:af:52:4f:84:6c:38:c3:36: 92:af:40:e3:a8:8a:a9:7a:38:c1:ea:72:54:52:29: 65:8f:ef:b2:17:4d:36:82:01:34:9f:be:3a:a6:b9: 1f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:6F:3C:24:68:E2:BB:F8:F3:0A:E5:CA:0D:DA:73:C4:63:46:4D:23 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4d7033d-2443-415e-b118-06f9d052957f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff8:2000::/40 Signature Algorithm: sha256WithRSAEncryption b9:00:5b:22:4f:0a:7a:f8:c1:bd:d3:70:da:c2:48:3d:22:f9: f1:eb:a4:e7:eb:96:b8:ee:48:0b:3d:5b:4c:40:34:e8:c7:11: ac:ae:74:34:de:00:b2:7d:34:69:17:45:73:cd:5d:72:d7:58: 81:7a:e3:03:41:a5:db:a9:7f:4d:59:53:f0:e2:53:1d:bf:f1: 73:4e:12:a9:ad:82:4a:20:64:0b:21:60:c1:e6:4e:bb:e7:1e: ed:ec:dd:ce:ae:db:f8:a8:88:9b:02:dc:b7:5b:c5:14:bf:8b: b9:f1:6a:d6:4e:92:46:35:9f:ab:81:15:5c:b1:a9:c4:38:d9: f8:47:ea:49:ff:77:79:cf:e4:33:76:94:a0:58:a2:29:d5:58: 23:4e:33:3d:94:dc:17:23:d5:79:55:66:49:fb:60:48:b4:d4: 03:3d:66:28:51:52:04:ef:f3:5f:a7:e7:98:af:c9:b2:a3:a6: cf:e7:6c:c1:79:fe:e4:e6:9b:21:fe:b5:4e:a1:9a:de:b0:d2: 88:c4:35:87:22:7d:a5:86:5d:bd:30:0a:6e:45:cd:32:04:86: 83:b0:04:be:1b:b7:16:7a:c1:04:4b:28:52:cd:a6:0c:87:5d: 5e:0f:74:cf:85:e5:34:ac:0b:eb:1b:68:04:ad:51:8d:ff:9d: a2:46:3b:af -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUPFhvmuu6AttviC/lij8qQ1ImreswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIwMDAxMDM0WhcNMjYxMDE4MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMzM1NjllYjJkYWZlNjFkODdlMTFkNTU1Mjk1ZmQzZTll YmJkMmZkNzBjYzY4ZWRjMDFjYTE1ZDA5ZjUzY2I5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDvUkHeylCCT+e3zh6ZzhXz5DN/Y3h4mdx5vHHnCyx8tC25 aErhAw6ZWfSDtwc/Uetd4xb4o1wSSS21ZThom9VOZRH+46Wv4yvbIVe9IPv/pZHN 8e4YCNjtDGIKBa17UyGzWGHAQeHc1NPtnUF4U0xkxvEPPbKBthjwuCcJCS+L2Z+T WPVc+FAFd9WX3ZFZQGJldbR0G+Yqv47bpiVVGszCR2hOQDclRzZDNlOmKYLDQgms 8zV9MfZbRfndlQlf7+gh+Dv8h/8VxXzRDR14C/ZaBqsbt2CTRcOvUk+EbDjDNpKv QOOoiql6OMHqclRSKWWP77IXTTaCATSfvjqmuR91AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUFm88JGjiu/jzCuXKDdpzxGNGTSMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M0ZDcwMzNkLTI0NDMtNDE1ZS1iMTE4LTA2ZjlkMDUyOTU3Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/4IDANBgkqhkiG9w0BAQsFAAOCAQEAuQBbIk8KevjBvdNw2sJIPSL5 8euk5+uWuO5ICz1bTEA06McRrK50NN4Asn00aRdFc81dctdYgXrjA0Gl26l/TVlT 8OJTHb/xc04Sqa2CSiBkCyFgweZOu+ce7ezdzq7b+KiImwLct1vFFL+LufFq1k6S RjWfq4EVXLGpxDjZ+EfqSf93ec/kM3aUoFiiKdVYI04zPZTcFyPVeVVmSftgSLTU Az1mKFFSBO/zX6fnmK/JsqOmz+dswXn+5OabIf61TqGa3rDSiMQ1hyJ9pYZdvTAK bkXNMgSGg7AEvhu3FnrBBEsoUs2mDIddXg90z4XlNKwL6xtoBK1Rjf+dokY7rw== -----END CERTIFICATE-----Generated at Fri Jul 24 04:14:48 2026 by rpki-client