$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbe03ca4-fb32-4afb-859e-afa73940fb15.roa File: cbe03ca4-fb32-4afb-859e-afa73940fb15.roa (raw, json) Hash identifier: 2I9hUSNtNNJHd1JWIX+nNzmdvNBjQfSp9/BtUn97Vlg= Subject key identifier: E3:B8:91:D5:EC:43:AD:0C:F4:1A:96:3A:6C:CC:27:EC:BF:C2:10:19 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2B91C6C7F80DF8FD4B6880909A233944AD2D907F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbe03ca4-fb32-4afb-859e-afa73940fb15.roa Signing time: Fri 24 Jul 2026 00:40:09 +0000 ROA not before: Fri 24 Jul 2026 00:40:09 +0000 ROA not after: Thu 22 Oct 2026 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1fbb:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:91:c6:c7:f8:0d:f8:fd:4b:68:80:90:9a:23:39:44:ad:2d:90:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 24 00:40:09 2026 GMT Not After : Oct 22 23:59:59 2026 GMT Subject: serialNumber=dba96c160a7457a92865ed6c37e4389d4a18ff1ea494c78298822ceeb0fd185c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:11:42:2b:2e:da:1d:6f:fd:c6:cc:b4:5c:d7: 9f:09:65:e2:a2:33:31:8d:51:76:c4:c5:b6:c6:c4: cd:34:f2:4f:4f:0c:d0:44:e3:86:62:8f:c8:64:cb: 24:bc:1e:62:7e:ff:3f:60:46:52:55:3a:07:2d:be: c7:d9:37:68:d5:2b:e5:eb:e1:e5:d9:5d:a7:dc:d8: 97:0b:74:88:4b:49:01:4f:67:35:0d:b6:34:0f:e3: 8d:91:4c:33:42:aa:79:ec:a9:82:a2:cf:05:16:93: 8b:51:82:7d:14:f0:d9:41:7f:a5:98:f9:1c:6a:8b: 6a:d7:ce:d2:0a:cd:06:83:a1:13:fb:35:70:fb:9f: 7b:37:95:07:dc:1a:63:5a:57:3c:50:55:2c:38:07: 04:26:2d:aa:b1:4c:5a:74:65:1d:0d:a8:04:ad:bd: 72:e2:63:d8:db:ce:57:3c:f7:a7:af:c5:89:52:b0: e8:7b:c3:32:3c:29:4f:d7:fb:80:6f:85:51:56:32: 0e:a6:ee:ae:f6:88:c3:e9:ad:1b:d4:40:d0:6b:c5: ec:be:33:89:0c:7d:8f:db:4e:d1:60:38:d5:23:0d: 71:94:9c:19:23:69:d0:ca:82:a8:5c:51:be:8b:86: 40:60:70:e5:3f:45:22:6b:23:2a:80:f8:5f:ef:3e: f1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B8:91:D5:EC:43:AD:0C:F4:1A:96:3A:6C:CC:27:EC:BF:C2:10:19 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbe03ca4-fb32-4afb-859e-afa73940fb15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fbb:2000::/40 Signature Algorithm: sha256WithRSAEncryption 23:81:5c:47:91:12:b6:f1:1c:80:3c:f9:ae:76:c4:2c:8a:94: 30:47:85:67:e6:30:bf:23:92:d1:e3:b9:ef:9e:31:5c:e8:d3: c2:14:b4:90:82:f7:f2:e7:df:ac:75:54:4a:93:19:8a:38:92: 2d:17:5d:69:97:4c:c7:4a:05:0e:92:ee:f5:66:c8:ab:b5:c3: 71:a5:37:78:0e:14:b6:bc:63:cc:31:12:71:42:4c:f9:0f:3e: 8c:c7:4a:70:e8:5b:b6:dc:4a:82:25:65:cb:43:cb:3b:e1:0a: 5e:67:e5:5e:1f:89:0b:c0:33:bd:96:f8:f0:04:fe:52:ea:47: 1e:55:4a:ef:66:30:52:49:78:10:67:a2:92:a1:b5:9b:c2:15: 56:e4:89:8a:ae:91:76:cc:03:c1:60:88:99:39:ad:82:3f:bd: c1:3b:c9:05:8f:9f:46:32:1b:50:8b:a3:0f:79:33:fa:34:c9: 17:2b:44:5c:e7:41:31:c4:56:c0:5e:cd:3f:57:4f:34:eb:ef: 3f:61:e3:47:16:34:24:06:96:c8:3b:44:66:24:b4:69:76:2d: 54:26:5a:75:f7:57:cc:0c:2f:ea:15:42:b1:ca:99:81:70:b9: 00:a7:35:c4:13:dc:32:50:bb:24:6a:ca:ad:72:a9:06:cd:34: 33:11:a6:7c -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUK5HGx/gN+P1LaICQmiM5RK0tkH8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI0MDA0MDA5WhcNMjYxMDIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkYmE5NmMxNjBhNzQ1N2E5Mjg2NWVkNmMzN2U0Mzg5ZDRh MThmZjFlYTQ5NGM3ODI5ODgyMmNlZWIwZmQxODVjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIEUIrLtodb/3GzLRc158JZeKiMzGNUXbExbbGxM008k9P DNBE44Zij8hkyyS8HmJ+/z9gRlJVOgctvsfZN2jVK+Xr4eXZXafc2JcLdIhLSQFP ZzUNtjQP442RTDNCqnnsqYKizwUWk4tRgn0U8NlBf6WY+Rxqi2rXztIKzQaDoRP7 NXD7n3s3lQfcGmNaVzxQVSw4BwQmLaqxTFp0ZR0NqAStvXLiY9jbzlc896evxYlS sOh7wzI8KU/X+4BvhVFWMg6m7q72iMPprRvUQNBrxey+M4kMfY/bTtFgONUjDXGU nBkjadDKgqhcUb6LhkBgcOU/RSJrIyqA+F/vPvH1AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU47iR1exDrQz0GpY6bMwn7L/CEBkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NiZTAzY2E0LWZiMzItNGFmYi04NTllLWFmYTczOTQwZmIxNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+7IDANBgkqhkiG9w0BAQsFAAOCAQEAI4FcR5EStvEcgDz5rnbELIqU MEeFZ+YwvyOS0eO5754xXOjTwhS0kIL38uffrHVUSpMZijiSLRddaZdMx0oFDpLu 9WbIq7XDcaU3eA4UtrxjzDEScUJM+Q8+jMdKcOhbttxKgiVly0PLO+EKXmflXh+J C8AzvZb48AT+UupHHlVK72YwUkl4EGeikqG1m8IVVuSJiq6RdswDwWCImTmtgj+9 wTvJBY+fRjIbUIujD3kz+jTJFytEXOdBMcRWwF7NP1dPNOvvP2HjRxY0JAaWyDtE ZiS0aXYtVCZadfdXzAwv6hVCscqZgXC5AKc1xBPcMlC7JGrKrXKpBs00MxGmfA== -----END CERTIFICATE-----Generated at Fri Jul 24 05:11:38 2026 by rpki-client