$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce0329a9-02dd-448b-a905-d6758cbd183b.roa File: ce0329a9-02dd-448b-a905-d6758cbd183b.roa (raw, json) Hash identifier: EY9GJz3JqDsGH7XuH2/x3RhPxpvHO7HXNh45eYLnQgY= Subject key identifier: 9C:CF:41:35:52:D6:D3:F2:92:81:DC:91:01:71:CB:9F:D1:9E:18:35 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4EF8C0E47233660C097BBE0D96D1769AA7B0661E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce0329a9-02dd-448b-a905-d6758cbd183b.roa Signing time: Fri 24 Jul 2026 00:50:40 +0000 ROA not before: Fri 24 Jul 2026 00:50:40 +0000 ROA not after: Thu 22 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fee::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:f8:c0:e4:72:33:66:0c:09:7b:be:0d:96:d1:76:9a:a7:b0:66:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 24 00:50:40 2026 GMT Not After : Oct 22 23:59:59 2026 GMT Subject: serialNumber=6b43f14923331517a4934b7ddddda8cf811bcb3f069230bf3eb9f935a329d352, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:12:f2:34:f7:8b:4c:f3:13:98:ba:04:c6:bf: e5:84:da:0d:57:d6:35:bb:b8:23:8f:47:58:69:90: 00:0b:13:d1:72:0c:71:ab:28:87:6e:d7:ed:3d:1e: 06:66:4d:6f:bb:79:e3:bf:d6:a6:4b:3f:75:49:71: 08:b4:fc:e0:59:b8:95:7c:75:6f:7c:15:0e:f4:fd: 44:00:29:fb:ca:10:2d:be:02:4f:ce:02:6d:84:0e: 55:34:08:38:9b:1f:d2:d0:52:b6:84:17:3d:ba:12: a1:44:53:85:64:29:84:68:77:ef:71:d2:1b:30:51: 28:05:df:84:1d:39:84:39:41:7a:f7:07:6b:ff:c5: d0:92:f1:3a:15:20:06:d4:98:2d:4f:4e:ae:97:de: 2a:6e:b4:dd:ef:17:a9:4e:93:d2:0e:a6:af:85:76: d6:96:cf:49:2c:03:a8:26:b9:59:c4:94:ff:65:b8: 87:58:0f:02:95:f2:a9:72:dd:77:af:d4:fc:10:4a: cf:3f:08:60:29:59:ed:f3:97:11:16:84:77:70:2c: 04:1d:fe:39:88:f9:91:ac:f0:a2:61:b9:6e:a9:22: 02:67:a4:11:ff:97:b6:6e:87:16:8b:de:13:26:8c: ae:51:68:a1:f8:61:4e:c4:0d:dd:c0:68:22:80:3c: 4c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:CF:41:35:52:D6:D3:F2:92:81:DC:91:01:71:CB:9F:D1:9E:18:35 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce0329a9-02dd-448b-a905-d6758cbd183b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fee::/32 Signature Algorithm: sha256WithRSAEncryption 6b:62:02:a2:04:70:fc:ae:8e:ef:a2:bc:2a:f5:42:03:e4:d9: 02:a8:89:0e:bb:7c:1c:50:22:a2:4f:57:33:04:48:7a:49:9c: e6:4b:81:7a:b2:85:f1:07:fd:2e:c4:3c:20:a9:f7:ad:74:70: 7c:8d:41:d4:45:88:a8:86:98:89:26:75:c3:f4:12:04:b1:63: a8:f9:48:9a:46:bf:b9:36:71:2f:07:52:37:58:49:7d:bf:92: 99:73:67:ab:2c:b4:8d:f7:57:8d:17:9d:62:37:47:c1:d2:ee: 68:24:d9:6f:cf:c6:39:5f:b6:26:85:dc:c3:f5:43:db:c8:0e: 08:00:38:3e:4b:60:ca:05:60:91:ca:e4:c8:fa:d0:03:8c:a5: b9:cc:a2:87:9a:62:87:82:cf:33:d3:67:d3:98:c0:f8:10:87: 3c:be:54:ba:e6:2d:b2:9a:c3:e1:de:a0:cb:95:87:a0:21:d5: 4a:1e:68:35:6a:c4:e2:0d:53:3d:81:27:5d:97:d8:4b:67:6f: eb:e0:5b:dd:c8:80:41:19:3e:e7:3f:d8:1e:6c:ea:c8:cc:5e: ce:23:0b:3c:eb:31:13:c3:57:d8:b7:20:ce:26:06:74:bb:ef: 08:a3:6f:90:ad:ab:b8:32:31:52:a6:1c:1f:44:22:e4:a0:ef: e3:7f:09:6b -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUTvjA5HIzZgwJe74NltF2mqewZh4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI0MDA1MDQwWhcNMjYxMDIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2YjQzZjE0OTIzMzMxNTE3YTQ5MzRiN2RkZGRkYThjZjgx MWJjYjNmMDY5MjMwYmYzZWI5ZjkzNWEzMjlkMzUyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsEvI094tM8xOYugTGv+WE2g1X1jW7uCOPR1hpkAALE9Fy DHGrKIdu1+09HgZmTW+7eeO/1qZLP3VJcQi0/OBZuJV8dW98FQ70/UQAKfvKEC2+ Ak/OAm2EDlU0CDibH9LQUraEFz26EqFEU4VkKYRod+9x0hswUSgF34QdOYQ5QXr3 B2v/xdCS8ToVIAbUmC1PTq6X3iputN3vF6lOk9IOpq+FdtaWz0ksA6gmuVnElP9l uIdYDwKV8qly3Xev1PwQSs8/CGApWe3zlxEWhHdwLAQd/jmI+ZGs8KJhuW6pIgJn pBH/l7ZuhxaL3hMmjK5RaKH4YU7EDd3AaCKAPExxAgMBAAGjggKyMIICrjAdBgNV HQ4EFgQUnM9BNVLW0/KSgdyRAXHLn9GeGDUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NlMDMyOWE5LTAyZGQtNDQ4Yi1hOTA1LWQ2NzU4Y2JkMTgzYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAmAB/uMA0GCSqGSIb3DQEBCwUAA4IBAQBrYgKiBHD8ro7vorwq9UID5NkC qIkOu3wcUCKiT1czBEh6SZzmS4F6soXxB/0uxDwgqfetdHB8jUHURYiohpiJJnXD 9BIEsWOo+UiaRr+5NnEvB1I3WEl9v5KZc2erLLSN91eNF51iN0fB0u5oJNlvz8Y5 X7YmhdzD9UPbyA4IADg+S2DKBWCRyuTI+tADjKW5zKKHmmKHgs8z02fTmMD4EIc8 vlS65i2ymsPh3qDLlYegIdVKHmg1asTiDVM9gSddl9hLZ2/r4FvdyIBBGT7nP9ge bOrIzF7OIws86zETw1fYtyDOJgZ0u+8Io2+Qrau4MjFSphwfRCLkoO/jfwlr -----END CERTIFICATE-----Generated at Fri Jul 24 08:46:56 2026 by rpki-client