$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3720b08-99f6-4690-a4ae-55aae1b75988.roa File: d3720b08-99f6-4690-a4ae-55aae1b75988.roa (raw, json) Hash identifier: /Ad7QNVQGYaACrH9wCHg7TGRXRHj/qJxb8Acit6G/Dg= Subject key identifier: 3C:AD:31:34:A4:09:14:E5:0D:EE:34:3B:02:84:D0:BD:F4:CB:A5:03 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2123C0B7554C0A7FDC98C0A3CD331CA61233C4B1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3720b08-99f6-4690-a4ae-55aae1b75988.roa Signing time: Mon 20 Jul 2026 01:00:08 +0000 ROA not before: Mon 20 Jul 2026 01:00:08 +0000 ROA not after: Sun 18 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff5:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:23:c0:b7:55:4c:0a:7f:dc:98:c0:a3:cd:33:1c:a6:12:33:c4:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 20 01:00:08 2026 GMT Not After : Oct 18 23:59:59 2026 GMT Subject: serialNumber=a0e6bb5014c4f81b3c51d7381473b9599a6a1430860733d23ff17f03984d22c2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:b3:b5:95:2d:b2:67:da:e2:5d:e4:43:54:69: 3b:8d:71:a6:4f:54:71:7e:b9:86:6f:76:41:15:7c: 53:a3:13:71:8f:de:3e:32:32:b3:e1:de:9e:1f:b2: 50:8c:42:c8:86:32:34:03:62:aa:0b:28:22:a3:df: af:92:1f:16:86:13:3f:65:2d:c6:9d:34:34:d2:f1: 32:86:d7:cf:fb:60:50:03:28:69:9b:a4:4b:c6:c8: 91:7d:ed:e1:73:a6:b3:88:2d:42:e1:aa:5f:8d:2f: 1b:d7:2d:60:f3:8a:b5:d6:81:21:1e:26:74:84:a6: 2a:cc:1d:5e:29:b4:80:be:a5:62:a7:2a:e1:16:eb: 48:6a:0b:c8:7c:54:91:55:17:ab:68:aa:d8:11:b6: fd:70:df:6d:7d:3d:a2:d7:b9:35:c6:3c:56:8a:aa: 93:40:ee:0a:6c:33:a2:a4:61:06:93:2f:24:5a:b4: 8e:6d:c3:2b:97:dc:ed:a9:6a:6a:4b:3d:61:e1:c8: eb:c5:a8:23:70:c2:62:2a:f7:d8:b0:b9:26:20:ef: 0f:e0:28:62:02:a2:f8:fe:14:3e:6a:b8:75:58:c6: a3:5d:91:5e:ca:de:68:7a:ad:84:7f:b0:05:e0:c5: 72:9f:a0:a2:5c:28:76:0a:ce:c7:46:1b:2c:e9:4a: 84:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:AD:31:34:A4:09:14:E5:0D:EE:34:3B:02:84:D0:BD:F4:CB:A5:03 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3720b08-99f6-4690-a4ae-55aae1b75988.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff5:6000::/40 Signature Algorithm: sha256WithRSAEncryption 5c:52:0f:e8:57:0a:e2:4e:93:0c:cb:7f:c4:8d:37:e6:fa:09: ed:4d:6c:24:ae:cb:95:2b:98:e9:35:c4:75:7b:21:cc:d1:e4: 0a:d8:bc:c3:9e:de:6f:d1:7c:bb:0f:05:90:44:dd:fe:b6:46: c2:f8:be:dd:b0:e6:99:d3:4a:b5:78:9d:0c:ff:22:e4:5b:5d: 71:73:b9:58:67:b4:6e:15:0e:5b:0e:af:4b:fd:62:50:2a:4e: b8:e0:b3:11:ce:47:b7:a2:56:14:dc:2d:45:53:93:fe:51:ab: 5b:27:b4:cb:cd:9d:4d:05:2c:6b:8c:f1:12:3c:a9:0b:67:b9: 02:0e:08:bd:85:e2:16:53:cc:af:11:66:e4:18:35:be:21:20: b2:09:6f:7f:2a:b4:40:fd:26:31:94:30:54:13:2c:3a:19:c0: 46:97:14:64:0c:27:18:79:c0:5d:63:1e:3f:3a:63:5d:61:8b: 88:13:d2:63:d7:5e:f7:ca:44:9a:71:8b:59:0c:2e:bc:6a:19: 11:55:22:0d:5f:f6:7c:d9:e7:64:b0:27:93:fd:3f:b4:78:03: 32:a2:62:ef:33:f7:4f:85:72:50:00:34:84:76:cc:eb:ef:e4: ef:ef:70:c3:13:41:ce:57:30:d5:28:4e:c2:79:0d:01:3b:33: d7:27:3d:7a -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUISPAt1VMCn/cmMCjzTMcphIzxLEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIwMDEwMDA4WhcNMjYxMDE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMGU2YmI1MDE0YzRmODFiM2M1MWQ3MzgxNDczYjk1OTlh NmExNDMwODYwNzMzZDIzZmYxN2YwMzk4NGQyMmMyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD0s7WVLbJn2uJd5ENUaTuNcaZPVHF+uYZvdkEVfFOjE3GP 3j4yMrPh3p4fslCMQsiGMjQDYqoLKCKj36+SHxaGEz9lLcadNDTS8TKG18/7YFAD KGmbpEvGyJF97eFzprOILULhql+NLxvXLWDzirXWgSEeJnSEpirMHV4ptIC+pWKn KuEW60hqC8h8VJFVF6toqtgRtv1w3219PaLXuTXGPFaKqpNA7gpsM6KkYQaTLyRa tI5twyuX3O2pampLPWHhyOvFqCNwwmIq99iwuSYg7w/gKGICovj+FD5quHVYxqNd kV7K3mh6rYR/sAXgxXKfoKJcKHYKzsdGGyzpSoSrAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUPK0xNKQJFOUN7jQ7AoTQvfTLpQMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QzNzIwYjA4LTk5ZjYtNDY5MC1hNGFlLTU1YWFlMWI3NTk4OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/1YDANBgkqhkiG9w0BAQsFAAOCAQEAXFIP6FcK4k6TDMt/xI035voJ 7U1sJK7LlSuY6TXEdXshzNHkCti8w57eb9F8uw8FkETd/rZGwvi+3bDmmdNKtXid DP8i5FtdcXO5WGe0bhUOWw6vS/1iUCpOuOCzEc5Ht6JWFNwtRVOT/lGrWye0y82d TQUsa4zxEjypC2e5Ag4IvYXiFlPMrxFm5Bg1viEgsglvfyq0QP0mMZQwVBMsOhnA RpcUZAwnGHnAXWMePzpjXWGLiBPSY9de98pEmnGLWQwuvGoZEVUiDV/2fNnnZLAn k/0/tHgDMqJi7zP3T4VyUAA0hHbM6+/k7+9wwxNBzlcw1ShOwnkNATsz1yc9eg== -----END CERTIFICATE-----Generated at Fri Jul 24 02:42:47 2026 by rpki-client