$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dacd7120-216c-4fe9-b36c-04025c1e0df5.roa File: dacd7120-216c-4fe9-b36c-04025c1e0df5.roa (raw, json) Hash identifier: k+wV2yaxAGpqsbxJXWMKYuw0+GyE30M+L//8YfPotS0= Subject key identifier: 42:65:7A:3D:7B:D9:94:0F:96:9C:9E:F8:B7:84:F1:DD:80:5F:7B:73 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 42F42B33FF98B57CB8821111AC34A6018785A137 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dacd7120-216c-4fe9-b36c-04025c1e0df5.roa Signing time: Thu 23 Jul 2026 01:20:58 +0000 ROA not before: Thu 23 Jul 2026 01:20:58 +0000 ROA not after: Wed 21 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff8:ec00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:f4:2b:33:ff:98:b5:7c:b8:82:11:11:ac:34:a6:01:87:85:a1:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 23 01:20:58 2026 GMT Not After : Oct 21 23:59:59 2026 GMT Subject: serialNumber=af8c51438484688c5f6438c732e51721355a221e263d3f874d4fe089efc753ba, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:18:7b:69:54:90:e9:f2:5e:97:43:67:82:6e: 0e:3c:68:74:97:77:d2:79:8e:15:ae:5f:fc:b0:30: 42:78:ef:56:7b:4b:5c:82:59:c9:c0:19:9b:46:d4: 88:26:ab:8b:44:8d:34:8c:d1:1f:ae:8a:f8:4e:19: 68:9a:d1:df:a5:65:d1:49:80:da:fd:d8:4e:00:55: 83:2d:92:43:fa:e7:2f:35:20:a2:26:23:c7:27:bd: 2c:6c:b8:c3:08:bd:c5:1d:58:f0:b7:58:d0:56:64: 00:3d:4d:53:0b:74:c8:48:3b:d9:fa:2f:17:b0:45: 2c:df:eb:76:b3:2a:81:87:a2:76:80:5c:57:16:a6: 68:18:4d:d9:46:35:c5:b0:4d:4d:fd:46:6b:f1:6d: 46:8d:70:04:7c:bd:0e:dd:c0:31:7a:27:42:b0:32: 70:71:51:5e:26:3f:29:31:f3:53:e4:0c:dd:3d:98: 46:c7:e3:7b:cc:6e:a8:e3:2f:e9:4c:f3:89:83:c8: d0:12:e6:47:b3:a3:96:42:68:71:78:ba:13:19:5d: e7:69:da:fc:0c:fb:9b:dc:2a:30:0a:77:c5:91:45: 86:57:78:7d:4c:2b:33:62:67:98:97:b7:09:02:56: 6a:ae:b3:db:f0:83:d0:20:17:3c:b6:db:15:45:9f: de:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:65:7A:3D:7B:D9:94:0F:96:9C:9E:F8:B7:84:F1:DD:80:5F:7B:73 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dacd7120-216c-4fe9-b36c-04025c1e0df5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff8:ec00::/40 Signature Algorithm: sha256WithRSAEncryption 16:1c:ed:92:2b:66:bb:48:c8:55:8e:24:d7:e5:12:1b:d2:6f: 77:ac:37:18:22:d8:0a:fe:34:ad:90:aa:bb:6e:a4:b9:93:08: 67:70:8c:41:ef:ed:d8:b1:4c:bf:4c:f4:6a:2b:53:bf:2b:e5: 50:ce:e0:d6:94:e3:95:36:a3:a6:f6:6b:ab:91:27:92:de:c3: b6:30:1d:d9:3b:69:d5:86:5d:17:8c:d7:e6:16:09:27:bd:d7: ac:dc:2f:a5:ad:94:59:fe:23:b9:ca:fb:8a:d5:35:c0:6d:5f: c5:ce:5c:51:14:3f:9e:42:72:03:40:5d:5f:7e:2e:e5:05:e8: 5b:56:e0:04:ef:f1:30:86:7c:27:be:0b:63:4b:97:7e:15:c3: 46:5e:90:cb:7d:b3:2a:f3:c3:66:43:e3:48:d3:e2:44:8e:69: 28:24:75:d2:fe:d2:36:34:89:f7:78:79:ec:fd:7e:29:9c:b3: 43:63:fd:94:04:bb:29:2d:1e:75:ff:dc:22:90:f1:8f:e1:d4: 20:35:3b:da:fc:44:2a:61:be:7e:6f:f0:76:bf:95:f5:0d:52: b2:91:86:d1:02:3b:f3:de:54:d3:75:f4:a5:bd:dd:b0:08:ce: c9:17:ff:35:7f:8c:93:fd:c2:99:15:7f:af:02:d3:5b:22:87: f4:b6:1b:e4 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUQvQrM/+YtXy4ghERrDSmAYeFoTcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIzMDEyMDU4WhcNMjYxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BhZjhjNTE0Mzg0ODQ2ODhjNWY2NDM4YzczMmU1MTcyMTM1 NWEyMjFlMjYzZDNmODc0ZDRmZTA4OWVmYzc1M2JhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBGHtpVJDp8l6XQ2eCbg48aHSXd9J5jhWuX/ywMEJ471Z7 S1yCWcnAGZtG1Igmq4tEjTSM0R+uivhOGWia0d+lZdFJgNr92E4AVYMtkkP65y81 IKImI8cnvSxsuMMIvcUdWPC3WNBWZAA9TVMLdMhIO9n6LxewRSzf63azKoGHonaA XFcWpmgYTdlGNcWwTU39RmvxbUaNcAR8vQ7dwDF6J0KwMnBxUV4mPykx81PkDN09 mEbH43vMbqjjL+lM84mDyNAS5kezo5ZCaHF4uhMZXedp2vwM+5vcKjAKd8WRRYZX eH1MKzNiZ5iXtwkCVmqus9vwg9AgFzy22xVFn97tAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUQmV6PXvZlA+WnJ74t4Tx3YBfe3MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RhY2Q3MTIwLTIxNmMtNGZlOS1iMzZjLTA0MDI1YzFlMGRmNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/47DANBgkqhkiG9w0BAQsFAAOCAQEAFhztkitmu0jIVY4k1+USG9Jv d6w3GCLYCv40rZCqu26kuZMIZ3CMQe/t2LFMv0z0aitTvyvlUM7g1pTjlTajpvZr q5Enkt7DtjAd2Ttp1YZdF4zX5hYJJ73XrNwvpa2UWf4jucr7itU1wG1fxc5cURQ/ nkJyA0BdX34u5QXoW1bgBO/xMIZ8J74LY0uXfhXDRl6Qy32zKvPDZkPjSNPiRI5p KCR10v7SNjSJ93h57P1+KZyzQ2P9lAS7KS0edf/cIpDxj+HUIDU72vxEKmG+fm/w dr+V9Q1SspGG0QI7895U03X0pb3dsAjOyRf/NX+Mk/3CmRV/rwLTWyKH9LYb5A== -----END CERTIFICATE-----Generated at Fri Jul 24 06:23:14 2026 by rpki-client