$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/020f6713-961a-446c-8dde-4a4231902f33.roa File: 020f6713-961a-446c-8dde-4a4231902f33.roa (raw, json) Hash identifier: gIbi2vwcE/TViWzaLUx065R13IucHZNXxCuWf9uvhy0= Subject key identifier: 33:AA:63:0F:2F:1B:57:81:57:08:AC:49:40:48:C3:44:AB:46:CF:88 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0A04EF178E10F5B8CF8C02610E95A8E0774BEB63 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/020f6713-961a-446c-8dde-4a4231902f33.roa Signing time: Sat 25 Jul 2026 00:20:40 +0000 ROA not before: Sat 25 Jul 2026 00:20:40 +0000 ROA not after: Fri 23 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff8:3400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:04:ef:17:8e:10:f5:b8:cf:8c:02:61:0e:95:a8:e0:77:4b:eb:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 25 00:20:40 2026 GMT Not After : Oct 23 23:59:59 2026 GMT Subject: serialNumber=c9c9d2153032a37f0eaab23749db32b33f8ca0f3f4c23eafeabe8527ebea35ed, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ef:26:84:cc:21:54:e3:7e:97:d5:11:ea:a0: 6d:cd:fd:58:15:de:8e:12:72:dc:5b:3a:a4:9d:cd: 8c:b1:53:24:b7:38:61:4f:a6:38:42:07:3f:9d:6c: 7a:87:ce:2f:e8:4d:e0:2f:a0:8f:95:c4:34:4a:e5: ab:2a:77:06:2b:a2:8a:64:5b:dc:58:53:37:20:b5: 07:1c:82:76:a8:ed:db:80:4d:17:ce:78:06:04:72: 9c:bb:c3:bb:85:ba:80:93:bc:83:bb:e2:18:61:1c: 14:e1:87:f1:75:ab:8f:c3:7a:18:bf:08:d6:63:52: 4e:18:ca:a0:f4:15:82:8e:9b:3f:ee:36:ac:b6:b0: b8:21:e0:f0:d3:76:25:92:25:b6:58:1f:cf:c2:01: e6:7c:b3:11:b1:2a:c1:7e:72:76:5d:f2:7e:9b:10: 9d:44:e8:aa:5a:cc:d8:de:a3:20:0d:07:f3:78:32: 8c:d0:59:25:24:50:27:2a:45:f6:cb:50:86:ec:7b: ed:84:52:e7:cd:32:f4:f0:9c:22:4d:12:bd:64:71: 9a:b2:2b:aa:91:8c:f5:77:98:6b:3b:d3:d6:8a:63: ea:6e:ac:08:2b:fa:91:8f:11:b0:06:ce:c5:d3:cd: f9:94:49:e8:e2:d5:61:ee:87:42:54:d2:6a:5c:de: 39:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:AA:63:0F:2F:1B:57:81:57:08:AC:49:40:48:C3:44:AB:46:CF:88 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/020f6713-961a-446c-8dde-4a4231902f33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff8:3400::/40 Signature Algorithm: sha256WithRSAEncryption 7e:8f:90:5d:fa:87:23:76:a6:f4:e7:54:f1:04:11:15:fc:12: 9d:67:27:38:8d:72:3f:7a:7f:f8:c0:69:9e:95:a6:d1:40:53: d5:0a:d7:83:ae:a7:55:e9:3b:93:f7:43:3c:a4:16:47:cf:b2: 03:2c:28:a6:a1:7f:74:22:50:28:49:5e:cd:ee:1c:61:81:1f: 3e:8c:63:d2:c7:1c:93:dd:e2:b8:c2:b7:7a:45:e0:17:1b:a5: 53:58:25:2e:4d:d8:ab:5d:b7:95:8b:f6:f7:ba:3f:2c:17:eb: 95:89:5c:2a:43:f4:1e:e0:5e:a3:cc:52:55:1e:78:66:c0:ab: 47:31:76:ef:5f:75:66:8b:b0:71:5b:07:5d:6c:3f:bd:ec:e5: 47:a0:a3:b0:a6:6d:29:44:06:c4:6c:12:49:e1:5b:df:5c:5e: 1b:93:93:91:20:8b:65:c8:8a:e3:47:dc:11:6e:dd:2a:6d:ea: db:b5:1d:28:91:04:45:55:30:a7:9f:d7:42:4c:dc:ac:d8:81: e1:0b:d6:19:16:9c:00:17:e1:7d:c4:76:d4:5d:3e:fd:02:ad: 95:96:a2:2c:e3:f0:f2:2d:f9:1a:b1:6a:51:1b:3c:79:ba:ff: 9c:07:84:d3:19:0f:8c:37:de:d1:a0:b9:b8:ab:75:25:07:7f: 53:ec:cd:25 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUCgTvF44Q9bjPjAJhDpWo4HdL62MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI1MDAyMDQwWhcNMjYxMDIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjOWM5ZDIxNTMwMzJhMzdmMGVhYWIyMzc0OWRiMzJiMzNm OGNhMGYzZjRjMjNlYWZlYWJlODUyN2ViZWEzNWVkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDX7yaEzCFU436X1RHqoG3N/VgV3o4SctxbOqSdzYyxUyS3 OGFPpjhCBz+dbHqHzi/oTeAvoI+VxDRK5asqdwYroopkW9xYUzcgtQccgnao7duA TRfOeAYEcpy7w7uFuoCTvIO74hhhHBThh/F1q4/Dehi/CNZjUk4YyqD0FYKOmz/u Nqy2sLgh4PDTdiWSJbZYH8/CAeZ8sxGxKsF+cnZd8n6bEJ1E6KpazNjeoyANB/N4 MozQWSUkUCcqRfbLUIbse+2EUufNMvTwnCJNEr1kcZqyK6qRjPV3mGs709aKY+pu rAgr+pGPEbAGzsXTzfmUSeji1WHuh0JU0mpc3jnVAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUM6pjDy8bV4FXCKxJQEjDRKtGz4gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAyMGY2NzEzLTk2MWEtNDQ2Yy04ZGRlLTRhNDIzMTkwMmYzMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/4NDANBgkqhkiG9w0BAQsFAAOCAQEAfo+QXfqHI3am9OdU8QQRFfwS nWcnOI1yP3p/+MBpnpWm0UBT1QrXg66nVek7k/dDPKQWR8+yAywopqF/dCJQKEle ze4cYYEfPoxj0scck93iuMK3ekXgFxulU1glLk3Yq123lYv297o/LBfrlYlcKkP0 HuBeo8xSVR54ZsCrRzF27191ZouwcVsHXWw/vezlR6CjsKZtKUQGxGwSSeFb31xe G5OTkSCLZciK40fcEW7dKm3q27UdKJEERVUwp5/XQkzcrNiB4QvWGRacABfhfcR2 1F0+/QKtlZaiLOPw8i35GrFqURs8ebr/nAeE0xkPjDfe0aC5uKt1JQd/U+zNJQ== -----END CERTIFICATE-----Generated at Tue Jul 28 19:32:00 2026 by rpki-client