$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a9d4c87-e208-4010-a5c6-e2c265094a0b.roa File: 0a9d4c87-e208-4010-a5c6-e2c265094a0b.roa (raw, json) Hash identifier: qoUEWODMwbU1Uaat3sqq8N9foBEm2Q9YXb3N6dtlpz8= Subject key identifier: A2:D8:91:E3:96:1E:B9:1B:03:D7:95:2D:EF:76:FB:71:65:FA:06:0A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 12144A51523233D621623DFF2F894F731AA57613 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a9d4c87-e208-4010-a5c6-e2c265094a0b.roa Signing time: Mon 27 Jul 2026 00:21:20 +0000 ROA not before: Mon 27 Jul 2026 00:21:20 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1ff4:8000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:14:4a:51:52:32:33:d6:21:62:3d:ff:2f:89:4f:73:1a:a5:76:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 27 00:21:20 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=c2ba972a842f1b33e8aef29691fe65820303f85e97fc0209f8c169211de36efc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f9:5d:a3:f6:fa:42:12:a8:13:01:9d:31:cc: f5:c6:82:21:48:93:06:fc:e4:40:16:af:62:42:5f: a3:2a:f3:c2:81:07:21:b5:8d:05:39:d3:29:ff:39: bb:33:52:1c:07:7a:c9:d7:08:d1:e6:1d:f7:ce:7e: f0:c9:50:3e:84:9b:e2:62:b7:7c:a5:57:2f:35:69: 9f:05:d9:79:47:d4:aa:41:97:b1:b1:06:03:10:63: a8:e9:97:df:ef:df:3a:6c:a1:53:38:6c:0d:ab:d2: 5a:15:09:54:31:8b:ef:df:21:a1:8c:9f:6c:78:e2: 92:de:92:25:9d:2b:22:36:f5:1c:f4:f5:c3:da:21: fd:65:3c:7f:8f:d7:14:f6:26:f1:ea:5c:0e:76:5c: e0:e3:19:09:14:2d:24:71:d1:3a:4e:d7:ce:78:26: 6a:2d:c8:c6:8a:d3:cc:5b:37:92:40:93:9a:b4:25: d3:f2:60:24:28:b8:61:75:c3:5c:2e:fe:2e:c8:bc: b0:dd:df:0c:02:dc:c1:00:97:ec:d9:e5:08:c3:48: 60:5b:a1:93:14:81:e6:81:d5:4e:cd:3d:e4:73:8d: 20:f2:2a:3b:e6:b7:c5:ab:45:e4:a2:92:82:b8:5d: 30:03:ff:ef:87:db:29:6f:20:81:12:de:4a:2c:3e: 4f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:D8:91:E3:96:1E:B9:1B:03:D7:95:2D:EF:76:FB:71:65:FA:06:0A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a9d4c87-e208-4010-a5c6-e2c265094a0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff4:8000::/39 Signature Algorithm: sha256WithRSAEncryption 4a:aa:6d:00:b7:7a:84:1a:6f:f1:e0:18:da:dc:14:34:f2:cf: 20:1d:c9:e2:24:4a:fe:64:f9:08:be:d1:9c:e1:f2:07:dc:6f: f8:d2:94:14:fa:0e:3a:2e:59:15:f4:c2:0b:70:c8:9a:d6:ee: bf:04:8f:39:93:07:9d:fc:70:6a:ca:bc:b9:10:9e:31:d7:ea: cd:0e:0f:4a:e1:63:34:fa:f1:71:70:78:14:ca:ab:68:6f:1e: 72:72:34:30:38:1c:3d:64:53:f3:ef:59:55:e2:48:1b:95:9f: 07:92:4a:3f:83:6a:df:16:8e:d1:94:68:d9:f0:72:f1:bd:86: d0:ea:ad:62:f8:36:dd:39:a6:79:97:14:3f:87:53:78:a1:55: 5e:2a:05:92:a2:b9:d0:eb:38:b5:a7:36:d3:a1:96:3c:c9:a9: e3:43:94:03:ed:e6:be:72:c6:fd:8c:f4:22:e0:6d:ac:d9:dc: b1:12:8a:1b:d7:ff:b0:9a:91:4e:58:25:64:b8:bc:0e:a6:55: 45:0e:93:3b:31:a4:53:87:9e:79:96:96:f6:a9:6a:60:8a:9a: e3:8f:35:49:5c:80:cd:cf:07:22:c1:6c:a5:c5:9c:73:e2:0d: 73:e8:f7:58:66:c8:06:11:52:91:6b:69:43:f9:0d:ce:24:6f: 98:bb:70:dd -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUEhRKUVIyM9YhYj3/L4lPcxqldhMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI3MDAyMTIwWhcNMjYxMDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMmJhOTcyYTg0MmYxYjMzZThhZWYyOTY5MWZlNjU4MjAz MDNmODVlOTdmYzAyMDlmOGMxNjkyMTFkZTM2ZWZjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCc+V2j9vpCEqgTAZ0xzPXGgiFIkwb85EAWr2JCX6Mq88KB ByG1jQU50yn/ObszUhwHesnXCNHmHffOfvDJUD6Em+Jit3ylVy81aZ8F2XlH1KpB l7GxBgMQY6jpl9/v3zpsoVM4bA2r0loVCVQxi+/fIaGMn2x44pLekiWdKyI29Rz0 9cPaIf1lPH+P1xT2JvHqXA52XODjGQkULSRx0TpO1854JmotyMaK08xbN5JAk5q0 JdPyYCQouGF1w1wu/i7IvLDd3wwC3MEAl+zZ5QjDSGBboZMUgeaB1U7NPeRzjSDy Kjvmt8WrReSikoK4XTAD/++H2ylvIIES3kosPk9jAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUotiR45YeuRsD15Ut73b7cWX6BgowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBhOWQ0Yzg3LWUyMDgtNDAxMC1hNWM2LWUyYzI2NTA5NGEwYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB/0gDANBgkqhkiG9w0BAQsFAAOCAQEASqptALd6hBpv8eAY2twUNPLP IB3J4iRK/mT5CL7RnOHyB9xv+NKUFPoOOi5ZFfTCC3DImtbuvwSPOZMHnfxwasq8 uRCeMdfqzQ4PSuFjNPrxcXB4FMqraG8ecnI0MDgcPWRT8+9ZVeJIG5WfB5JKP4Nq 3xaO0ZRo2fBy8b2G0OqtYvg23TmmeZcUP4dTeKFVXioFkqK50Os4tac206GWPMmp 40OUA+3mvnLG/Yz0IuBtrNncsRKKG9f/sJqRTlglZLi8DqZVRQ6TOzGkU4eeeZaW 9qlqYIqa4481SVyAzc8HIsFspcWcc+INc+j3WGbIBhFSkWtpQ/kNziRvmLtw3Q== -----END CERTIFICATE-----Generated at Tue Jul 28 14:49:42 2026 by rpki-client