$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2976eb96-78ee-4753-9d28-fe3c768f9393.roa File: 2976eb96-78ee-4753-9d28-fe3c768f9393.roa (raw, json) Hash identifier: WxT5sCk5GAyChcIaxIlNXuoxA60voXc5ukXxG2GN+7s= Subject key identifier: 92:EA:E8:34:21:0E:0D:C2:62:22:B1:58:8E:B4:1F:73:2F:DD:DD:30 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2E6FD8F4155E970DB9B8CCBA6574757D1642A45F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2976eb96-78ee-4753-9d28-fe3c768f9393.roa Signing time: Mon 27 Jul 2026 00:30:49 +0000 ROA not before: Mon 27 Jul 2026 00:30:49 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:ec40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:6f:d8:f4:15:5e:97:0d:b9:b8:cc:ba:65:74:75:7d:16:42:a4:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 27 00:30:49 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=838d92d5a8e84dc91b3efdc95647444d0a45d05b4b4371280ae33d1e96cf40bc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:90:73:2a:42:30:ee:d1:a8:25:0c:1c:9d:f0: ac:51:0e:10:96:fe:bd:e9:37:d7:22:43:80:3b:2c: 0e:74:ae:c5:43:02:03:0a:e4:ec:6f:86:7e:da:63: 9d:e1:62:10:d2:f7:24:6f:a8:99:91:85:8c:79:06: f9:32:0b:c5:5b:a4:37:5c:36:c8:a7:37:e8:72:fc: cb:c2:52:b9:74:ad:c1:2f:d2:cb:b9:8e:ad:8d:8f: ab:5f:33:17:e2:0c:a5:0b:bd:0b:4f:66:74:6d:8e: 61:65:81:02:bb:25:13:47:fb:a5:ee:d9:3a:5d:e3: 99:e5:a4:d1:ea:fb:e2:04:43:61:d0:e1:d6:4f:3b: 99:b1:c1:1e:9b:ef:7f:72:32:82:8b:98:d4:52:9a: b1:c6:56:24:36:bc:2a:cd:e2:36:71:4c:1d:ab:e9: 08:b5:ae:ae:bf:67:2a:42:83:a8:dc:1f:f9:26:cb: da:7d:60:cc:77:b4:7b:71:16:46:ec:a3:17:5d:a7: 89:75:a6:b8:a9:6b:58:f3:79:78:7f:90:25:9a:1a: cd:e8:74:72:6a:b8:1a:66:85:0b:23:98:e5:cf:22: bb:89:a3:da:3d:0b:b5:99:4e:61:ef:fb:ea:d8:7a: 29:b5:0a:dd:85:0f:5b:b5:ee:20:7d:96:72:08:0d: 06:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:EA:E8:34:21:0E:0D:C2:62:22:B1:58:8E:B4:1F:73:2F:DD:DD:30 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2976eb96-78ee-4753-9d28-fe3c768f9393.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:ec40::/48 Signature Algorithm: sha256WithRSAEncryption 91:f7:4e:d5:2a:79:8d:9d:8b:ba:d0:14:94:41:c0:63:15:25: ce:0f:7f:10:57:88:8d:7d:1d:2c:d8:c2:2f:f2:ee:8f:13:70: d4:b3:08:f7:c8:ac:52:0f:d2:02:0f:10:e8:b6:fc:3b:f9:8e: 2e:3f:b6:67:b0:f4:4a:d8:73:80:fc:30:8c:c4:ca:96:f3:95: f8:0e:1e:ce:32:7a:62:e2:f6:71:ff:d5:7a:13:55:2a:c6:3e: be:88:77:ef:05:3f:88:b7:f7:9f:e0:42:4d:8a:be:fd:a4:ce: 90:23:a9:b4:d6:41:69:75:cd:ae:d7:fb:10:55:cf:74:fe:77: e7:02:f4:10:60:5d:96:ed:b5:4c:31:b8:40:64:35:72:93:4d: 78:01:6a:0a:62:82:d5:51:5d:c9:b2:1e:7a:59:2b:6a:2f:bb: f9:99:ae:0a:9e:e6:58:59:65:37:5f:19:5c:c3:cf:42:14:63: 7a:f3:a3:b7:b1:bf:e4:26:6b:08:71:70:6d:6e:d4:55:47:4c: a0:20:ba:af:d9:34:4d:38:a6:59:0d:e1:6d:cc:3b:bd:fd:92: 3d:45:66:95:f6:57:cf:f9:29:57:f6:af:56:e4:91:63:69:8d: f3:78:9d:41:65:dc:76:2e:a3:31:53:22:41:86:6e:c4:31:db: 0f:8f:49:d6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIULm/Y9BVelw25uMy6ZXR1fRZCpF8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI3MDAzMDQ5WhcNMjYxMDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MzhkOTJkNWE4ZTg0ZGM5MWIzZWZkYzk1NjQ3NDQ0ZDBh NDVkMDViNGI0MzcxMjgwYWUzM2QxZTk2Y2Y0MGJjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClkHMqQjDu0aglDByd8KxRDhCW/r3pN9ciQ4A7LA50rsVD AgMK5Oxvhn7aY53hYhDS9yRvqJmRhYx5BvkyC8VbpDdcNsinN+hy/MvCUrl0rcEv 0su5jq2Nj6tfMxfiDKULvQtPZnRtjmFlgQK7JRNH+6Xu2Tpd45nlpNHq++IEQ2HQ 4dZPO5mxwR6b739yMoKLmNRSmrHGViQ2vCrN4jZxTB2r6Qi1rq6/ZypCg6jcH/km y9p9YMx3tHtxFkbsoxddp4l1pripa1jzeXh/kCWaGs3odHJquBpmhQsjmOXPIruJ o9o9C7WZTmHv++rYeim1Ct2FD1u17iB9lnIIDQa1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUkuroNCEODcJiIrFYjrQfcy/d3TAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI5NzZlYjk2LTc4ZWUtNDc1My05ZDI4LWZlM2M3NjhmOTM5My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8A7EAwDQYJKoZIhvcNAQELBQADggEBAJH3TtUqeY2di7rQFJRBwGMV Jc4PfxBXiI19HSzYwi/y7o8TcNSzCPfIrFIP0gIPEOi2/Dv5ji4/tmew9ErYc4D8 MIzEypbzlfgOHs4yemLi9nH/1XoTVSrGPr6Id+8FP4i395/gQk2Kvv2kzpAjqbTW QWl1za7X+xBVz3T+d+cC9BBgXZbttUwxuEBkNXKTTXgBagpigtVRXcmyHnpZK2ov u/mZrgqe5lhZZTdfGVzDz0IUY3rzo7exv+QmawhxcG1u1FVHTKAguq/ZNE04plkN 4W3MO739kj1FZpX2V8/5KVf2r1bkkWNpjfN4nUFl3HYuozFTIkGGbsQx2w+PSdY= -----END CERTIFICATE-----Generated at Tue Jul 28 17:10:49 2026 by rpki-client