$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/85b59dcc-993d-4bb9-8658-41d0e953ce90.roa File: 85b59dcc-993d-4bb9-8658-41d0e953ce90.roa (raw, json) Hash identifier: k4uG6PufxB8DC+lHkIwxGVAzmgdhoPi1+XoPBJjeT/s= Subject key identifier: D0:78:40:7F:0A:B6:6A:84:0A:02:D5:48:72:95:7D:4D:E3:30:D1:F9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 051C1E902FC31A3C6398AC4C1393696C12559ADD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/85b59dcc-993d-4bb9-8658-41d0e953ce90.roa Signing time: Fri 24 Jul 2026 00:40:50 +0000 ROA not before: Fri 24 Jul 2026 00:40:50 +0000 ROA not after: Thu 22 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1ff4:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:1c:1e:90:2f:c3:1a:3c:63:98:ac:4c:13:93:69:6c:12:55:9a:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 24 00:40:50 2026 GMT Not After : Oct 22 23:59:59 2026 GMT Subject: serialNumber=6760d90d6f444ff60cf2f6a5e1e64077f729ccc8ce5410ee66861d850cc59ff9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:da:16:27:cf:35:38:2b:4e:33:60:eb:2c:1f: 7b:0f:eb:39:ce:62:33:bd:90:b7:09:b3:bc:a5:84: 14:bc:ad:27:e9:a3:ed:4e:8a:3c:95:f3:b7:32:ea: c1:c6:19:2e:27:c4:ae:ee:b7:b7:e1:9d:83:62:bc: 2c:b3:ea:06:af:f7:7a:85:0a:75:4d:3e:ec:1b:c1: 3f:68:01:78:73:ac:58:66:ab:39:25:a7:1a:ae:f5: 71:11:1a:0b:41:97:c5:d9:4d:1d:89:ef:e2:3e:f3: fb:3f:b6:64:ea:b8:64:41:a6:b1:26:5a:a4:8b:0c: e1:23:25:ba:45:d2:62:8a:4a:56:b1:9c:27:c5:63: 0c:45:c3:db:38:1c:ac:ad:86:48:f9:5a:69:13:d0: d7:64:8e:58:58:f6:57:9e:a7:7a:cd:f7:e7:14:2e: d0:5e:ab:62:78:2b:7d:0b:70:f4:0c:f0:77:ac:fc: 3a:15:6c:62:ab:67:b8:45:64:7c:56:2f:50:15:fc: c6:00:08:4f:08:69:fc:f0:f5:fe:d2:2b:b4:4f:b1: ab:a0:71:9d:4d:bd:3b:fa:34:86:85:3a:a6:91:6d: 74:80:58:e8:90:a6:86:a7:21:f2:e9:75:8b:b1:9a: a5:27:90:37:f2:5d:4c:1a:04:05:90:71:8b:da:a9: 6f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:78:40:7F:0A:B6:6A:84:0A:02:D5:48:72:95:7D:4D:E3:30:D1:F9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/85b59dcc-993d-4bb9-8658-41d0e953ce90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff4:e000::/40 Signature Algorithm: sha256WithRSAEncryption 0d:25:c5:8b:43:a4:a9:6e:85:8d:c5:c3:f4:cb:6b:59:e2:0d: 9d:f4:6f:a2:5c:cd:94:18:d2:2e:48:ad:49:ca:ca:eb:bc:43: eb:36:99:66:38:e0:50:94:b7:6e:00:ed:e8:92:01:9b:01:4f: e0:d7:3f:f7:e6:e1:83:f4:fe:7f:52:2d:1a:ab:2b:64:96:f1: dd:e5:9d:b5:4a:98:81:43:1c:ae:aa:9d:a8:87:80:40:31:a8: 5c:0e:6a:51:70:26:82:f0:34:9b:6b:58:d9:35:b8:19:a4:63: d2:0b:b2:86:c1:ab:24:2b:04:76:76:df:64:d4:55:cb:36:1c: bc:32:67:06:d1:e8:3d:15:49:fe:1e:a2:4a:f4:2a:0d:35:7a: a5:eb:d4:c9:d0:ee:73:d4:74:17:a8:45:0c:2a:01:68:dc:22: d8:cb:c3:ba:0c:39:41:a4:8a:34:8b:84:f3:af:ba:a0:e3:80: 9a:9e:3e:dd:de:27:14:51:8a:8a:6c:5b:05:ab:33:5a:32:19: d0:03:45:9f:24:60:d5:32:d1:a5:14:d5:bb:7c:de:95:d2:ad: 0a:e4:eb:c1:40:ab:b2:19:c5:74:b1:f4:bc:c8:1b:17:e8:5c: 16:f9:ef:37:ea:f4:1a:3d:af:aa:5e:95:59:9f:96:de:40:ee: df:06:7c:13 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUBRwekC/DGjxjmKxME5NpbBJVmt0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI0MDA0MDUwWhcNMjYxMDIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NzYwZDkwZDZmNDQ0ZmY2MGNmMmY2YTVlMWU2NDA3N2Y3 MjljY2M4Y2U1NDEwZWU2Njg2MWQ4NTBjYzU5ZmY5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDY2hYnzzU4K04zYOssH3sP6znOYjO9kLcJs7ylhBS8rSfp o+1OijyV87cy6sHGGS4nxK7ut7fhnYNivCyz6gav93qFCnVNPuwbwT9oAXhzrFhm qzklpxqu9XERGgtBl8XZTR2J7+I+8/s/tmTquGRBprEmWqSLDOEjJbpF0mKKSlax nCfFYwxFw9s4HKythkj5WmkT0NdkjlhY9leep3rN9+cULtBeq2J4K30LcPQM8Hes /DoVbGKrZ7hFZHxWL1AV/MYACE8Iafzw9f7SK7RPsaugcZ1NvTv6NIaFOqaRbXSA WOiQpoanIfLpdYuxmqUnkDfyXUwaBAWQcYvaqW+NAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU0HhAfwq2aoQKAtVIcpV9TeMw0fkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg1YjU5ZGNjLTk5M2QtNGJiOS04NjU4LTQxZDBlOTUzY2U5MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/04DANBgkqhkiG9w0BAQsFAAOCAQEADSXFi0OkqW6FjcXD9MtrWeIN nfRvolzNlBjSLkitScrK67xD6zaZZjjgUJS3bgDt6JIBmwFP4Nc/9+bhg/T+f1It GqsrZJbx3eWdtUqYgUMcrqqdqIeAQDGoXA5qUXAmgvA0m2tY2TW4GaRj0guyhsGr JCsEdnbfZNRVyzYcvDJnBtHoPRVJ/h6iSvQqDTV6pevUydDuc9R0F6hFDCoBaNwi 2MvDugw5QaSKNIuE86+6oOOAmp4+3d4nFFGKimxbBaszWjIZ0ANFnyRg1TLRpRTV u3zeldKtCuTrwUCrshnFdLH0vMgbF+hcFvnvN+r0Gj2vql6VWZ+W3kDu3wZ8Ew== -----END CERTIFICATE-----Generated at Tue Jul 28 14:51:43 2026 by rpki-client