$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd987fdf-fceb-4729-86c7-c27b85de3cdb.roa File: bd987fdf-fceb-4729-86c7-c27b85de3cdb.roa (raw, json) Hash identifier: yYKwGTnyHGmCI2pyVXkGt6vTUUbH52u4Vv/KTbWDGpE= Subject key identifier: 12:E7:4C:9E:93:F8:96:2A:CC:DE:7C:85:9E:DB:12:D1:59:B3:46:EE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 33357696C2B912C6B02C93E83F93ADED59049F23 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd987fdf-fceb-4729-86c7-c27b85de3cdb.roa Signing time: Mon 27 Jul 2026 00:30:13 +0000 ROA not before: Mon 27 Jul 2026 00:30:13 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f29:c000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:35:76:96:c2:b9:12:c6:b0:2c:93:e8:3f:93:ad:ed:59:04:9f:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 27 00:30:13 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=1766ed4fdae4ede27510aa20dd3bc300fff01b52409066e86c0779146cce1334, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:27:0f:0c:66:12:f9:15:bc:bf:cf:23:71:49: 03:cd:c7:7f:84:74:84:5e:d3:45:98:85:5a:90:ba: 68:8b:4e:21:04:b6:e0:36:e0:50:da:21:5b:19:d5: 37:64:5e:1b:6e:9e:18:8f:7e:df:58:56:76:3c:5d: c6:81:04:ab:dd:bb:fd:b6:39:8b:45:af:96:c0:39: 8c:c8:bc:88:eb:89:17:88:a5:df:23:85:26:c1:ea: 99:2e:e8:4c:21:13:8e:9a:5a:99:6f:96:bb:66:f9: b2:0e:ce:10:b0:01:03:69:79:5b:ce:46:1b:cf:e5: 1b:d9:49:ea:6c:b8:21:6c:35:ca:73:b5:86:c3:e7: 0c:58:8f:64:64:6a:f8:57:5f:e9:d2:f6:d7:10:b2: 91:1d:0a:92:66:cb:d7:c2:5b:dc:fd:70:52:eb:9a: 33:ca:fe:a7:a1:2e:62:cf:f9:7f:23:15:72:c3:a2: c7:1d:32:a2:22:fa:f2:33:16:e5:6e:8d:fa:b0:70: 26:47:8a:bf:63:93:67:f3:98:e3:16:16:19:58:83: c2:39:38:e8:84:7a:d4:41:2a:51:99:2a:f8:90:19: 29:5c:99:a9:b5:0e:bd:cf:e8:c7:51:34:58:b9:df: 35:90:01:f7:21:e0:13:eb:59:fd:0d:fb:58:b5:5f: 74:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:E7:4C:9E:93:F8:96:2A:CC:DE:7C:85:9E:DB:12:D1:59:B3:46:EE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd987fdf-fceb-4729-86c7-c27b85de3cdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f29:c000::/36 Signature Algorithm: sha256WithRSAEncryption 3d:e6:c6:b6:1e:4b:26:99:06:3c:a6:ed:ac:58:e1:38:07:f0: e8:a7:99:f5:a8:a2:6e:ba:a8:65:fe:f3:f6:cb:7a:78:46:ce: 8e:0c:83:14:26:7b:3c:7b:d3:6e:a0:f1:25:26:dc:5c:59:79: 87:c3:6e:f4:13:06:92:66:31:0a:eb:73:d6:10:a2:8a:89:27: c2:36:a0:79:15:4d:e6:0c:2a:dd:fa:95:e5:6c:07:6d:3c:96: 59:1a:8f:a6:a9:76:70:82:64:a4:25:4c:9f:75:d1:17:44:39: 2f:4f:26:e0:33:f4:bf:d1:c5:bc:b3:58:bc:dd:3f:91:89:1b: 2c:4d:43:1d:e6:9d:c1:d9:22:f2:8b:7d:10:6b:8c:d7:70:12: ce:00:05:51:7a:17:f7:72:a6:6d:f9:1c:75:37:af:25:1a:ce: fe:7e:c7:7b:9b:52:03:d0:25:e1:00:d6:32:fd:14:63:b0:dc: 79:4a:6a:37:25:cc:21:7f:94:53:84:3b:f4:1d:7b:38:d3:d4: 2a:2f:5d:83:13:3b:ed:e8:0e:f9:f2:1d:19:2a:b3:a1:f5:d5: 4a:5a:28:76:07:28:fa:41:c7:9a:9f:eb:73:98:c1:d3:de:16: d2:a0:99:c3:c0:f8:45:e2:15:55:11:ac:26:24:0a:fd:23:e0: bf:b2:38:b9 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUMzV2lsK5EsawLJPoP5Ot7VkEnyMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI3MDAzMDEzWhcNMjYxMDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNzY2ZWQ0ZmRhZTRlZGUyNzUxMGFhMjBkZDNiYzMwMGZm ZjAxYjUyNDA5MDY2ZTg2YzA3NzkxNDZjY2UxMzM0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6Jw8MZhL5Fby/zyNxSQPNx3+EdIRe00WYhVqQumiLTiEE tuA24FDaIVsZ1TdkXhtunhiPft9YVnY8XcaBBKvdu/22OYtFr5bAOYzIvIjriReI pd8jhSbB6pku6EwhE46aWplvlrtm+bIOzhCwAQNpeVvORhvP5RvZSepsuCFsNcpz tYbD5wxYj2RkavhXX+nS9tcQspEdCpJmy9fCW9z9cFLrmjPK/qehLmLP+X8jFXLD oscdMqIi+vIzFuVujfqwcCZHir9jk2fzmOMWFhlYg8I5OOiEetRBKlGZKviQGSlc mam1Dr3P6MdRNFi53zWQAfch4BPrWf0N+1i1X3SpAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUEudMnpP4lirM3nyFntsS0VmzRu4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JkOTg3ZmRmLWZjZWItNDcyOS04NmM3LWMyN2I4NWRlM2NkYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8pwDANBgkqhkiG9w0BAQsFAAOCAQEAPebGth5LJpkGPKbtrFjhOAfw 6KeZ9aiibrqoZf7z9st6eEbOjgyDFCZ7PHvTbqDxJSbcXFl5h8Nu9BMGkmYxCutz 1hCiioknwjageRVN5gwq3fqV5WwHbTyWWRqPpql2cIJkpCVMn3XRF0Q5L08m4DP0 v9HFvLNYvN0/kYkbLE1DHeadwdki8ot9EGuM13ASzgAFUXoX93KmbfkcdTevJRrO /n7He5tSA9Al4QDWMv0UY7DceUpqNyXMIX+UU4Q79B17ONPUKi9dgxM77egO+fId GSqzofXVSloodgco+kHHmp/rc5jB094W0qCZw8D4ReIVVRGsJiQK/SPgv7I4uQ== -----END CERTIFICATE-----Generated at Tue Jul 28 18:26:54 2026 by rpki-client