$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0874b556-7768-4bb8-a4db-eeb43d42d1d5.roa File: 0874b556-7768-4bb8-a4db-eeb43d42d1d5.roa (raw, json) Hash identifier: c6kDX7+jHgWO32StCYLJVfqCaHTKR48TLPq3rRzqzDw= Subject key identifier: C3:4D:96:28:65:4F:3F:F8:7E:CA:61:21:81:25:96:0F:CA:33:31:1E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 763EA2CE11C8C1E010BF3288204CFE9F17742FB5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0874b556-7768-4bb8-a4db-eeb43d42d1d5.roa Signing time: Wed 20 May 2026 00:11:31 +0000 ROA not before: Wed 20 May 2026 00:11:31 +0000 ROA not after: Tue 18 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f68:40c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:3e:a2:ce:11:c8:c1:e0:10:bf:32:88:20:4c:fe:9f:17:74:2f:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 20 00:11:31 2026 GMT Not After : Aug 18 23:59:59 2026 GMT Subject: serialNumber=e67816f63d4c35c9f4b363e1a39cbabb90d943d228ce744aa14329024dfb7e97, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:51:2a:ca:da:e0:8c:2e:08:9d:0f:22:4d:5d: e2:5f:8e:31:05:9f:ac:e1:ed:e6:98:e6:51:22:39: 65:ef:e9:10:47:57:ce:57:62:a3:78:df:44:d6:13: c6:14:18:71:c8:c3:56:9b:8d:fd:fd:1f:2f:8a:dc: 60:4a:2f:a2:53:d6:17:5c:91:d8:7f:e8:de:67:07: 83:72:22:05:07:aa:f0:c3:47:75:5f:a6:a3:ef:96: b7:4e:61:75:bf:70:55:4f:02:8c:98:ee:47:b5:4e: b0:ec:d9:46:1d:8a:31:e7:21:48:06:03:c7:7a:f4: c5:c5:3e:df:3b:52:f1:61:e0:77:92:b3:93:ed:00: 08:43:0d:4f:2f:b7:4f:e0:ff:ac:53:35:dd:25:0e: fe:31:89:21:49:9c:18:6e:b9:fa:7f:c1:f9:81:d0: 61:82:47:56:9e:65:39:6a:52:ef:44:98:45:08:4d: 3d:d7:af:16:3f:ea:20:08:bf:f1:46:23:a3:c9:95: f0:b7:f3:7a:38:9d:df:84:22:ee:07:e8:51:95:5b: a3:c5:1f:47:f6:37:11:85:42:8c:04:b5:6b:83:6d: a7:64:71:16:c5:66:8a:af:dc:39:b3:5f:1a:00:c4: 7c:b0:7b:ad:1e:f8:c1:5a:fc:2b:76:60:4e:e6:62: 96:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:4D:96:28:65:4F:3F:F8:7E:CA:61:21:81:25:96:0F:CA:33:31:1E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0874b556-7768-4bb8-a4db-eeb43d42d1d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f68:40c0::/46 Signature Algorithm: sha256WithRSAEncryption 6a:22:36:76:2a:59:b1:6d:f7:53:e8:53:ad:0c:7c:f5:14:7c: d2:c1:b7:de:42:5c:08:f4:37:03:f2:f9:fb:5d:ec:d5:01:29: 6b:fe:51:a9:37:20:1f:78:fa:ef:ad:b3:f2:a4:34:87:0c:31: b4:64:86:4a:65:e4:a3:e0:69:60:4f:6a:b7:21:b4:9d:12:2b: 42:79:31:77:2c:1d:7c:bd:99:df:0c:3a:b3:43:fb:04:f8:10: 85:7c:21:aa:72:9b:ca:f0:03:1c:1d:eb:8f:6a:8d:e9:7e:ca: 57:15:7f:c8:af:92:98:a1:2b:55:cf:af:ae:20:e2:d5:23:1a: 90:6a:ad:63:32:44:ae:d9:63:74:33:1a:49:45:79:f8:89:c5: 52:62:94:7f:13:db:bf:7b:8a:1c:f7:2f:02:1d:b2:c4:c4:b4: a4:9a:f2:0c:96:78:e2:32:9d:5f:80:f5:7d:10:62:8c:43:94: 29:cf:77:d4:4d:cb:75:de:f1:3a:c6:55:c3:1e:15:7f:ca:7c: ef:60:87:88:cb:d7:3e:65:39:68:96:07:3c:89:5a:31:ea:e4: dc:7d:06:af:cb:cf:54:16:3f:3e:e7:31:4e:d1:a5:99:bf:08: 49:f8:b7:06:2a:8d:cc:73:10:f7:38:64:54:be:c6:6e:76:b3: dd:17:e9:f3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdj6izhHIweAQvzKIIEz+nxd0L7UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTIwMDAxMTMxWhcNMjYwODE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNjc4MTZmNjNkNGMzNWM5ZjRiMzYzZTFhMzljYmFiYjkw ZDk0M2QyMjhjZTc0NGFhMTQzMjkwMjRkZmI3ZTk3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKUSrK2uCMLgidDyJNXeJfjjEFn6zh7eaY5lEiOWXv6RBH V85XYqN430TWE8YUGHHIw1abjf39Hy+K3GBKL6JT1hdckdh/6N5nB4NyIgUHqvDD R3VfpqPvlrdOYXW/cFVPAoyY7ke1TrDs2UYdijHnIUgGA8d69MXFPt87UvFh4HeS s5PtAAhDDU8vt0/g/6xTNd0lDv4xiSFJnBhuufp/wfmB0GGCR1aeZTlqUu9EmEUI TT3XrxY/6iAIv/FGI6PJlfC383o4nd+EIu4H6FGVW6PFH0f2NxGFQowEtWuDbadk cRbFZoqv3DmzXxoAxHywe60e+MFa/Ct2YE7mYpbrAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUw02WKGVPP/h+ymEhgSWWD8ozMR4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA4NzRiNTU2LTc3NjgtNGJiOC1hNGRiLWVlYjQzZDQyZDFkNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB9oQMAwDQYJKoZIhvcNAQELBQADggEBAGoiNnYqWbFt91PoU60MfPUU fNLBt95CXAj0NwPy+ftd7NUBKWv+Uak3IB94+u+ts/KkNIcMMbRkhkpl5KPgaWBP archtJ0SK0J5MXcsHXy9md8MOrND+wT4EIV8Iapym8rwAxwd649qjel+ylcVf8iv kpihK1XPr64g4tUjGpBqrWMyRK7ZY3QzGklFefiJxVJilH8T2797ihz3LwIdssTE tKSa8gyWeOIynV+A9X0QYoxDlCnPd9RNy3Xe8TrGVcMeFX/KfO9gh4jL1z5lOWiW BzyJWjHq5Nx9Bq/Lz1QWPz7nMU7RpZm/CEn4twYqjcxzEPc4ZFS+xm52s90X6fM= -----END CERTIFICATE-----Generated at Sat Jun 13 08:18:20 2026 by rpki-client