$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10f48290-4894-4ec3-b396-acc342d42d33.roa File: 10f48290-4894-4ec3-b396-acc342d42d33.roa (raw, json) Hash identifier: DDf3e4t7vxmhzFihWKexHoLoJXFt1UKD6mef0HxpNe4= Subject key identifier: 24:31:4A:88:0B:B2:A9:62:09:9A:9D:60:A7:AE:1A:9A:1F:4C:48:3E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 631A72DD041DA0790A6E8F334C98D0FD8356624C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10f48290-4894-4ec3-b396-acc342d42d33.roa Signing time: Sun 31 May 2026 00:31:10 +0000 ROA not before: Sun 31 May 2026 00:31:10 +0000 ROA not after: Sat 29 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fe9:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:1a:72:dd:04:1d:a0:79:0a:6e:8f:33:4c:98:d0:fd:83:56:62:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 31 00:31:10 2026 GMT Not After : Aug 29 23:59:59 2026 GMT Subject: serialNumber=952c58d51c83f4ba4db8cc8e3b3a2030c006785e6d51fc2b6d11d03bd2aa1f9f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d8:da:b9:1b:fb:75:49:80:c8:37:7e:ef:16: f7:7d:10:ed:90:93:6d:ff:bc:a9:f0:53:d0:91:3a: 9d:2d:58:ae:14:8a:30:10:ad:8c:aa:77:34:b7:b1: 69:48:53:6c:92:45:24:f9:c1:78:87:9b:d4:b3:80: b3:84:f4:5c:50:a4:55:31:85:0f:30:3b:5e:b4:86: c2:73:ae:fc:7e:71:c3:e4:3a:1b:2b:fc:c7:10:cc: e4:cc:d7:94:44:cd:58:6d:f1:1a:19:2d:27:d5:64: 25:ed:21:2c:0d:0e:d1:61:1b:2c:7e:f2:24:f7:cd: be:c2:b9:20:1e:e3:8c:fa:20:42:af:32:bc:33:24: 17:d1:99:57:e8:0c:dd:03:d1:4f:88:dc:ae:4a:01: 64:25:f5:12:2c:0f:67:2d:c6:d8:67:aa:de:3b:48: d4:6b:70:bd:0d:16:56:89:b8:c1:8c:16:08:4a:ca: b1:51:02:9b:bd:7b:0a:35:27:bf:73:1e:c9:68:9c: d5:ce:fb:2a:63:44:16:3f:84:72:78:44:65:71:ad: c5:ad:bc:47:99:0d:48:a7:b5:4b:69:6a:1d:fa:b1: b5:2b:b3:a0:be:b8:e1:d0:53:ef:97:05:bb:92:0a: 53:9d:fc:99:ff:03:b8:8b:34:db:d1:3d:36:56:25: 8f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:31:4A:88:0B:B2:A9:62:09:9A:9D:60:A7:AE:1A:9A:1F:4C:48:3E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10f48290-4894-4ec3-b396-acc342d42d33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fe9:2000::/40 Signature Algorithm: sha256WithRSAEncryption c2:8f:df:af:f5:84:17:1f:99:13:b7:0d:55:62:5b:7e:97:ab: 73:4f:9e:22:a5:62:2e:83:d7:01:e2:9e:77:4c:23:2e:36:58: 5e:aa:08:66:7f:5a:e4:bb:84:7e:79:ea:0b:a5:ce:43:fd:e9: 9c:df:fa:b0:94:58:2d:86:ca:2a:f4:fd:4e:dc:fd:ce:ca:20: 18:96:66:eb:55:33:36:5e:ed:35:79:0c:a3:ed:24:67:0e:d9: 72:5a:f5:55:84:66:96:20:9a:a5:31:a1:c8:58:31:e6:41:91: 05:5a:01:3f:44:e7:d7:53:da:85:66:cc:80:a9:ce:ee:62:1a: 28:9f:1d:8e:1d:2e:86:54:f9:5d:68:ad:73:0a:c8:bb:f4:b9: 0a:37:26:dd:b9:79:fe:83:92:42:73:9e:8e:f0:84:78:5a:b4: 2f:3b:bc:83:f5:a6:97:77:e0:78:9f:9d:41:f2:a8:8b:c0:84: 0d:a7:49:26:06:8b:2c:05:c6:46:2d:88:d0:8c:d1:1b:9c:c4: 49:c1:f9:93:e9:94:90:b4:bc:22:d9:0b:2c:7c:53:da:8d:2c: b6:d1:13:ab:f2:42:b9:36:4a:fd:59:63:89:61:15:55:fc:5d: db:5a:d1:36:ef:63:ce:ec:7a:05:1f:7a:ef:f3:37:38:1b:20: 01:f4:62:42 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUYxpy3QQdoHkKbo8zTJjQ/YNWYkwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTMxMDAzMTEwWhcNMjYwODI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NTJjNThkNTFjODNmNGJhNGRiOGNjOGUzYjNhMjAzMGMw MDY3ODVlNmQ1MWZjMmI2ZDExZDAzYmQyYWExZjlmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCu2Nq5G/t1SYDIN37vFvd9EO2Qk23/vKnwU9CROp0tWK4U ijAQrYyqdzS3sWlIU2ySRST5wXiHm9SzgLOE9FxQpFUxhQ8wO160hsJzrvx+ccPk Ohsr/McQzOTM15REzVht8RoZLSfVZCXtISwNDtFhGyx+8iT3zb7CuSAe44z6IEKv MrwzJBfRmVfoDN0D0U+I3K5KAWQl9RIsD2ctxthnqt47SNRrcL0NFlaJuMGMFghK yrFRApu9ewo1J79zHslonNXO+ypjRBY/hHJ4RGVxrcWtvEeZDUintUtpah36sbUr s6C+uOHQU++XBbuSClOd/Jn/A7iLNNvRPTZWJY+PAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUJDFKiAuyqWIJmp1gp64amh9MSD4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzEwZjQ4MjkwLTQ4OTQtNGVjMy1iMzk2LWFjYzM0MmQ0MmQzMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/pIDANBgkqhkiG9w0BAQsFAAOCAQEAwo/fr/WEFx+ZE7cNVWJbfper c0+eIqViLoPXAeKed0wjLjZYXqoIZn9a5LuEfnnqC6XOQ/3pnN/6sJRYLYbKKvT9 Ttz9zsogGJZm61UzNl7tNXkMo+0kZw7Zclr1VYRmliCapTGhyFgx5kGRBVoBP0Tn 11PahWbMgKnO7mIaKJ8djh0uhlT5XWitcwrIu/S5Cjcm3bl5/oOSQnOejvCEeFq0 Lzu8g/Wml3fgeJ+dQfKoi8CEDadJJgaLLAXGRi2I0IzRG5zEScH5k+mUkLS8ItkL LHxT2o0sttETq/JCuTZK/VljiWEVVfxd21rRNu9jzux6BR967/M3OBsgAfRiQg== -----END CERTIFICATE-----Generated at Sat Jun 13 09:50:41 2026 by rpki-client