$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3962a4f3-910a-49e5-9e24-e3872e02664a.roa File: 3962a4f3-910a-49e5-9e24-e3872e02664a.roa (raw, json) Hash identifier: ZvrJUw8ScjSqeDqkNCnS6N1jcaTBabuubOygGxXbOmk= Subject key identifier: 70:56:9F:3C:B6:FF:AC:39:90:99:52:6C:64:F3:30:2C:EE:D5:B8:9B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 37ADEEA2AFB1BD4B9FCA2536C6CA7355C4589381 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3962a4f3-910a-49e5-9e24-e3872e02664a.roa Signing time: Fri 22 May 2026 16:34:15 +0000 ROA not before: Fri 22 May 2026 16:34:15 +0000 ROA not after: Thu 20 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff4:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:ad:ee:a2:af:b1:bd:4b:9f:ca:25:36:c6:ca:73:55:c4:58:93:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 22 16:34:15 2026 GMT Not After : Aug 20 23:59:59 2026 GMT Subject: serialNumber=f04c11c9c3dd8ed8a3e2de4e58d5ede0ce16833ac3b67a7a394101d9d033ba74, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9a:a0:13:71:d1:42:ad:13:69:2f:11:ae:08: d9:dc:81:bb:00:b6:68:5f:29:2f:e2:b1:2a:96:90: 1c:da:94:a2:2c:51:81:4a:f1:35:cb:e4:2c:ec:de: 90:1d:7b:b6:4d:48:1a:b6:bb:5c:f5:1b:b2:68:33: 8e:b6:85:bc:08:18:97:f3:c8:ea:3c:94:56:88:5c: 15:08:d4:07:08:cc:56:f5:1e:19:ec:cb:50:37:21: d3:eb:c6:63:0f:54:fc:fd:89:6d:c0:52:8f:83:c0: 57:ab:eb:4d:a0:2a:94:0f:3a:f5:7f:5d:35:d9:40: c1:c5:31:62:33:37:39:ea:aa:74:24:c6:db:23:c1: 51:9a:df:5c:16:42:26:4f:57:11:86:85:93:eb:43: 80:15:53:52:02:e3:13:39:48:f3:84:20:88:ae:41: d5:bd:b9:e3:a2:52:eb:31:2c:9b:dc:4d:91:fb:42: 7f:a6:77:f8:ef:d7:5f:70:78:52:af:1b:7d:e5:eb: d4:0c:9e:cf:aa:46:2b:c8:69:21:90:a2:f9:d0:5b: ae:81:67:c4:92:c8:e2:e0:48:1c:c0:08:fc:73:9d: 04:46:91:66:a1:49:e5:96:9c:30:a7:cb:bf:5c:fc: 73:dd:72:b1:bb:b3:2d:35:1b:b0:32:47:5c:78:13: 94:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:56:9F:3C:B6:FF:AC:39:90:99:52:6C:64:F3:30:2C:EE:D5:B8:9B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3962a4f3-910a-49e5-9e24-e3872e02664a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff4:800::/40 Signature Algorithm: sha256WithRSAEncryption 8b:e4:5e:e5:59:8b:e3:df:02:91:a7:bf:f6:c9:88:d2:96:1e: 61:27:c1:c0:83:05:ac:0e:20:76:0f:b3:b3:91:16:0a:d0:02: 87:3a:ae:3b:4a:a1:f5:bc:42:6c:42:2f:7c:40:6d:05:e8:5c: 0d:f4:2d:84:28:9e:67:e0:cf:2d:b5:41:ca:bd:8f:c5:3b:fb: e6:17:a9:32:b8:7a:ec:37:7b:5d:a4:d8:03:18:12:12:74:ae: 65:bd:9e:d1:48:3d:18:76:c7:bb:c1:3a:d2:ce:3a:6c:9f:a6: bf:a2:b0:8f:41:57:43:5b:d3:b6:d7:5a:06:76:57:a3:44:96: af:d2:52:a4:97:5c:14:c6:a2:11:fa:1f:a7:f5:2f:35:07:cf: 11:1d:d2:d6:19:bd:28:73:7d:56:99:d3:a1:89:5e:26:e5:84: eb:dd:6d:bd:ff:91:f1:c0:88:22:4e:6f:8e:db:84:1f:ff:f8: db:50:7a:49:31:17:4b:7d:49:5e:33:5e:61:cc:9a:3f:e8:0a: 52:b9:41:c0:d3:65:f9:12:14:0d:2c:da:f2:63:4e:fb:2d:0e: 54:8f:e3:a5:ad:de:3f:82:df:16:51:47:c8:95:11:97:5c:a4: 90:f4:24:60:7f:dc:5e:76:a8:f8:b6:1d:68:2f:9b:c6:20:8f: 10:ce:68:04 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUN63uoq+xvUufyiU2xspzVcRYk4EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTIyMTYzNDE1WhcNMjYwODIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMDRjMTFjOWMzZGQ4ZWQ4YTNlMmRlNGU1OGQ1ZWRlMGNl MTY4MzNhYzNiNjdhN2EzOTQxMDFkOWQwMzNiYTc0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCumqATcdFCrRNpLxGuCNncgbsAtmhfKS/isSqWkBzalKIs UYFK8TXL5Czs3pAde7ZNSBq2u1z1G7JoM462hbwIGJfzyOo8lFaIXBUI1AcIzFb1 Hhnsy1A3IdPrxmMPVPz9iW3AUo+DwFer602gKpQPOvV/XTXZQMHFMWIzNznqqnQk xtsjwVGa31wWQiZPVxGGhZPrQ4AVU1IC4xM5SPOEIIiuQdW9ueOiUusxLJvcTZH7 Qn+md/jv119weFKvG33l69QMns+qRivIaSGQovnQW66BZ8SSyOLgSBzACPxznQRG kWahSeWWnDCny79c/HPdcrG7sy01G7AyR1x4E5SzAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUcFafPLb/rDmQmVJsZPMwLO7VuJswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM5NjJhNGYzLTkxMGEtNDllNS05ZTI0LWUzODcyZTAyNjY0YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/0CDANBgkqhkiG9w0BAQsFAAOCAQEAi+Re5VmL498Ckae/9smI0pYe YSfBwIMFrA4gdg+zs5EWCtAChzquO0qh9bxCbEIvfEBtBehcDfQthCieZ+DPLbVB yr2PxTv75hepMrh67Dd7XaTYAxgSEnSuZb2e0Ug9GHbHu8E60s46bJ+mv6Kwj0FX Q1vTttdaBnZXo0SWr9JSpJdcFMaiEfofp/UvNQfPER3S1hm9KHN9VpnToYleJuWE 691tvf+R8cCIIk5vjtuEH//421B6STEXS31JXjNeYcyaP+gKUrlBwNNl+RIUDSza 8mNO+y0OVI/jpa3eP4LfFlFHyJURl1ykkPQkYH/cXnao+LYdaC+bxiCPEM5oBA== -----END CERTIFICATE-----Generated at Sat Jun 13 06:38:49 2026 by rpki-client