$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ae9d1da-543e-418a-b637-92344451ee1b.roa File: 3ae9d1da-543e-418a-b637-92344451ee1b.roa (raw, json) Hash identifier: Kvt3KkpcH8pSl7p6R7cOHCQBOpHD3cA6fsRLCfnAIWM= Subject key identifier: 3C:EB:71:13:50:65:5F:70:A2:3A:04:21:88:A0:7D:49:FB:11:94:0F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7C26B27B23FB2A0C6C8BA1594BC151F2F65468F0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ae9d1da-543e-418a-b637-92344451ee1b.roa Signing time: Fri 22 May 2026 16:36:09 +0000 ROA not before: Fri 22 May 2026 16:36:09 +0000 ROA not after: Thu 20 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fe8:80c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:26:b2:7b:23:fb:2a:0c:6c:8b:a1:59:4b:c1:51:f2:f6:54:68:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 22 16:36:09 2026 GMT Not After : Aug 20 23:59:59 2026 GMT Subject: serialNumber=3e83515c14dda7d481ea4cf3fd654c8d3ce14899fa473bbb79f69e870724c256, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:57:13:3d:3e:26:7e:98:c2:9b:98:14:a5:75: 5f:d1:53:b1:d3:85:70:58:59:68:5d:aa:ad:cf:d8: e6:7c:96:7b:51:58:e4:53:5b:c0:90:b2:3e:1c:6c: 12:e3:c5:c8:49:b5:80:82:c9:bd:fb:bc:4b:fa:8d: 53:31:85:ee:b7:3f:a8:4e:d9:de:d2:cf:af:22:d2: 65:bf:b1:64:f3:a2:f4:02:45:d9:20:e2:12:09:48: 51:7e:05:0c:07:ce:2b:18:f3:27:a4:76:ce:64:c0: f6:e2:18:61:b5:d2:a8:11:51:30:33:e1:bf:47:ba: a7:ce:11:a2:95:48:4c:5e:57:97:5f:5c:68:cc:8e: 92:a1:89:20:e2:3d:4d:cc:62:4a:a6:8b:50:06:1b: 93:03:de:b5:47:23:03:23:f2:a4:5a:0d:d8:e2:40: b0:fb:14:a9:18:35:c2:83:df:4d:20:ea:a6:ec:93: 9a:c3:32:54:55:7e:02:50:db:97:02:53:08:f6:93: bb:6c:0e:4c:76:e9:af:0c:6e:06:b8:37:b0:2e:58: b9:11:6a:07:ff:0c:04:c7:6f:4e:b2:13:d3:6e:ad: 7e:56:e2:97:c8:d5:0f:54:69:7c:54:be:cd:b9:db: 9a:c3:c8:4e:2a:66:8d:8f:1f:96:c1:54:05:cd:d0: 17:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:EB:71:13:50:65:5F:70:A2:3A:04:21:88:A0:7D:49:FB:11:94:0F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ae9d1da-543e-418a-b637-92344451ee1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fe8:80c0::/48 Signature Algorithm: sha256WithRSAEncryption 21:c7:2f:dc:0e:6a:db:c6:99:25:68:12:65:fd:5e:2e:e5:69: c3:a5:08:66:f1:02:7c:76:8a:e6:45:6d:7c:46:3f:d5:bc:b3: 9a:15:c7:a3:a7:e9:86:62:50:39:fc:30:d0:6e:12:38:6a:79: 52:4a:26:9b:95:07:fa:27:44:a5:95:86:77:dc:99:f0:7d:1f: 17:f5:76:3b:90:9f:cb:fa:71:44:0a:e4:16:a1:b9:3e:8e:8f: 24:43:86:77:7c:ee:c1:95:b4:a0:e2:ff:78:20:46:2f:c4:8b: fb:cd:25:1a:e3:7b:a3:1e:3f:f7:ce:9e:ee:16:b3:17:c4:bb: 3f:7c:38:0f:7a:1d:6f:58:d3:bc:42:9b:d1:3d:b5:4c:c5:03: e6:4f:6d:fd:0c:be:9c:da:c9:f4:8a:94:80:06:12:c2:a5:0b: 99:a5:69:27:68:3b:55:96:f5:d0:c4:3e:8e:44:ee:6c:e8:9d: 81:5a:f8:a7:ae:b2:6f:18:74:89:2c:35:eb:8a:bf:df:22:a9: d2:27:76:3a:d1:c0:ba:4f:5b:71:3b:c1:76:85:2b:4e:1c:a5: d5:5c:38:fe:22:95:fb:98:97:e1:62:fa:50:0b:94:52:c9:57: d7:a5:85:0e:a7:67:45:56:cb:39:f6:b3:6a:b6:e0:4a:0d:a2: 5a:10:15:45 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfCayeyP7Kgxsi6FZS8FR8vZUaPAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTIyMTYzNjA5WhcNMjYwODIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzZTgzNTE1YzE0ZGRhN2Q0ODFlYTRjZjNmZDY1NGM4ZDNj ZTE0ODk5ZmE0NzNiYmI3OWY2OWU4NzA3MjRjMjU2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCeVxM9PiZ+mMKbmBSldV/RU7HThXBYWWhdqq3P2OZ8lntR WORTW8CQsj4cbBLjxchJtYCCyb37vEv6jVMxhe63P6hO2d7Sz68i0mW/sWTzovQC Rdkg4hIJSFF+BQwHzisY8yekds5kwPbiGGG10qgRUTAz4b9HuqfOEaKVSExeV5df XGjMjpKhiSDiPU3MYkqmi1AGG5MD3rVHIwMj8qRaDdjiQLD7FKkYNcKD300g6qbs k5rDMlRVfgJQ25cCUwj2k7tsDkx26a8Mbga4N7AuWLkRagf/DATHb06yE9NurX5W 4pfI1Q9UaXxUvs2525rDyE4qZo2PH5bBVAXN0BcnAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUPOtxE1BlX3CiOgQhiKB9SfsRlA8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNhZTlkMWRhLTU0M2UtNDE4YS1iNjM3LTkyMzQ0NDUxZWUxYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/ogMAwDQYJKoZIhvcNAQELBQADggEBACHHL9wOatvGmSVoEmX9Xi7l acOlCGbxAnx2iuZFbXxGP9W8s5oVx6On6YZiUDn8MNBuEjhqeVJKJpuVB/onRKWV hnfcmfB9Hxf1djuQn8v6cUQK5BahuT6OjyRDhnd87sGVtKDi/3ggRi/Ei/vNJRrj e6MeP/fOnu4WsxfEuz98OA96HW9Y07xCm9E9tUzFA+ZPbf0MvpzayfSKlIAGEsKl C5mlaSdoO1WW9dDEPo5E7mzonYFa+Keusm8YdIksNeuKv98iqdIndjrRwLpPW3E7 wXaFK04cpdVcOP4ilfuYl+Fi+lALlFLJV9elhQ6nZ0VWyzn2s2q24EoNoloQFUU= -----END CERTIFICATE-----Generated at Sat Jun 13 06:39:51 2026 by rpki-client