$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3cbfc44b-8734-4b3f-a5c8-818e02dfca64.roa File: 3cbfc44b-8734-4b3f-a5c8-818e02dfca64.roa (raw, json) Hash identifier: +ntaVkrNsNWr71y7EuvTkyY0gFEw1jZa4NufbeBlQfw= Subject key identifier: EC:9B:86:96:44:BF:C1:84:6C:02:EC:19:CF:5F:FD:68:D2:12:BE:71 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4A0FF3BE21B1D58447D3BBD5559AE7AD962AE172 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3cbfc44b-8734-4b3f-a5c8-818e02dfca64.roa Signing time: Fri 22 May 2026 16:32:37 +0000 ROA not before: Fri 22 May 2026 16:32:37 +0000 ROA not after: Thu 20 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fe0:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:0f:f3:be:21:b1:d5:84:47:d3:bb:d5:55:9a:e7:ad:96:2a:e1:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 22 16:32:37 2026 GMT Not After : Aug 20 23:59:59 2026 GMT Subject: serialNumber=b85e5d08c20ecc763b40284b18b89bec5ba82e586d040d60bc80e4bf3e26f062, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:10:a3:c1:c7:ed:c3:b8:91:d7:45:37:aa:f3: 57:d3:61:e4:7b:bf:64:43:cd:7d:7b:fd:6d:93:10: 3f:4f:ec:21:4a:f8:3c:f0:f3:68:9e:c7:2d:aa:bf: b5:ef:b4:a1:13:1c:cf:69:b0:12:47:8f:a9:9f:64: 52:f8:3c:ec:cf:87:c3:53:31:64:e2:68:ae:66:7c: d5:17:e0:a9:e4:db:7a:1f:5e:86:6d:0b:b8:8f:5d: 2e:69:78:18:22:ec:00:11:b6:e1:bb:5e:ad:23:1d: 92:28:c7:53:25:b3:cc:34:15:63:3f:7f:18:5d:aa: 2a:70:17:3c:44:eb:43:c5:83:ec:4e:ea:af:8f:86: 60:45:dd:f2:e3:96:f1:10:94:a9:ef:0d:64:8f:3b: cb:84:17:c4:ee:60:59:ea:17:76:1f:c2:2c:85:7d: 1f:de:82:00:fa:e3:12:0d:d4:cf:1f:7a:73:b1:76: c7:ff:40:60:2d:6a:92:4f:ea:ee:4c:70:a9:31:6f: f2:b3:a6:1d:36:74:b8:f4:c4:5e:84:08:bc:5b:07: 39:d8:06:9e:66:18:f1:d5:6b:9f:50:d5:cf:69:78: 3f:e7:3c:c0:5b:26:37:b7:58:fc:ba:f9:49:32:2d: 49:03:1e:e7:75:da:65:92:42:5a:f2:41:4b:e7:6f: 2a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:9B:86:96:44:BF:C1:84:6C:02:EC:19:CF:5F:FD:68:D2:12:BE:71 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3cbfc44b-8734-4b3f-a5c8-818e02dfca64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fe0:e000::/40 Signature Algorithm: sha256WithRSAEncryption d0:8d:73:cf:a5:89:2e:6f:dd:a9:5c:2e:e3:f5:fc:b4:2b:68: ae:3a:bc:ec:b2:1f:32:b3:b2:b5:a1:3e:ba:db:ba:d9:1e:a5: 52:cf:ce:b1:33:8e:ab:ee:68:df:db:d7:c0:a5:9c:e5:5a:1a: 82:ad:37:1a:da:d5:7a:39:e3:11:58:c0:c7:27:90:b6:78:04: e2:8b:bc:b4:80:34:dd:8a:61:86:a9:d1:5e:7f:88:be:9b:26: 6e:ee:2d:53:4c:98:f5:c1:1c:a3:7a:6b:2e:70:10:96:1d:f2: 25:da:d0:be:45:69:7c:25:e1:1c:07:f4:44:88:29:68:b4:de: af:2c:49:39:d9:50:d7:f4:6f:05:47:cf:e4:f3:4f:42:a3:b5: 6c:95:59:57:28:31:8f:d3:9d:25:10:9b:ad:a1:52:a9:7a:56: eb:cc:b0:72:05:9c:a0:e6:97:61:36:14:3b:34:cc:a3:4f:1d: 63:0c:dd:46:ad:e7:0c:6b:1b:69:99:95:d0:90:28:9c:62:8e: 11:c5:80:70:34:f4:44:54:39:c5:a3:47:28:2b:ba:94:f2:3c: 01:d4:3f:fb:2b:83:aa:3b:c3:01:f3:24:1e:c1:79:b1:1f:db: 0e:a7:38:63:0b:7d:c0:99:51:46:74:f3:3a:b4:83:03:83:97: 28:11:4b:00 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUSg/zviGx1YRH07vVVZrnrZYq4XIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTIyMTYzMjM3WhcNMjYwODIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiODVlNWQwOGMyMGVjYzc2M2I0MDI4NGIxOGI4OWJlYzVi YTgyZTU4NmQwNDBkNjBiYzgwZTRiZjNlMjZmMDYyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDuEKPBx+3DuJHXRTeq81fTYeR7v2RDzX17/W2TED9P7CFK +Dzw82iexy2qv7XvtKETHM9psBJHj6mfZFL4POzPh8NTMWTiaK5mfNUX4Knk23of XoZtC7iPXS5peBgi7AARtuG7Xq0jHZIox1Mls8w0FWM/fxhdqipwFzxE60PFg+xO 6q+PhmBF3fLjlvEQlKnvDWSPO8uEF8TuYFnqF3YfwiyFfR/eggD64xIN1M8fenOx dsf/QGAtapJP6u5McKkxb/Kzph02dLj0xF6ECLxbBznYBp5mGPHVa59Q1c9peD/n PMBbJje3WPy6+UkyLUkDHud12mWSQlryQUvnbyp5AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU7JuGlkS/wYRsAuwZz1/9aNISvnEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNjYmZjNDRiLTg3MzQtNGIzZi1hNWM4LTgxOGUwMmRmY2E2NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/g4DANBgkqhkiG9w0BAQsFAAOCAQEA0I1zz6WJLm/dqVwu4/X8tCto rjq87LIfMrOytaE+utu62R6lUs/OsTOOq+5o39vXwKWc5Voagq03GtrVejnjEVjA xyeQtngE4ou8tIA03YphhqnRXn+Ivpsmbu4tU0yY9cEco3prLnAQlh3yJdrQvkVp fCXhHAf0RIgpaLTeryxJOdlQ1/RvBUfP5PNPQqO1bJVZVygxj9OdJRCbraFSqXpW 68ywcgWcoOaXYTYUOzTMo08dYwzdRq3nDGsbaZmV0JAonGKOEcWAcDT0RFQ5xaNH KCu6lPI8AdQ/+yuDqjvDAfMkHsF5sR/bDqc4Ywt9wJlRRnTzOrSDA4OXKBFLAA== -----END CERTIFICATE-----Generated at Sat Jun 13 06:39:13 2026 by rpki-client