$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4538d02d-b3f7-4775-afcf-ba747e53e1e8.roa File: 4538d02d-b3f7-4775-afcf-ba747e53e1e8.roa (raw, json) Hash identifier: Qxe483dPcxUq1QZyqFgLv0qt/dfaix6Cp7AG29urW24= Subject key identifier: 2D:E6:95:04:FB:95:4E:C0:F4:0D:5E:C8:F1:18:5A:C5:FE:B1:1E:A7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 606096CACAB6EF919E3EC666DB88A4CF2EAE908D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4538d02d-b3f7-4775-afcf-ba747e53e1e8.roa Signing time: Mon 25 May 2026 00:00:38 +0000 ROA not before: Mon 25 May 2026 00:00:38 +0000 ROA not after: Sun 23 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fea::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:60:96:ca:ca:b6:ef:91:9e:3e:c6:66:db:88:a4:cf:2e:ae:90:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 25 00:00:38 2026 GMT Not After : Aug 23 23:59:59 2026 GMT Subject: serialNumber=c6f795a682c464d7bf1caa71ea6addbf1f1e0eb63e3517ef3bb8066a9419d448, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6e:65:54:a8:7d:c6:9d:67:f5:16:5a:fa:6f: d9:ee:da:85:ae:a7:15:e7:a8:e3:66:df:7f:e5:f2: 08:08:8d:c1:fe:81:e6:07:c0:66:6b:55:35:bb:c0: 0a:86:96:ee:d2:4a:97:d4:c1:53:84:18:6d:7c:e1: 59:0d:16:c6:d1:b0:10:a2:e5:aa:8e:93:c4:18:cf: 67:57:f7:59:e0:8d:ed:2c:b2:be:fe:fa:ff:2c:fa: 35:80:74:d3:ec:5e:d9:f6:c2:7f:0a:95:6f:f2:ce: d5:a5:1e:2f:f3:bd:ae:05:32:a9:78:e2:31:e8:bf: 69:32:b6:43:46:0c:38:4b:1b:9d:e0:bc:26:ec:62: 3f:5a:e3:a4:e1:60:10:e5:8d:70:55:9d:e7:41:31: 06:f8:a0:4d:27:49:aa:aa:cc:f8:d8:23:8a:79:ec: 34:e9:c9:da:d4:a4:b7:ac:2d:99:64:52:e1:70:7d: a0:05:ba:f6:58:0b:dc:d0:0f:31:b4:c4:c2:cc:e5: 32:59:d2:85:e1:66:2b:6c:fd:18:58:6a:12:0b:82: a6:e0:d3:d3:78:c1:14:4a:d0:dc:68:e1:99:da:6b: b1:8e:10:6f:f3:78:25:4c:d2:cf:a0:ad:f3:95:c3: fb:4d:a3:a5:25:d0:80:c8:56:ca:f0:23:79:bc:c1: 4a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E6:95:04:FB:95:4E:C0:F4:0D:5E:C8:F1:18:5A:C5:FE:B1:1E:A7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4538d02d-b3f7-4775-afcf-ba747e53e1e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fea::/32 Signature Algorithm: sha256WithRSAEncryption 50:89:10:d7:56:ac:65:15:37:85:a2:1c:f2:8b:d9:fc:01:5f: 4b:5d:9d:26:ce:6d:ed:3f:74:83:26:f6:4d:f6:31:b0:50:2b: 10:56:94:55:66:4b:2f:04:4e:7c:0b:8e:92:7e:03:57:84:d6: 48:53:43:49:dc:b0:46:7d:90:c5:c0:ea:9c:07:1f:6c:53:0e: 3a:26:6d:d8:6f:ca:d0:44:d8:dd:a1:18:ec:5e:64:ec:92:e8: 27:b6:63:ac:58:bc:c1:fc:9c:a9:a0:7c:92:06:bc:da:9e:20: 63:6e:cd:ed:d9:07:15:4a:f1:07:1f:6f:a1:ac:55:44:4a:6f: 1c:8e:1f:74:fa:7e:3a:96:b6:b5:8c:67:50:4e:63:1e:c5:0c: 90:81:7b:2b:5b:14:0a:21:75:96:d4:1a:02:36:6d:61:47:1b: 21:e4:36:85:9a:23:56:0c:b0:66:b3:52:76:28:bd:ee:cf:98: 1e:d3:db:79:a2:01:1e:41:6f:bb:9f:6a:a3:de:60:f0:95:78: d2:1e:e7:c4:d9:72:99:2f:39:d6:19:bc:c3:43:28:1b:96:b5: 45:72:fe:53:02:ad:64:c6:58:ff:dc:82:9f:c5:06:7d:69:d3: 7f:74:74:92:ca:90:18:90:d1:07:92:f3:4c:2b:94:14:19:ac: fe:95:35:95 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUYGCWysq275GePsZm24ikzy6ukI0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTI1MDAwMDM4WhcNMjYwODIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNmY3OTVhNjgyYzQ2NGQ3YmYxY2FhNzFlYTZhZGRiZjFm MWUwZWI2M2UzNTE3ZWYzYmI4MDY2YTk0MTlkNDQ4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpbmVUqH3GnWf1Flr6b9nu2oWupxXnqONm33/l8ggIjcH+ geYHwGZrVTW7wAqGlu7SSpfUwVOEGG184VkNFsbRsBCi5aqOk8QYz2dX91ngje0s sr7++v8s+jWAdNPsXtn2wn8KlW/yztWlHi/zva4FMql44jHov2kytkNGDDhLG53g vCbsYj9a46ThYBDljXBVnedBMQb4oE0nSaqqzPjYI4p57DTpydrUpLesLZlkUuFw faAFuvZYC9zQDzG0xMLM5TJZ0oXhZits/RhYahILgqbg09N4wRRK0Nxo4Znaa7GO EG/zeCVM0s+grfOVw/tNo6Ul0IDIVsrwI3m8wUrJAgMBAAGjggKyMIICrjAdBgNV HQ4EFgQULeaVBPuVTsD0DV7I8Rhaxf6xHqcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ1MzhkMDJkLWIzZjctNDc3NS1hZmNmLWJhNzQ3ZTUzZTFlOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAmAB/qMA0GCSqGSIb3DQEBCwUAA4IBAQBQiRDXVqxlFTeFohzyi9n8AV9L XZ0mzm3tP3SDJvZN9jGwUCsQVpRVZksvBE58C46SfgNXhNZIU0NJ3LBGfZDFwOqc Bx9sUw46Jm3Yb8rQRNjdoRjsXmTskugntmOsWLzB/JypoHySBrzaniBjbs3t2QcV SvEHH2+hrFVESm8cjh90+n46lra1jGdQTmMexQyQgXsrWxQKIXWW1BoCNm1hRxsh 5DaFmiNWDLBms1J2KL3uz5ge09t5ogEeQW+7n2qj3mDwlXjSHufE2XKZLznWGbzD QygblrVFcv5TAq1kxlj/3IKfxQZ9adN/dHSSypAYkNEHkvNMK5QUGaz+lTWV -----END CERTIFICATE-----Generated at Sat Jun 13 08:18:39 2026 by rpki-client