$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4efc828a-9663-4121-9eb7-bc79eba4c3f0.roa File: 4efc828a-9663-4121-9eb7-bc79eba4c3f0.roa (raw, json) Hash identifier: K/mQZ6Jr9wICnkg/UWN+Sh82GbuTlpJ71A85lw5mtZk= Subject key identifier: 66:FE:21:C2:F6:1E:64:F7:D9:F7:0E:DD:A4:AD:C5:92:96:6A:18:58 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4CA9EE831D3343AFFE1D389AF72AB35296E6151D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4efc828a-9663-4121-9eb7-bc79eba4c3f0.roa Signing time: Sat 16 May 2026 01:01:18 +0000 ROA not before: Sat 16 May 2026 01:01:18 +0000 ROA not after: Fri 14 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f24:4000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:a9:ee:83:1d:33:43:af:fe:1d:38:9a:f7:2a:b3:52:96:e6:15:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 16 01:01:18 2026 GMT Not After : Aug 14 23:59:59 2026 GMT Subject: serialNumber=750c033537308ff685f8673c52dbf2f81393b0969d2bc09689d0610ae2ed95e6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a1:f9:10:3a:3c:92:60:27:51:50:3f:1e:f4: af:43:8c:78:b5:07:31:53:4b:2c:09:4d:c8:0f:3b: d3:cf:1c:00:81:00:a9:cf:9e:ae:be:b0:60:9c:70: f6:63:0d:9e:49:f1:3c:71:c2:05:fb:7c:bb:ab:e7: ed:8d:c7:ac:3a:30:f5:ce:b8:f5:46:79:e3:fe:bd: e8:80:30:f8:6a:2d:54:cd:5e:fb:7e:08:95:57:30: a2:93:d1:40:b3:d0:1a:93:6e:49:aa:ce:65:14:1a: 13:aa:c7:d9:a9:f5:8c:d3:f0:d6:3d:e0:2e:85:93: ce:65:fd:5a:09:66:d1:a7:06:10:31:b9:87:ef:26: bc:cc:ef:22:8f:ff:ce:a8:b5:8b:2b:90:b7:27:74: 53:e2:05:59:56:2f:65:c8:03:00:bb:23:cd:4e:ed: 0c:53:eb:47:ca:fd:28:2c:52:1e:dc:a4:76:88:f6: 18:65:7f:f3:7a:a6:d0:69:e7:42:6f:09:74:bd:d9: 6d:2f:6c:72:b3:db:a4:c6:a4:cf:dd:bb:ce:c6:e2: 8d:dc:6e:f1:9c:e7:dc:5d:18:f1:7f:f5:f7:17:b4: 4c:d9:5a:e9:66:9e:63:3d:c0:f1:05:d7:67:a0:89: 14:12:c2:67:0c:20:d1:61:75:89:e2:98:b0:3b:d3: 4c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:FE:21:C2:F6:1E:64:F7:D9:F7:0E:DD:A4:AD:C5:92:96:6A:18:58 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4efc828a-9663-4121-9eb7-bc79eba4c3f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f24:4000::/36 Signature Algorithm: sha256WithRSAEncryption 2b:c7:50:cc:91:45:4b:fe:a6:47:92:6c:75:07:dc:1a:00:47: ec:26:fa:80:74:6a:15:39:44:5c:a9:bf:03:62:e8:b1:55:98: 0d:58:9f:c1:48:79:a8:fa:8e:48:3b:8c:62:58:c0:a1:46:20: 11:ca:31:0b:46:65:62:16:bd:4c:10:25:b2:e7:2e:7c:7d:a0: ab:07:f7:03:31:a4:c2:58:ec:e3:4c:f6:37:79:3f:31:61:42: 29:3b:db:b4:21:4b:13:99:21:4a:66:6f:1b:ad:0a:78:e5:66: fb:d8:f4:75:45:7b:bc:e0:3c:63:69:7c:e8:0f:11:b3:d9:d8: b5:fe:68:f0:37:8c:b7:14:cd:15:ab:37:2b:c8:bf:9c:5b:c4: 46:da:86:ec:51:8e:e6:ca:00:20:38:2f:36:5f:ef:66:84:1d: 3a:28:2a:47:5a:a5:02:ef:77:9b:ba:c2:d4:46:7f:47:92:04: 27:bb:be:bd:35:d6:86:e8:fe:92:97:1e:48:80:bb:a6:8d:96: a7:21:94:49:63:c8:05:6e:d0:13:d9:a0:a8:22:48:09:d7:64: 03:5a:93:f1:96:3f:e5:c7:3e:81:c6:c2:4b:2f:25:a8:fd:0e: cd:65:77:dd:be:ce:4d:cd:b0:e5:e8:89:11:c5:dd:42:4c:9d: 53:5a:d2:92 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUTKnugx0zQ6/+HTia9yqzUpbmFR0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE2MDEwMTE4WhcNMjYwODE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NTBjMDMzNTM3MzA4ZmY2ODVmODY3M2M1MmRiZjJmODEz OTNiMDk2OWQyYmMwOTY4OWQwNjEwYWUyZWQ5NWU2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCeofkQOjySYCdRUD8e9K9DjHi1BzFTSywJTcgPO9PPHACB AKnPnq6+sGCccPZjDZ5J8TxxwgX7fLur5+2Nx6w6MPXOuPVGeeP+veiAMPhqLVTN Xvt+CJVXMKKT0UCz0BqTbkmqzmUUGhOqx9mp9YzT8NY94C6Fk85l/VoJZtGnBhAx uYfvJrzM7yKP/86otYsrkLcndFPiBVlWL2XIAwC7I81O7QxT60fK/SgsUh7cpHaI 9hhlf/N6ptBp50JvCXS92W0vbHKz26TGpM/du87G4o3cbvGc59xdGPF/9fcXtEzZ WulmnmM9wPEF12egiRQSwmcMINFhdYnimLA700xpAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUZv4hwvYeZPfZ9w7dpK3FkpZqGFgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRlZmM4MjhhLTk2NjMtNDEyMS05ZWI3LWJjNzllYmE0YzNmMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8kQDANBgkqhkiG9w0BAQsFAAOCAQEAK8dQzJFFS/6mR5JsdQfcGgBH 7Cb6gHRqFTlEXKm/A2LosVWYDVifwUh5qPqOSDuMYljAoUYgEcoxC0ZlYha9TBAl sucufH2gqwf3AzGkwljs40z2N3k/MWFCKTvbtCFLE5khSmZvG60KeOVm+9j0dUV7 vOA8Y2l86A8Rs9nYtf5o8DeMtxTNFas3K8i/nFvERtqG7FGO5soAIDgvNl/vZoQd OigqR1qlAu93m7rC1EZ/R5IEJ7u+vTXWhuj+kpceSIC7po2WpyGUSWPIBW7QE9mg qCJICddkA1qT8ZY/5cc+gcbCSy8lqP0OzWV33b7OTc2w5eiJEcXdQkydU1rSkg== -----END CERTIFICATE-----Generated at Sat Jun 13 05:46:09 2026 by rpki-client