$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/65c7e436-50a0-4c45-a6d2-a899c8f5e790.roa File: 65c7e436-50a0-4c45-a6d2-a899c8f5e790.roa (raw, json) Hash identifier: pkPjWQEnXVzxuAkIBaEIq3AvzGe1i7in5JrsBnOuUJ0= Subject key identifier: A4:C9:9A:8A:38:82:BC:D9:9A:4F:25:BA:C5:69:2C:0A:35:FF:72:73 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 105301DA19FB866BD1C19DEB0068A2F1BF1C1F52 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/65c7e436-50a0-4c45-a6d2-a899c8f5e790.roa Signing time: Fri 15 May 2026 01:50:06 +0000 ROA not before: Fri 15 May 2026 01:50:06 +0000 ROA not after: Thu 13 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1ffd:807b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:53:01:da:19:fb:86:6b:d1:c1:9d:eb:00:68:a2:f1:bf:1c:1f:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 15 01:50:06 2026 GMT Not After : Aug 13 23:59:59 2026 GMT Subject: serialNumber=d803643b326ee91041def96d47b885d5ef3b424862ecd7a363fe79ca7a7f6463, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:80:60:d9:0b:ed:b6:37:d3:79:cb:17:f0:f5: d8:07:ef:15:93:99:1d:b2:b1:f0:ab:96:af:1c:ec: c8:6c:9f:b8:f7:7d:cc:df:f2:63:d2:30:45:12:4a: c5:da:f1:44:cd:12:40:e6:81:df:b6:f1:f6:69:cc: 87:1d:68:45:ea:2e:3c:e3:af:b9:56:c0:a5:2a:39: f9:f9:a2:21:63:b9:34:02:40:98:bc:cf:ab:50:bc: 9c:28:10:f2:1c:03:a9:5d:26:3f:db:0b:e9:06:eb: f7:8d:42:09:a5:c1:42:cc:c2:0a:e2:84:dd:02:ca: fe:68:a0:65:fc:66:34:c9:c2:f5:38:46:ce:cb:be: 72:6f:0e:17:e8:c1:1f:62:11:20:44:a8:68:e0:4d: e9:c8:1f:36:0d:bd:8c:10:10:b0:ad:87:82:c8:8c: 7b:3d:bf:0a:87:53:00:6a:99:3c:d5:cb:e9:a0:62: c8:6b:92:5e:41:d4:9e:e9:e8:46:d6:ed:c4:a4:bd: d7:5f:cb:48:44:43:33:e4:31:e4:a3:b5:fa:a2:d7: aa:ff:ce:0a:00:94:e2:25:58:1a:41:d7:3d:59:b0: 3e:4e:7c:a7:79:50:78:74:81:9e:50:17:25:fd:b2: 4d:99:d1:bb:b5:f0:94:15:37:b3:18:2d:3d:a2:5e: c4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C9:9A:8A:38:82:BC:D9:9A:4F:25:BA:C5:69:2C:0A:35:FF:72:73 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/65c7e436-50a0-4c45-a6d2-a899c8f5e790.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffd:807b::/48 Signature Algorithm: sha256WithRSAEncryption 28:1e:7f:61:02:27:f0:17:62:01:6f:ee:b2:c5:99:3c:52:f4: 8f:f5:cc:07:d4:12:f1:11:1f:74:1c:38:5d:7e:48:3f:dd:3a: 6b:47:f8:d2:0e:26:fc:ae:79:93:18:be:8f:8c:a7:30:e2:7e: 94:d7:76:6b:3d:48:fe:3e:b1:ce:b7:da:81:6c:79:bc:63:98: 26:17:90:0e:97:26:32:6c:6a:a1:43:54:c1:35:04:97:fd:18: 87:37:cd:c8:20:fe:40:f8:47:0f:ab:52:bc:6d:fb:cd:fb:e7: 00:bc:e4:7f:72:0b:ca:2d:fa:88:c4:a9:0f:47:04:1c:0a:4f: d2:bd:0a:88:90:14:81:c0:51:c6:fa:d7:55:9d:e6:f9:18:c7: 71:fc:e1:79:e1:8f:c0:36:82:96:f1:a6:ef:58:1b:7e:88:6a: 76:cb:a6:c9:ad:95:e5:c7:a8:72:3c:db:23:bf:e5:06:82:c3: 26:79:6f:e9:5b:df:7b:d3:6b:c1:b0:db:98:a9:ca:cb:25:56: 52:c7:62:52:54:cf:cc:6e:25:c9:28:80:5b:a0:1a:ba:24:ee: 4f:56:d0:7e:30:ca:09:2b:7f:93:31:cd:d7:e2:fd:b1:79:73: 91:d6:8c:3f:0a:c3:31:12:4c:3c:08:1b:c9:d4:c9:05:3e:9a: fd:ac:b4:58 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEFMB2hn7hmvRwZ3rAGii8b8cH1IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE1MDE1MDA2WhcNMjYwODEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkODAzNjQzYjMyNmVlOTEwNDFkZWY5NmQ0N2I4ODVkNWVm M2I0MjQ4NjJlY2Q3YTM2M2ZlNzljYTdhN2Y2NDYzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDfgGDZC+22N9N5yxfw9dgH7xWTmR2ysfCrlq8c7Mhsn7j3 fczf8mPSMEUSSsXa8UTNEkDmgd+28fZpzIcdaEXqLjzjr7lWwKUqOfn5oiFjuTQC QJi8z6tQvJwoEPIcA6ldJj/bC+kG6/eNQgmlwULMwgrihN0Cyv5ooGX8ZjTJwvU4 Rs7LvnJvDhfowR9iESBEqGjgTenIHzYNvYwQELCth4LIjHs9vwqHUwBqmTzVy+mg Yshrkl5B1J7p6EbW7cSkvddfy0hEQzPkMeSjtfqi16r/zgoAlOIlWBpB1z1ZsD5O fKd5UHh0gZ5QFyX9sk2Z0bu18JQVN7MYLT2iXsTbAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUpMmaijiCvNmaTyW6xWksCjX/cnMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY1YzdlNDM2LTUwYTAtNGM0NS1hNmQyLWE4OTljOGY1ZTc5MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/9gHswDQYJKoZIhvcNAQELBQADggEBACgef2ECJ/AXYgFv7rLFmTxS 9I/1zAfUEvERH3QcOF1+SD/dOmtH+NIOJvyueZMYvo+MpzDifpTXdms9SP4+sc63 2oFsebxjmCYXkA6XJjJsaqFDVME1BJf9GIc3zcgg/kD4Rw+rUrxt+8375wC85H9y C8ot+ojEqQ9HBBwKT9K9CoiQFIHAUcb611Wd5vkYx3H84Xnhj8A2gpbxpu9YG36I anbLpsmtleXHqHI82yO/5QaCwyZ5b+lb33vTa8Gw25ipysslVlLHYlJUz8xuJcko gFugGrok7k9W0H4wygkrf5Mxzdfi/bF5c5HWjD8KwzESTDwIG8nUyQU+mv2stFg= -----END CERTIFICATE-----Generated at Sat Jun 13 05:51:15 2026 by rpki-client