$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b06236d-ee1a-41aa-bf51-6319bb2bd522.roa File: 7b06236d-ee1a-41aa-bf51-6319bb2bd522.roa (raw, json) Hash identifier: PJMrCM+ZkZ2UVIcmeXvZQ6xtKEbCzfqDa0r1fibNB6E= Subject key identifier: 0B:D1:ED:36:0E:49:4B:88:08:A0:D0:69:D5:6E:91:9C:DE:34:90:9C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6971532AF9361E1B40AEDEAA01C56703067AB19B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b06236d-ee1a-41aa-bf51-6319bb2bd522.roa Signing time: Fri 22 May 2026 16:36:03 +0000 ROA not before: Fri 22 May 2026 16:36:03 +0000 ROA not after: Thu 20 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fe8:8020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:71:53:2a:f9:36:1e:1b:40:ae:de:aa:01:c5:67:03:06:7a:b1:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 22 16:36:03 2026 GMT Not After : Aug 20 23:59:59 2026 GMT Subject: serialNumber=bc366dfa3a8339b3a4ac0c7521ca53ecb0b74880ae965565d3530f4cf5e7ba89, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f9:bd:fb:61:ee:59:0c:9e:02:7a:10:39:e0: bd:81:5c:bc:b7:4e:65:fe:a9:7f:6d:c0:d3:1a:83: 1c:24:f7:72:9e:be:1d:1b:e8:17:65:72:c4:ac:49: 09:fc:be:41:36:9c:3c:ff:6d:05:98:75:bc:9c:07: 89:89:d7:53:5b:a3:c1:d7:63:68:01:8e:8b:51:41: 19:fd:91:e3:05:56:e2:26:05:a9:28:75:85:a2:47: bb:6d:4a:d0:5c:aa:db:03:6d:ad:c9:d6:0a:f8:b4: a8:ed:8b:eb:a5:d9:22:14:d7:a3:5b:74:b4:b0:30: e1:22:b0:bd:27:16:dd:96:0f:ab:c6:44:2c:e9:f1: 33:88:6b:db:2e:d1:33:07:4f:7f:f4:46:67:f8:8d: aa:a7:0f:f7:4b:f4:c9:8c:cd:58:03:20:ab:56:75: b9:0e:4d:c8:70:14:c2:2b:d1:e1:a8:d4:fd:6a:2d: f4:3f:35:0b:08:55:55:d9:e6:75:c8:93:03:7f:09: a5:da:00:09:c3:ad:0f:96:df:82:1b:3a:8a:5b:90: 0e:d1:71:7c:de:88:cb:59:8e:e0:92:bc:95:58:b8: 66:cf:86:7f:ff:7c:c8:5e:a7:60:fd:4f:f0:7e:a9: c8:26:ef:69:b0:0f:33:0c:d1:0e:87:06:b4:6a:10: 0a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D1:ED:36:0E:49:4B:88:08:A0:D0:69:D5:6E:91:9C:DE:34:90:9C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b06236d-ee1a-41aa-bf51-6319bb2bd522.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fe8:8020::/48 Signature Algorithm: sha256WithRSAEncryption ac:51:40:f1:85:e5:66:91:eb:2f:bc:5d:14:17:d4:9a:36:1f: 72:a9:9c:74:37:28:52:f9:18:84:b2:af:6d:b1:70:f5:68:89: 7b:d6:2a:25:c2:a0:49:d9:5d:a5:0a:a5:2a:e9:d2:41:4a:0c: 08:f9:09:cf:ae:09:eb:6e:3a:2c:2c:d0:26:3b:57:63:6a:a2: 2b:19:06:c4:31:5e:76:e9:00:54:da:a0:86:9b:ac:ca:de:c1: d3:d7:b5:0a:72:46:43:85:98:09:0e:eb:c0:23:c9:d1:37:5e: d8:c3:42:f6:35:16:b0:55:3a:f0:8b:df:ec:e3:62:e7:41:67: 5d:ff:44:1d:ee:89:89:9b:a3:94:b6:8b:b8:8d:74:b7:ac:eb: b7:d0:b4:be:f8:3f:84:c7:74:4d:f3:e0:6b:9c:7f:f2:ce:f6: bf:4b:bb:4a:e8:24:92:90:70:b1:89:9d:fc:b9:f5:79:12:1d: af:a1:83:97:19:7e:c0:6d:f4:b8:1c:62:dd:6b:7f:7e:f2:47: 3d:93:26:2d:3a:45:5a:33:22:b3:69:78:9d:f0:a8:21:18:76: 6e:9e:31:0d:84:51:88:be:c5:f4:9f:db:9c:c7:e2:39:31:0c: 8b:1d:f2:0e:cb:cf:6f:58:2c:c9:bd:1e:5f:84:0a:3f:e3:2f: 25:97:f3:cd -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUaXFTKvk2HhtArt6qAcVnAwZ6sZswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTIyMTYzNjAzWhcNMjYwODIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiYzM2NmRmYTNhODMzOWIzYTRhYzBjNzUyMWNhNTNlY2Iw Yjc0ODgwYWU5NjU1NjVkMzUzMGY0Y2Y1ZTdiYTg5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2+b37Ye5ZDJ4CehA54L2BXLy3TmX+qX9twNMagxwk93Ke vh0b6BdlcsSsSQn8vkE2nDz/bQWYdbycB4mJ11Nbo8HXY2gBjotRQRn9keMFVuIm BakodYWiR7ttStBcqtsDba3J1gr4tKjti+ul2SIU16NbdLSwMOEisL0nFt2WD6vG RCzp8TOIa9su0TMHT3/0Rmf4jaqnD/dL9MmMzVgDIKtWdbkOTchwFMIr0eGo1P1q LfQ/NQsIVVXZ5nXIkwN/CaXaAAnDrQ+W34IbOopbkA7RcXzeiMtZjuCSvJVYuGbP hn//fMhep2D9T/B+qcgm72mwDzMM0Q6HBrRqEAolAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUC9HtNg5JS4gIoNBp1W6RnN40kJwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdiMDYyMzZkLWVlMWEtNDFhYS1iZjUxLTYzMTliYjJiZDUyMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/ogCAwDQYJKoZIhvcNAQELBQADggEBAKxRQPGF5WaR6y+8XRQX1Jo2 H3KpnHQ3KFL5GISyr22xcPVoiXvWKiXCoEnZXaUKpSrp0kFKDAj5Cc+uCetuOiws 0CY7V2NqoisZBsQxXnbpAFTaoIabrMrewdPXtQpyRkOFmAkO68AjydE3XtjDQvY1 FrBVOvCL3+zjYudBZ13/RB3uiYmbo5S2i7iNdLes67fQtL74P4THdE3z4Gucf/LO 9r9Lu0roJJKQcLGJnfy59XkSHa+hg5cZfsBt9LgcYt1rf37yRz2TJi06RVozIrNp eJ3wqCEYdm6eMQ2EUYi+xfSf25zH4jkxDIsd8g7Lz29YLMm9Hl+ECj/jLyWX880= -----END CERTIFICATE-----Generated at Sat Jun 13 05:35:27 2026 by rpki-client