$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/920758f2-7345-4570-bf59-a1896cc3030a.roa File: 920758f2-7345-4570-bf59-a1896cc3030a.roa (raw, json) Hash identifier: /4+pSNZNvUQoWA13HU0VDQ/QFH27CM+1g9m1UUtBJb8= Subject key identifier: CA:4F:DB:7E:EB:EE:63:54:33:14:45:27:B5:C4:89:77:98:35:EA:10 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4FA8B3A24A86B1AB764C07CFA00F46FBB0314EC1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/920758f2-7345-4570-bf59-a1896cc3030a.roa Signing time: Sun 31 May 2026 00:30:45 +0000 ROA not before: Sun 31 May 2026 00:30:45 +0000 ROA not after: Sat 29 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fe9:5040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:a8:b3:a2:4a:86:b1:ab:76:4c:07:cf:a0:0f:46:fb:b0:31:4e:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 31 00:30:45 2026 GMT Not After : Aug 29 23:59:59 2026 GMT Subject: serialNumber=b25de8e0c1eea4ae01e717125b2687c2ec0a2db3d658352e5837269f2c93c42e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:81:ef:3c:69:3c:c9:ae:91:cf:cb:58:08:e2: 2a:c2:21:7b:85:78:ff:85:9b:c9:f0:e7:75:48:c4: f1:17:b6:50:26:68:49:74:78:52:1d:7c:c4:36:55: 94:92:84:a5:de:af:2d:bd:46:1e:7e:d4:7d:6f:c1: 59:1b:46:ed:e9:d1:7c:f1:58:27:18:95:20:c7:3f: 98:25:5d:cd:3d:aa:57:35:63:24:fc:97:00:51:3a: 63:8a:9b:dc:dd:02:1e:b6:b5:d4:49:09:79:e1:24: f2:5b:6c:be:2c:3d:27:72:97:f8:78:4d:00:f3:a1: 19:9f:8b:cf:6c:3c:ee:5e:f2:9a:bd:3b:40:5d:e5: 2e:a8:4f:da:ab:6a:f0:30:f8:c7:3e:ba:91:9a:9b: f9:8d:2f:61:e3:8f:4d:e4:b3:6b:93:8a:c3:17:f9: 7f:a5:47:51:84:55:5e:90:44:1b:3f:94:40:cf:61: 05:90:33:da:3c:dc:b1:76:92:41:88:84:ee:b2:74: 25:06:6a:d5:80:2e:f8:54:9f:d5:43:65:67:df:17: d8:52:f5:e9:b4:3c:19:ad:b9:a0:d8:ec:a9:08:0d: 3f:39:13:31:8d:20:d8:f0:62:77:c3:52:b2:03:49: c1:0d:37:bc:16:6c:d1:9b:3f:0a:2f:ff:26:c7:b5: b0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:4F:DB:7E:EB:EE:63:54:33:14:45:27:B5:C4:89:77:98:35:EA:10 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/920758f2-7345-4570-bf59-a1896cc3030a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fe9:5040::/48 Signature Algorithm: sha256WithRSAEncryption 7a:d5:90:dc:28:03:91:48:fe:ad:e9:ee:57:ab:d0:9a:e0:d7: e6:ca:f2:a7:15:03:e9:8c:70:cf:73:de:cd:12:4b:3c:3a:fb: 7f:c9:90:a9:60:72:4f:1b:3e:a0:77:38:60:ea:e5:94:9d:2c: a0:e5:8e:88:7f:cc:4a:49:16:53:50:3b:bd:2c:3d:0b:80:8f: 82:93:28:e6:9c:bf:aa:35:19:97:56:f7:49:57:c6:d3:6c:2a: 44:64:b4:3e:d6:5a:15:0b:6b:9d:f4:f6:44:90:ee:63:18:17: 3f:90:21:05:cb:8f:d4:64:15:e1:dc:70:38:c1:1a:15:6c:6a: f9:2b:51:a7:5c:4f:c3:98:4d:fa:3c:cb:a4:cb:fe:40:0e:2a: a1:ee:f5:03:20:37:4a:50:04:52:76:04:78:e8:12:5a:2d:86: 2b:29:49:d6:44:32:9a:8f:6d:ba:21:86:f9:e5:7c:99:d8:68: 08:67:e4:34:f8:05:7e:1e:a0:f2:1e:ea:2e:c2:18:ae:8e:30: 64:27:0f:8d:64:31:cf:b0:fe:f2:36:1e:c1:ce:6b:4f:b4:0b: 8c:83:0f:82:46:f1:ca:57:ef:73:51:51:b1:85:85:d0:20:29: de:02:ad:19:32:ca:c5:11:b7:f5:a2:0a:49:1a:e1:0b:fb:4a: a4:f9:c5:dd -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUT6izokqGsat2TAfPoA9G+7AxTsEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTMxMDAzMDQ1WhcNMjYwODI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMjVkZThlMGMxZWVhNGFlMDFlNzE3MTI1YjI2ODdjMmVj MGEyZGIzZDY1ODM1MmU1ODM3MjY5ZjJjOTNjNDJlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCPge88aTzJrpHPy1gI4irCIXuFeP+Fm8nw53VIxPEXtlAm aEl0eFIdfMQ2VZSShKXery29Rh5+1H1vwVkbRu3p0XzxWCcYlSDHP5glXc09qlc1 YyT8lwBROmOKm9zdAh62tdRJCXnhJPJbbL4sPSdyl/h4TQDzoRmfi89sPO5e8pq9 O0Bd5S6oT9qravAw+Mc+upGam/mNL2Hjj03ks2uTisMX+X+lR1GEVV6QRBs/lEDP YQWQM9o83LF2kkGIhO6ydCUGatWALvhUn9VDZWffF9hS9em0PBmtuaDY7KkIDT85 EzGNINjwYnfDUrIDScENN7wWbNGbPwov/ybHtbAvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUyk/bfuvuY1QzFEUntcSJd5g16hAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkyMDc1OGYyLTczNDUtNDU3MC1iZjU5LWExODk2Y2MzMDMwYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/pUEAwDQYJKoZIhvcNAQELBQADggEBAHrVkNwoA5FI/q3p7ler0Jrg 1+bK8qcVA+mMcM9z3s0SSzw6+3/JkKlgck8bPqB3OGDq5ZSdLKDljoh/zEpJFlNQ O70sPQuAj4KTKOacv6o1GZdW90lXxtNsKkRktD7WWhULa5309kSQ7mMYFz+QIQXL j9RkFeHccDjBGhVsavkrUadcT8OYTfo8y6TL/kAOKqHu9QMgN0pQBFJ2BHjoElot hispSdZEMpqPbbohhvnlfJnYaAhn5DT4BX4eoPIe6i7CGK6OMGQnD41kMc+w/vI2 HsHOa0+0C4yDD4JG8cpX73NRUbGFhdAgKd4CrRkyysURt/WiCkka4Qv7SqT5xd0= -----END CERTIFICATE-----Generated at Sat Jun 13 09:37:00 2026 by rpki-client