$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/95b7fbbb-a4dc-4b12-a531-a16e0f036a80.roa File: 95b7fbbb-a4dc-4b12-a531-a16e0f036a80.roa (raw, json) Hash identifier: xhMYogAsMrqLQYInStk4cxjZIney2WLevnsF5aD0Hkw= Subject key identifier: 6F:B1:F1:0F:36:6C:0C:35:1F:E5:13:5C:AE:BB:AB:11:AA:32:36:73 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 789C4D589CF8FDA177BF90C24A999BF01B06F0DA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/95b7fbbb-a4dc-4b12-a531-a16e0f036a80.roa Signing time: Fri 22 May 2026 16:36:07 +0000 ROA not before: Fri 22 May 2026 16:36:07 +0000 ROA not after: Thu 20 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fe8:8090::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:9c:4d:58:9c:f8:fd:a1:77:bf:90:c2:4a:99:9b:f0:1b:06:f0:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 22 16:36:07 2026 GMT Not After : Aug 20 23:59:59 2026 GMT Subject: serialNumber=6283102083ae1add8cfed709b0de70cfe01c872054e95b41f79167bdc5aa6d6f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e1:5c:49:e5:b8:19:53:f3:59:da:42:68:fa: 04:a1:f3:10:bf:bc:16:b5:ad:0b:46:93:7d:bb:2e: a1:fd:55:d1:cc:b4:23:9a:dc:41:3a:7f:78:1d:4f: 6e:b4:a0:3b:ec:8a:26:9f:f5:54:2e:ee:b8:fc:38: bd:0c:bd:7a:cb:6a:ae:87:2a:0a:e8:91:bd:c0:44: 1d:94:d5:d6:54:b4:ff:d0:bf:fc:87:da:2d:70:4e: a0:3e:d2:72:6f:fa:2d:4d:cf:40:2e:cc:13:42:ba: 87:ca:c0:cf:9a:b9:93:bc:3e:b6:b7:25:1d:ad:1e: 59:d3:51:a0:4b:07:27:0a:a7:c2:b5:7e:43:5f:2a: 9a:37:81:b6:a6:1f:96:db:9c:9f:98:b4:6c:93:a9: a3:ba:8b:8e:08:6c:44:e7:44:16:27:8f:f1:b3:0f: a5:1a:86:4c:71:1f:4b:6c:bb:40:2c:97:36:0d:83: 0a:97:80:11:54:fc:81:ac:d6:90:e9:eb:81:85:cc: c3:e9:cf:76:b1:a2:4b:40:94:37:bb:76:49:24:75: 75:03:3f:8a:4c:0d:af:17:7c:88:c0:db:b4:1e:6c: 1d:2d:c3:a4:0e:c9:06:18:a7:8c:e2:06:cf:88:e9: 33:dc:41:65:17:5c:f5:d4:74:31:51:d0:60:16:86: 41:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B1:F1:0F:36:6C:0C:35:1F:E5:13:5C:AE:BB:AB:11:AA:32:36:73 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/95b7fbbb-a4dc-4b12-a531-a16e0f036a80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fe8:8090::/48 Signature Algorithm: sha256WithRSAEncryption 9e:0a:4a:19:b3:db:85:5f:95:67:b2:7a:44:4f:e9:9e:97:79: c2:8c:4b:24:01:79:a6:0b:2d:6f:26:0c:58:9a:09:44:0b:2e: 9a:89:d1:19:df:b0:cf:a3:60:c4:96:11:bc:5c:23:44:d8:ff: 1c:83:1c:a5:f1:b3:8d:7a:8c:dd:01:7e:e8:eb:33:29:f4:c0: 03:31:59:67:e7:12:8f:33:4c:fb:38:11:95:e9:c5:c7:77:22: 5f:26:eb:b5:e7:2c:1f:4e:6d:21:ef:4b:a4:04:be:c8:1d:10: 70:11:bc:eb:65:13:21:d9:dc:b7:95:b9:39:fd:25:94:56:3d: 35:94:f4:07:88:21:f0:77:de:3d:26:71:0f:29:7b:75:50:70: 26:0d:bb:23:b5:2d:8c:f9:b5:9e:0e:6d:66:1f:f8:45:be:4b: d0:67:65:34:be:bf:5a:c8:91:02:3c:b8:c1:37:b1:13:3a:e0: 6d:c6:39:63:39:a2:c6:d3:8b:a2:df:43:0d:89:a6:56:4e:c0: db:6a:2f:4c:94:b1:b6:20:60:84:81:19:f8:24:73:c9:d4:4f: 94:3c:09:22:03:d8:b1:df:96:1c:f2:7c:c8:af:66:ee:34:f9: 42:c8:1e:65:a0:2c:e9:ae:6f:0f:56:ec:66:15:fa:9c:a3:56: 84:bd:81:d1 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUeJxNWJz4/aF3v5DCSpmb8BsG8NowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTIyMTYzNjA3WhcNMjYwODIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MjgzMTAyMDgzYWUxYWRkOGNmZWQ3MDliMGRlNzBjZmUw MWM4NzIwNTRlOTViNDFmNzkxNjdiZGM1YWE2ZDZmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCc4VxJ5bgZU/NZ2kJo+gSh8xC/vBa1rQtGk327LqH9VdHM tCOa3EE6f3gdT260oDvsiiaf9VQu7rj8OL0MvXrLaq6HKgrokb3ARB2U1dZUtP/Q v/yH2i1wTqA+0nJv+i1Nz0AuzBNCuofKwM+auZO8Pra3JR2tHlnTUaBLBycKp8K1 fkNfKpo3gbamH5bbnJ+YtGyTqaO6i44IbETnRBYnj/GzD6UahkxxH0tsu0AslzYN gwqXgBFU/IGs1pDp64GFzMPpz3axoktAlDe7dkkkdXUDP4pMDa8XfIjA27QebB0t w6QOyQYYp4ziBs+I6TPcQWUXXPXUdDFR0GAWhkGRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUb7HxDzZsDDUf5RNcrrurEaoyNnMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk1YjdmYmJiLWE0ZGMtNGIxMi1hNTMxLWExNmUwZjAzNmE4MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/ogJAwDQYJKoZIhvcNAQELBQADggEBAJ4KShmz24VflWeyekRP6Z6X ecKMSyQBeaYLLW8mDFiaCUQLLpqJ0RnfsM+jYMSWEbxcI0TY/xyDHKXxs416jN0B fujrMyn0wAMxWWfnEo8zTPs4EZXpxcd3Il8m67XnLB9ObSHvS6QEvsgdEHARvOtl EyHZ3LeVuTn9JZRWPTWU9AeIIfB33j0mcQ8pe3VQcCYNuyO1LYz5tZ4ObWYf+EW+ S9BnZTS+v1rIkQI8uME3sRM64G3GOWM5osbTi6LfQw2JplZOwNtqL0yUsbYgYISB Gfgkc8nUT5Q8CSID2LHflhzyfMivZu40+ULIHmWgLOmubw9W7GYV+pyjVoS9gdE= -----END CERTIFICATE-----Generated at Sat Jun 13 05:35:22 2026 by rpki-client