$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b76c3c6f-8be5-47c3-87da-2e8b8540f2e4.roa File: b76c3c6f-8be5-47c3-87da-2e8b8540f2e4.roa (raw, json) Hash identifier: YkItMFnGy//2HKCwz3lMA3MOrOeONujYcl2iVsY2z+Y= Subject key identifier: 8A:D0:D8:37:84:F9:A3:0B:0F:1B:4F:80:BB:13:C8:81:BA:4E:B7:0C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 45C938138F8BAAC380FB15695BCFA30F7EEA8A37 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b76c3c6f-8be5-47c3-87da-2e8b8540f2e4.roa Signing time: Sun 17 May 2026 00:20:56 +0000 ROA not before: Sun 17 May 2026 00:20:56 +0000 ROA not after: Sat 15 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff3:8050::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:c9:38:13:8f:8b:aa:c3:80:fb:15:69:5b:cf:a3:0f:7e:ea:8a:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 17 00:20:56 2026 GMT Not After : Aug 15 23:59:59 2026 GMT Subject: serialNumber=8dd10b24781352d018fbdd19cd406e15d13bed26f1f857c5857dee047bf0d9aa, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ff:eb:8f:71:51:14:81:f9:5d:20:09:33:b7: aa:27:ab:86:a1:02:47:fb:99:11:4d:e3:00:5c:2a: 69:8d:73:5b:1b:49:c6:35:ab:d3:35:4c:f8:ea:51: 4b:60:59:97:39:d9:1a:cb:23:e7:3c:b9:15:22:8c: ff:35:22:a0:b4:5a:b1:1d:f8:f3:b6:02:cb:b4:f2: 2e:74:71:83:34:dd:be:0b:6e:32:67:d2:71:a5:19: 6f:62:4d:ae:25:69:58:b8:e5:d6:db:44:8c:3c:14: ff:8a:21:0c:70:08:08:ae:d7:f9:7b:84:25:7e:5a: e2:7e:fe:fd:4e:eb:90:1a:a1:63:ea:5d:04:3c:2c: 80:33:e6:3c:d3:eb:d3:4d:9d:93:f0:ff:69:f3:8c: 03:fe:9c:bd:da:26:e0:5d:52:e6:8e:12:d9:eb:8b: 17:08:5a:4d:1b:06:f1:2b:85:e1:8a:09:ae:c0:1c: 8b:50:13:09:a9:7b:e3:1d:ac:38:0c:f9:d2:2b:2f: 94:2f:60:29:82:c1:27:bb:8d:1a:61:31:fe:bf:8d: df:b8:81:58:a1:1b:78:0b:a7:cc:80:84:21:bf:d6: 33:de:71:ab:dd:e9:96:b1:55:cf:89:2e:5f:e5:0c: ac:94:a7:cd:c4:3e:3c:16:bc:d6:b7:a6:63:6c:8e: 90:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D0:D8:37:84:F9:A3:0B:0F:1B:4F:80:BB:13:C8:81:BA:4E:B7:0C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b76c3c6f-8be5-47c3-87da-2e8b8540f2e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff3:8050::/46 Signature Algorithm: sha256WithRSAEncryption 90:7d:39:d4:97:0b:e2:dd:3f:ad:29:7d:1c:80:ba:3c:c1:38: 51:5d:19:f7:ff:ed:a6:62:dd:8b:5a:03:e7:32:e1:f2:34:54: 88:4a:ba:95:74:de:b5:15:86:56:15:ea:58:a3:19:51:81:d5: e8:6d:57:51:14:74:bb:1d:29:4b:67:eb:d0:21:14:66:10:95: ac:9b:d0:c7:f2:7d:aa:bc:a5:69:c4:81:ac:aa:89:86:e0:02: 78:3f:f9:09:f6:da:44:30:60:20:d4:22:e6:ea:ea:38:be:59: 67:1a:21:18:54:f4:40:92:bf:f9:dd:76:90:4d:97:5e:76:0e: f3:f0:13:fb:bc:ac:1d:d0:f8:9b:71:d9:27:1a:78:ea:fe:0c: e0:d2:91:62:f4:64:be:17:20:69:43:89:e5:10:ec:b0:9a:4c: c4:0d:fc:9a:d6:4b:ce:b2:c5:31:16:f4:b1:1a:ef:02:b6:01: 3a:e5:58:d1:01:59:5d:51:0d:e3:e6:49:bb:ef:b9:82:3c:cd: ab:f9:61:b0:54:d0:d0:17:3c:4f:70:bb:58:ea:1f:79:e5:f8: 1c:7d:b0:d4:ca:dc:71:5f:aa:fd:af:a1:7e:dd:05:c2:de:fb: 30:79:7d:31:62:80:db:b9:4a:a4:55:c7:84:64:b9:cd:2c:7f: d3:ab:06:d7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURck4E4+LqsOA+xVpW8+jD37qijcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE3MDAyMDU2WhcNMjYwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZGQxMGIyNDc4MTM1MmQwMThmYmRkMTljZDQwNmUxNWQx M2JlZDI2ZjFmODU3YzU4NTdkZWUwNDdiZjBkOWFhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDo/+uPcVEUgfldIAkzt6onq4ahAkf7mRFN4wBcKmmNc1sb ScY1q9M1TPjqUUtgWZc52RrLI+c8uRUijP81IqC0WrEd+PO2Asu08i50cYM03b4L bjJn0nGlGW9iTa4laVi45dbbRIw8FP+KIQxwCAiu1/l7hCV+WuJ+/v1O65AaoWPq XQQ8LIAz5jzT69NNnZPw/2nzjAP+nL3aJuBdUuaOEtnrixcIWk0bBvErheGKCa7A HItQEwmpe+MdrDgM+dIrL5QvYCmCwSe7jRphMf6/jd+4gVihG3gLp8yAhCG/1jPe cavd6ZaxVc+JLl/lDKyUp83EPjwWvNa3pmNsjpC7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUitDYN4T5owsPG0+AuxPIgbpOtwwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I3NmMzYzZmLThiZTUtNDdjMy04N2RhLTJlOGI4NTQwZjJlNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/zgFAwDQYJKoZIhvcNAQELBQADggEBAJB9OdSXC+LdP60pfRyAujzB OFFdGff/7aZi3YtaA+cy4fI0VIhKupV03rUVhlYV6lijGVGB1ehtV1EUdLsdKUtn 69AhFGYQlayb0Mfyfaq8pWnEgayqiYbgAng/+Qn22kQwYCDUIubq6ji+WWcaIRhU 9ECSv/nddpBNl152DvPwE/u8rB3Q+Jtx2ScaeOr+DODSkWL0ZL4XIGlDieUQ7LCa TMQN/JrWS86yxTEW9LEa7wK2ATrlWNEBWV1RDePmSbvvuYI8zav5YbBU0NAXPE9w u1jqH3nl+Bx9sNTK3HFfqv2voX7dBcLe+zB5fTFigNu5SqRVx4Rkuc0sf9OrBtc= -----END CERTIFICATE-----Generated at Wed Jun 17 09:11:39 2026 by rpki-client