$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bbac56dd-763f-4156-a2fe-12b5d4647aec.roa File: bbac56dd-763f-4156-a2fe-12b5d4647aec.roa (raw, json) Hash identifier: 3lR/t2ZN2n9lj0/LFQVtWpOSASiVnvmrzX1eGQSb0HA= Subject key identifier: B0:43:79:0E:A4:88:39:7C:4E:A7:5C:04:A6:4C:29:ED:AC:B6:32:28 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 70FE8D152B10C7E33EF59484D1573BA2071EAC7A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bbac56dd-763f-4156-a2fe-12b5d4647aec.roa Signing time: Fri 15 May 2026 02:10:35 +0000 ROA not before: Fri 15 May 2026 02:10:35 +0000 ROA not after: Thu 13 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:80e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:fe:8d:15:2b:10:c7:e3:3e:f5:94:84:d1:57:3b:a2:07:1e:ac:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 15 02:10:35 2026 GMT Not After : Aug 13 23:59:59 2026 GMT Subject: serialNumber=673e2e27be842e1eb634299d7d7d4202b0691ed5532c57ff6b72d6014b04d66d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0f:60:22:e1:3e:f2:d1:a4:a0:73:7c:26:02: 4f:c4:ef:cd:51:61:8b:1d:bd:54:cb:fb:8f:13:db: d8:44:5e:46:c3:22:d1:e0:9f:46:aa:5a:48:ad:9c: a3:e9:64:dc:10:73:63:6d:c4:2a:ab:79:43:dd:2a: 5e:45:ca:06:7e:15:60:6d:de:a8:42:5a:4c:85:24: c6:5e:3f:c5:d1:e1:19:c5:90:bf:7d:ce:c7:f6:2f: b1:c9:81:33:98:25:60:c8:2b:0e:6e:e6:64:98:af: e2:80:de:b7:80:be:74:64:2d:34:92:a7:d8:a4:16: 94:a5:46:c9:f7:23:18:09:f1:d2:41:bf:f4:ad:65: ce:6e:5e:9c:30:65:18:88:ee:01:09:c1:61:32:18: 97:d2:45:c3:7f:37:6b:43:fa:24:d3:d7:dd:f3:d2: 82:ff:43:38:26:e4:8d:a8:c7:52:c8:21:e0:df:07: 20:93:52:f1:54:48:dc:f7:14:54:91:01:18:86:ed: d0:23:40:a5:5a:40:b4:bf:31:dc:77:51:e2:b0:62: f6:4a:ba:04:7a:cb:3a:c4:ed:78:33:81:3b:94:b6: 40:7f:c5:60:7b:23:07:e3:b9:6c:37:0a:2c:17:06: 14:3c:3b:3e:30:24:c6:5c:a9:ec:10:7b:f9:a8:9b: 5b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:43:79:0E:A4:88:39:7C:4E:A7:5C:04:A6:4C:29:ED:AC:B6:32:28 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bbac56dd-763f-4156-a2fe-12b5d4647aec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:80e0::/48 Signature Algorithm: sha256WithRSAEncryption 54:0b:9d:b3:a7:9f:74:21:df:48:00:96:18:56:da:5e:01:bb: c0:81:7d:40:59:1b:77:5b:ed:f0:d6:b0:8c:36:60:b0:88:f6: f3:03:42:30:4b:cc:5e:fb:1f:ba:ea:bc:1b:a5:42:32:4b:71: 7e:bc:26:bb:0c:f2:9c:50:9f:25:fc:ba:9f:d0:00:eb:f7:01: 57:d7:1b:47:e8:e6:90:23:5e:90:1d:cd:e5:eb:eb:16:06:74: f6:11:74:dd:72:fc:02:b5:ca:c8:d4:2c:6d:42:28:39:10:0c: 42:cf:f9:81:1f:b6:23:55:3a:3d:4b:bc:94:ff:0a:ce:63:34: e0:d0:4c:b4:88:ff:a3:5e:88:fa:97:6f:d5:55:d6:c9:eb:ab: e8:07:ea:8d:dc:e1:db:8b:c2:91:7e:14:0e:ac:eb:ae:01:eb: d3:49:95:2a:30:fa:64:56:1d:e9:56:51:57:11:fd:d4:eb:ce: ca:04:4c:7b:ff:47:e5:68:c7:c6:19:bf:f9:46:d9:f4:4a:43: e9:02:19:bd:16:a4:06:bb:ba:2e:51:3b:34:22:06:f2:04:a9: fc:02:b2:51:44:9b:96:18:c5:8f:63:e5:99:b5:42:b6:b7:3e: 03:a4:d4:74:77:f4:ec:37:4a:17:a0:2e:00:74:37:93:67:4c: 81:82:dc:b5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcP6NFSsQx+M+9ZSE0Vc7ogcerHowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE1MDIxMDM1WhcNMjYwODEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NzNlMmUyN2JlODQyZTFlYjYzNDI5OWQ3ZDdkNDIwMmIw NjkxZWQ1NTMyYzU3ZmY2YjcyZDYwMTRiMDRkNjZkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbD2Ai4T7y0aSgc3wmAk/E781RYYsdvVTL+48T29hEXkbD ItHgn0aqWkitnKPpZNwQc2NtxCqreUPdKl5FygZ+FWBt3qhCWkyFJMZeP8XR4RnF kL99zsf2L7HJgTOYJWDIKw5u5mSYr+KA3reAvnRkLTSSp9ikFpSlRsn3IxgJ8dJB v/StZc5uXpwwZRiI7gEJwWEyGJfSRcN/N2tD+iTT193z0oL/Qzgm5I2ox1LIIeDf ByCTUvFUSNz3FFSRARiG7dAjQKVaQLS/Mdx3UeKwYvZKugR6yzrE7XgzgTuUtkB/ xWB7IwfjuWw3CiwXBhQ8Oz4wJMZcqewQe/mom1thAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUsEN5DqSIOXxOp1wEpkwp7ay2MigwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JiYWM1NmRkLTc2M2YtNDE1Ni1hMmZlLTEyYjVkNDY0N2FlYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//gOAwDQYJKoZIhvcNAQELBQADggEBAFQLnbOnn3Qh30gAlhhW2l4B u8CBfUBZG3db7fDWsIw2YLCI9vMDQjBLzF77H7rqvBulQjJLcX68JrsM8pxQnyX8 up/QAOv3AVfXG0fo5pAjXpAdzeXr6xYGdPYRdN1y/AK1ysjULG1CKDkQDELP+YEf tiNVOj1LvJT/Cs5jNODQTLSI/6NeiPqXb9VV1snrq+gH6o3c4duLwpF+FA6s664B 69NJlSow+mRWHelWUVcR/dTrzsoETHv/R+Vox8YZv/lG2fRKQ+kCGb0WpAa7ui5R OzQiBvIEqfwCslFEm5YYxY9j5Zm1Qra3PgOk1HR39Ow3ShegLgB0N5NnTIGC3LU= -----END CERTIFICATE-----Generated at Sat Jun 13 12:59:24 2026 by rpki-client