$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf389316-90b4-4557-83e8-b14137f39908.roa File: bf389316-90b4-4557-83e8-b14137f39908.roa (raw, json) Hash identifier: /5w25JiMF1AIm5RVmKWhHrDEBQuJBFzhfeJCoYGT2hE= Subject key identifier: D9:24:02:6E:7E:0F:12:B6:8A:E7:5E:51:E6:B5:37:03:67:94:03:52 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7CAC8E44B72F5649E6C839FF98BF0B00735AB83B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf389316-90b4-4557-83e8-b14137f39908.roa Signing time: Sat 16 May 2026 00:41:08 +0000 ROA not before: Sat 16 May 2026 00:41:08 +0000 ROA not after: Fri 14 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f13:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:ac:8e:44:b7:2f:56:49:e6:c8:39:ff:98:bf:0b:00:73:5a:b8:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 16 00:41:08 2026 GMT Not After : Aug 14 23:59:59 2026 GMT Subject: serialNumber=d8741f91065c9536de0cf8d017afdaec841b66b2b09d5bd29d2e4d8247d64c10, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:81:8e:2c:5b:06:2c:fe:76:de:42:a6:c9:e5: 20:9f:c7:24:ca:58:3f:2b:ed:71:04:fd:8f:94:f8: d6:42:a6:1c:da:a1:c5:e2:d8:48:ef:69:b8:ab:65: 0f:02:ae:6e:60:d8:a8:77:6b:14:8d:1d:44:35:8a: 08:38:67:a0:7a:2c:ba:94:58:f4:50:a1:57:c6:6d: c9:05:2f:1d:f8:f9:4b:91:33:bb:df:75:48:3c:3b: ae:89:38:42:e4:01:f5:16:b9:d0:e3:d9:28:5a:f9: 26:1d:33:cc:3a:7b:ba:c8:7e:0a:f9:46:fe:fc:ce: 54:7a:81:b3:5b:3e:32:ad:38:57:43:9b:1b:da:76: 46:07:0d:30:7a:eb:38:86:99:11:35:47:24:1d:97: 32:57:e1:dd:07:47:eb:87:dd:c3:c5:80:17:cc:dd: 18:e5:7b:be:a5:8d:c9:54:b9:6e:c6:9f:36:ca:85: d5:c3:1a:c8:67:75:25:30:dd:46:64:5b:e5:b8:15: d8:f4:2c:fd:e9:73:02:a2:f3:91:8f:9f:1a:ad:2d: b0:c0:7a:5e:c9:0c:ba:0d:83:0e:0f:2b:60:a7:b2: 5b:74:d2:cf:f0:61:3b:f5:10:29:2d:3b:85:35:d5: af:3e:b0:cb:83:9e:8c:9e:cd:38:1b:65:71:d2:12: 67:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:24:02:6E:7E:0F:12:B6:8A:E7:5E:51:E6:B5:37:03:67:94:03:52 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf389316-90b4-4557-83e8-b14137f39908.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f13:8000::/36 Signature Algorithm: sha256WithRSAEncryption c9:39:a1:74:20:f2:e0:6b:2d:ba:ab:1a:8f:2c:dd:55:6c:f5: 6c:13:4d:87:64:b6:67:76:ec:c5:82:02:e0:ec:33:31:20:9c: f2:6f:a6:ce:bd:e6:8d:3a:3b:b4:e8:c6:79:38:05:e9:4c:a4: 48:c4:38:bb:07:ee:3e:d1:c1:bb:1e:76:9b:c1:e1:bd:dd:6a: 83:55:04:50:85:2c:15:fb:cb:05:d8:2d:a2:90:69:80:11:53: a7:15:02:2a:86:71:70:7b:5a:d9:78:fa:a3:46:86:ce:43:05: 95:0a:8e:4e:14:11:56:4e:84:c8:b5:3a:79:6c:b3:af:3d:71: 6d:7e:1b:00:bf:ca:c9:f8:d3:83:10:c3:16:a1:16:6f:1a:f0: b6:4d:52:74:08:4b:45:cc:3f:1f:34:99:83:ac:40:8b:97:03: 63:a8:30:64:80:5c:4f:d4:a5:a4:41:f2:5e:6e:4e:00:2b:b5: 0c:eb:d3:a3:6c:03:a8:df:fe:0c:cb:d2:f8:70:d9:28:99:4f: e2:2c:37:d5:9a:48:2d:de:6b:b6:99:c5:bf:bb:ca:b5:42:ce: 93:e9:34:23:f3:83:05:f0:0f:22:d6:92:62:81:aa:d3:67:83: 82:96:d1:55:d8:ff:76:ed:f8:f7:f4:5c:0b:32:cc:9c:c1:58: 78:b6:96:f1 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUfKyORLcvVknmyDn/mL8LAHNauDswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE2MDA0MTA4WhcNMjYwODE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkODc0MWY5MTA2NWM5NTM2ZGUwY2Y4ZDAxN2FmZGFlYzg0 MWI2NmIyYjA5ZDViZDI5ZDJlNGQ4MjQ3ZDY0YzEwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClgY4sWwYs/nbeQqbJ5SCfxyTKWD8r7XEE/Y+U+NZCphza ocXi2EjvabirZQ8Crm5g2Kh3axSNHUQ1igg4Z6B6LLqUWPRQoVfGbckFLx34+UuR M7vfdUg8O66JOELkAfUWudDj2Sha+SYdM8w6e7rIfgr5Rv78zlR6gbNbPjKtOFdD mxvadkYHDTB66ziGmRE1RyQdlzJX4d0HR+uH3cPFgBfM3Rjle76ljclUuW7GnzbK hdXDGshndSUw3UZkW+W4Fdj0LP3pcwKi85GPnxqtLbDAel7JDLoNgw4PK2Cnslt0 0s/wYTv1ECktO4U11a8+sMuDnoyezTgbZXHSEmcxAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU2SQCbn4PEraK515R5rU3A2eUA1IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JmMzg5MzE2LTkwYjQtNDU1Ny04M2U4LWIxNDEzN2YzOTkwOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8TgDANBgkqhkiG9w0BAQsFAAOCAQEAyTmhdCDy4GstuqsajyzdVWz1 bBNNh2S2Z3bsxYIC4OwzMSCc8m+mzr3mjTo7tOjGeTgF6UykSMQ4uwfuPtHBux52 m8Hhvd1qg1UEUIUsFfvLBdgtopBpgBFTpxUCKoZxcHta2Xj6o0aGzkMFlQqOThQR Vk6EyLU6eWyzrz1xbX4bAL/KyfjTgxDDFqEWbxrwtk1SdAhLRcw/HzSZg6xAi5cD Y6gwZIBcT9SlpEHyXm5OACu1DOvTo2wDqN/+DMvS+HDZKJlP4iw31ZpILd5rtpnF v7vKtULOk+k0I/ODBfAPItaSYoGq02eDgpbRVdj/du349/RcCzLMnMFYeLaW8Q== -----END CERTIFICATE-----Generated at Sat Jun 13 10:01:14 2026 by rpki-client