$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c457fefc-c60d-4886-8cf8-921a2d7f4f4c.roa File: c457fefc-c60d-4886-8cf8-921a2d7f4f4c.roa (raw, json) Hash identifier: 3etdu0+foxtFH0J9tz8tQ9IivVFjpI3gFlyFvpN1ols= Subject key identifier: 88:F5:01:A1:1E:78:E9:55:96:C5:B6:5B:7B:ED:0B:0E:12:C1:3E:70 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 559A801589E74FE307710F40B1636A6846B21C71 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c457fefc-c60d-4886-8cf8-921a2d7f4f4c.roa Signing time: Sun 31 May 2026 00:30:16 +0000 ROA not before: Sun 31 May 2026 00:30:16 +0000 ROA not after: Sat 29 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fba:2040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:9a:80:15:89:e7:4f:e3:07:71:0f:40:b1:63:6a:68:46:b2:1c:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 31 00:30:16 2026 GMT Not After : Aug 29 23:59:59 2026 GMT Subject: serialNumber=c08c07efeb60960e0602f86206cb1b6b66eafede4b0955871781e9a7783306db, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:47:a0:e5:dd:fa:ee:41:3c:ef:00:e4:f9:22: d5:40:27:34:73:5d:95:d9:8e:8f:15:f5:6a:55:3e: 27:cd:16:e7:b0:82:8d:88:76:e3:6c:6b:a0:ac:44: a7:1f:96:01:dd:3a:3f:18:f9:98:4f:55:d7:aa:9c: c4:98:42:86:7b:b1:e0:05:ae:24:27:ed:a6:7a:84: a6:97:1b:8d:da:e8:65:92:9a:1c:fc:b5:46:7d:96: e0:32:27:9f:f2:66:c6:02:3d:1d:e7:b0:6c:3a:16: d6:e8:e5:2b:35:7b:ab:7d:fe:68:83:75:45:26:d9: 55:40:89:ce:ff:ce:f2:0c:91:ea:2e:0f:f3:d4:1d: 8c:73:a1:6c:ca:d3:f2:73:69:2c:f1:59:3c:63:46: 77:78:b7:c6:1c:0d:80:b9:2a:c4:80:ec:bb:f2:bd: 94:b4:e6:3f:ff:d8:6c:25:78:4d:90:c8:98:79:84: 20:b4:b5:d8:c8:d8:85:be:13:91:48:f1:69:b4:8b: 15:dc:d0:6a:a3:8f:e7:5c:00:5c:52:38:0d:55:fd: a2:15:01:c1:26:1b:35:64:c5:62:25:da:d3:50:b2: cc:e0:b4:82:26:86:77:38:95:b2:56:b4:40:1c:49: 61:86:a7:bf:10:55:f3:0b:ab:0b:ac:44:f5:ec:dc: 28:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F5:01:A1:1E:78:E9:55:96:C5:B6:5B:7B:ED:0B:0E:12:C1:3E:70 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c457fefc-c60d-4886-8cf8-921a2d7f4f4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fba:2040::/48 Signature Algorithm: sha256WithRSAEncryption 39:2f:d7:ca:b3:98:69:81:3b:ca:90:e1:13:13:c2:95:f4:da: 6e:12:dd:4e:2d:75:b9:b9:10:d7:16:9b:f3:1d:24:dc:67:df: f4:55:8f:ac:c0:27:05:d6:92:dc:25:03:ce:44:eb:f0:e0:3d: 36:8f:92:e4:2f:2d:51:bc:75:39:3e:48:d6:e8:ef:56:72:a5: af:00:3e:c3:db:e6:b0:dd:a8:be:77:6b:c2:08:6e:40:27:61: af:17:f2:2d:dd:ac:e9:29:b6:d1:22:7c:10:c7:65:79:14:79: c0:b1:49:50:b8:46:38:12:ee:6c:b4:a7:f7:5a:75:05:30:b0: be:46:b9:c3:10:ef:0d:f4:57:d3:ea:02:b7:c4:05:34:01:fd: 1c:25:c4:d5:2e:81:97:00:90:c4:93:31:5b:9e:a4:92:e9:b4: 24:3c:94:28:73:c0:d9:cd:e8:07:59:08:37:d6:15:0d:b6:a2: cf:0a:f8:48:78:7e:ab:55:0b:0a:35:bc:b0:b4:26:e9:dc:c3: a9:47:3c:ea:59:d6:7d:0d:ac:5f:88:ab:cb:75:7f:b6:b0:c2: 3a:49:39:8c:c9:d5:2a:7e:4b:27:d2:1b:ca:84:1a:d4:b1:b8: 83:a4:98:36:e7:40:e8:9e:61:52:37:02:91:e3:de:c1:05:58: 7c:64:a5:8f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUVZqAFYnnT+MHcQ9AsWNqaEayHHEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTMxMDAzMDE2WhcNMjYwODI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMDhjMDdlZmViNjA5NjBlMDYwMmY4NjIwNmNiMWI2YjY2 ZWFmZWRlNGIwOTU1ODcxNzgxZTlhNzc4MzMwNmRiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtR6Dl3fruQTzvAOT5ItVAJzRzXZXZjo8V9WpVPifNFuew go2IduNsa6CsRKcflgHdOj8Y+ZhPVdeqnMSYQoZ7seAFriQn7aZ6hKaXG43a6GWS mhz8tUZ9luAyJ5/yZsYCPR3nsGw6Ftbo5Ss1e6t9/miDdUUm2VVAic7/zvIMkeou D/PUHYxzoWzK0/JzaSzxWTxjRnd4t8YcDYC5KsSA7LvyvZS05j//2GwleE2QyJh5 hCC0tdjI2IW+E5FI8Wm0ixXc0Gqjj+dcAFxSOA1V/aIVAcEmGzVkxWIl2tNQsszg tIImhnc4lbJWtEAcSWGGp78QVfMLqwusRPXs3ChTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUiPUBoR546VWWxbZbe+0LDhLBPnAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M0NTdmZWZjLWM2MGQtNDg4Ni04Y2Y4LTkyMWEyZDdmNGY0Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB+6IEAwDQYJKoZIhvcNAQELBQADggEBADkv18qzmGmBO8qQ4RMTwpX0 2m4S3U4tdbm5ENcWm/MdJNxn3/RVj6zAJwXWktwlA85E6/DgPTaPkuQvLVG8dTk+ SNbo71Zypa8APsPb5rDdqL53a8IIbkAnYa8X8i3drOkpttEifBDHZXkUecCxSVC4 RjgS7my0p/dadQUwsL5GucMQ7w30V9PqArfEBTQB/RwlxNUugZcAkMSTMVuepJLp tCQ8lChzwNnN6AdZCDfWFQ22os8K+Eh4fqtVCwo1vLC0Juncw6lHPOpZ1n0NrF+I q8t1f7awwjpJOYzJ1Sp+SyfSG8qEGtSxuIOkmDbnQOieYVI3ApHj3sEFWHxkpY8= -----END CERTIFICATE-----Generated at Wed Jun 17 11:21:13 2026 by rpki-client