$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2cde604-94e3-48ce-a813-c5b5e2f8e608.roa File: d2cde604-94e3-48ce-a813-c5b5e2f8e608.roa (raw, json) Hash identifier: ubHsxdtijkBSw7boTry3yGf1m58itbt1VQzBUT2uYdw= Subject key identifier: 77:66:10:FB:3B:E9:41:61:E1:D7:EA:D9:3F:76:E2:03:D8:C1:E0:5F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 03418763C8AC77AA28C0D4FF92CE7787DED796AB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2cde604-94e3-48ce-a813-c5b5e2f8e608.roa Signing time: Fri 22 May 2026 16:50:25 +0000 ROA not before: Fri 22 May 2026 16:50:25 +0000 ROA not after: Thu 20 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fe8:6000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:41:87:63:c8:ac:77:aa:28:c0:d4:ff:92:ce:77:87:de:d7:96:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 22 16:50:25 2026 GMT Not After : Aug 20 23:59:59 2026 GMT Subject: serialNumber=8aec91632b265b5703088bb35f2676847d0e0653348f0afd62f26f7ccc23b230, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c1:f1:4f:72:aa:1d:00:6d:2c:38:7f:4c:54: d5:66:68:d1:27:74:34:55:42:de:18:8f:40:e2:fc: f3:35:ee:77:bf:06:75:19:6c:ee:27:5d:12:e9:7e: 6c:62:22:a6:0a:55:7c:bf:da:9b:0f:c5:34:30:ed: c2:20:a8:8d:a7:cd:77:26:b5:d9:56:94:1f:f7:a4: 5b:ac:29:25:78:2e:0a:8c:10:bb:2d:7c:d6:34:6f: 85:b6:a6:94:e0:63:c1:47:55:d4:c7:5f:cb:e8:88: d1:88:4c:d2:2f:68:89:2e:0b:15:fc:45:50:18:8e: 9e:7a:62:db:20:35:b7:c8:b8:8a:0d:5b:a4:25:12: a5:8b:fc:29:d1:5c:ea:05:62:e2:62:44:fe:d1:88: 1f:06:92:d1:c3:e0:d6:67:72:2e:ff:8e:18:44:a4: d9:ed:9a:76:21:ef:3a:55:51:d8:f6:c2:4c:c8:29: 53:e4:b1:6f:f7:18:55:92:f9:41:95:ef:b7:17:e8: ad:2b:dd:5a:db:f0:6c:65:e0:c0:2a:36:e0:53:a9: cf:c9:48:57:21:44:b0:f9:f4:82:1f:2c:44:57:79: 28:c3:00:fe:8c:b2:c5:0e:db:13:60:12:de:8e:50: 44:fa:f0:1d:fd:35:ad:3e:dd:80:cc:e1:be:46:89: 3c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:66:10:FB:3B:E9:41:61:E1:D7:EA:D9:3F:76:E2:03:D8:C1:E0:5F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2cde604-94e3-48ce-a813-c5b5e2f8e608.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fe8:6000::/40 Signature Algorithm: sha256WithRSAEncryption 4a:41:46:45:95:df:33:8e:ca:61:fb:3b:74:25:07:15:57:22: 47:af:25:4b:35:33:16:df:2e:d5:d5:3c:e5:f4:17:b9:55:9e: fb:c9:a3:da:88:d1:fb:49:2b:73:08:66:0f:8b:04:de:cd:95: 23:d9:7d:ab:80:70:78:55:ce:10:9d:b4:dd:19:f4:8e:b4:5d: bc:29:e4:5e:59:c1:12:19:86:62:b2:d5:d2:b2:0b:f0:03:99: 12:c7:dc:50:65:8c:2c:28:e5:f1:33:29:3e:f1:33:70:e6:1a: f1:db:e3:fe:b2:1b:4f:fe:83:1b:5c:62:f0:d8:e1:16:40:6d: 42:42:4c:d4:a5:c7:29:91:51:4a:66:68:bb:cc:80:6e:f9:35: ad:91:ac:e4:71:38:fe:0e:15:8b:e3:b5:19:03:64:3e:cc:e5: dd:73:b9:19:d9:cc:d7:28:15:7c:97:23:81:34:eb:a3:31:e5: 63:fe:2b:bd:e8:91:0c:2c:46:af:28:46:ec:3c:96:54:d6:de: af:2b:d3:50:bf:c4:21:2e:39:e2:f3:0e:a1:81:d5:7b:20:26: 6c:90:a2:cd:88:3a:59:df:cb:e1:6c:5b:36:c0:ef:55:99:a2: f3:e3:86:84:ff:a9:3a:b7:e6:30:47:a6:e3:63:68:31:f2:68: 6f:64:c8:0b -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUA0GHY8isd6oowNT/ks53h97XlqswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTIyMTY1MDI1WhcNMjYwODIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YWVjOTE2MzJiMjY1YjU3MDMwODhiYjM1ZjI2NzY4NDdk MGUwNjUzMzQ4ZjBhZmQ2MmYyNmY3Y2NjMjNiMjMwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXwfFPcqodAG0sOH9MVNVmaNEndDRVQt4Yj0Di/PM17ne/ BnUZbO4nXRLpfmxiIqYKVXy/2psPxTQw7cIgqI2nzXcmtdlWlB/3pFusKSV4LgqM ELstfNY0b4W2ppTgY8FHVdTHX8voiNGITNIvaIkuCxX8RVAYjp56YtsgNbfIuIoN W6QlEqWL/CnRXOoFYuJiRP7RiB8GktHD4NZnci7/jhhEpNntmnYh7zpVUdj2wkzI KVPksW/3GFWS+UGV77cX6K0r3Vrb8Gxl4MAqNuBTqc/JSFchRLD59IIfLERXeSjD AP6MssUO2xNgEt6OUET68B39Na0+3YDM4b5GiTw5AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUd2YQ+zvpQWHh1+rZP3biA9jB4F8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QyY2RlNjA0LTk0ZTMtNDhjZS1hODEzLWM1YjVlMmY4ZTYwOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/oYDANBgkqhkiG9w0BAQsFAAOCAQEASkFGRZXfM47KYfs7dCUHFVci R68lSzUzFt8u1dU85fQXuVWe+8mj2ojR+0krcwhmD4sE3s2VI9l9q4BweFXOEJ20 3Rn0jrRdvCnkXlnBEhmGYrLV0rIL8AOZEsfcUGWMLCjl8TMpPvEzcOYa8dvj/rIb T/6DG1xi8NjhFkBtQkJM1KXHKZFRSmZou8yAbvk1rZGs5HE4/g4Vi+O1GQNkPszl 3XO5GdnM1ygVfJcjgTTrozHlY/4rveiRDCxGryhG7DyWVNberyvTUL/EIS454vMO oYHVeyAmbJCizYg6Wd/L4WxbNsDvVZmi8+OGhP+pOrfmMEem42NoMfJob2TICw== -----END CERTIFICATE-----Generated at Sat Jun 13 06:38:50 2026 by rpki-client