$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4535f52-d696-4163-92b8-7e90cf262a6e.roa File: d4535f52-d696-4163-92b8-7e90cf262a6e.roa (raw, json) Hash identifier: PNi95nSpSvXzBs0/SnKirby+QoC5yZR1u8AeUTwuaUw= Subject key identifier: 1E:2C:00:E6:D8:FD:26:64:AC:71:D4:57:88:52:9B:8A:BE:D2:52:1E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 60D3C65A11E54547B8C9955B761F402AC458CCF2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4535f52-d696-4163-92b8-7e90cf262a6e.roa Signing time: Fri 22 May 2026 16:32:27 +0000 ROA not before: Fri 22 May 2026 16:32:27 +0000 ROA not after: Thu 20 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f61:7400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:d3:c6:5a:11:e5:45:47:b8:c9:95:5b:76:1f:40:2a:c4:58:cc:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 22 16:32:27 2026 GMT Not After : Aug 20 23:59:59 2026 GMT Subject: serialNumber=e14f1a3deafe72c5d53e80f1a537b286b85504ea768cbe1994c50f7c0c4e7367, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b7:c8:eb:5b:81:41:0c:16:41:e8:7f:21:b9: c2:41:82:63:25:88:99:46:bf:79:ce:33:c6:0e:4a: fd:82:92:7a:73:ea:5c:75:51:da:3d:a2:ee:11:6e: 54:7a:17:2e:96:1a:e1:0a:72:c7:67:51:e4:11:da: e0:31:34:b2:61:67:ba:04:ba:21:c2:4c:53:e5:d4: 66:6c:b4:78:44:05:aa:ae:78:c4:c4:8b:d3:3c:ec: ff:cd:1e:2c:21:0a:8b:bb:d3:37:3d:63:f3:f3:9a: a4:52:55:a1:ce:25:97:af:13:e8:0d:2f:34:9e:cb: 6e:bf:06:bc:0c:86:c5:d0:bd:9e:5b:72:60:3a:96: ce:aa:56:99:7c:ff:e1:79:e6:4b:bf:ad:b6:78:33: 8f:06:66:f7:57:2b:63:d1:30:37:75:cc:6d:79:40: bb:58:9c:3b:0e:14:3d:18:56:93:a9:15:3e:8c:5d: 7c:e1:52:91:c8:ec:b7:61:36:0c:e3:c7:2c:13:b8: a4:da:09:e9:92:82:04:e2:52:55:46:ac:aa:04:b4: 6b:6b:15:bb:11:17:8e:24:b2:01:3e:69:fe:ad:93: ba:bc:63:07:aa:81:bd:9d:eb:4c:cd:29:c1:13:cf: 44:ef:66:f2:d8:81:bc:6b:67:68:a2:16:25:74:48: cd:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:2C:00:E6:D8:FD:26:64:AC:71:D4:57:88:52:9B:8A:BE:D2:52:1E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4535f52-d696-4163-92b8-7e90cf262a6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f61:7400::/40 Signature Algorithm: sha256WithRSAEncryption 75:e7:a1:3f:8a:ea:3e:dc:f1:07:b1:58:a2:ff:1a:12:54:9f: a0:e5:50:12:e5:19:38:32:25:91:d4:28:82:22:f2:2b:95:f7: ca:66:60:31:6e:01:08:8d:3d:bd:bb:6a:50:8c:08:83:b0:1e: 5c:4e:fd:97:05:11:46:45:7c:6f:3e:a0:83:4b:cd:8a:c2:4e: d2:f8:dc:f7:e4:79:19:c4:c1:64:a0:38:00:67:38:87:5a:52: fd:3b:a5:3a:ea:a3:2d:d5:ba:8f:18:f6:08:4e:7a:0b:b9:57: fa:69:da:9b:5e:d6:54:dd:8b:02:2b:88:a5:67:ba:14:6a:43: 5d:3d:fa:c7:e7:b5:53:78:18:53:00:ea:3f:1c:6a:b0:a9:53: 8a:7f:11:57:60:20:c4:bf:a5:b7:b9:62:8d:e9:dc:e4:d4:53: fc:b4:6d:b6:d1:60:f9:b4:1e:3f:06:ae:1f:a9:c6:8c:13:1a: df:77:d9:c9:59:ba:44:22:45:46:5c:f1:d1:2c:bf:b0:56:31: 9e:76:46:9c:48:9d:a4:c2:6a:e4:9f:7d:ff:e3:33:a3:77:4e: 8c:f6:9e:e4:cd:25:a1:04:a8:2b:9f:5f:21:d3:f7:f9:4c:11: 6d:2d:d4:fd:52:c3:c0:33:5f:d2:3e:63:bf:85:63:e2:70:95: d8:40:b5:b1 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUYNPGWhHlRUe4yZVbdh9AKsRYzPIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTIyMTYzMjI3WhcNMjYwODIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMTRmMWEzZGVhZmU3MmM1ZDUzZTgwZjFhNTM3YjI4NmI4 NTUwNGVhNzY4Y2JlMTk5NGM1MGY3YzBjNGU3MzY3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHt8jrW4FBDBZB6H8hucJBgmMliJlGv3nOM8YOSv2Cknpz 6lx1Udo9ou4RblR6Fy6WGuEKcsdnUeQR2uAxNLJhZ7oEuiHCTFPl1GZstHhEBaqu eMTEi9M87P/NHiwhCou70zc9Y/PzmqRSVaHOJZevE+gNLzSey26/BrwMhsXQvZ5b cmA6ls6qVpl8/+F55ku/rbZ4M48GZvdXK2PRMDd1zG15QLtYnDsOFD0YVpOpFT6M XXzhUpHI7LdhNgzjxywTuKTaCemSggTiUlVGrKoEtGtrFbsRF44ksgE+af6tk7q8 Yweqgb2d60zNKcETz0TvZvLYgbxrZ2iiFiV0SM2JAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUHiwA5tj9JmSscdRXiFKbir7SUh4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q0NTM1ZjUyLWQ2OTYtNDE2My05MmI4LTdlOTBjZjI2MmE2ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9hdDANBgkqhkiG9w0BAQsFAAOCAQEAdeehP4rqPtzxB7FYov8aElSf oOVQEuUZODIlkdQogiLyK5X3ymZgMW4BCI09vbtqUIwIg7AeXE79lwURRkV8bz6g g0vNisJO0vjc9+R5GcTBZKA4AGc4h1pS/TulOuqjLdW6jxj2CE56C7lX+mnam17W VN2LAiuIpWe6FGpDXT36x+e1U3gYUwDqPxxqsKlTin8RV2AgxL+lt7lijenc5NRT /LRtttFg+bQePwauH6nGjBMa33fZyVm6RCJFRlzx0Sy/sFYxnnZGnEidpMJq5J99 /+Mzo3dOjPae5M0loQSoK59fIdP3+UwRbS3U/VLDwDNf0j5jv4Vj4nCV2EC1sQ== -----END CERTIFICATE-----Generated at Wed Jun 17 09:27:36 2026 by rpki-client