$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d5dc6506-57b7-4c82-85c4-dd23ad51bdd1.roa File: d5dc6506-57b7-4c82-85c4-dd23ad51bdd1.roa (raw, json) Hash identifier: dex6TIJI4e1Z0BYw/AwiGcWGQyPcJa0pdvVyQ82gnFw= Subject key identifier: 79:D3:25:15:1E:2A:A8:82:D9:E1:CE:70:D2:C6:FF:F2:ED:1D:33:1D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 406F39CC3DF5DCEEFE69EE1FF7F12FC8AB1E676F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d5dc6506-57b7-4c82-85c4-dd23ad51bdd1.roa Signing time: Fri 22 May 2026 16:50:21 +0000 ROA not before: Fri 22 May 2026 16:50:21 +0000 ROA not after: Thu 20 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fb8:800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:6f:39:cc:3d:f5:dc:ee:fe:69:ee:1f:f7:f1:2f:c8:ab:1e:67:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 22 16:50:21 2026 GMT Not After : Aug 20 23:59:59 2026 GMT Subject: serialNumber=7728eb89a590e0d2b1a2dbf4aca58d28d8ae0feca6386942e40ee9d1eb185053, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:66:49:1c:b8:f0:ac:6e:8d:59:8e:5e:17:71: 47:dc:26:2e:8d:c2:76:62:84:5d:e4:fc:b0:f5:46: e9:98:c1:39:7d:8d:3a:87:92:c5:36:8e:08:8d:9e: f6:b0:81:a3:4a:64:c1:2a:5c:7c:30:73:52:1c:51: 06:97:a7:17:77:b8:81:58:9f:34:c5:49:31:2f:ea: 34:56:56:cf:05:d1:a5:3d:7a:63:0a:9c:ae:f8:89: a3:68:ac:be:21:2a:5b:f6:d1:cf:78:fb:27:1f:71: 6d:aa:04:b3:c3:39:54:8d:fc:a2:32:ff:fa:fc:d2: b4:21:4d:8f:8d:b8:6e:ff:1c:84:f2:5a:cb:f0:b7: cf:42:fb:e0:fb:1b:3d:5d:0f:ba:0b:7d:66:be:d4: 59:f3:02:63:7e:8a:a4:50:c1:82:db:7c:9e:61:f5: 4b:b4:40:ac:a1:20:f3:12:5a:69:1e:ad:86:81:59: 1d:53:f9:75:fd:7e:6a:20:ed:aa:f0:b5:fe:5e:23: fa:d8:53:dd:85:79:b6:c8:54:79:98:46:b4:a6:5d: 41:a3:cc:6c:bb:82:79:f2:8f:c8:32:f4:b4:ec:02: a4:31:e3:14:73:10:3c:98:db:34:80:69:59:78:31: c4:aa:04:22:0b:45:52:66:c8:54:74:eb:d1:d3:2f: 97:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:D3:25:15:1E:2A:A8:82:D9:E1:CE:70:D2:C6:FF:F2:ED:1D:33:1D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d5dc6506-57b7-4c82-85c4-dd23ad51bdd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fb8:800::/40 Signature Algorithm: sha256WithRSAEncryption 37:44:bc:eb:ac:e7:7a:bd:28:4b:a0:8b:11:a4:4a:ce:e6:9d: 61:45:a6:58:a4:d4:88:51:44:73:ef:72:c1:81:ff:01:02:6f: 87:45:a1:69:6f:26:d2:33:ec:a4:b1:99:f1:52:a5:bb:30:f0: 8a:42:b7:54:63:91:61:12:25:82:a7:87:41:18:dc:6d:e2:16: 20:38:82:0f:82:44:d8:c7:cf:d1:74:e4:ea:0f:68:b8:01:cd: 57:0e:54:24:b7:0d:7c:55:4f:41:98:ea:f2:43:f2:f2:31:05: 05:b6:01:93:b3:5e:79:29:4c:fe:b9:65:49:a1:20:dc:a5:fc: a7:fb:a8:ff:f6:32:12:af:5d:48:f5:a7:79:a6:49:90:95:ea: 23:5d:42:02:81:6c:b2:72:08:8a:02:7c:66:a1:67:7f:fb:a1: 2a:ef:68:db:ed:8e:5b:bd:54:27:df:b7:4f:cb:4b:88:19:fd: 33:72:40:92:73:12:fe:bb:e8:c7:cc:ce:20:f3:c7:db:f9:5b: 65:c7:26:22:0d:27:59:ac:0b:9e:d2:5a:10:d3:8c:80:e1:25: c3:42:29:6a:fc:36:7a:30:ee:c7:13:18:ac:42:3e:d3:d1:fd: 3a:a3:15:f2:fb:dc:27:5c:f4:14:04:75:f9:41:6d:f0:a8:d2: 36:22:a6:d3 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUQG85zD313O7+ae4f9/EvyKseZ28wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTIyMTY1MDIxWhcNMjYwODIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NzI4ZWI4OWE1OTBlMGQyYjFhMmRiZjRhY2E1OGQyOGQ4 YWUwZmVjYTYzODY5NDJlNDBlZTlkMWViMTg1MDUzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCCZkkcuPCsbo1Zjl4XcUfcJi6NwnZihF3k/LD1RumYwTl9 jTqHksU2jgiNnvawgaNKZMEqXHwwc1IcUQaXpxd3uIFYnzTFSTEv6jRWVs8F0aU9 emMKnK74iaNorL4hKlv20c94+ycfcW2qBLPDOVSN/KIy//r80rQhTY+NuG7/HITy Wsvwt89C++D7Gz1dD7oLfWa+1FnzAmN+iqRQwYLbfJ5h9Uu0QKyhIPMSWmkerYaB WR1T+XX9fmog7arwtf5eI/rYU92FebbIVHmYRrSmXUGjzGy7gnnyj8gy9LTsAqQx 4xRzEDyY2zSAaVl4McSqBCILRVJmyFR069HTL5dXAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUedMlFR4qqILZ4c5w0sb/8u0dMx0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q1ZGM2NTA2LTU3YjctNGM4Mi04NWM0LWRkMjNhZDUxYmRkMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+4CDANBgkqhkiG9w0BAQsFAAOCAQEAN0S866zner0oS6CLEaRKzuad YUWmWKTUiFFEc+9ywYH/AQJvh0WhaW8m0jPspLGZ8VKluzDwikK3VGORYRIlgqeH QRjcbeIWIDiCD4JE2MfP0XTk6g9ouAHNVw5UJLcNfFVPQZjq8kPy8jEFBbYBk7Ne eSlM/rllSaEg3KX8p/uo//YyEq9dSPWneaZJkJXqI11CAoFssnIIigJ8ZqFnf/uh Ku9o2+2OW71UJ9+3T8tLiBn9M3JAknMS/rvox8zOIPPH2/lbZccmIg0nWawLntJa ENOMgOElw0Ipavw2ejDuxxMYrEI+09H9OqMV8vvcJ1z0FAR1+UFt8KjSNiKm0w== -----END CERTIFICATE-----Generated at Sat Jun 13 07:54:58 2026 by rpki-client